This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft
File: LNlBunzrUf5uFl4_yYBm1amZ5P4.mft (raw, json)
Hash identifier: c9t62SwOAz7tMw1ZpYZTIFHn83mdNvziXfxYK9xWbkI=
Subject key identifier: 42:2F:CE:08:38:42:74:EE:D9:E4:32:E4:89:85:38:4A:CD:EE:68:87
Authority key identifier: 2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE
Certificate issuer: /CN=A912B635/serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE
Certificate serial: 06A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft
Manifest number: 069A
Signing time: Sat 06 Dec 2025 21:17:00 +0000
Manifest this update: Sat 06 Dec 2025 21:16:59 +0000
Manifest next update: Sat 13 Dec 2025 21:16:59 +0000
Files and hashes: 1: LNlBunzrUf5uFl4_yYBm1amZ5P4.crl (hash: jsEinfM71J7OMIZI3uKiVnAgN4rd8brh8szT3nOA9GQ=)
2: D44C47FE91D311EBBE8C7D54C4F9AE02.roa (hash: av33nLUX0GDrb2SC++ABulsmTvMJTYGoXhRNYXEv87I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl
rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:16:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1696 (0x6a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B635, serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE
Validity
Not Before: Dec 6 21:16:59 2025 GMT
Not After : Dec 13 21:16:59 2025 GMT
Subject: CN=69349d4c-f29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:28:ae:65:6e:3f:3c:ea:9f:95:60:3e:b2:
ee:2e:3a:0d:3e:b7:dc:08:15:bc:cc:ec:5c:fa:32:
f9:d2:16:cc:d6:25:73:b7:49:2c:bd:54:6c:51:33:
de:e3:43:3d:6c:7e:08:1e:70:79:0c:79:36:4b:b5:
aa:f3:96:96:9b:b1:34:a5:6b:52:f3:e2:1d:c4:02:
63:51:74:51:00:c1:9c:4f:86:78:27:8a:13:42:03:
5d:91:f4:e2:b4:b7:3d:ba:c2:0d:42:55:18:39:bf:
5a:e0:5d:6e:f8:9e:39:c5:c0:a2:8f:f1:e3:3c:a4:
03:7c:df:96:40:a5:c6:5e:39:39:84:64:fe:dd:53:
f6:b5:37:c4:d3:46:b3:47:49:8c:d8:2c:b5:95:e7:
6e:c1:7d:3d:a2:a1:59:46:59:04:ae:ed:b0:17:0f:
74:b2:10:08:61:74:f9:64:f1:ec:78:bf:2a:22:ad:
28:12:e4:62:bd:2b:99:f1:05:51:07:2c:6d:d6:9f:
8e:56:27:89:8c:45:26:44:53:a9:72:6b:cb:73:a4:
47:ed:7b:76:2d:e7:45:5e:06:45:f4:3a:1b:27:95:
88:c5:ce:9d:f9:bb:5c:02:a7:bc:77:3e:b6:a2:79:
a9:b7:e3:54:e9:82:44:79:95:04:99:63:53:1e:11:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2F:CE:08:38:42:74:EE:D9:E4:32:E4:89:85:38:4A:CD:EE:68:87
X509v3 Authority Key Identifier:
keyid:2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:75:be:08:ab:9e:20:a7:84:48:e9:95:53:78:ef:12:c2:96:
9f:29:26:b4:ab:cd:dc:56:e0:90:db:14:ff:04:e2:63:64:c7:
35:ce:7f:8a:c9:b9:50:54:af:3a:9c:eb:88:a4:09:9e:fb:a6:
d6:7f:53:85:b1:85:fb:74:43:be:28:58:52:2d:82:b9:c2:da:
77:58:8f:23:24:8d:e2:3e:7f:79:a4:bb:cd:e5:65:96:62:fb:
a4:46:35:50:e1:79:bc:c3:0b:e5:40:46:37:cd:92:84:e0:fe:
a3:d9:3d:fa:cc:3c:c1:38:cc:91:7d:4d:c5:7e:54:db:ee:2a:
bd:a5:6e:9b:d5:83:e3:fc:81:d5:46:10:b5:99:0c:2d:58:3b:
48:1c:24:09:32:a7:89:69:4c:91:06:b4:3d:9b:ca:d4:e7:cc:
cf:cf:6a:4c:29:6d:11:6d:13:bf:b2:4d:e1:81:d1:53:b4:2e:
e7:7d:c7:e4:7d:4e:83:4f:0d:a8:a9:59:d4:eb:5b:f9:82:78:
f7:5c:13:cc:8b:12:03:74:c6:98:09:d2:05:e5:06:a1:1d:bc:
cb:97:0b:12:21:be:35:41:07:1e:5b:44:75:8a:aa:2a:21:08:
7d:64:cd:b0:4e:f1:7f:0d:34:94:e4:31:24:a7:e2:d4:7e:01:
0f:03:40:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:45:36 2025 by rpki-client