This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft
File: Lb_HsoYVsf94189GiGr5ITn_loo.mft (raw, json)
Hash identifier: Vx352dSkKCa+Hgqyr80cYkZdqWJcapV+Zk7Vjp8VE7w=
Subject key identifier: 1F:55:4B:4B:3A:D1:03:EE:8F:AD:62:CA:D5:1F:39:34:2D:4A:F3:13
Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A
Certificate issuer: /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft
Manifest number: 24
Signing time: Sun 25 Jan 2026 06:49:26 +0000
Manifest this update: Sun 25 Jan 2026 06:49:25 +0000
Manifest next update: Sun 01 Feb 2026 06:49:25 +0000
Files and hashes: 1: Lb_HsoYVsf94189GiGr5ITn_loo.crl (hash: Qa9Ko0tKo8vfIZNy2iZp+ThZ3aOJZNDVItIZNi1/EkY=)
2: B90F319AC84211F09A0BE068C4F9AE02.roa (hash: g0+1PT5qez9GcqrDkre9mHd9DAQlXO634JLUgpdLP1M=)
3: B9FD184CC84211F0BF44E068C4F9AE02.roa (hash: vYJPk7KFkk/rKrzwZcbhgjtR/Pi92VUXuzSvIsAoZhg=)
4: B97B11B2C84211F0A053E068C4F9AE02.roa (hash: T8+SUWMp7lLCNyIXktANN5lVZd79pGX/sm4qsAqhCs0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl
rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A
Validity
Not Before: Jan 25 06:49:25 2026 GMT
Not After : Feb 1 06:49:25 2026 GMT
Subject: CN=6975bcf6-b79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:98:16:e2:d0:1a:37:75:dd:62:61:c9:0a:
fa:8e:3a:24:48:d8:b0:67:53:f0:9a:7c:14:f3:a3:
48:a1:31:d1:8e:c9:4e:d9:61:f0:7c:52:a1:36:74:
b4:a8:a2:75:e8:81:b6:b7:87:6e:18:08:41:ce:c3:
0c:dc:e3:c5:ad:74:29:78:9c:d8:e7:fb:fb:0e:02:
d1:7d:2f:a6:3f:e6:19:df:4a:d2:ef:40:b1:29:fe:
cd:e1:5a:63:df:26:1a:0c:00:93:f0:5b:ef:73:54:
b5:dd:3a:ac:e2:1d:ce:e8:1d:63:81:90:fe:b7:20:
0d:10:d0:25:dd:cb:7f:67:67:91:7a:81:b6:e2:3b:
07:7f:a0:bf:db:aa:19:1c:26:07:49:8b:7c:69:76:
c0:64:85:07:a6:34:1e:d2:d4:b2:8e:fb:c8:01:51:
45:f0:58:40:6d:55:65:0a:53:8a:31:66:cc:9d:7f:
74:29:17:e3:87:ec:e5:86:d5:87:ed:dc:43:dd:f8:
68:22:ed:3d:44:eb:dd:08:c6:64:10:92:97:71:8e:
b0:cb:cb:91:47:40:b6:b6:de:2a:45:5c:88:ca:41:
18:d3:9b:44:4a:95:84:db:7e:77:0b:1f:b4:8a:2f:
0d:47:9b:32:e9:da:4a:e4:af:f0:c3:c0:2b:4d:c8:
b1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:55:4B:4B:3A:D1:03:EE:8F:AD:62:CA:D5:1F:39:34:2D:4A:F3:13
X509v3 Authority Key Identifier:
keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0e:76:af:68:4b:6e:9a:84:50:9e:3c:3f:32:be:f7:3c:1d:
6a:9d:80:1d:80:85:7c:55:f5:62:e0:c3:21:84:bf:12:80:e6:
