This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
File: lRaRgJV2AETnT6qlSX0GcwraXzI.mft (raw, json)
Hash identifier: R/U8RPxaset1Ot/yLlrdbJ8jVMbsbxzepnMV/fyxv7M=
Subject key identifier: 1D:F1:D0:BC:7F:B5:BB:9D:2A:E8:E8:9B:90:3B:B2:CA:E3:6A:F1:D3
Authority key identifier: 95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32
Certificate issuer: /CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32
Certificate serial: 06D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
Manifest number: 06D1
Signing time: Sat 24 Jan 2026 21:27:15 +0000
Manifest this update: Sat 24 Jan 2026 21:27:15 +0000
Manifest next update: Sat 31 Jan 2026 21:27:15 +0000
Files and hashes: 1: lRaRgJV2AETnT6qlSX0GcwraXzI.crl (hash: Wsfy0UucZwN5EqXuDYF+i6E9BTmu3hIH7zTcJXIoe4I=)
2: 589FBEDC860311EBAFE18309C4F9AE02.roa (hash: QPlmMaSOgFDznMyc1xMqSWCG5G0RLk70r7GmVWThnas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl
rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1752 (0x6d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B334D, serialNumber=9516918095760044E74FAAA5497D06730ADA5F32
Validity
Not Before: Jan 24 21:27:15 2026 GMT
Not After : Jan 31 21:27:15 2026 GMT
Subject: CN=69753933-868e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:80:cb:2a:52:28:97:14:d6:95:bb:f8:10:
f3:92:0b:93:38:6c:16:55:f2:7a:9a:c7:39:a7:a4:
4c:ed:0b:17:84:84:cf:4e:75:97:85:2c:71:02:0c:
10:cd:88:b8:91:98:9a:09:d2:e5:26:94:84:72:18:
7a:44:36:00:cb:b1:34:73:ca:fd:a9:2c:18:e3:7d:
90:68:0e:47:64:31:39:ee:b2:9e:bd:56:90:b1:4a:
30:fc:b4:89:43:85:9f:12:b2:37:38:dc:c9:f1:c4:
1b:b4:41:94:d1:6e:c0:21:58:ef:cd:d1:74:d3:91:
6a:8e:01:7b:f9:6e:f4:84:1c:9f:d5:71:b2:e0:1f:
5e:63:30:5c:69:85:f7:7f:ae:08:03:ed:67:95:db:
c1:73:7b:92:ab:25:f4:a5:b8:0d:a2:bd:3d:c4:89:
ba:4b:9c:a1:e8:a5:dc:5a:67:a6:c1:0f:d0:03:cb:
2e:3b:78:65:ca:52:4c:c6:d5:3e:54:7c:84:0c:21:
4f:6a:8d:84:8f:b8:63:33:7a:c2:c8:1f:9a:18:e8:
c7:10:0f:33:31:3f:da:2e:cc:28:12:2c:a6:da:5b:
ee:cc:b1:e2:8c:d9:db:2b:bb:f3:ba:27:5b:50:64:
12:93:f3:8a:26:c0:7d:9e:d5:67:2b:46:7f:b9:01:
76:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F1:D0:BC:7F:B5:BB:9D:2A:E8:E8:9B:90:3B:B2:CA:E3:6A:F1:D3
X509v3 Authority Key Identifier:
keyid:95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:57:39:54:cc:36:5d:f7:f5:b5:4c:43:3d:bb:8d:f9:bc:45:
88:53:f6:2f:d6:79:91:c1:5f:05:c1:e4:75:7b:23:d7:0d:11:
ab:bc:ed:f6:8b:75:35:f6:b7:7a:d6:91:32:22:db:57:98:a6:
46:05:f7:8a:6b:46:b4:29:db:d1:fb:f1:04:ab:7c:df:a7:50:
09:40:50:46:f3:26:53:33:6e:5a:bf:07:3c:f5:0d:2e:50:6e:
ac:07:6e:b6:68:c8:62:be:a6:04:59:2a:cf:95:fe:dd:75:c8:
15:a5:2c:ae:4a:10:9e:4f:d8:40:e1:38:1c:58:2c:99:72:a2:
7d:74:8b:ba:ad:06:96:32:1f:dc:8d:04:31:ad:ad:65:90:de:
39:ef:52:5d:e2:91:cb:62:a1:20:7b:fe:c1:9e:67:82:5d:95:
73:9b:cd:f6:b3:6f:7b:67:ee:70:c5:fd:6c:8a:dc:4d:8b:ba:
3f:13:14:48:13:7d:01:65:2d:a2:2c:1d:69:a5:ba:5b:53:c6:
e2:f9:1a:e9:d6:79:9b:26:95:15:93:38:36:e8:06:bd:da:cf:
65:70:37:89:32:1f:ae:d2:ef:52:45:df:3c:14:a8:f3:57:ef:
ef:86:36:f0:cf:48:e6:c0:9b:84:6c:29:e9:81:f8:70:ac:f8:
68:8c:9e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:19:12 2026 by rpki-client