This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft
File: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft (raw, json)
Hash identifier: DfPl7FyKCQUEo6Gtz7bLUiK5l0EJI/6I/2hcTQJ47TQ=
Subject key identifier: 4A:DD:50:0C:FC:62:BB:3C:B3:23:3E:C3:D7:8F:AA:F3:4A:7B:D7:B6
Authority key identifier: 2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E
Certificate issuer: /CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E
Certificate serial: 1961
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft
Manifest number: 194C
Signing time: Sat 24 Jan 2026 16:12:18 +0000
Manifest this update: Sat 24 Jan 2026 16:12:18 +0000
Manifest next update: Sat 31 Jan 2026 16:12:18 +0000
Files and hashes: 1: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl (hash: 7JimAuQt+kbrSJFA2FS+99WW9i/KCY/uLOi/i5/k2h8=)
2: 0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa (hash: psURfyPJMxxR2CGBpJlzsnwoEyc78Mv6OwXOUqaExNc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl
rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6497 (0x1961)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9467, serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E
Validity
Not Before: Jan 24 16:12:18 2026 GMT
Not After : Jan 31 16:12:18 2026 GMT
Subject: CN=6974ef62-6244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:de:d1:51:c0:f1:a6:55:cd:b6:2e:8b:90:
64:0c:b4:db:c4:a4:18:c2:c1:ec:9a:e9:e8:cf:a7:
6a:dc:2c:e3:72:1e:73:79:e8:4e:68:0e:3f:09:10:
2a:c7:41:0b:8b:7a:14:ac:79:1f:a9:a1:97:60:98:
62:49:24:3b:af:f9:db:6a:88:4b:d4:f9:02:84:2f:
3d:b9:2b:96:02:06:66:94:0c:f2:e6:a4:37:46:2e:
97:bc:0e:2f:d2:13:53:d5:a8:67:23:3c:ea:b4:25:
a5:fc:a6:16:a4:f6:82:f2:fb:33:37:b1:bc:51:ff:
e1:40:32:05:9c:5f:90:c4:61:59:6b:cb:5c:b8:cf:
6d:3e:90:a2:db:30:22:da:f3:6f:e6:fc:64:68:6a:
f7:2d:31:9f:4d:72:6c:c2:d1:03:c6:33:01:fe:0d:
65:23:1b:e5:90:44:e7:a0:d5:08:f7:ad:89:f5:ac:
b2:90:60:c8:22:fb:2b:0e:d0:ca:5c:94:f5:17:47:
0a:95:d2:42:7d:c5:e3:b3:ec:65:41:af:7c:da:09:
52:37:bb:58:78:b1:cf:e2:11:a8:aa:71:72:95:56:
3d:ad:e1:92:86:68:97:45:b7:d2:43:4a:9c:d9:67:
9a:9d:e1:92:8b:e6:3e:ab:a1:12:3f:65:d2:cb:5c:
75:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DD:50:0C:FC:62:BB:3C:B3:23:3E:C3:D7:8F:AA:F3:4A:7B:D7:B6
X509v3 Authority Key Identifier:
keyid:2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:86:4d:64:82:ad:f8:ce:5a:c7:9d:ff:3b:54:58:4a:8a:b3:
42:08:b4:03:56:ed:85:06:76:74:c1:93:3a:03:7b:2e:2b:a6:
be:7b:8b:d3:e8:5a:de:16:83:fb:1a:0a:5f:39:87:e9:03:3a:
04:14:85:71:9c:8c:52:e3:27:a8:b0:59:64:cc:ed:51:da:6a:
94:3d:37:6f:a7:4c:ff:19:8e:7a:11:0a:b8:ea:e6:a3:d7:50:
d1:3e:a2:6f:9a:f3:1a:55:7e:d6:50:e7:39:0a:28:76:63:47:
2d:2b:71:13:17:22:27:17:79:67:4a:ea:89:bf:fb:ec:f2:7e:
9e:a4:e8:38:96:eb:dc:74:a2:88:88:52:05:86:13:a1:0f:4f:
ca:da:5a:a9:6a:bd:14:f0:af:32:9f:39:1f:4d:94:4a:62:fa:
da:da:49:79:66:eb:a2:cc:a4:fe:c2:46:d5:91:13:e0:ba:9e:
c6:ec:51:87:60:fb:7d:23:80:d1:bc:d9:04:cc:3b:fe:5b:65:
7a:ce:a6:9b:d9:42:0d:72:06:b9:6f:bf:ee:0e:8c:12:48:1a:
07:80:7c:8a:d4:08:0d:e4:42:d4:b8:3a:ff:a6:8d:9d:eb:f1:
d0:9f:1b:76:38:f4:12:cd:e9:08:57:c6:ba:8d:a9:9e:aa:9c:
0b:bd:f9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:17:07 2026 by rpki-client