This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft
File: lFCLKqsDKqM_mgAoJYI_mrhccBI.mft (raw, json)
Hash identifier: msdXtYsrWdFRDZHPEOvNJBT8D47KNE2waoUYcMzmHN8=
Subject key identifier: 2A:94:02:02:9F:68:3D:98:6E:8A:AF:34:D3:9A:D3:E1:06:CC:75:3A
Authority key identifier: 94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12
Certificate issuer: /CN=A9125532/serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012
Certificate serial: 7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft
Manifest number: 7B
Signing time: Fri 05 Dec 2025 04:42:51 +0000
Manifest this update: Fri 05 Dec 2025 04:42:50 +0000
Manifest next update: Fri 12 Dec 2025 04:42:50 +0000
Files and hashes: 1: lFCLKqsDKqM_mgAoJYI_mrhccBI.crl (hash: tJdHxUAY/9Jm5bXXX6omhf1WNi4cltz518dlR7zbjdQ=)
2: CB08B0C019C811F0958CB24EC4F9AE02.roa (hash: y8xxOVA8cK5Sc+i2B8yZIUqOuhkVjbuKi4OA78/BPFQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl
rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125532, serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012
Validity
Not Before: Dec 5 04:42:50 2025 GMT
Not After : Dec 12 04:42:50 2025 GMT
Subject: CN=693262ca-0f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d2:e1:d0:51:f5:df:ac:96:94:b5:19:ae:c6:
97:e3:45:ea:47:73:b3:d2:55:bc:08:9c:1d:66:10:
1b:71:85:11:c6:44:97:d9:5d:b3:52:b5:f2:e0:4e:
19:c3:9d:e5:a8:68:19:7a:8f:e3:3d:6d:7b:7b:e1:
be:bc:8d:3e:03:30:00:36:49:9f:65:0c:da:c4:f3:
f4:cd:4b:13:70:93:2d:2d:c6:ba:e8:7d:f0:cd:23:
10:af:66:a9:5f:7b:b7:78:07:d9:fc:0c:8f:97:00:
ff:e3:b7:17:ca:c3:00:11:11:36:2b:89:06:c6:84:
0f:29:e0:36:d5:9d:74:6a:14:c7:81:14:8a:6b:0e:
d6:08:f4:42:d9:18:76:d7:c5:b0:07:21:f8:26:f1:
80:4e:81:c9:af:88:c6:76:73:12:eb:db:19:57:f1:
0c:cf:a5:43:56:02:8a:92:05:c2:84:75:70:6b:71:
31:79:33:3a:0b:3a:3d:a0:f6:4b:e3:e5:b4:a5:60:
9b:57:e0:7d:dc:86:fa:6b:9e:50:9a:15:3c:49:f4:
7b:f1:d0:3f:49:6c:23:39:39:c2:a4:a7:a6:8c:98:
2e:49:38:88:59:fa:ae:f5:cf:fc:0a:c2:60:46:d6:
29:f7:a2:87:2a:d6:78:7f:83:53:25:5e:ee:28:36:
43:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:94:02:02:9F:68:3D:98:6E:8A:AF:34:D3:9A:D3:E1:06:CC:75:3A
X509v3 Authority Key Identifier:
keyid:94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:e0:26:b5:7f:f5:c7:d1:34:be:a6:56:34:00:a5:55:24:a9:
a6:97:54:57:ea:c9:3e:7a:00:fa:b7:b6:da:e7:e1:f4:bb:9e:
c0:5a:34:56:db:f5:53:65:3a:54:71:10:be:1c:e6:da:ae:ae:
c5:62:e6:57:b1:62:09:0e:88:fd:4d:66:8b:f6:26:b0:ee:74:
32:7c:90:c3:3e:bb:37:46:d4:5d:18:f9:fb:9d:79:d6:76:19:
30:ce:34:f8:fa:e5:19:fb:4c:e6:26:28:d3:98:5e:73:59:34:
80:4a:ed:83:c3:c6:12:dc:80:ae:2d:55:7b:63:dc:80:cf:5e:
33:da:ef:3c:60:26:25:eb:c5:12:7e:5c:4e:80:22:f3:35:7e:
6c:39:27:36:af:3d:24:2a:a9:f9:df:3c:da:e0:fa:1e:e3:47:
ae:78:57:62:96:d7:ec:7d:05:3d:ba:54:57:cf:3b:dd:e9:88:
c2:e4:ec:61:c1:53:ed:70:26:70:1e:85:8e:05:cd:54:98:6c:
62:cc:23:5d:c5:06:f5:8c:45:ee:91:e3:af:cc:68:78:95:51:
57:fc:14:38:c5:f6:38:f8:35:1c:28:09:d9:cc:19:bd:50:21:
cd:3b:bb:63:8a:17:db:e5:1f:e9:94:4b:53:5f:e0:4f:a9:c9:
e3:45:9e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:35:52 2025 by rpki-client