This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
File: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json)
Hash identifier: PDiq9Bc97Z0DWM+8NjkZc+K3rSdBZP/BNgxXbaQND0c=
Subject key identifier: 02:D2:00:07:03:0D:18:EF:C0:5D:54:E3:F1:64:87:CA:BE:7F:55:AB
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 48BF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Subject info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
Manifest number: 48B3
Signing time: Sun 25 Jan 2026 02:50:25 +0000
Manifest this update: Sun 25 Jan 2026 02:50:25 +0000
Manifest next update: Sun 01 Feb 2026 02:50:25 +0000
Files and hashes: 1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: 306ssfO8/aK20P2ARdgDQnmzWNe+8hFhO6UlX+oRjBI=)
2: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (hash: NRcDr6REbVzbTiHoNzZyK4YoKwtLqg9UeS+C5SRci4o=)
3: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: fxyUaruAjaaco/fzq2Q5nRs7XM9NtVdLWIcLFflk+gY=)
4: V2i_S72Luw3lwVz_jwqRSKCyLtU.cer (hash: d7nW44PMgX3RwaXF2oB8L8gcCuQ2vF0toLT5KaRwyyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18623 (0x48bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Jan 25 02:50:25 2026 GMT
Not After : Feb 1 02:50:25 2026 GMT
Subject: CN=697584f1-79cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:89:b9:28:d6:44:d0:04:f8:df:cf:2c:80:
38:35:0e:be:19:d5:ed:3f:92:15:8f:af:a6:46:8a:
63:96:38:24:34:d0:4a:e2:cc:d7:eb:0f:af:1a:30:
fd:a9:8f:7b:e1:b7:96:14:5c:ff:01:6d:0d:3b:8d:
1b:8f:f7:ab:cc:25:77:47:df:a7:da:1d:4a:99:88:
c8:6e:d6:08:39:ef:95:41:3e:9f:86:41:2c:ea:53:
d3:1c:19:3e:1f:2d:70:2c:c0:4b:8b:f1:09:7d:11:
35:5a:4d:21:2b:f1:8c:9b:e2:51:aa:e0:ae:3c:8b:
0a:1e:c9:83:db:b2:45:b0:3d:17:99:34:2f:ae:7b:
11:9a:30:92:75:d5:1f:d0:9b:8f:66:7c:db:af:a6:
14:17:6d:20:eb:44:b8:ed:85:60:03:d1:25:ae:a1:
0e:66:e7:bf:15:32:d0:f2:ff:4d:76:c4:0e:b9:07:
0e:c2:83:ca:fa:6a:2e:ce:ba:7f:81:dc:e0:ee:96:
1d:75:4b:5a:90:6f:1f:36:85:30:1b:d4:1f:17:ef:
b8:8b:ea:b5:dc:14:80:bb:ec:1c:d0:3d:f5:77:67:
bc:d5:bc:75:e0:ba:9d:d6:76:3f:1f:63:64:43:d1:
2e:9c:c6:13:7b:84:e5:2f:89:69:68:18:98:e4:b7:
1b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D2:00:07:03:0D:18:EF:C0:5D:54:E3:F1:64:87:CA:BE:7F:55:AB
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:ce:b7:26:63:8b:49:35:c9:09:cf:b2:7c:83:70:57:4f:ea:
98:78:a7:3b:72:52:48:a7:99:4a:5f:ca:d3:c5:70:c1:ca:0a:
97:8b:ff:dc:af:a9:32:1a:e4:1e:77:a1:28:7b:12:5e:67:1f:
56:52:fb:85:77:05:ca:08:81:b6:c5:63:db:14:23:97:15:4d:
e2:63:e1:58:b7:03:7c:89:f4:0d:f9:14:5b:48:5f:da:16:8e:
b2:17:20:c8:c6:28:74:37:a8:98:b9:1b:4b:fc:ed:9a:58:1e:
ec:22:97:6f:48:d2:30:ba:15:b8:d5:38:75:8a:3d:f2:f1:8f:
f7:31:3e:59:aa:af:05:03:1e:30:60:45:e9:35:0f:b2:e3:ec:
85:8e:7c:6e:5e:8f:4e:07:a2:34:6f:79:46:74:c3:a9:96:c2:
33:e3:97:69:62:cd:53:9c:04:33:2c:12:c5:f5:49:f1:8f:d5:
d6:dc:58:8e:52:3b:ba:58:29:0e:f9:c0:96:95:0f:6a:a1:e4:
e5:7a:38:4d:7f:e2:82:ea:37:5a:a7:de:2d:df:f9:2b:63:fc:
a2:32:d8:de:06:56:5c:f8:2b:13:53:bd:72:9b:83:6d:76:f2:
01:2b:8b:be:81:20:b3:15:69:0e:b3:19:d3:f9:b0:19:6d:2f:
f7:1b:b0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:51:32 2026 by rpki-client