This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
File: lVqjNNYHfBfALW18rdIVmRIeTvo.mft (raw, json)
Hash identifier: oMEMN0YPavF0nmlC5vN1+UV/9Mv4EThFCbqBRILB8bo=
Subject key identifier: C5:AA:7A:A4:24:D5:60:0A:D3:36:B3:85:82:2F:44:D9:80:90:F7:2C
Authority key identifier: 95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
Certificate issuer: /CN=A91D01AF/serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Certificate serial: 0856
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
Manifest number: 084E
Signing time: Sat 24 Jan 2026 20:06:45 +0000
Manifest this update: Sat 24 Jan 2026 20:06:44 +0000
Manifest next update: Sat 31 Jan 2026 20:06:44 +0000
Files and hashes: 1: lVqjNNYHfBfALW18rdIVmRIeTvo.crl (hash: 5SdLd7UDOyliiAbmSTWOnsrm69ylMAKH0v8EFew1KA4=)
2: AD797FA2F17E11EAA3CC597BC4F9AE02.roa (hash: FrUF8k+q0iQX/Bos2myD8zLROjp2eOpyug9lyw9AGzE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2134 (0x856)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D01AF, serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Validity
Not Before: Jan 24 20:06:44 2026 GMT
Not After : Jan 31 20:06:44 2026 GMT
Subject: CN=69752655-8ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:c1:99:30:f2:e3:dc:fa:7c:ad:c5:23:d5:
13:c7:4a:a7:c5:13:cf:4d:b6:3d:c0:17:72:9f:86:
52:a7:f3:bb:b4:1e:ec:fa:85:2f:d6:ea:d0:07:10:
89:94:c6:43:27:e7:c3:46:04:d4:89:d3:ea:c8:c6:
92:c1:b2:fe:71:b2:44:48:1b:fe:4f:13:81:bc:38:
ee:d9:10:87:b3:5d:08:63:4f:d6:0e:7a:db:af:51:
b6:3f:01:06:80:f1:de:70:3d:70:8f:ef:06:4b:c4:
38:20:a1:f2:e6:31:60:66:70:1c:99:f8:b1:a7:8e:
d4:17:b4:f5:c1:27:d8:31:20:03:5c:ae:a2:d6:8a:
c7:32:2f:d6:5a:ac:03:ee:fd:a6:ef:a5:9f:5c:bc:
a5:b1:4f:5e:4e:0b:a6:72:f4:78:18:2c:47:76:86:
b8:7d:bf:b9:f6:e3:34:6c:a6:a2:a2:24:4e:40:a9:
be:c5:da:03:d8:bb:a4:ae:8f:e9:e9:1a:54:cb:6d:
67:28:99:0b:0c:89:08:6d:15:95:a9:04:c3:f6:fb:
fd:4f:ea:91:03:a6:93:1e:c6:f0:04:51:f3:7f:50:
44:2c:1d:82:da:24:15:22:11:7f:1c:65:01:0b:81:
cf:a1:3b:2e:51:6e:14:9a:74:2c:1e:00:0f:ad:a0:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AA:7A:A4:24:D5:60:0A:D3:36:B3:85:82:2F:44:D9:80:90:F7:2C
X509v3 Authority Key Identifier:
keyid:95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7e:b3:4b:de:4a:79:ea:41:af:b9:bb:52:8d:26:2d:0a:0b:
4f:e5:ae:d7:5f:8b:ad:62:5f:c3:6a:b8:a8:13:f8:9d:5a:74:
9c:1c:ba:4d:09:cf:86:55:f7:ce:ce:10:3c:b1:0d:b0:08:c0:
d2:73:1a:f4:eb:6d:fa:57:4f:95:c2:5a:be:0a:18:89:6f:a7:
e3:ca:6d:e0:3c:0a:94:8a:6e:4f:e6:33:39:7c:e4:3c:61:2a:
bd:99:0b:dc:86:f3:a9:fd:0f:da:20:57:a3:04:d4:9b:f3:c4:
32:77:26:8a:67:52:27:c0:f9:2f:c2:ec:1c:7a:21:0c:60:2b:
26:2b:a6:81:35:0b:4c:e3:42:10:aa:98:c1:6b:10:db:45:ad:
c6:b8:ca:54:dd:86:c7:d9:59:27:cc:19:48:be:37:2d:5d:1e:
b9:a6:f7:aa:a9:8c:5b:82:45:58:a0:55:a9:88:d8:ff:74:ef:
fe:ac:de:74:a3:22:f7:75:eb:e8:ac:4d:62:b6:b6:33:47:0c:
cb:c0:85:33:63:fc:3a:bc:77:28:56:22:d9:14:b0:a7:ae:19:
cf:68:07:c1:87:cb:5f:9e:0b:48:3c:a3:d6:cc:f0:24:9b:d1:
62:48:25:8d:60:a2:42:21:2d:ae:60:13:aa:2d:7a:1b:32:cd:
e3:8d:1d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:07:45 2026 by rpki-client