This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
File: LPF-aFt4j16uSgHViDUmG18LLqQ.mft (raw, json)
Hash identifier: iaiezzOOKmLbyYkR9Es3FddbyTTCvQxbh5bZERPUcMI=
Subject key identifier: 17:22:10:79:72:90:BC:1F:64:6D:7B:E1:83:5B:AA:53:1B:92:DC:E6
Authority key identifier: 2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4
Certificate issuer: /CN=A91FABEF/serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
Manifest number: 0169
Signing time: Sun 25 Jan 2026 03:11:55 +0000
Manifest this update: Sun 25 Jan 2026 03:11:54 +0000
Manifest next update: Sun 01 Feb 2026 03:11:54 +0000
Files and hashes: 1: LPF-aFt4j16uSgHViDUmG18LLqQ.crl (hash: YRgxIvdQMcf/9c6mpG0mY6DJBA4/9vuCIC4+sSFVwCE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl
rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FABEF, serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4
Validity
Not Before: Jan 25 03:11:54 2026 GMT
Not After : Feb 1 03:11:54 2026 GMT
Subject: CN=697589fb-bac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:99:ff:cd:49:a5:50:50:a8:63:c2:42:07:8c:
ac:8b:83:0a:12:d5:15:a2:0b:4b:9a:8b:5b:fc:5f:
58:45:85:46:b9:f0:dd:05:35:28:c0:79:9a:42:bf:
e2:75:25:56:da:17:77:44:e0:01:c7:bf:1d:d2:84:
62:1a:f7:84:7c:fa:80:78:22:8b:a9:f2:b2:0a:17:
7d:4f:0d:3c:06:45:be:44:63:32:22:5a:78:90:0e:
ef:5b:78:c5:66:f7:cb:38:c0:ef:c7:85:40:01:5b:
68:7a:2f:49:5f:36:67:1d:72:a8:a6:46:fd:c6:b1:
58:09:17:d5:b4:03:85:18:34:c5:f4:1a:f2:15:fa:
cf:50:f7:96:c2:ff:d3:de:ba:47:9a:8a:2e:83:5b:
af:7c:18:6d:e8:97:ed:6c:59:35:9e:0b:11:14:7e:
17:66:90:8a:84:ca:36:2f:ee:54:79:dc:57:ae:87:
33:b0:a0:16:14:45:da:1f:b9:d6:b5:1d:e1:1a:8b:
40:3c:3b:1f:d1:43:30:a5:98:d8:e6:45:56:ec:41:
f2:c0:96:da:5d:03:2f:52:57:90:c3:9c:7b:59:aa:
21:ac:fc:e5:ab:41:09:e8:aa:60:d5:58:a8:15:bf:
03:21:37:7a:67:e9:cf:62:6e:8a:0b:f3:08:2d:9a:
4d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:22:10:79:72:90:BC:1F:64:6D:7B:E1:83:5B:AA:53:1B:92:DC:E6
X509v3 Authority Key Identifier:
keyid:2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:09:f7:cf:b8:bf:3d:a1:f9:58:ed:49:1c:cc:73:36:6f:94:
b9:12:e4:bb:c5:97:0f:1d:9f:7a:ad:b2:2d:54:a9:70:0b:d3:
76:12:01:ca:7f:35:2f:5b:ea:6d:57:cb:78:77:ef:a0:c9:b1:
4a:1a:ae:61:89:a8:83:58:08:77:7c:f1:b3:bb:3a:b2:46:fa:
6f:33:18:76:16:1b:4a:74:8d:02:38:5c:4d:ab:5a:81:1e:46:
d3:7c:93:cc:f2:b0:e7:07:59:7d:38:12:4c:e9:cf:74:57:56:
62:a0:42:a3:57:e5:0f:d9:b3:56:2d:ec:dc:a9:19:8c:41:5c:
40:9c:8f:03:e0:78:0d:5e:e2:8f:26:6d:5a:cf:f8:fd:19:e0:
ad:50:50:2e:df:e8:eb:1a:29:74:d8:cd:ed:90:cb:94:d4:e2:
50:1c:2b:f5:d1:3d:d8:78:27:79:4c:a8:4e:75:2d:46:da:0d:
03:5b:57:f3:1b:81:0b:51:a1:5d:06:4b:c7:82:4a:14:15:6e:
cf:e3:a0:47:58:1c:07:5f:d4:ba:9e:da:4c:9f:57:07:0c:b3:
42:2e:fc:bf:78:d1:7f:88:9f:d5:8f:ac:55:c4:53:40:2b:5c:
79:8d:f9:2d:cf:60:79:12:f6:aa:a1:e8:6a:8e:3e:3b:8f:2e:
06:5b:aa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:51:33 2026 by rpki-client