This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json)
Hash identifier: AqcdMoHZppQ0ZGrYO5Kg4ABrqQZWXb/38g167Tp/ydc=
Subject key identifier: 85:23:23:49:06:0F:42:45:6F:3A:D5:A9:B5:30:83:6C:A3:4E:FE:11
Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A
Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A
Certificate serial: 02B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
Manifest number: 02AF
Signing time: Tue 27 Jan 2026 00:33:47 +0000
Manifest this update: Tue 27 Jan 2026 00:33:47 +0000
Manifest next update: Tue 03 Feb 2026 00:33:47 +0000
Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: rs3CZD+XCpmZHg9rI4anrD5ht9B9QmyLbb/8ei1EXOA=)
2: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: /QZn6eJNp1QkpQ2tx9f8l2ROi+aoRJ31N2B9Wc759hU=)
3: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: S7ZRwjfMRdXYDsbLwG2JwWob+OsTSSbwbMXmMEzGwj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl
rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 00:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695 (0x2b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A
Validity
Not Before: Jan 27 00:33:47 2026 GMT
Not After : Feb 3 00:33:47 2026 GMT
Subject: CN=697807eb-f2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:b4:05:3e:88:6f:e1:97:22:50:81:45:b6:
27:24:d5:93:eb:63:6a:77:ff:97:4e:ee:ed:a6:88:
f5:b3:d8:32:47:aa:f2:5a:dc:7b:e4:eb:71:24:9f:
0d:41:45:12:7c:36:ab:da:3a:c5:c5:55:52:ad:78:
77:95:13:36:84:7a:f8:46:27:01:de:f5:a9:c4:af:
68:68:e8:e7:c6:1b:9a:ce:81:e1:0f:38:f9:41:91:
e2:c5:14:a1:1c:73:0e:1f:8a:3f:d3:45:11:3a:6e:
6d:50:81:46:09:7e:df:83:b3:07:b9:fd:f2:00:75:
aa:90:f1:be:af:88:4d:cd:41:38:a3:e9:6f:49:5a:
99:b5:26:67:ae:0d:42:12:f3:0c:e3:3e:c4:2a:df:
49:8b:3b:03:10:51:50:ca:4e:ba:3c:95:78:75:e6:
71:1f:f8:29:a0:5e:35:fd:53:8b:0d:dd:82:75:11:
88:2b:37:d8:e8:d3:01:e2:ff:79:77:07:7b:df:08:
ec:0b:c0:ca:e4:12:13:b1:5a:57:10:c4:32:84:88:
62:1b:93:6d:f6:97:39:b8:44:ea:17:7b:b0:8b:70:
a1:87:6c:a0:e7:70:45:54:fc:21:63:48:05:d5:42:
09:76:c1:07:29:93:28:d8:40:45:f0:45:24:c3:20:
59:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:23:23:49:06:0F:42:45:6F:3A:D5:A9:B5:30:83:6C:A3:4E:FE:11
X509v3 Authority Key Identifier:
keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8f:f0:e8:15:6b:cd:b6:31:7c:03:98:e0:b6:ff:37:50:89:
0f:fd:c9:85:65:79:db:b2:d1:1c:d9:0c:81:db:23:1a:1f:bb:
3e:c2:1c:9b:64:2d:e2:13:ca:ee:13:17:62:39:ac:95:55:4c:
07:d7:d1:78:a1:f4:23:84:5a:e3:45:24:47:d5:95:da:61:d4:
1c:fd:33:f6:28:41:84:57:93:31:e1:51:67:08:3e:11:bd:20:
b5:65:b3:6d:5a:9a:96:65:91:27:e6:fb:0a:91:5d:f7:07:71:
89:9c:a6:7a:f9:4c:21:f9:95:10:51:7d:8a:e8:b6:1b:95:87:
ee:54:9a:b6:20:5f:46:36:4e:39:17:e9:e8:01:49:85:4a:19:
2a:c7:c7:ed:03:fa:2e:f3:b1:5b:1a:02:46:54:66:c1:20:f4:
c3:2b:98:ad:9a:c1:8b:62:7f:69:0e:43:9d:de:fb:df:de:71:
40:4b:f3:5e:cc:ed:2c:00:9e:74:39:32:20:5a:7b:48:c5:d8:
1f:c2:b4:7c:fc:45:e0:4c:73:2e:fb:e0:dd:15:2d:12:0a:89:
28:43:ac:60:5c:b1:13:d3:db:ce:e7:b0:a2:28:c9:5e:98:fa:
36:a2:2a:e6:53:b0:1a:8b:06:2c:ca:fb:28:d0:2c:eb:69:e1:
5a:be:24:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE4RTExMTAvBgNVBAUTKDJEMENCMEU5OEY1NjJFOTM2NkQ1QTk5NUZCMjZGNjY2
QThDMEE5NUEwHhcNMjYwMTI3MDAzMzQ3WhcNMjYwMjAzMDAzMzQ3WjAYMRYwFAYD
VQQDDA02OTc4MDdlYi1mMmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAumS0BT6Ib+GXIlCBRbYnJNWT62Nqd/+XTu7tpoj1s9gyR6ryWtx75OtxJJ8N
QUUSfDar2jrFxVVSrXh3lRM2hHr4RicB3vWpxK9oaOjnxhuazoHhDzj5QZHixRSh
HHMOH4o/00UROm5tUIFGCX7fg7MHuf3yAHWqkPG+r4hNzUE4o+lvSVqZtSZnrg1C
EvMM4z7EKt9JizsDEFFQyk66PJV4deZxH/gpoF41/VOLDd2CdRGIKzfY6NMB4v95
dwd73wjsC8DK5BITsVpXEMQyhIhiG5Nt9pc5uETqF3uwi3Chh2yg53BFVPwhY0gF
1UIJdsEHKZMo2EBF8EUkwyBZiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUjI0kG
D0JFbzrVqbUwg2yjTv4RMB8GA1UdIwQYMBaAFC0MsOmPVi6TZtWplfsm9maowKla
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThFMS8xMTMxNjYyQzI4
NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xwTm0xYW1WLXliMlpxakFx
Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xReXc2WTlXTHBObTFhbVYteWIyWnFqQXFWby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MThFMS8xMTMxNjYyQzI4NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xw
Tm0xYW1WLXliMlpxakFxVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrj/DoFWvNtjF8A5jgtv83UIkP/cmFZXnbstEc2QyB2yMaH7s+whyb
ZC3iE8ruExdiOayVVUwH19F4ofQjhFrjRSRH1ZXaYdQc/TP2KEGEV5Mx4VFnCD4R
vSC1ZbNtWpqWZZEn5vsKkV33B3GJnKZ6+Uwh+ZUQUX2K6LYblYfuVJq2IF9GNk45
F+noAUmFShkqx8ftA/ou87FbGgJGVGbBIPTDK5itmsGLYn9pDkOd3vvf3nFAS/Ne
zO0sAJ50OTIgWntIxdgfwrR8/EXgTHMu++DdFS0SCokoQ6xgXLET09vO57CiKMle
mPo2oirmU7AaiwYsyvso0CzraeFaviSD
-----END CERTIFICATE-----
Generated at Tue Jan 27 17:53:05 2026 by rpki-client