This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
File: LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json)
Hash identifier: 7pTLg0M11A8GZVmbOyPQbYegXNRDXK7O6OY19Uidutg=
Subject key identifier: E8:FA:5D:5F:9F:33:C4:8A:0F:5D:B5:EF:C7:14:E4:B2:4D:2D:5E:3C
Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
Certificate issuer: /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Certificate serial: 0A13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
Manifest number: 0A0D
Signing time: Sat 24 Jan 2026 19:16:17 +0000
Manifest this update: Sat 24 Jan 2026 19:16:16 +0000
Manifest next update: Sat 31 Jan 2026 19:16:16 +0000
Files and hashes: 1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: WmCJ0O1JSY9y2Wk0RPXnkagignGBD1k7GaQCV/xpz5w=)
2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: i2d36Tq1yNa4fjxLB+ZorR2vyngn7bqMC3Q74Co0C4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl
rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2579 (0xa13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Validity
Not Before: Jan 24 19:16:16 2026 GMT
Not After : Jan 31 19:16:16 2026 GMT
Subject: CN=69751a81-c09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:ce:d0:6b:57:2f:2a:b1:ce:53:44:14:90:
c3:3a:78:00:d2:ec:fe:50:06:d2:7a:a3:1c:f7:45:
bf:0d:4e:9d:11:7e:33:6a:88:6f:ce:95:2d:c2:25:
48:2a:cf:66:72:e6:62:66:8d:51:33:ca:37:2f:a2:
02:69:c8:4b:01:f7:a7:a7:21:93:90:d4:7f:10:7c:
73:6a:43:bb:c7:20:8e:35:82:0f:0e:73:2f:80:73:
8d:0c:6c:4e:31:14:d7:90:98:d4:0d:c5:51:28:cc:
32:fc:d0:66:91:f6:01:1f:ac:84:6d:f5:5e:19:a8:
8c:20:93:cf:ba:fd:fc:1d:64:36:df:26:90:33:c8:
90:ed:8e:82:65:3c:d0:9f:e3:fc:0a:06:8e:10:2a:
65:60:e1:0b:d4:06:b8:e2:4e:91:65:23:b3:8b:b6:
4a:ce:ed:d5:cb:f1:ff:67:cd:82:8f:1d:7f:3e:48:
db:2a:36:69:6e:28:6a:e8:94:38:d2:6c:85:76:62:
25:3b:f3:52:96:3e:ef:af:46:df:14:d1:f6:d0:5e:
d7:21:0f:32:ed:1d:41:91:19:e5:74:3c:75:98:41:
05:b4:a3:2d:24:0a:1d:33:d4:dd:07:a7:7c:e6:9b:
6a:36:ac:0a:3f:75:67:c1:3b:44:f3:0a:bf:b7:c7:
7a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FA:5D:5F:9F:33:C4:8A:0F:5D:B5:EF:C7:14:E4:B2:4D:2D:5E:3C
X509v3 Authority Key Identifier:
keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:10:38:08:55:18:b3:31:8b:02:cd:37:28:f3:1a:cc:2c:e3:
85:15:d0:bf:cd:2c:b4:42:99:da:78:15:13:3c:1e:bc:1e:23:
82:18:8d:4a:7e:ff:01:0f:26:32:32:45:d0:11:e6:74:81:b8:
bb:26:12:53:92:a0:26:a1:62:37:35:d5:ce:f4:97:29:a5:4c:
32:46:79:e1:de:16:f6:06:2b:30:5f:c3:82:09:6c:ba:d6:11:
6f:f1:32:52:cd:2c:20:9d:97:b4:78:a0:a0:60:72:9d:3d:4c:
b8:81:a2:33:51:ea:40:19:da:b1:01:a0:06:87:2c:42:68:c3:
f7:5c:d2:a8:73:c6:a7:8a:36:82:6f:59:25:78:79:e2:2a:9a:
95:0a:b1:3c:43:84:20:bc:2a:23:c8:65:bb:db:6d:cb:61:55:
de:12:bf:1e:58:d7:db:a4:f3:f8:49:6d:45:6e:c5:7d:f3:ef:
82:46:f1:20:6f:7c:8d:50:fd:c7:2a:d4:9b:69:0a:28:15:ab:
6a:0b:3b:ac:d6:fc:52:4e:b4:1b:c4:96:1d:60:5e:78:be:96:
64:14:73:71:91:82:3a:b7:0e:2a:ae:8a:18:f9:58:3a:cc:56:
70:a7:2a:32:a9:c9:95:e7:f1:77:08:4a:71:29:97:b0:45:9a:
d6:7c:32:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICChMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VDNDYxMTAvBgNVBAUTKDJEN0IwRDdBM0Y5RjE1REUwMDcyQTVBNkM0RUQwQTVG
OEYyMjFFMDMwHhcNMjYwMTI0MTkxNjE2WhcNMjYwMTMxMTkxNjE2WjAYMRYwFAYD
VQQDDA02OTc1MWE4MS1jMDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq3zO0GtXLyqxzlNEFJDDOngA0uz+UAbSeqMc90W/DU6dEX4zaohvzpUtwiVI
Ks9mcuZiZo1RM8o3L6ICachLAfenpyGTkNR/EHxzakO7xyCONYIPDnMvgHONDGxO
MRTXkJjUDcVRKMwy/NBmkfYBH6yEbfVeGaiMIJPPuv38HWQ23yaQM8iQ7Y6CZTzQ
n+P8CgaOECplYOEL1Aa44k6RZSOzi7ZKzu3Vy/H/Z82Cjx1/PkjbKjZpbihq6JQ4
0myFdmIlO/NSlj7vr0bfFNH20F7XIQ8y7R1BkRnldDx1mEEFtKMtJAodM9TdB6d8
5ptqNqwKP3VnwTtE8wq/t8d6ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOj6XV+f
M8SKD12178cU5LJNLV48MB8GA1UdIwQYMBaAFC17DXo/nxXeAHKlpsTtCl+PIh4D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUM0Ni81OEY3NTEzRThB
OEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZkNEFjcVdteE8wS1g0OGlI
Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xYc05lai1mRmQ0QWNxV214TzBLWDQ4aUhnTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RUM0Ni81OEY3NTEzRThBOEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZk
NEFjcVdteE8wS1g0OGlIZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCwEDgIVRizMYsCzTco8xrMLOOFFdC/zSy0QpnaeBUTPB68HiOCGI1K
fv8BDyYyMkXQEeZ0gbi7JhJTkqAmoWI3NdXO9JcppUwyRnnh3hb2BiswX8OCCWy6
1hFv8TJSzSwgnZe0eKCgYHKdPUy4gaIzUepAGdqxAaAGhyxCaMP3XNKoc8anijaC
b1kleHniKpqVCrE8Q4QgvCojyGW7223LYVXeEr8eWNfbpPP4SW1FbsV98++CRvEg
b3yNUP3HKtSbaQooFatqCzus1vxSTrQbxJYdYF54vpZkFHNxkYI6tw4qrooY+Vg6
zFZwpyoyqcmV5/F3CEpxKZewRZrWfDKI
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:58 2026 by rpki-client