This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
File: LRhptz6h6I6xK-afHA1OfCGWoz4.mft (raw, json)
Hash identifier: 9uZ9JXBXp4b8fo98wu+AQW59eggql+9wVeircyNT9U0=
Subject key identifier: 05:4C:46:A7:C7:FA:CB:F1:D8:38:5A:56:38:78:2A:BE:F5:67:5F:EC
Authority key identifier: 2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E
Certificate issuer: /CN=A91E8FFF/serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
Manifest number: 09
Signing time: Sun 25 Jan 2026 07:07:50 +0000
Manifest this update: Sun 25 Jan 2026 07:07:49 +0000
Manifest next update: Sun 01 Feb 2026 07:07:49 +0000
Files and hashes: 1: LRhptz6h6I6xK-afHA1OfCGWoz4.crl (hash: Wc5LcZvQ/Ri0QVTCNneiH4/PcBBaQZhhKuKjo6jSTaY=)
2: DB2D63A4EED111F0AB3DEEA1736F56BC.roa (hash: UIl0m38K2IcOSSTNKy1r3QmZCaV/dVL2XTzUVw4T6JE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl
rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8FFF, serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
Validity
Not Before: Jan 25 07:07:49 2026 GMT
Not After : Feb 1 07:07:49 2026 GMT
Subject: CN=6975c146-be5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:22:69:e0:77:3a:f2:f7:8e:0b:e4:c6:c9:e1:
27:7f:04:e3:59:e3:5c:0a:25:48:93:b5:3d:73:a5:
61:89:98:95:d9:3c:d3:9c:60:3b:2f:9a:04:c4:4c:
78:ba:ac:8e:61:db:2e:68:71:ea:ca:09:8d:b4:57:
d1:97:9c:89:22:be:7a:37:78:91:b9:b5:5c:9c:2c:
22:04:aa:f5:31:7a:d1:67:96:76:a1:53:d7:28:5b:
49:7f:61:b6:05:d6:34:46:5b:72:c1:5b:b0:53:f1:
68:2e:8e:ea:1b:fb:8a:3f:a3:d8:51:bb:ae:66:55:
56:91:9a:a5:c4:53:7a:59:b1:94:bb:11:e9:87:54:
f2:3c:f6:fa:89:20:53:3c:7c:3e:5a:01:81:ec:ef:
e7:3d:6e:00:84:80:0b:66:6d:6e:00:59:ac:a4:a9:
47:6d:3a:e1:4e:35:e7:2d:a2:73:c6:11:40:c5:1e:
22:5c:2f:f0:e5:73:0d:88:f7:1e:32:1d:96:78:d7:
c4:99:a6:42:82:c6:37:43:93:72:8a:fc:6d:32:fe:
10:86:ed:34:c8:06:2f:f7:25:ca:0a:d5:dd:26:ed:
c9:67:4c:19:1f:d8:c9:67:58:3f:13:c6:b3:27:6b:
52:ae:12:ce:ed:d9:fb:ac:76:e9:d0:15:23:10:6d:
35:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4C:46:A7:C7:FA:CB:F1:D8:38:5A:56:38:78:2A:BE:F5:67:5F:EC
X509v3 Authority Key Identifier:
keyid:2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:32:e0:ce:ad:b1:d2:24:98:78:a0:da:36:dd:9a:1f:93:d3:
2d:65:e4:40:43:a0:d0:5e:66:4c:47:26:94:94:08:54:6f:98:
54:99:cb:3d:02:9f:70:88:d2:42:f5:4a:96:37:07:23:63:58:
ac:5f:47:fc:87:4f:71:a2:17:60:a9:30:4e:71:71:54:c3:21:
73:74:e9:19:bc:be:9c:53:90:09:d2:cb:50:6a:32:57:69:e9:
74:8d:99:fd:69:a8:6e:11:05:d9:31:cd:80:8c:eb:57:d9:a8:
d2:d4:04:09:aa:bb:0b:b2:06:f9:25:80:93:39:5c:68:c6:3a:
c4:04:74:89:52:40:d4:af:ef:06:9f:d7:e0:1b:4e:27:da:b4:
9e:87:b9:f3:f4:ca:63:8a:ad:1e:30:cd:93:13:6e:33:18:5a:
32:00:0f:8c:83:72:83:d9:c4:ef:25:8a:e1:45:80:00:d2:1e:
c2:a3:83:2a:1f:4a:ed:56:3a:a0:0d:e9:d4:d5:73:12:25:63:
67:bc:48:6e:5e:4b:ea:fc:7e:90:8d:b5:b2:ed:ee:3d:fa:8c:
98:33:ea:da:7b:31:ce:ea:33:46:08:47:b8:77:cc:c9:e1:74:
9e:08:7c:e7:65:fb:b1:c5:d4:d3:68:02:09:41:da:32:d9:5f:
8e:94:38:c8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFF
OEZGRjExMC8GA1UEBRMoMkQxODY5QjczRUExRTg4RUIxMkJFNjlGMUMwRDRFN0My
MTk2QTMzRTAeFw0yNjAxMjUwNzA3NDlaFw0yNjAyMDEwNzA3NDlaMBgxFjAUBgNV
BAMMDTY5NzVjMTQ2LWJlNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAImngdzry944L5MbJ4Sd/BONZ41wKJUiTtT1zpWGJmJXZPNOcYDsvmgTETHi6
rI5h2y5ocerKCY20V9GXnIkivno3eJG5tVycLCIEqvUxetFnlnahU9coW0l/YbYF
1jRGW3LBW7BT8Wgujuob+4o/o9hRu65mVVaRmqXEU3pZsZS7EemHVPI89vqJIFM8
fD5aAYHs7+c9bgCEgAtmbW4AWaykqUdtOuFONectonPGEUDFHiJcL/Dlcw2I9x4y
HZZ418SZpkKCxjdDk3KK/G0y/hCG7TTIBi/3JcoK1d0m7clnTBkf2MlnWD8TxrMn
a1KuEs7t2fusdunQFSMQbTUhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBUxGp8f6
y/HYOFpWOHgqvvVnX+wwHwYDVR0jBBgwFoAULRhptz6h6I6xK+afHA1OfCGWoz4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4RkZGLzUwMzU3Q0YwRUVE
MTExRjBCMEFDRDI3NjczNkY1NkJDL0xSaHB0ejZoNkk2eEstYWZIQTFPZkNHV296
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTFJocHR6Nmg2STZ4Sy1hZkhBMU9mQ0dXb3o0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4
RkZGLzUwMzU3Q0YwRUVEMTExRjBCMEFDRDI3NjczNkY1NkJDL0xSaHB0ejZoNkk2
eEstYWZIQTFPZkNHV296NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADEy4M6tsdIkmHig2jbdmh+T0y1l5EBDoNBeZkxHJpSUCFRvmFSZyz0C
n3CI0kL1SpY3ByNjWKxfR/yHT3GiF2CpME5xcVTDIXN06Rm8vpxTkAnSy1BqMldp
6XSNmf1pqG4RBdkxzYCM61fZqNLUBAmquwuyBvklgJM5XGjGOsQEdIlSQNSv7waf
1+AbTifatJ6HufP0ymOKrR4wzZMTbjMYWjIAD4yDcoPZxO8liuFFgADSHsKjgyof
Su1WOqAN6dTVcxIlY2e8SG5eS+r8fpCNtbLt7j36jJgz6tp7Mc7qM0YIR7h3zMnh
dJ4IfOdl+7HF1NNoAglB2jLZX46UOMg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:08:34 2026 by rpki-client