This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
File: lSamckeK-nVEXY0H3MV8BYlm7-I.mft (raw, json)
Hash identifier: ucFSp8RCFyGq1ZBUq39WGtrhhdHtzu3qPtOtTl0H8Qc=
Subject key identifier: B9:81:97:A6:73:9A:EF:24:B6:67:9E:E0:8F:76:65:79:CD:7D:CF:E3
Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2
Certificate issuer: /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
Certificate serial: 02A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
Manifest number: 02A0
Signing time: Sun 25 Jan 2026 00:39:45 +0000
Manifest this update: Sun 25 Jan 2026 00:39:45 +0000
Manifest next update: Sun 01 Feb 2026 00:39:45 +0000
Files and hashes: 1: lSamckeK-nVEXY0H3MV8BYlm7-I.crl (hash: zn0caHZG6m74BJF23B9TApf16p0zBv65XVzkIYRbYDo=)
2: 6E98B3182D3411ED92165562C4F9AE02.roa (hash: 64gg/L8X7dQV3AAOAv3MN1klInujbmxMEcZ9X63m+I4=)
3: 6F46908C2D3411ED92165562C4F9AE02.roa (hash: sR0eTjFYTlKs7mzVHMIl7telIMsp7nYju6MlYaiMBkg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl
rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:39:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA1BE, serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
Validity
Not Before: Jan 25 00:39:45 2026 GMT
Not After : Feb 1 00:39:45 2026 GMT
Subject: CN=69756651-fba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:c5:3c:b7:3f:e6:8d:2f:e9:ca:f2:15:ed:
cd:3e:00:7b:8c:ae:e0:a3:b7:64:df:46:ac:b5:07:
5d:62:e0:4b:af:21:ac:62:49:60:47:3e:16:aa:c9:
ea:82:a3:b1:99:0d:2e:49:82:34:bf:76:9e:eb:83:
34:a1:05:55:60:51:93:93:fa:9b:99:9d:6f:f8:55:
c0:28:d4:8f:13:d1:ee:c9:04:34:53:48:08:21:0b:
ee:f9:3b:4e:a8:10:e7:16:e9:e0:90:f2:be:31:7c:
ac:59:b0:26:56:d8:ad:a2:77:96:e3:10:93:16:3e:
84:85:19:f8:a1:76:cb:cd:af:67:27:0c:6d:2e:f1:
11:21:27:c5:aa:1f:4b:4d:23:1e:5d:f0:07:00:ef:
af:ea:6b:be:c1:10:4e:a4:e1:d4:20:99:ba:d1:a7:
37:78:0a:63:06:e3:31:72:55:bb:3e:67:16:d0:8b:
ca:b2:13:3a:b7:2e:c4:2a:58:c2:8e:be:eb:32:68:
59:f0:53:73:17:3f:9b:e2:80:ae:be:83:c9:c1:df:
bf:86:63:07:48:d1:49:8b:de:cf:f9:c6:ca:13:d5:
2d:0a:2a:bb:14:e7:d8:fb:5c:c0:52:fd:ce:de:d2:
85:95:28:b6:b5:4f:d5:27:a5:b9:1f:5a:00:81:02:
84:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:81:97:A6:73:9A:EF:24:B6:67:9E:E0:8F:76:65:79:CD:7D:CF:E3
X509v3 Authority Key Identifier:
keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:6a:6a:58:af:24:f4:5b:96:90:c3:b2:a3:60:c4:3e:0e:0f:
40:5d:67:66:90:81:6b:dc:e4:1d:39:63:bb:9f:eb:e7:c8:73:
4a:7f:cf:b7:d9:c3:52:f3:23:00:c5:25:43:4a:81:3b:70:49:
d4:c6:91:4c:02:e7:1a:21:3c:b1:fa:e9:5d:1d:40:94:2e:7a:
3a:ef:4c:19:07:55:01:e8:90:ab:24:39:c9:e5:e8:d9:d9:2b:
30:b4:f9:47:b5:ed:37:e7:25:9c:b5:40:43:54:8a:19:74:b6:
b0:67:52:30:15:b8:17:1d:5d:cb:9f:2d:3e:93:27:bb:e8:29:
24:1b:c4:81:92:ba:2b:f5:3b:fa:d4:21:b4:6b:3d:d0:95:14:
75:63:ba:76:fc:00:7a:cf:f0:b9:90:d7:01:21:32:12:ca:ae:
63:48:b8:fe:42:b4:5e:87:f8:59:64:fc:24:6b:2b:2e:a4:00:
08:cb:0d:52:b3:1e:70:40:87:3e:f1:36:17:30:55:c7:d7:56:
10:df:10:4d:e5:e7:bb:86:a0:cb:75:2f:6a:84:cf:f3:e9:42:
2b:54:09:68:73:cf:8b:02:69:93:03:9d:50:b0:05:d6:c9:06:
6d:ca:aa:93:1c:64:c3:43:78:1e:39:dc:02:ea:de:d4:ea:e9:
e2:81:96:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:05 2026 by rpki-client