This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
File: LLjB-eoMe1qANok4hADMb9iwSdI.mft (raw, json)
Hash identifier: Qlp13Q4JdLE+qTN7VkztgTqMH2CGG8nBYWPhyLaj224=
Subject key identifier: 42:E1:71:2C:65:CD:B7:E1:A6:33:59:C2:31:A0:F5:6B:0D:31:3D:D7
Authority key identifier: 2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2
Certificate issuer: /CN=A911015D/serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2
Certificate serial: 01B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
Manifest number: 01B5
Signing time: Fri 05 Dec 2025 08:35:22 +0000
Manifest this update: Fri 05 Dec 2025 08:35:22 +0000
Manifest next update: Fri 12 Dec 2025 08:35:22 +0000
Files and hashes: 1: LLjB-eoMe1qANok4hADMb9iwSdI.crl (hash: Na2NgTvdrgAUuM6bnfTAJ5W6RGmA+xYwh54hFkT9Hi8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl
rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 08:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911015D, serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2
Validity
Not Before: Dec 5 08:35:22 2025 GMT
Not After : Dec 12 08:35:22 2025 GMT
Subject: CN=6932994a-a4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:49:64:a4:a5:d7:1f:aa:0e:8a:ad:99:a6:c7:
5e:33:c3:80:a7:ac:fe:62:7f:48:de:7b:a2:e7:0b:
7a:b1:1a:f3:20:3a:53:75:a7:a1:bc:9f:c8:e0:3e:
96:88:6a:fb:30:11:a1:cd:81:85:98:ec:30:d3:85:
b1:41:36:08:bb:ff:91:b3:f1:7e:37:7e:5c:fd:6e:
b5:a2:27:cc:44:dc:98:1d:12:f6:ad:65:32:d4:1f:
37:4a:e5:3f:75:b0:89:e3:14:02:3c:53:0f:c4:20:
42:ba:d3:5e:16:1d:4a:37:75:d8:10:49:a0:1c:a3:
4b:42:db:58:72:85:3f:f3:4a:fd:f2:64:a4:c0:11:
b0:8a:64:ec:04:20:78:c0:21:18:7d:53:6d:da:ba:
66:13:17:51:47:e4:03:e9:97:71:39:df:29:53:92:
ba:51:05:c4:4a:d7:60:0b:f6:02:71:ae:a5:4d:34:
78:6a:af:02:19:70:76:cb:fe:03:3d:1a:aa:1c:f8:
83:25:fc:97:e4:55:86:29:a1:73:52:8f:7c:29:3d:
12:7a:8b:54:b9:03:3e:25:28:f6:48:e4:83:f6:45:
24:d1:01:08:19:d9:1a:67:9f:b8:18:4b:eb:1a:e1:
36:e0:44:ce:9c:e6:42:cc:da:14:e9:8c:f1:a5:e1:
59:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E1:71:2C:65:CD:B7:E1:A6:33:59:C2:31:A0:F5:6B:0D:31:3D:D7
X509v3 Authority Key Identifier:
keyid:2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:87:5b:bc:dd:b2:19:e7:a6:22:d0:77:ea:b1:a0:47:71:85:
9d:f8:bb:1a:92:fe:b9:dd:1f:d7:72:17:a9:f8:3f:5a:89:bd:
7a:e5:80:91:5c:41:f5:32:f8:ed:a2:59:f7:5b:f1:be:74:dc:
6b:7a:fc:4b:ee:fa:29:61:80:24:ef:c8:40:70:22:1d:6e:36:
22:3b:9d:68:b3:fb:c7:1a:d1:e3:14:0d:fe:0a:78:f6:de:0e:
7d:70:b1:5e:8d:92:26:f8:f9:dc:ae:03:81:e5:64:5e:40:7e:
0e:d8:9e:d1:61:b7:a0:d9:c9:fe:72:09:67:37:2e:41:03:8b:
f8:9f:58:21:a6:54:02:f1:ce:7b:c6:97:b0:91:6a:84:53:d3:
c5:f4:05:b1:6a:24:93:f0:82:c8:1e:63:02:af:7b:e6:3f:29:
72:17:50:b7:2f:58:59:6a:64:b2:f1:d2:f8:d1:0b:fe:68:d5:
0e:64:2c:ef:cf:a3:e5:38:c2:7a:91:ac:fb:02:0f:00:ed:5b:
57:bd:2c:99:52:12:70:33:ee:19:07:d8:83:7c:9b:02:53:5d:
19:42:0c:6c:eb:1a:fc:6c:e4:f7:23:2f:39:5f:41:75:32:30:
d2:cd:bd:aa:f6:8d:22:46:ba:21:48:81:1c:d1:d6:7f:ef:d5:
89:0c:3b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:37:31 2025 by rpki-client