This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
File: Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft (raw, json)
Hash identifier: bLfKroYoGE/aoLh0WteAEGZ4qShbSI/HjWhCl6elgmA=
Subject key identifier: DB:31:73:FA:A6:C6:11:54:1A:BF:28:5D:7A:99:83:F9:AE:87:62:69
Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1
Certificate issuer: /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
Certificate serial: 3566
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
Manifest number: 352B
Signing time: Sat 06 Dec 2025 14:15:32 +0000
Manifest this update: Sat 06 Dec 2025 14:15:32 +0000
Manifest next update: Sat 13 Dec 2025 14:15:32 +0000
Files and hashes: 1: Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl (hash: NTjwypEjmu77jzYajulhQtlP28f+bfJhQEHSWIMnQQI=)
2: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (hash: kZ7lGqUSa7QDbdQn5Phtug9wEvqAopDp24gkxncZqms=)
3: 6A45D74E118811EE88E9FE46C4F9AE02.roa (hash: gPXM355jFI8rfBytnJ40meI4jOctz96q7otlI3dOULI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl
rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:15:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13670 (0x3566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325FD, serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
Validity
Not Before: Dec 6 14:15:32 2025 GMT
Not After : Dec 13 14:15:32 2025 GMT
Subject: CN=69343a84-024c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:bb:73:6e:1b:9a:2d:78:d6:a9:c9:d0:ba:
32:16:8d:68:eb:46:7a:57:42:a9:1c:3e:cf:9b:e2:
5a:e6:47:98:ea:be:d4:45:22:d0:fb:10:f7:60:4f:
f4:1e:18:20:71:59:66:07:09:ed:92:41:57:e6:36:
7f:ec:c7:df:35:39:99:5d:fe:0d:54:b7:37:e8:2b:
a7:7c:8f:0d:3f:b1:d5:9e:a0:ef:44:1a:42:97:47:
30:49:cc:49:4c:84:ed:ec:ea:1d:28:dd:ac:be:a9:
33:42:23:0f:ae:a4:31:49:d4:a3:6e:06:29:54:ad:
cb:eb:56:93:89:4d:ea:c0:5b:95:31:c0:f8:03:60:
53:bd:a4:f4:80:67:c4:6c:8b:56:31:76:4f:38:6c:
82:79:bf:89:ce:cd:f5:f2:f4:68:94:a9:f7:fe:68:
6a:89:d5:83:11:3b:aa:f1:57:1d:df:ab:ba:dc:0c:
d8:03:e4:cd:30:7b:eb:7a:b3:d3:f0:bd:71:71:fc:
4e:b1:bd:67:3a:71:0b:c9:a3:5d:e3:5e:6f:93:04:
9c:18:c5:f7:56:fb:2a:82:3c:3a:81:54:97:fe:f8:
bd:3f:b0:1b:b3:53:4e:2e:f1:ba:8b:1b:1d:f5:4b:
03:6c:d4:19:62:b9:ce:5d:aa:db:43:af:59:f8:9d:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:31:73:FA:A6:C6:11:54:1A:BF:28:5D:7A:99:83:F9:AE:87:62:69
X509v3 Authority Key Identifier:
keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:74:49:ea:df:14:d5:22:e9:d0:1b:7b:59:78:d5:0d:b1:27:
4b:74:c3:62:32:fe:5c:a2:62:28:d7:fc:57:35:32:27:cf:23:
06:c4:c9:8d:85:b1:b4:f3:86:29:f7:8a:44:96:2f:7d:10:8f:
9e:76:e9:28:19:08:7c:17:cb:c4:55:91:c5:c3:d7:0f:10:54:
09:3d:6c:d7:e1:c1:73:45:3f:bf:05:8d:40:fd:6f:27:89:4b:
cd:e8:5c:22:0a:8d:fb:a2:e4:60:f0:fe:2b:fc:cd:2e:23:d8:
96:f9:15:cb:a5:6f:ee:07:de:a3:71:e8:c8:0b:27:70:36:f4:
46:23:ba:51:3e:2d:41:e5:54:06:4e:24:00:76:33:5a:96:f4:
26:a3:e9:f1:87:73:0b:48:f1:c4:9d:06:0a:2d:25:a4:95:8b:
f7:df:a7:12:ec:f7:ea:cf:c8:c7:ce:c3:43:4c:62:64:d9:d1:
ab:41:6d:33:1b:42:2a:ea:ac:1f:ac:fc:0c:7d:ce:5b:68:ac:
b7:2c:27:2a:49:1b:bb:63:50:c4:e9:9f:0c:d6:08:26:1a:60:
1d:17:1e:e8:7d:dd:df:c7:15:41:85:e3:f3:9a:60:2b:5d:89:
e6:b7:3d:54:15:5a:5b:06:65:c6:c3:40:4e:a7:77:38:1a:14:
56:f3:6a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:46:11 2025 by rpki-client