This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json)
Hash identifier: Pu6z9GSaATHPOmW9Pd0erMkWT8zRKbqUDbfWz8BGUog=
Subject key identifier: F5:8A:CA:67:3D:C3:74:1E:1A:E4:67:BB:16:9D:41:CA:62:6B:0F:A3
Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9
Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9
Certificate serial: 01A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
Manifest number: 019C
Signing time: Fri 05 Dec 2025 01:36:00 +0000
Manifest this update: Fri 05 Dec 2025 01:35:59 +0000
Manifest next update: Fri 12 Dec 2025 01:35:59 +0000
Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: LLkHc+oiFIkSqOTqqISLJ+YppxJNcpiiL+PPJhw35KI=)
2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: PHAPD39R0/+5V+WCmlH3xcXfFFqLnGp5Euy8i5sqtnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl
rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416 (0x1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91374BB, serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9
Validity
Not Before: Dec 5 01:35:59 2025 GMT
Not After : Dec 12 01:35:59 2025 GMT
Subject: CN=69323700-6d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ea:87:5a:7d:4b:a9:28:a9:03:9d:78:f6:dd:
cf:6f:31:a9:b6:49:93:97:8c:fe:60:bd:78:09:56:
de:82:70:e7:24:87:f8:98:ae:69:8f:45:a3:33:a6:
2a:66:38:24:d6:15:aa:3b:ce:44:b7:3e:16:e8:5d:
03:5d:16:5d:a7:7e:48:4d:55:2a:79:7a:e1:4e:b5:
e1:b8:57:60:e6:23:c0:8f:d4:aa:40:b9:43:c6:6b:
2a:0e:5b:ff:36:20:be:06:0e:a3:0f:6e:7e:64:59:
93:a8:ec:7e:5b:a9:4d:7e:c0:81:f1:e8:0b:f1:98:
0b:44:ba:5e:e7:fa:21:ab:54:8b:68:35:06:51:54:
4a:46:4a:50:5d:2b:d3:b0:ea:aa:3f:c0:c2:07:1d:
d0:ce:ed:b8:1a:79:31:af:4b:1a:cf:69:a3:c1:36:
a3:ae:db:fe:f7:e4:29:42:91:8a:30:d1:67:a3:a6:
eb:86:50:97:d6:ae:0d:12:b0:2f:f4:5a:0a:87:8c:
b1:8d:94:95:6c:03:d7:67:0f:9e:f7:ef:72:98:b5:
4c:c7:da:f0:d7:ca:a1:cf:ac:7d:ec:d7:6e:93:d6:
a9:a8:5d:a4:78:50:42:36:6f:e8:95:92:65:d9:38:
d8:a6:c7:74:ad:73:01:8f:1f:02:e1:11:a9:20:a1:
5b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8A:CA:67:3D:C3:74:1E:1A:E4:67:BB:16:9D:41:CA:62:6B:0F:A3
X509v3 Authority Key Identifier:
keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:da:06:52:b6:8b:a7:4a:4e:3b:64:e1:ec:3e:54:78:50:7b:
1f:69:29:36:e6:12:08:81:3b:77:a0:dd:92:0a:36:5f:c9:d2:
af:4c:58:e2:11:80:d4:ce:81:94:8b:32:61:15:19:fd:fa:6e:
cb:11:25:c0:9c:dc:5a:92:0b:64:32:d3:e1:1c:f6:cb:c9:db:
26:ad:39:88:2d:03:ad:89:72:96:f3:cf:f6:70:40:c7:6e:ed:
e8:16:26:b4:a7:68:b7:ac:07:fc:91:04:c6:1e:ca:39:55:87:
5d:10:9a:ae:f2:8e:35:a5:c8:3b:0d:10:c3:ee:d4:c4:74:50:
ff:66:f3:a6:92:d7:59:d0:0a:af:43:65:6f:24:24:56:a2:7d:
67:28:81:a2:c1:57:1a:d2:82:f7:26:19:2d:e3:f9:c2:97:59:
ee:18:59:1c:ce:24:e2:fd:f9:b7:d4:ed:ce:bd:5a:67:01:4a:
f0:85:cc:b8:2d:1b:7d:90:fa:1d:02:ef:49:de:1c:61:b6:70:
b2:91:bb:6f:fe:3d:28:e2:22:0c:39:7d:37:59:23:f5:73:9a:
e8:d0:06:59:8b:1a:68:e7:df:54:6e:b6:d4:1a:aa:a9:e0:ff:
7c:4b:ce:46:bb:66:67:80:df:b6:67:94:56:dc:40:2e:e5:7c:
dc:f8:ae:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:21:23 2025 by rpki-client