This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
File: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json)
Hash identifier: ORJA4fCGYOe60dJ/RVCopazq7CLF7VaSCeRXtxnTA5A=
Subject key identifier: 35:C4:C5:85:89:0C:B9:8E:64:30:FB:7B:3E:CA:3D:0A:69:53:C2:68
Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
Certificate issuer: /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Certificate serial: CB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
Manifest number: CA
Signing time: Sun 25 Jan 2026 04:58:48 +0000
Manifest this update: Sun 25 Jan 2026 04:58:47 +0000
Manifest next update: Sun 01 Feb 2026 04:58:47 +0000
Files and hashes: 1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: AqKLnFD52o+OwpvTvVKJqx4MOH/3efGa6Cx1cGXItKc=)
2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: kwAnzY8sy28GuHuTAHp4dfauwLru447J5nFlWPhA168=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:58:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Validity
Not Before: Jan 25 04:58:47 2026 GMT
Not After : Feb 1 04:58:47 2026 GMT
Subject: CN=6975a308-fa0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:33:d9:42:d5:98:03:10:85:bb:13:94:0a:57:
a1:ba:48:94:26:41:24:ce:0d:c8:c8:c4:74:dc:44:
1a:c7:f6:89:88:46:4b:b5:6f:7e:ea:8b:90:28:31:
1c:5a:65:06:93:75:7b:0f:23:c0:82:79:0e:fe:aa:
cf:7b:3e:b6:8a:34:8e:4c:f3:23:6a:a2:b8:0c:ee:
4c:56:c8:91:2a:b7:c5:8b:de:29:c1:98:e9:92:59:
d0:b0:74:64:b9:ac:1f:01:2e:38:b7:e7:48:56:9e:
f8:86:9c:1b:2b:18:7e:fa:bb:37:f5:37:14:cf:9f:
fb:01:30:1b:ed:c0:15:54:4f:dd:81:72:7d:46:0b:
98:54:8d:3d:cd:11:75:5d:ff:34:1c:83:49:2f:b6:
c8:c7:3d:92:49:2a:67:c4:a0:92:34:ad:a2:7b:40:
6e:ba:8c:6c:d9:ee:32:4c:f3:f1:68:53:70:7c:0f:
ba:22:19:c3:d8:f7:c8:47:6c:0b:c4:b7:30:d7:c0:
e6:3e:80:76:96:b9:c1:f8:fb:77:ef:ad:c3:64:6b:
5d:0b:5e:63:f6:8a:24:b9:32:94:70:bf:a5:61:cd:
d3:72:c8:27:a4:67:c0:7e:ff:46:31:fd:97:5f:24:
a1:9c:6b:97:2b:4b:5c:df:dc:48:de:45:9a:dc:8e:
a1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C4:C5:85:89:0C:B9:8E:64:30:FB:7B:3E:CA:3D:0A:69:53:C2:68
X509v3 Authority Key Identifier:
keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5a:17:5c:e7:85:27:99:8b:d6:71:bb:72:9c:4d:03:93:ca:
29:00:ed:7a:75:03:fd:83:34:19:05:cf:89:a3:e3:27:55:6f:
7d:95:2c:b1:ad:29:23:08:84:c5:6c:e0:a7:f4:8f:b6:47:4c:
a0:5f:2a:1c:f2:56:57:e8:88:3b:37:ff:d2:04:a3:c0:51:de:
31:45:e5:b4:41:36:88:64:b4:bc:be:12:8f:6c:d1:31:a7:74:
04:96:05:5f:4c:8d:e1:7e:93:b1:2b:ad:02:e9:2b:56:6b:58:
14:3f:81:63:25:15:82:db:41:30:23:7f:4f:5e:df:60:e1:fb:
01:2c:fe:a5:33:aa:aa:9d:fa:9a:e1:d8:76:48:88:b7:34:58:
33:2f:70:b8:de:4e:33:41:3e:99:c8:3a:70:bb:ff:ce:7e:8e:
37:74:09:ad:3e:37:c8:6b:f2:95:61:1b:07:e0:06:42:a6:83:
47:44:b9:f2:53:df:e8:1f:4c:2e:44:ba:1a:f3:cb:98:83:c6:
c5:1d:e3:04:8f:b8:38:92:e5:8f:ec:9f:e3:ab:99:9b:27:fe:
98:2a:f6:20:4f:4e:53:49:18:b7:4c:6d:4b:57:94:85:ad:d3:
0d:5f:b8:b7:7a:67:1d:d5:2f:78:5e:c8:9c:40:79:e5:be:40:
65:c2:1c:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUYyMDcxMTAvBgNVBAUTKDJEMjIzQjU2RUQ0RDE3QTgxNzhGRTlGQzYzRTM4MDFB
OTNCNUExRDMwHhcNMjYwMTI1MDQ1ODQ3WhcNMjYwMjAxMDQ1ODQ3WjAYMRYwFAYD
VQQDDA02OTc1YTMwOC1mYTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmTPZQtWYAxCFuxOUClehukiUJkEkzg3IyMR03EQax/aJiEZLtW9+6ouQKDEc
WmUGk3V7DyPAgnkO/qrPez62ijSOTPMjaqK4DO5MVsiRKrfFi94pwZjpklnQsHRk
uawfAS44t+dIVp74hpwbKxh++rs39TcUz5/7ATAb7cAVVE/dgXJ9RguYVI09zRF1
Xf80HINJL7bIxz2SSSpnxKCSNK2ie0Buuoxs2e4yTPPxaFNwfA+6IhnD2PfIR2wL
xLcw18DmPoB2lrnB+Pt3763DZGtdC15j9ookuTKUcL+lYc3TcsgnpGfAfv9GMf2X
XyShnGuXK0tc39xI3kWa3I6hUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXExYWJ
DLmOZDD7ez7KPQppU8JoMB8GA1UdIwQYMBaAFC0iO1btTReoF4/p/GPjgBqTtaHT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjIwNy9BQ0IwNjg1RUMy
MjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9MU0k3VnUxTkY2Z1hqLW44WS1PQUdwTzFv
ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xTSTdWdTFORjZnWGotbjhZLU9BR3BPMW9kTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjIwNy9BQ0IwNjg1RUMyMjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9MU0k3VnUxTkY2
Z1hqLW44WS1PQUdwTzFvZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAOWhdc54UnmYvWcbtynE0Dk8opAO16dQP9gzQZBc+Jo+MnVW99lSyx
rSkjCITFbOCn9I+2R0ygXyoc8lZX6Ig7N//SBKPAUd4xReW0QTaIZLS8vhKPbNEx
p3QElgVfTI3hfpOxK60C6StWa1gUP4FjJRWC20EwI39PXt9g4fsBLP6lM6qqnfqa
4dh2SIi3NFgzL3C43k4zQT6ZyDpwu//Ofo43dAmtPjfIa/KVYRsH4AZCpoNHRLny
U9/oH0wuRLoa88uYg8bFHeMEj7g4kuWP7J/jq5mbJ/6YKvYgT05TSRi3TG1LV5SF
rdMNX7i3emcd1S94XsicQHnlvkBlwhwc
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:57:22 2026 by rpki-client