This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json)
Hash identifier: YFSZMVEep4TtTowmOQBB4wgGmHC8uiXgsL81wBGjW8k=
Subject key identifier: FF:D0:31:7E:89:54:BD:11:A0:70:44:F5:2C:19:56:D0:C3:8A:19:CB
Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10
Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810
Certificate serial: 0BEF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
Manifest number: 0BDE
Signing time: Sat 24 Jan 2026 18:27:49 +0000
Manifest this update: Sat 24 Jan 2026 18:27:48 +0000
Manifest next update: Sat 31 Jan 2026 18:27:48 +0000
Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: a8l5I9c/7J0wI4MoD3kjGKdZ2PGToZb91OBjC0obJ2A=)
2: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: 325+Q5b9bGMNFjpY1dytCT5yzU1HW8KiWlyU6/c5X5o=)
3: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: /nz/1q0UnnUh7/646JLbHcYkN8JqYIJjZYielEh/K48=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl
rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3055 (0xbef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810
Validity
Not Before: Jan 24 18:27:48 2026 GMT
Not After : Jan 31 18:27:48 2026 GMT
Subject: CN=69750f25-ff45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:b3:62:23:cb:00:cb:28:67:79:6b:69:bf:
9c:d6:6c:78:af:61:d1:a4:4f:85:83:51:fc:58:79:
24:95:b6:7c:5d:e0:87:e7:45:de:38:e3:e4:5e:25:
6e:aa:0c:d4:b3:23:c7:53:f7:b7:b4:37:6e:aa:d9:
28:cb:f0:64:42:35:9d:86:fd:6f:db:3b:e4:ab:b2:
5f:81:5e:47:fe:ed:3d:62:e3:7d:5a:14:c4:22:cf:
16:c5:92:9a:33:fd:c4:8c:9f:12:95:64:b2:ba:05:
6a:9c:6a:d1:37:7e:61:3c:50:a1:a5:3b:7c:4c:b0:
67:59:f3:2b:c0:86:8b:03:18:a6:94:78:1a:2a:f0:
f5:d3:b6:3b:ab:9a:c6:bd:79:c3:9c:69:b5:ad:e5:
e0:5a:38:40:9f:69:c7:a6:64:8d:f9:06:9c:16:b6:
8a:9d:55:03:47:93:61:4e:50:78:5c:c8:a1:5a:ac:
91:0b:03:1c:27:95:e3:1d:01:09:bd:e0:32:d0:f4:
ce:68:41:b5:c9:d5:e5:c8:24:c2:65:50:8c:2b:9b:
55:98:4b:80:11:32:39:8c:45:d1:42:d4:95:bd:62:
9d:6c:51:34:14:f3:24:48:60:3e:c1:5a:75:49:de:
17:a7:bf:61:63:e6:66:62:4d:4c:c2:5a:14:de:db:
1c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D0:31:7E:89:54:BD:11:A0:70:44:F5:2C:19:56:D0:C3:8A:19:CB
X509v3 Authority Key Identifier:
keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1f:9c:44:c8:ad:e4:82:7d:52:9a:a2:a9:a2:f7:2b:65:7d:
c1:d9:21:8a:14:a7:48:4f:55:d4:72:c9:98:cb:21:76:50:c1:
0c:f2:d4:9a:a5:40:ee:b3:a7:10:4d:4a:58:13:d6:10:0a:63:
99:f2:98:54:47:59:ba:e7:08:a0:67:17:3d:a7:7f:52:fb:5d:
1c:71:2e:54:7d:ac:ba:78:b6:b9:9e:95:88:04:3d:e0:c4:91:
b9:35:a8:31:c2:0f:07:f7:ba:c6:66:ae:f6:db:e0:13:fb:69:
ff:07:d8:7e:e9:26:ed:2a:14:43:5f:46:7f:7b:7c:3d:e5:43:
10:91:06:5a:25:2f:68:31:42:b9:af:71:b8:42:43:3e:7b:a6:
61:30:b1:0a:b9:d1:c0:cf:a9:93:21:3d:51:48:71:ac:4a:f4:
3a:d3:a7:7d:12:c2:78:6c:00:f3:78:74:3c:09:cf:9d:11:52:
19:8c:d0:f4:eb:62:1d:8d:82:d4:ea:65:f5:50:51:f1:d6:3b:
15:6e:bf:c2:50:56:9a:53:9a:78:db:6d:b1:b2:cc:01:ee:74:
e2:3a:48:43:1f:d3:a2:84:c1:54:3c:b6:09:3e:bc:cb:30:2f:
1a:00:4d:ec:3d:cd:42:75:f1:e4:2c:1f:b2:05:e4:09:4b:3f:
15:b0:3e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:21:34 2026 by rpki-client