This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
File: lX5Qp1--UC844-2_P0qq5mWuFIs.mft (raw, json)
Hash identifier: MbeMuLMwRXdi5Z2PaFeV0SnOIPHKmO329j8NxedG5OY=
Subject key identifier: 0F:CD:58:E8:90:69:FA:1B:D4:D0:37:DF:AA:F2:56:62:5A:1C:17:C5
Authority key identifier: 95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B
Certificate issuer: /CN=A91D0B0E/serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
Manifest number: F8
Signing time: Fri 23 Jan 2026 04:23:42 +0000
Manifest this update: Fri 23 Jan 2026 04:23:42 +0000
Manifest next update: Fri 30 Jan 2026 04:23:42 +0000
Files and hashes: 1: lX5Qp1--UC844-2_P0qq5mWuFIs.crl (hash: R6CGeajcDuodsgQsJdJeEFm3VJcszHLq4YHTrxzCnoE=)
2: A0A9D60C807511EFAD8C4257C4F9AE02.roa (hash: ItObitSQLkGH+talVc8PNR7Z2o8Aby5tjfREkgGvzVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl
rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 04:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B0E, serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B
Validity
Not Before: Jan 23 04:23:42 2026 GMT
Not After : Jan 30 04:23:42 2026 GMT
Subject: CN=6972f7ce-134d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3d:53:a6:f9:e5:5b:40:93:06:b0:54:e7:84:
e8:8f:25:55:47:6d:a0:cf:d9:71:d3:d5:8e:6c:23:
60:61:9c:c2:f1:e3:21:a6:e9:07:b5:78:e4:62:3f:
ea:b2:ee:dd:c5:06:98:2f:54:1a:f8:aa:67:bb:6e:
fd:b8:f2:ed:dc:8f:5f:8d:f0:d2:c9:af:60:55:6d:
d9:56:18:f5:5c:d4:94:30:df:94:e6:17:f8:3e:af:
d8:06:d8:27:f2:16:60:51:d1:b0:4f:27:59:cc:7e:
86:33:14:64:d7:f5:6b:77:03:22:ba:f9:11:39:30:
e2:0b:63:ac:7d:cc:31:03:3b:93:15:90:58:02:da:
40:e5:2d:a7:bc:b9:07:9a:c6:24:b2:c2:90:b6:25:
f1:ed:ba:98:06:42:e1:c7:98:9f:70:2d:e2:04:16:
47:b5:a1:dd:0e:18:14:b7:98:70:6a:d0:5b:32:42:
86:58:0e:9c:b5:90:6e:ef:4d:e6:d3:c5:c5:ff:f9:
cf:96:9f:43:2a:ed:d6:80:39:67:ae:24:86:8b:b0:
46:d2:ec:65:e7:b2:36:f8:de:28:23:86:58:c6:f4:
b5:e5:59:d8:93:48:af:a8:64:4e:61:1c:de:64:3f:
25:c8:a4:f3:0b:58:2b:b6:c0:7d:64:18:59:49:b4:
1d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CD:58:E8:90:69:FA:1B:D4:D0:37:DF:AA:F2:56:62:5A:1C:17:C5
X509v3 Authority Key Identifier:
keyid:95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f6:8b:3f:92:d8:4c:06:79:14:ae:98:c3:59:db:ed:21:73:
c6:5d:7c:5e:c8:0a:4a:ca:07:a1:c3:40:54:b6:91:30:d7:c7:
03:26:5c:05:cb:d0:d3:c5:4e:ac:80:fc:4f:1f:6b:93:69:12:
06:15:b1:1d:78:b8:84:31:de:c7:33:fb:a2:9d:b0:64:2f:a9:
c6:9e:e5:93:5b:8f:8a:73:cd:d5:4b:9f:85:69:42:3f:be:ed:
41:a2:67:eb:ea:79:f3:da:5f:48:93:3b:95:f8:b2:7a:89:cb:
06:25:c3:01:4c:d2:5e:97:8f:bb:ff:b8:35:d2:9f:68:0a:2a:
87:15:85:9d:e6:57:83:16:d6:0d:65:41:6c:ad:44:13:31:20:
12:1c:68:ae:e4:01:e6:f1:07:bb:db:e1:bb:33:48:92:17:be:
32:d2:85:17:5e:5b:17:9e:9a:ce:1c:23:c7:54:a2:25:6b:03:
f1:cd:eb:57:ca:41:7c:c3:da:86:b5:b7:4e:b2:ac:33:67:4d:
84:ea:0b:72:5c:57:be:78:19:f1:29:f7:1d:dd:74:56:b8:41:
b3:f3:45:1b:47:0e:a2:f7:86:cf:07:0a:4c:b4:f1:4b:21:93:
3a:e6:a5:e6:6a:8b:4b:e2:d4:c4:a3:45:55:83:6e:26:aa:1d:
2f:99:ac:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:52:12 2026 by rpki-client