This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
File: ljwgt9OATbgByuJXTDHXYNU9M0Q.mft (raw, json)
Hash identifier: Fhbgw53fMdeczkLNZnlRysEXAoWUeaBNp0XT1WXDWVM=
Subject key identifier: CB:DB:3A:38:76:CE:AA:C8:98:B0:F0:60:70:43:6C:A5:93:FE:08:7F
Authority key identifier: 96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44
Certificate issuer: /CN=A91C6744/serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344
Certificate serial: 088D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
Manifest number: 0886
Signing time: Sat 24 Jan 2026 19:57:30 +0000
Manifest this update: Sat 24 Jan 2026 19:57:30 +0000
Manifest next update: Sat 31 Jan 2026 19:57:30 +0000
Files and hashes: 1: ljwgt9OATbgByuJXTDHXYNU9M0Q.crl (hash: eXiGufy6XHlminc89aQIFS5NWoSnkJ3x/RByEtl/cGc=)
2: E088B4E8E41B11ED8B0EFC0DC4F9AE02.roa (hash: o6F0EuKwlTrnUOxPf4ItfWLnrfcMDydYUClJAnjBios=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl
rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:57:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2189 (0x88d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6744, serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344
Validity
Not Before: Jan 24 19:57:30 2026 GMT
Not After : Jan 31 19:57:30 2026 GMT
Subject: CN=6975242a-293a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:ac:75:b6:ae:25:5f:e7:9e:6b:1a:03:41:
7b:cd:92:14:ae:ff:77:b8:a2:d7:96:4c:2b:ef:5c:
25:91:9c:c2:6f:2a:2f:1f:1a:e3:aa:51:32:80:17:
15:4e:87:9a:38:3c:a6:77:fb:ae:a7:90:77:c6:8a:
58:1a:a4:a8:cb:9a:b4:4a:ba:b9:cf:ff:c1:91:e7:
11:7e:e1:83:73:ac:ce:f6:d3:49:0b:20:36:b1:4e:
47:6c:46:8e:91:c5:44:db:44:89:ad:60:04:55:88:
a5:b9:74:f8:f3:51:c4:82:3a:a2:89:c2:c1:54:d2:
a2:8e:ec:e1:60:e7:1c:c7:5c:e8:e9:5f:9d:4a:e5:
ec:7f:86:f4:2f:c5:47:e1:52:85:77:2c:6d:22:51:
8c:78:19:db:e4:11:84:87:98:94:e0:6c:fc:d3:b3:
24:fa:90:f0:c2:1f:ff:a9:c0:83:40:a4:5c:57:23:
8b:d2:0f:af:4d:fc:61:06:18:fa:09:1d:22:10:aa:
2f:9b:79:51:5c:e3:8a:b5:11:ef:ce:f2:91:29:0b:
ad:aa:b0:5f:7d:61:9b:4d:3f:e8:6b:e8:ba:28:1a:
ed:e2:a1:11:6f:85:6c:92:7e:c0:29:1c:7b:02:2e:
9b:c8:9e:e5:cd:2e:65:71:87:e8:f0:b5:b0:c5:dd:
24:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DB:3A:38:76:CE:AA:C8:98:B0:F0:60:70:43:6C:A5:93:FE:08:7F
X509v3 Authority Key Identifier:
keyid:96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:f0:d3:c9:61:b2:fb:11:2e:dd:c1:ff:fc:f8:43:6a:30:9e:
df:fb:6b:e8:7e:91:e9:2d:0d:c0:73:43:d6:d6:af:b2:54:2d:
56:fe:85:af:1a:a6:40:70:9f:a5:91:33:71:8c:e5:86:33:ab:
fe:a4:c7:23:bb:f9:94:4a:33:76:42:d3:76:f1:e1:e5:c2:b2:
a0:b4:4c:96:0c:37:a9:3d:4b:81:b2:d7:c9:8c:31:42:2a:42:
1d:7f:99:16:69:2d:b9:66:be:d5:a5:07:87:8c:72:c3:80:90:
a2:33:7f:b1:35:22:c4:73:1e:2d:b2:80:2f:3f:06:cb:47:41:
df:63:20:f4:d4:99:f2:af:73:f7:53:cf:27:32:94:b7:cd:a7:
8e:9b:05:07:c3:ce:a3:e4:cb:b1:16:0e:25:ca:64:84:5d:14:
69:6e:ba:1c:6f:9f:4e:a1:9e:6c:d9:b4:25:ed:77:56:72:6c:
f2:f8:38:3e:ee:af:ee:fc:56:25:c4:ab:f8:41:88:84:7c:7f:
2d:e3:65:69:0b:7a:80:12:57:4d:44:e2:a3:80:dd:c5:ed:09:
82:a9:9b:58:58:d9:e6:b6:dd:3f:30:84:7b:d4:86:bd:dc:c0:
3f:fa:27:21:c0:2f:e5:9d:96:b2:6d:dd:50:5d:69:37:2e:85:
0b:13:10:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:37 2026 by rpki-client