This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
File: 9UTm_uoP5rnfex2j2aWS_Lispik.mft (raw, json)
Hash identifier: q7P8EfKpxQm6/YLOKLX29jz//Wj50R3DaAa7TRYeyEU=
Subject key identifier: 68:81:46:3F:8C:B9:99:7C:F5:34:69:CA:57:82:13:80:E6:56:93:7F
Authority key identifier: F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29
Certificate issuer: /CN=A91DD55B/serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629
Certificate serial: 01AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
Manifest number: 01AB
Signing time: Sun 25 Jan 2026 02:32:27 +0000
Manifest this update: Sun 25 Jan 2026 02:32:27 +0000
Manifest next update: Sun 01 Feb 2026 02:32:27 +0000
Files and hashes: 1: 9UTm_uoP5rnfex2j2aWS_Lispik.crl (hash: 4CCnHm7hmxSe8fQNe7VDAMldOXvVv/P2pH0sEBKqRpA=)
2: 6C3D2A826D7911EEBA9F0F7AC4F9AE02.roa (hash: s8O1c6uFUTxJrWDusqeQGdV8g8M1UT5EVFIautQIKN4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl
rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD55B, serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629
Validity
Not Before: Jan 25 02:32:27 2026 GMT
Not After : Feb 1 02:32:27 2026 GMT
Subject: CN=697580bb-3f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:23:94:ba:2c:4c:e7:26:85:61:64:89:40:
58:72:8f:2c:b4:58:e8:83:5a:a3:75:e0:27:ac:3c:
13:b1:d4:7d:10:78:78:ef:fa:92:4a:a9:a7:27:c8:
27:76:d0:b5:0f:e6:2c:a1:93:0a:d0:e6:72:21:86:
76:e9:d8:5d:5a:60:d0:3e:85:8b:e0:e1:5f:e5:03:
d2:50:0c:46:45:36:3c:66:67:3b:1b:76:40:ba:29:
b7:9d:6e:48:bc:58:3b:98:bd:51:33:b1:dd:fb:f6:
a8:0d:73:61:75:82:8f:dd:ab:d2:9f:b8:5e:d1:4d:
a9:90:dc:e1:2b:78:61:0a:d2:10:89:0c:99:1b:12:
c5:ed:d7:a3:7a:a6:f7:c8:0f:95:8c:99:28:c6:db:
93:59:30:33:83:1b:f2:1b:99:37:9f:a9:7c:d4:93:
22:7e:77:89:0b:f0:20:42:ba:5e:b4:90:2d:dc:08:
45:97:32:a6:bc:43:87:f1:f1:42:50:e0:6f:b8:0e:
06:76:e6:c2:d2:dd:26:54:31:ed:17:8f:65:fa:91:
f0:70:4a:6c:55:e3:77:e9:2e:c4:cc:ed:de:38:35:
bb:82:d2:71:c1:5b:b7:08:db:85:7b:48:10:38:40:
90:c5:a5:a6:08:82:e8:94:eb:6d:44:c5:b6:3d:46:
9e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:81:46:3F:8C:B9:99:7C:F5:34:69:CA:57:82:13:80:E6:56:93:7F
X509v3 Authority Key Identifier:
keyid:F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:70:4b:28:73:f8:8c:23:d6:9d:68:ad:6a:35:55:52:84:92:
f6:5a:b5:e1:69:35:c1:f6:ab:74:42:cc:f8:be:65:5d:87:8f:
05:cb:82:7b:af:04:0d:6f:b8:f6:98:c7:4e:33:71:5f:0a:67:
25:5c:16:f0:f2:57:6d:a4:69:51:ac:99:e3:26:03:9e:2c:71:
c7:ca:cf:19:7f:a3:e8:6a:07:76:9a:63:41:65:5a:dd:b7:2a:
9c:38:69:ad:29:d1:0a:de:ab:29:40:95:ba:e7:0c:19:6b:7c:
26:b7:52:85:70:0e:77:b8:b9:22:13:21:57:67:b4:50:19:84:
39:5c:e5:ce:93:3d:85:9e:a6:ee:8e:05:71:bc:28:0f:df:6e:
85:38:52:9e:df:98:5d:c1:06:85:2f:da:d0:80:b1:c0:5b:47:
c4:2b:da:09:70:a9:26:fd:d2:85:62:ad:3b:c7:dc:6e:b4:90:
85:80:cd:88:f3:32:58:76:d9:a9:91:c3:ff:77:2d:3f:f5:a4:
6c:18:11:d2:da:78:be:7e:08:fa:25:c0:3e:22:ae:4a:61:49:
fb:50:18:a2:29:db:1a:e0:6b:d6:cb:31:7a:6c:e6:c8:15:68:
bb:75:d6:33:0c:36:f4:49:4d:93:e8:f1:fa:76:ec:2c:b3:70:
a1:1f:75:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQ1NUIxMTAvBgNVBAUTKEY1NDRFNkZFRUEwRkU2QjlERjdCMURBM0Q5QTU5MkZD
QjhBQ0E2MjkwHhcNMjYwMTI1MDIzMjI3WhcNMjYwMjAxMDIzMjI3WjAYMRYwFAYD
VQQDDA02OTc1ODBiYi0zZjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApfIjlLosTOcmhWFkiUBYco8stFjog1qjdeAnrDwTsdR9EHh47/qSSqmnJ8gn
dtC1D+YsoZMK0OZyIYZ26dhdWmDQPoWL4OFf5QPSUAxGRTY8Zmc7G3ZAuim3nW5I
vFg7mL1RM7Hd+/aoDXNhdYKP3avSn7he0U2pkNzhK3hhCtIQiQyZGxLF7dejeqb3
yA+VjJkoxtuTWTAzgxvyG5k3n6l81JMifneJC/AgQrpetJAt3AhFlzKmvEOH8fFC
UOBvuA4GdubC0t0mVDHtF49l+pHwcEpsVeN36S7EzO3eODW7gtJxwVu3CNuFe0gQ
OECQxaWmCILolOttRMW2PUaerwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiBRj+M
uZl89TRpyleCE4DmVpN/MB8GA1UdIwQYMBaAFPVE5v7qD+a533sdo9mlkvy4rKYp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDU1Qi84RjQzNDlDODZE
NzcxMUVFODM1NTRFNzRDNEY5QUUwMi85VVRtX3VvUDVybmZleDJqMmFXU19MaXNw
aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlVVG1fdW9QNXJuZmV4MmoyYVdTX0xpc3Bpay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDU1Qi84RjQzNDlDODZENzcxMUVFODM1NTRFNzRDNEY5QUUwMi85VVRtX3VvUDVy
bmZleDJqMmFXU19MaXNwaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA/cEsoc/iMI9adaK1qNVVShJL2WrXhaTXB9qt0Qsz4vmVdh48Fy4J7
rwQNb7j2mMdOM3FfCmclXBbw8ldtpGlRrJnjJgOeLHHHys8Zf6Poagd2mmNBZVrd
tyqcOGmtKdEK3qspQJW65wwZa3wmt1KFcA53uLkiEyFXZ7RQGYQ5XOXOkz2Fnqbu
jgVxvCgP326FOFKe35hdwQaFL9rQgLHAW0fEK9oJcKkm/dKFYq07x9xutJCFgM2I
8zJYdtmpkcP/dy0/9aRsGBHS2ni+fgj6JcA+Iq5KYUn7UBiiKdsa4GvWyzF6bObI
FWi7ddYzDDb0SU2T6PH6duwss3ChH3W/
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:43:39 2026 by rpki-client