This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
File: LgN_IhyajV_cyIxDyosl1ENrsDk.mft (raw, json)
Hash identifier: ZckEfb90bVC0AAW/tXYdbOMEn2byARWHjVBxv+/qOsE=
Subject key identifier: ED:88:7E:2D:56:A1:8C:61:EC:34:84:BE:99:68:03:02:50:4B:47:F0
Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
Certificate issuer: /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
Manifest number: A3
Signing time: Tue 27 Jan 2026 05:31:51 +0000
Manifest this update: Tue 27 Jan 2026 05:31:50 +0000
Manifest next update: Tue 03 Feb 2026 05:31:50 +0000
Files and hashes: 1: LgN_IhyajV_cyIxDyosl1ENrsDk.crl (hash: QkAMW37VkG41AiUN0jIU8TcCGMRpADN7DuBL+HjQC9w=)
2: D3E69766027B11F0ACFB0B53C4F9AE02.roa (hash: rAyLEuhdwnMPn+ymXVwfBwimmdxQ/627KOj67XHuGHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 05:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Validity
Not Before: Jan 27 05:31:50 2026 GMT
Not After : Feb 3 05:31:50 2026 GMT
Subject: CN=69784dc7-9f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:04:60:1d:dd:20:e6:50:9e:59:89:9f:f1:a7:
e9:d4:8e:63:19:6d:d6:d5:09:33:6e:9e:dd:d9:ca:
2d:76:3b:a7:ca:ed:b0:4f:ee:07:28:fa:e1:bd:bb:
e6:34:1e:88:9f:b4:40:12:11:d4:33:e9:11:a2:df:
6f:71:87:34:6d:06:f8:5a:33:5c:dc:76:4c:5b:a5:
a8:08:55:00:66:1e:e0:1d:cb:0d:0d:01:62:98:3a:
92:ac:75:9e:05:1c:82:be:3f:9d:de:42:f4:3d:29:
de:0f:f6:40:a8:a9:b8:11:f2:c2:79:8d:a7:b3:b5:
b4:5d:63:8b:f7:f2:51:32:cd:ba:ac:85:e7:3c:0d:
e1:79:f0:e9:44:56:28:e1:ee:d2:47:a8:72:db:98:
81:03:aa:18:96:a7:e0:26:93:82:a1:3e:2d:b7:b4:
9d:7f:94:aa:36:0a:2d:41:01:11:c3:c8:45:7b:01:
8e:31:30:59:29:7a:3b:c8:e7:8b:eb:6e:82:e9:8f:
8e:b7:0a:04:06:2e:e8:f7:da:b3:84:b4:87:16:eb:
2f:23:d0:06:ee:0b:41:84:83:83:82:6e:18:22:87:
21:f4:58:eb:ed:6d:8c:0b:db:83:ff:5f:06:d5:23:
54:d0:8a:e7:c4:14:aa:ee:5c:fe:8b:3b:ed:da:fd:
71:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:88:7E:2D:56:A1:8C:61:EC:34:84:BE:99:68:03:02:50:4B:47:F0
X509v3 Authority Key Identifier:
keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:e2:cb:57:1c:ff:8f:9b:4a:f2:95:29:71:9b:19:83:d6:4a:
c2:83:14:4f:a8:9c:26:31:21:3d:42:1a:fb:c6:0f:d6:69:6a:
72:c9:cd:55:6e:5b:65:83:66:eb:b7:e3:1c:76:01:32:ec:b3:
0b:88:0a:19:1d:29:f0:5c:25:f3:73:6c:cc:c8:75:cd:d2:90:
83:47:24:ff:24:74:24:50:a2:2c:9f:a5:54:b3:18:c6:10:e4:
2a:88:bd:fa:80:c1:ab:1f:ce:35:f8:30:84:90:8a:40:6b:84:
2a:c4:27:ad:06:39:3c:60:88:75:1d:53:6e:3c:7a:1e:63:38:
a0:fb:01:c9:77:2d:f2:2a:be:bd:1e:c2:7e:cd:48:5c:25:0f:
20:2e:ca:56:73:93:c2:55:13:78:92:9b:56:dc:dc:4e:bf:f9:
ba:d9:13:f4:e1:a2:d4:62:a5:a5:dd:60:a3:17:a2:29:87:35:
9b:ed:8a:86:4c:3d:78:9b:2a:71:0e:a0:1d:42:4e:d0:0c:21:
35:5a:cb:2e:60:f2:dc:d8:57:0d:fa:b7:86:9f:0a:fc:92:2f:
4a:ac:d3:99:50:86:1a:8e:47:3c:f9:c4:ef:f5:d5:b9:a1:bb:
11:9f:87:e8:34:6b:97:e1:7b:2a:36:cf:d5:cb:29:d6:72:fa:
f8:91:3b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 12:24:20 2026 by rpki-client