This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
File: Lv74nW1YMOr9plod8ZRuR6FEpBk.mft (raw, json)
Hash identifier: wa3fRBgOPbfdzGJnjxJMglTOLfXlzhjYYU8pLc6gNX8=
Subject key identifier: 1F:D8:9C:79:11:12:05:5C:1E:52:05:FB:F5:96:C0:ED:4A:D9:97:D6
Authority key identifier: 2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19
Certificate issuer: /CN=A9123F2F/serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
Manifest number: 87
Signing time: Sun 11 Jan 2026 05:45:37 +0000
Manifest this update: Sun 11 Jan 2026 05:45:36 +0000
Manifest next update: Sun 18 Jan 2026 05:45:36 +0000
Files and hashes: 1: Lv74nW1YMOr9plod8ZRuR6FEpBk.crl (hash: FlAyin/q+nLWnW0bM2YiTaMxseHHICTUaYZfE3msXyw=)
2: E7930D061E6111F098E32F79C4F9AE02.roa (hash: iqZbom0z7ztlqp3GEXt64uCWXDCec+1Lyn/WcRebU04=)
3: 72AD814686F911F0A97FA80EC4F9AE02.roa (hash: 7POo0MTD3bXJ+GgbQIE+3wN42OgF1nbCb45FXgCxa98=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl
rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 05:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123F2F, serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
Validity
Not Before: Jan 11 05:45:36 2026 GMT
Not After : Jan 18 05:45:36 2026 GMT
Subject: CN=69633901-fea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:53:7e:1b:65:fc:f4:21:c8:e2:2e:42:2b:b7:
f0:0b:bf:72:4e:34:b2:37:8d:37:e7:cc:e1:c1:28:
5a:45:d2:8d:f8:fe:e7:6b:86:b3:b5:9c:1f:1b:c3:
3f:38:43:3c:7f:de:73:5c:b4:ab:83:a9:30:3d:66:
a4:e4:c0:12:b2:fb:9d:64:2e:ce:65:bc:66:86:d8:
3b:bd:33:e8:09:2c:ca:29:4c:dc:48:c1:1c:21:bc:
01:f9:5a:66:89:c1:74:7d:f1:9c:23:8b:0b:7c:af:
0a:a0:b7:58:90:33:23:2b:bd:97:6c:af:83:c5:60:
70:be:d1:26:ec:60:db:9f:5e:14:04:e3:a5:ad:a3:
19:c9:3f:72:96:31:9b:e9:6b:4f:c5:7a:2e:9e:c2:
06:89:34:97:d6:be:3c:1c:f7:47:78:fd:af:a4:49:
c7:cb:6a:37:a5:98:76:08:32:ad:54:55:6c:64:ec:
79:b3:14:50:48:26:fa:61:2c:7e:59:35:8b:65:7c:
c9:dd:3a:c1:c0:63:3a:e2:49:04:ef:51:3a:26:a6:
a7:7d:b8:66:b3:ec:c4:03:db:c9:a3:0e:f9:51:ef:
a8:27:41:e9:6b:ee:07:94:95:17:f5:e9:fe:58:9c:
07:52:48:e4:d1:ec:d1:ab:54:5a:01:51:53:92:62:
97:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D8:9C:79:11:12:05:5C:1E:52:05:FB:F5:96:C0:ED:4A:D9:97:D6
X509v3 Authority Key Identifier:
keyid:2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:84:6b:0c:14:31:46:04:de:78:c5:2c:b1:ca:bf:28:81:dd:
3b:58:d6:9d:2e:a9:b3:9c:49:b5:f5:e9:a7:a6:39:1d:59:ea:
ef:42:7b:56:18:5e:00:46:d7:90:0b:a3:b4:af:17:fb:cc:04:
72:53:26:49:70:d2:e6:f8:8e:b9:40:9f:bb:89:fd:b3:b1:71:
cb:b7:03:96:b2:19:e8:f9:58:ee:d1:32:86:10:d9:35:35:c7:
c3:9f:0a:c9:d5:ae:58:4d:93:ca:20:b5:93:dd:4c:8a:de:3b:
5d:81:1f:91:e8:56:2b:ba:e4:01:b8:9f:bf:55:c7:9b:1b:4b:
e8:3c:7d:34:49:26:0b:a5:a0:fa:37:e1:d4:94:4c:51:e8:38:
6a:b1:0c:b1:cb:c7:34:fa:2a:2f:b0:ed:a4:bd:e1:24:a9:32:
96:28:f0:41:ff:b7:c0:96:a2:73:68:30:70:3a:7e:68:c9:7b:
98:0b:bc:6f:ec:88:61:0b:bd:50:be:99:41:0e:67:42:fc:60:
93:b1:0d:af:bd:7f:03:b9:e9:77:c2:f1:c3:43:2f:aa:6a:77:
66:25:1b:1e:55:4c:15:ab:5c:10:29:26:b3:f7:00:e7:31:4d:
ba:d6:f6:ce:75:b2:e5:6a:9c:1d:e3:7d:d4:6d:c4:e5:a3:e2:
7f:c3:c9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:35:12 2026 by rpki-client