This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
File: LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json)
Hash identifier: r6VpUBfv8lbysDYHugWrJTkJGJ4NwcUEL9by+pXFeow=
Subject key identifier: F4:1E:94:2C:8D:6B:90:7F:B8:97:CC:2D:C5:35:EC:A3:A9:C6:D2:81
Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Certificate serial: 03C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
Manifest number: 03AA
Signing time: Sat 24 Jan 2026 23:55:23 +0000
Manifest this update: Sat 24 Jan 2026 23:55:23 +0000
Manifest next update: Sat 31 Jan 2026 23:55:23 +0000
Files and hashes: 1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: Ig0NfZhisJVY7u5I4RlO7E5rTucd5wW7C/Ws4CauCoI=)
2: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: OEjS5qz+Y094b9NXZxpyHneMicv8/wejwLKQ2tC/qNg=)
3: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: ltQE1ACHFxJalS/0k3q+Ig8nBgWVEoOtVPpdjQ0C1JE=)
4: 2870E2347EB211F09B907A6BC4F9AE02.roa (hash: M3qPmduTKgomQOiC6svBksITDFFBnsH7ow1jxrTPAmo=)
5: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: ch9EflhL7C1jP+s1ylPiL9Gffg36ErkYooxoRNvgmEE=)
6: E5E533CA7EB111F0AD0B186BC4F9AE02.roa (hash: ZWFeBQWegvf7qjSa6jsoNEGGn0IO7ig3HT5bMFUTusg=)
7: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: 30Bcwfo746beL6TG9snvEW7O1ZgFuTW1IVMwb8hxmH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 967 (0x3c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Validity
Not Before: Jan 24 23:55:23 2026 GMT
Not After : Jan 31 23:55:23 2026 GMT
Subject: CN=69755beb-a160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8b:0a:14:58:1f:2e:a1:43:55:fd:f6:19:94:
c1:80:5b:d3:8d:f2:6e:55:40:55:ab:24:bb:d0:6f:
fe:7e:6e:6b:ab:a6:df:98:48:13:8e:74:c5:e2:22:
05:18:4a:a9:7f:0b:5d:2a:ce:1d:6a:6a:d4:82:c4:
9b:79:2f:34:e8:ec:d2:66:1d:95:7b:38:49:24:d0:
f2:6e:59:50:8e:b4:6a:af:6b:c0:a3:66:e8:96:ef:
78:4c:00:ee:60:fb:c2:e2:7b:6f:0e:85:94:14:38:
2c:bb:47:66:e2:ad:b3:c9:3f:2e:fa:2a:1e:50:09:
5c:51:ef:3d:af:67:82:e7:cf:63:82:89:96:5a:66:
0b:f0:73:6b:f4:39:ba:fd:7d:3f:75:00:78:65:72:
4e:9d:b2:72:17:86:7e:9e:20:91:43:d8:e8:6a:78:
8f:57:5c:be:b4:a1:61:40:20:31:9a:ca:ad:e5:6d:
b6:bf:4c:02:63:0f:9f:89:00:9c:00:2f:2e:33:ff:
05:10:68:cc:24:07:5d:af:19:76:93:78:81:e4:27:
d1:34:58:36:12:86:90:47:c6:10:65:d3:4b:a8:5b:
13:6b:04:49:60:97:22:e7:c4:84:f2:2c:d8:12:8f:
da:0b:06:d6:7a:9f:70:3b:ac:ae:ff:c4:5f:c9:92:
b7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1E:94:2C:8D:6B:90:7F:B8:97:CC:2D:C5:35:EC:A3:A9:C6:D2:81
X509v3 Authority Key Identifier:
keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:9d:d1:d8:6a:f0:b6:34:83:0c:75:50:1f:f5:a7:df:6e:87:
07:9d:e5:64:b0:cb:9b:24:f5:1c:22:5c:b2:89:17:e1:b9:76:
41:62:87:21:ca:3c:c6:50:4b:65:42:40:76:1d:74:df:4c:54:
1d:49:b9:61:35:21:4b:84:c4:cf:83:33:95:25:c9:b1:dc:a0:
76:38:74:26:6a:25:44:96:c2:c6:fb:6b:dc:eb:82:2d:0b:cd:
32:54:c6:07:1d:98:54:2b:f8:15:0e:fb:d2:a0:3c:72:70:04:
10:4c:9c:06:fe:33:d2:ff:cc:c7:3b:38:a3:d9:c7:be:ad:4e:
58:fc:9d:4c:6f:06:19:41:c1:d8:58:bd:05:5b:e2:e1:1f:2f:
62:c9:01:b0:9f:22:e7:89:9e:10:6a:8a:07:37:83:b3:12:c9:
77:30:f0:44:07:59:a3:83:e2:76:a0:6f:3b:a0:75:73:13:6e:
bd:94:8e:43:39:4d:a4:9e:3d:05:d7:5d:1a:88:ad:77:40:c6:
9e:7e:14:17:cd:c8:1f:10:98:88:d3:b5:21:22:2c:a3:41:0a:
18:e7:1c:2e:b1:72:f4:03:9c:14:32:6c:7b:b0:35:ce:e4:42:
a8:75:d4:3e:f6:c6:90:4c:d5:b9:6d:65:f1:8b:5b:fe:2a:91:
a4:1c:30:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:40:15 2026 by rpki-client