cf:2f:75:5c:ef:85:b4:bb:67:a2:1d:3f:13:77:b6:38:b3:bc:
6d:32:23:32:f6:38:94:eb:b0:d8:cf:2a:db:b9:61:85:ce:93:
f3:8a:5f:e0:d4:6d:98:3f:99:5b:1f:63:08:2a:33:a0:86:76:
ce:a0:61:48:7e:c9:43:d2:0b:55:52:67:aa:c4:c4:5c:89:30:
62:70:6a:db:44:64:28:10:25:f0:21:0b:34:92:b2:de:d3:6f:
1e:2b:2e:00:3b:45:47:97:9f:c9:93:b6:5b:31:bd:3a:a3:cd:
ef:bc:b9:b2:ae:63:20:34:d0:b1:96:f9:02:85:e5:f9:16:1b:
5a:5b:ec:78:e0:bf:03:0e:a0:01:6e:ea:a6:96:17:9b:49:a8:
7f:c1:41:e7:74:dd:dc:a7:29:c1:25:e9:49:d8:53:c5:a7:32:
ac:8e:b6:f1:9a:e9:b2:de:e5:d8:d1:54:78:1f:43:4b:cc:00:
30:41:7b:a5:4f:1c:bc:b8:ae:8a:b7:45:91:9a:d9:e3:16:7f:
73:4c:6d:66:12:b7:11:bc:07:66:f5:da:0e:e3:ba:a1:57:d9:
9c:e5:dd:32
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFD
Q0RBRTExMC8GA1UEBRMoMkRCRkM3QjI4NjE1QjFGRjc4RDdDRjQ2ODg2QUY5MjEz
OUZGOTY4QTAeFw0yNjAxMjUwNjQ5MjVaFw0yNjAyMDEwNjQ5MjVaMBgxFjAUBgNV
BAMMDTY5NzViY2Y2LWI3OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJqJgW4tAaN3XdYmHJCvqOOiRI2LBnU/CafBTzo0ihMdGOyU7ZYfB8UqE2dLSo
onXogba3h24YCEHOwwzc48WtdCl4nNjn+/sOAtF9L6Y/5hnfStLvQLEp/s3hWmPf
JhoMAJPwW+9zVLXdOqziHc7oHWOBkP63IA0Q0CXdy39nZ5F6gbbiOwd/oL/bqhkc
JgdJi3xpdsBkhQemNB7S1LKO+8gBUUXwWEBtVWUKU4oxZsydf3QpF+OH7OWG1Yft
3EPd+Ggi7T1E690IxmQQkpdxjrDLy5FHQLa23ipFXIjKQRjTm0RKlYTbfncLH7SK
Lw1HmzLp2krkr/DDwCtNyLFFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUH1VLSzrR
A+6PrWLK1R85NC1K8xMwHwYDVR0jBBgwFoAULb/HsoYVsf94189GiGr5ITn/loow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDREFFLzJGQkVBNDAyQzg0
MjExRjBBMzNFOUE3RUM0RjlBRTAyL0xiX0hzb1lWc2Y5NDE4OUdpR3I1SVRuX2xv
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvTGJfSHNvWVZzZjk0MTg5R2lHcjVJVG5fbG9vLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND
REFFLzJGQkVBNDAyQzg0MjExRjBBMzNFOUE3RUM0RjlBRTAyL0xiX0hzb1lWc2Y5
NDE4OUdpR3I1SVRuX2xvby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAE8Odq9oS26ahFCePD8yvvc8HWqdgB2AhXxV9WLgwyGEvxKA5s8vdVzv
hbS7Z6IdPxN3tjizvG0yIzL2OJTrsNjPKtu5YYXOk/OKX+DUbZg/mVsfYwgqM6CG
ds6gYUh+yUPSC1VSZ6rExFyJMGJwattEZCgQJfAhCzSSst7Tbx4rLgA7RUeXn8mT
tlsxvTqjze+8ubKuYyA00LGW+QKF5fkWG1pb7HjgvwMOoAFu6qaWF5tJqH/BQed0
3dynKcEl6UnYU8WnMqyOtvGa6bLe5djRVHgfQ0vMADBBe6VPHLy4roq3RZGa2eMW
f3NMbWYStxG8B2b12g7juqFX2Zzl3TI=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:40:57 2026 by rpki-client