This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
File: jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json)
Hash identifier: tGPQp5MhUVRiY1rLKyKu/H6nowzQD17OMTd95EklvDs=
Subject key identifier: 7A:3E:F9:45:9A:28:B3:3E:A8:11:E6:89:D5:19:A2:21:A3:24:31:6A
Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
Manifest number: 0171
Signing time: Fri 09 Jan 2026 03:13:04 +0000
Manifest this update: Fri 09 Jan 2026 03:13:04 +0000
Manifest next update: Fri 16 Jan 2026 03:13:04 +0000
Files and hashes: 1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: uJHhxyUEjyFnZLR8+CNMsg69CKLsDosLsOaTxhKuOz8=)
2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: qU4UvdAU1Y7BCQ9LZ+rlqRsb/zU78HiYK5hb24/5BaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Jan 2026 03:13:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Validity
Not Before: Jan 9 03:13:04 2026 GMT
Not After : Jan 16 03:13:04 2026 GMT
Subject: CN=69607240-2a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:2b:39:a4:90:b0:d0:d4:90:39:b4:f1:b1:
6e:2c:c6:b4:21:8c:a4:a6:3b:6b:29:95:dd:f1:04:
16:91:46:62:78:c6:1d:6e:57:fb:59:a4:a1:da:cf:
a5:21:04:4a:14:ba:e0:b0:04:23:05:bc:e8:b3:9f:
ab:41:6a:74:95:2b:47:69:43:6a:56:d2:f6:38:22:
97:3f:8d:c2:fa:7b:de:0d:c9:7b:70:0e:da:19:e8:
45:64:23:0d:30:33:09:85:e4:01:17:29:dd:60:0a:
12:e8:85:b4:a2:98:62:1d:27:0e:eb:9c:8d:8c:50:
84:02:13:b5:2f:a2:5a:ef:bf:58:2c:81:86:67:cb:
fd:6e:f3:2e:c2:0f:ab:fd:c7:2b:8c:26:d2:21:56:
59:cc:bf:ba:df:ad:2d:9f:87:5d:a8:3d:e7:07:80:
71:d1:8d:25:dc:d2:4c:d2:aa:b3:e3:91:de:b1:88:
00:1b:ae:86:ea:5b:bb:0f:c2:d1:20:2f:36:7e:86:
7a:93:9e:b8:7d:75:54:35:e1:42:aa:76:9c:1e:90:
9f:d8:28:54:77:28:c1:5a:01:3c:6d:0e:2a:80:4c:
09:c9:4a:b1:a2:d0:7c:58:25:11:80:4f:a6:c3:88:
40:63:cc:06:74:e1:d0:aa:99:00:57:43:a8:50:b5:
5c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3E:F9:45:9A:28:B3:3E:A8:11:E6:89:D5:19:A2:21:A3:24:31:6A
X509v3 Authority Key Identifier:
keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:c5:0b:6f:03:d0:20:94:2c:ff:d4:02:c5:f2:87:42:0e:15:
df:1e:b5:85:da:5b:d9:b1:6a:74:17:ea:00:0b:aa:20:73:4d:
4d:0a:ef:d0:73:d1:5f:ca:0e:cf:2e:19:03:9b:26:8c:94:a4:
3e:9d:69:3e:2b:22:16:90:cb:94:76:25:b0:ce:19:ce:6d:ad:
2f:80:a1:f6:dd:72:e3:17:fa:90:6a:ba:6d:c7:73:46:71:a7:
68:ef:d5:6f:8e:0b:5d:42:ba:3f:33:4f:fc:73:4f:e3:bd:77:
be:b9:87:f0:41:3e:15:ef:b7:3f:27:d7:b4:e0:07:ff:50:3e:
e1:f0:1a:ba:0d:fe:dd:a5:98:e4:ca:f9:3f:63:f5:ac:1f:95:
65:47:8f:df:8a:6a:5c:fd:ab:02:00:72:de:bf:d8:6e:f3:97:
f2:f4:45:36:c7:1b:f7:fe:39:b1:73:13:81:28:98:d7:69:d6:
9a:6c:61:62:ca:44:66:e9:9d:94:91:ea:9b:27:41:97:ee:51:
cc:fb:d2:cc:d3:ce:6b:f3:20:40:81:c9:dc:3e:55:7d:d0:cf:
b0:78:a2:0a:ac:2d:41:2f:37:5c:b4:73:cf:d4:5a:aa:86:32:
f5:95:7b:c4:fb:11:a8:cc:fc:b5:cf:28:b2:5d:1b:a2:7c:db:
d7:2b:ca:0a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTczQjgxMTAvBgNVBAUTKDhDQjk2RjBEQ0E4NEIyMEI0OUEwNzEyOEU3NzczNzIw
NThBNjkwNTMwHhcNMjYwMTA5MDMxMzA0WhcNMjYwMTE2MDMxMzA0WjAYMRYwFAYD
VQQDDA02OTYwNzI0MC0yYTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAllArOaSQsNDUkDm08bFuLMa0IYykpjtrKZXd8QQWkUZieMYdblf7WaSh2s+l
IQRKFLrgsAQjBbzos5+rQWp0lStHaUNqVtL2OCKXP43C+nveDcl7cA7aGehFZCMN
MDMJheQBFyndYAoS6IW0ophiHScO65yNjFCEAhO1L6Ja779YLIGGZ8v9bvMuwg+r
/ccrjCbSIVZZzL+6360tn4ddqD3nB4Bx0Y0l3NJM0qqz45HesYgAG66G6lu7D8LR
IC82foZ6k564fXVUNeFCqnacHpCf2ChUdyjBWgE8bQ4qgEwJyUqxotB8WCURgE+m
w4hAY8wGdOHQqpkAV0OoULVcPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHo++UWa
KLM+qBHmidUZoiGjJDFqMB8GA1UdIwQYMBaAFIy5bw3KhLILSaBxKOd3NyBYppBT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzNCOC84NEE0QTEwQ0I4
QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNndEpvSEVvNTNjM0lGaW1r
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pMbHZEY3FFc2d0Sm9IRW81M2MzSUZpbWtGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NzNCOC84NEE0QTEwQ0I4QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNn
dEpvSEVvNTNjM0lGaW1rRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkxQtvA9AglCz/1ALF8odCDhXfHrWF2lvZsWp0F+oAC6ogc01NCu/Q
c9Ffyg7PLhkDmyaMlKQ+nWk+KyIWkMuUdiWwzhnOba0vgKH23XLjF/qQarptx3NG
cado79VvjgtdQro/M0/8c0/jvXe+uYfwQT4V77c/J9e04Af/UD7h8Bq6Df7dpZjk
yvk/Y/WsH5VlR4/fimpc/asCAHLev9hu85fy9EU2xxv3/jmxcxOBKJjXadaabGFi
ykRm6Z2UkeqbJ0GX7lHM+9LM085r8yBAgcncPlV90M+weKIKrC1BLzdctHPP1Fqq
hjL1lXvE+xGozPy1zyiyXRuifNvXK8oK
-----END CERTIFICATE-----
Generated at Fri Jan 9 16:30:00 2026 by rpki-client