This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
File: LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json)
Hash identifier: d2o9OHDBJouRGtsctHdMVhYb83eIjzAS0Lgzrk551RI=
Subject key identifier: A7:77:86:73:C3:5E:23:31:56:0E:48:55:19:17:6A:CB:07:8C:25:C1
Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Certificate serial: 09D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
Manifest number: 09A9
Signing time: Sat 24 Jan 2026 19:30:17 +0000
Manifest this update: Sat 24 Jan 2026 19:30:17 +0000
Manifest next update: Sat 31 Jan 2026 19:30:17 +0000
Files and hashes: 1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: r2CpftDLh+xeYCqC5zncBVhSqZz5f5WFRi7eaYdRrjA=)
2: E206DC460DEA11F0A924CF5CC4F9AE02.roa (hash: VB8lXHaRWCgJbChk21N3X1tByJzueb4oQFsyi3R2FSI=)
3: 570B25FA305111F0BED81784C4F9AE02.roa (hash: HRghPtYyJF7KhObZGzOSLoHVq6GqZy5jEHbcGyo6zuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2518 (0x9d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Validity
Not Before: Jan 24 19:30:17 2026 GMT
Not After : Jan 31 19:30:17 2026 GMT
Subject: CN=69751dc9-1393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4d:fa:5f:1b:09:00:75:a7:f8:7c:7e:66:5a:
a5:15:27:8b:2a:9b:3a:9f:54:21:29:b0:ba:cf:e2:
2c:c3:75:d0:36:db:f7:2d:01:e3:5b:bc:7c:36:b2:
db:2d:05:19:39:44:50:0c:f3:c0:54:50:43:c6:41:
64:1d:b4:05:c8:1d:c9:73:7d:25:e0:c9:68:bf:13:
9f:db:e9:5e:74:85:6c:44:1b:e9:59:f6:6c:15:ee:
43:82:5a:9f:a5:43:0a:dc:fe:a8:74:47:56:5d:23:
ce:5b:37:1f:88:44:c1:df:4e:49:ec:77:37:3e:74:
dd:ed:bf:3b:94:28:09:75:27:7e:0e:7f:11:2a:75:
8c:03:6a:c9:79:5c:9a:8f:8e:23:04:08:d9:23:45:
a0:c0:23:7e:44:60:3e:ec:a3:ae:67:73:e4:c4:ae:
00:e5:8a:3c:2e:c5:7f:70:f2:8f:e7:1f:44:6b:c4:
87:30:a7:e1:1c:54:49:66:41:1c:1c:f2:5f:44:e0:
5d:79:43:ed:3f:be:d7:c3:06:ec:77:66:a0:01:fc:
a2:01:31:8f:2c:05:f8:fb:b6:97:8f:cc:e6:0c:b9:
15:a2:7c:d5:45:fb:12:53:6f:43:c5:32:41:89:0b:
bd:b7:2e:ee:5a:9b:93:9f:55:7b:2d:6e:91:bd:88:
08:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:77:86:73:C3:5E:23:31:56:0E:48:55:19:17:6A:CB:07:8C:25:C1
X509v3 Authority Key Identifier:
keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:11:3e:05:c3:cc:fa:d4:77:a9:f1:b5:1b:16:82:d4:24:3a:
ad:f8:85:cb:88:ed:de:1c:12:fb:8e:4e:7f:ea:3c:76:cf:22:
67:6d:cb:84:4f:bb:cf:24:dc:a4:d8:24:46:1e:af:af:be:35:
f7:e8:68:9a:d3:dd:0e:99:dd:61:00:b6:97:81:13:c1:2a:b1:
1a:b7:6b:ac:9f:2f:44:b3:9b:04:d3:86:62:26:2b:a1:75:76:
c4:5f:a7:f6:5e:18:57:77:39:06:6e:96:0a:d4:9d:95:50:29:
78:39:88:16:13:43:26:10:d7:cf:75:6b:1d:8f:a3:d3:a1:90:
c0:bc:cf:b7:08:c5:e1:cd:2e:a4:69:31:98:19:76:00:fc:93:
27:85:75:fc:72:48:f8:86:aa:d3:4a:ee:af:f4:aa:fe:b7:4c:
da:2c:2d:d7:d0:7e:3d:a2:2f:cf:e9:90:84:b9:ea:4d:c2:a3:
b7:97:2d:24:6e:e5:a4:ec:50:5c:9c:a6:7f:63:b2:c6:b4:be:
99:79:67:0e:d9:9a:93:f4:3b:59:6b:3e:5c:5f:df:d3:2a:ce:
b1:3c:1a:49:31:02:23:36:1b:c0:81:ed:21:dd:43:e9:eb:96:
cb:ef:f9:27:3e:98:fb:0d:1e:e1:04:ca:c5:b1:22:2f:59:ae:
c7:77:b5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:09:23 2026 by rpki-client