This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json)
Hash identifier: 7DdU0uEzLrLE414hDaUM840dEvJ2jcS5IqdbOOl1Ykg=
Subject key identifier: 4E:7B:7F:C3:1C:4E:96:FF:4F:E1:A8:E7:E0:18:BD:2A:6E:28:F3:A3
Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
Manifest number: 0125
Signing time: Sun 25 Jan 2026 03:54:26 +0000
Manifest this update: Sun 25 Jan 2026 03:54:26 +0000
Manifest next update: Sun 01 Feb 2026 03:54:26 +0000
Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: 6B/DZObWTyxVfQ5G6bBlk5EdrFAFVXJUsi0GCKgmFXE=)
2: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: XWY3Z0PrjeVbgUGRkkonKlE66Ol3xZjgkZ/1G2BNmmU=)
3: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: clF6JNb3xxwZ4+TvE/qZQW2JPLeVEQfwTMXzv7FMnBA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl
rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C
Validity
Not Before: Jan 25 03:54:26 2026 GMT
Not After : Feb 1 03:54:26 2026 GMT
Subject: CN=697593f2-428d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:f6:aa:1b:cb:72:96:8f:b7:93:73:94:4e:
c2:22:f3:b7:29:c8:8f:e1:5c:c4:e6:e3:db:ca:0c:
e6:54:85:29:87:6f:81:51:8b:db:f0:a9:0d:52:b3:
d0:33:f7:9c:90:73:43:e2:f6:c4:26:e1:d3:8b:aa:
02:9c:dc:0c:f5:5a:b6:50:47:a9:b5:d1:54:99:6e:
32:3b:e7:42:b4:d8:74:f9:79:35:19:51:34:83:99:
c4:1a:40:cb:ad:20:fc:ac:a9:4a:bc:5e:a8:29:98:
07:b6:48:51:7d:f1:1d:57:75:f0:52:a5:ef:37:23:
df:85:ec:bf:9c:33:f4:f0:24:dc:f4:ed:7e:ae:e9:
68:b4:9b:33:7e:45:a9:e5:d8:0b:92:17:65:cb:b0:
52:09:70:c0:00:85:82:7b:53:c4:61:e5:36:b8:88:
02:47:90:ce:f3:74:99:89:b6:a8:62:c4:36:21:95:
98:ab:b2:f7:bb:ec:f3:d4:88:c9:2c:fa:ac:5f:a3:
ae:7c:86:cc:39:ec:6f:94:89:b6:5e:e7:e6:f7:62:
7d:d7:64:ce:ce:22:46:75:fc:81:71:c6:db:a9:7f:
2e:fa:3b:6b:b5:c1:6c:ec:a6:70:cc:0d:27:ff:d3:
a8:aa:4c:ec:72:73:02:5d:15:f0:84:cb:8c:6c:51:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7B:7F:C3:1C:4E:96:FF:4F:E1:A8:E7:E0:18:BD:2A:6E:28:F3:A3
X509v3 Authority Key Identifier:
keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:50:39:95:73:49:94:e3:8a:23:24:5d:a5:7f:bc:c4:64:29:
ed:da:b6:09:f4:9e:ca:62:53:3c:cf:3f:c3:f1:3a:6a:c0:de:
4d:ab:ef:24:f8:10:5e:b8:93:6d:c5:18:e3:98:99:3f:ba:8b:
35:14:f7:ce:d5:02:fb:e6:fa:6c:9b:e3:85:2f:5e:02:37:d6:
f6:73:a3:49:db:8f:a0:50:fe:0f:f8:19:96:96:a5:31:fc:0d:
81:85:d0:64:90:3f:bc:45:8b:65:57:14:75:29:ce:b7:28:81:
33:73:2a:60:f1:41:e7:05:ab:99:12:fb:2a:69:62:01:87:04:
8e:7d:96:91:4a:8c:11:9e:08:3c:80:92:d6:11:32:4b:b1:d0:
e7:7b:b4:26:e1:9f:68:15:da:21:0e:5f:d0:69:fc:25:f8:29:
11:a6:33:e4:cf:7e:e1:06:24:7b:05:a4:70:5a:a6:16:45:2b:
7c:f0:96:d9:22:e6:20:05:00:50:e4:b9:59:4b:f2:e4:6d:1a:
7c:58:da:e5:76:79:82:62:73:b4:27:69:0a:da:67:e9:50:46:
43:53:12:a9:ff:60:82:46:b6:1e:04:3b:c3:d9:2f:25:09:bd:
56:8f:62:4c:b7:6a:0d:19:2a:4f:33:53:70:6f:ea:b8:67:04:
51:3a:2f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:53:07 2026 by rpki-client