This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
File: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft (raw, json)
Hash identifier: X1cgpJzsik1s2DIEvQ+fKkOX3Cz6qX8jcQOVDA0eSdk=
Subject key identifier: CE:FD:22:4A:62:BB:E3:CE:01:24:ED:5A:B9:87:6B:34:56:F5:29:5C
Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70
Certificate issuer: /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
Certificate serial: 0609
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
Manifest number: 05F0
Signing time: Thu 04 Dec 2025 21:43:31 +0000
Manifest this update: Thu 04 Dec 2025 21:43:31 +0000
Manifest next update: Thu 11 Dec 2025 21:43:31 +0000
Files and hashes: 1: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl (hash: DP4/AdpCzm7Ond7nKoARA41PUCYP+scm2SglgaVrNFI=)
2: E9C2CC6C29CC11F086897744C4F9AE02.roa (hash: hA/qYpYBMY/Kd41Yn5++b5Q+qTaDQ7FCreW/lO2fSUE=)
3: B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa (hash: +jBGaqvKM/p3gFY9j31Ktn8G8q5l2wqpkIruownzwFg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl
rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1545 (0x609)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
Validity
Not Before: Dec 4 21:43:31 2025 GMT
Not After : Dec 11 21:43:31 2025 GMT
Subject: CN=69320083-4eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:da:ab:67:e7:28:d3:a0:b6:59:68:df:d4:
0d:a9:36:74:73:da:ca:b1:74:3d:c9:8e:91:25:91:
51:db:77:0a:2e:d7:d4:ed:09:ff:76:89:e9:a6:99:
d4:9f:5d:8d:0c:66:e1:f2:5d:82:dd:2f:db:61:c7:
59:e1:f3:36:8d:11:b6:7d:c9:59:f4:68:18:bc:92:
4f:1f:f0:19:f8:ed:4c:63:df:68:21:01:45:77:9a:
38:62:6b:0c:b1:9e:9d:04:ec:90:40:90:0d:46:c0:
0f:13:26:74:9c:ef:c2:3f:94:f5:c4:9d:af:b1:e1:
82:18:79:aa:81:03:c8:fe:03:53:d0:84:15:32:5e:
b2:b6:47:95:3d:c0:91:5f:65:97:76:9d:24:0a:97:
54:0e:e3:75:27:ce:3e:ab:78:bc:64:6e:2c:60:1d:
89:63:92:17:d9:e8:2b:1c:60:d5:52:87:ab:56:77:
92:b4:9b:ca:ae:14:1f:8d:5e:92:ac:38:89:ad:3f:
03:4e:14:80:cb:73:6c:a4:cc:35:78:13:e4:29:ae:
d2:6a:d9:f4:6b:2e:d6:41:c1:e7:8c:0b:4a:23:2d:
4b:ea:ce:c0:40:ec:e1:fc:3f:7a:b9:34:0b:e0:77:
97:27:77:72:5e:6d:f4:ac:ca:45:55:de:ec:2e:25:
0f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FD:22:4A:62:BB:E3:CE:01:24:ED:5A:B9:87:6B:34:56:F5:29:5C
X509v3 Authority Key Identifier:
keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:98:cb:52:ba:57:ec:98:35:84:20:82:b8:be:a9:56:34:81:
27:6c:31:8d:40:7b:c0:cb:ec:d4:a8:23:67:61:f2:e4:3a:e4:
95:66:7d:95:21:8e:93:02:9e:f8:eb:da:c5:22:eb:0c:44:f9:
be:17:b8:e7:ae:47:73:7e:05:8a:40:86:12:a2:da:d3:0f:e4:
3c:85:92:dd:67:31:23:de:7f:0b:62:b9:fd:6d:3d:d4:84:92:
a7:55:a6:52:80:26:24:92:97:cd:a1:f1:29:4d:58:32:86:d5:
91:cb:a7:97:9c:c3:5a:76:42:15:cd:31:38:49:34:df:34:82:
49:0a:75:e0:d2:a3:bf:b1:5c:b8:bf:c0:84:c2:13:52:9b:a5:
4a:93:ac:ca:6c:20:30:ff:7d:a0:2e:74:64:a8:53:ea:8f:5c:
73:fc:89:ac:7b:81:18:74:0d:b3:eb:2b:81:3f:d4:2e:6a:f1:
3d:21:28:4a:ee:71:27:60:81:54:5a:c3:14:9a:50:52:d5:2c:
90:d6:c1:f5:7f:80:f6:bd:d9:b7:88:54:01:36:6c:39:31:27:
b8:ab:ba:40:92:21:18:4b:b9:dc:d4:f6:a9:6e:fd:a1:e4:da:
3d:b7:56:60:6d:05:13:e6:fc:d3:1d:08:a4:a2:26:c9:01:65:
87:dc:32:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:09:15 2025 by rpki-client