This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
File: LpwRxtKUXVL5XyTDndH0GHo0F-U.mft (raw, json)
Hash identifier: Z7bgOk91O3xdZrlMPSTpq2Tcq6RSH6MybonxRglBUCE=
Subject key identifier: A7:7E:A4:49:67:ED:B4:DD:10:C0:E4:71:5E:83:96:AB:BF:B8:22:CB
Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5
Certificate issuer: /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
Manifest number: 0203
Signing time: Fri 05 Dec 2025 00:41:28 +0000
Manifest this update: Fri 05 Dec 2025 00:41:28 +0000
Manifest next update: Fri 12 Dec 2025 00:41:28 +0000
Files and hashes: 1: LpwRxtKUXVL5XyTDndH0GHo0F-U.crl (hash: 1zRDnr2HdfHH+7T7+QedBV95nNxxRrJ1uwSDMseWJy0=)
2: AA12544E5AAF11EF86AAA442C4F9AE02.roa (hash: JysCwCJJxEUrqo1TsnL+HZ8PxWYOSwYy6QcS3aO9jis=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl
rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B31D, serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5
Validity
Not Before: Dec 5 00:41:28 2025 GMT
Not After : Dec 12 00:41:28 2025 GMT
Subject: CN=69322a38-dcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:25:1a:61:b7:05:f5:8f:8b:fb:89:d9:91:
a8:6d:da:9a:59:78:7b:21:ac:20:b6:d6:74:2d:b8:
0c:43:61:24:37:99:b1:42:96:fa:06:55:8d:69:a2:
aa:35:4b:d6:c6:1a:2e:04:ac:65:97:dc:66:77:11:
8c:e7:aa:d2:ca:15:da:11:05:33:56:5e:2f:36:b1:
74:46:1f:2a:15:3c:50:9a:3c:88:27:4f:bb:c2:13:
3f:f6:47:cc:3d:a5:63:6a:8c:86:dc:02:24:cf:cf:
aa:06:2c:52:46:30:7d:f8:c4:06:2f:30:49:81:b6:
01:6c:1d:9f:b2:bb:cd:95:fd:ae:aa:ec:ae:11:fd:
30:6c:7c:59:c5:4b:cf:3b:4b:6e:03:af:ed:59:e2:
39:f8:a7:07:e8:34:10:b4:ae:cd:6f:c0:ae:b8:27:
ee:2f:24:e4:58:32:da:34:41:23:71:f3:5e:77:1c:
0d:96:27:86:b0:34:cb:0e:b6:27:fc:91:58:48:7b:
e2:1f:00:7d:70:71:2b:46:97:2a:3a:4e:74:a8:a3:
58:fa:8e:ec:8d:ff:e2:9d:c4:63:eb:e9:7a:02:cf:
af:b7:16:e3:44:26:df:28:a0:1f:56:ae:70:4e:32:
f8:ef:c0:d5:e7:88:3f:63:3d:a5:8b:91:fc:10:21:
3e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7E:A4:49:67:ED:B4:DD:10:C0:E4:71:5E:83:96:AB:BF:B8:22:CB
X509v3 Authority Key Identifier:
keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:37:00:6e:40:ce:21:20:c5:19:b4:2d:60:e5:e9:f2:e3:74:
cb:c4:fb:b7:c9:11:b1:3c:ec:5e:29:84:33:c1:85:88:a8:b0:
55:a4:cd:4a:76:7d:6f:8a:05:e7:51:d1:92:a5:67:47:ee:13:
8b:ed:11:9f:15:08:4c:dd:4f:aa:47:28:79:a1:d9:39:8c:c9:
95:34:56:dd:01:ae:e2:da:a4:86:92:4c:45:e4:41:5a:3b:e1:
f7:b9:46:05:fc:47:2f:66:c5:b9:d1:03:bf:38:b0:34:71:a6:
18:db:e5:fd:72:10:4d:c8:48:b4:ea:9a:7e:82:21:95:81:9f:
c5:9d:9f:ec:1f:9b:84:c1:b4:38:4b:4a:60:55:bb:09:f7:89:
67:4c:1a:26:21:97:60:8c:79:1c:d7:62:83:81:43:9c:5d:48:
1b:14:a4:8c:f4:cd:e8:44:ab:73:9f:a0:42:ed:6e:a5:ca:45:
a7:b2:0c:bd:8b:70:b9:1f:9c:e8:6f:be:83:dd:91:29:00:64:
c1:34:4f:f1:37:6e:34:c8:8b:a9:d2:da:7b:4c:08:b0:48:43:
e5:63:ee:58:da:54:78:0f:54:db:b0:9b:17:b8:ed:db:69:ab:
09:43:c1:af:50:4b:32:8e:ed:b2:ef:db:77:16:2c:b5:a1:5a:
47:e5:cb:ec
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IzMUQxMTAvBgNVBAUTKDJFOUMxMUM2RDI5NDVENTJGOTVGMjRDMzlERDFGNDE4
N0EzNDE3RTUwHhcNMjUxMjA1MDA0MTI4WhcNMjUxMjEyMDA0MTI4WjAYMRYwFAYD
VQQDEw02OTMyMmEzOC1kY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvIAlGmG3BfWPi/uJ2ZGobdqaWXh7IawgttZ0LbgMQ2EkN5mxQpb6BlWNaaKq
NUvWxhouBKxll9xmdxGM56rSyhXaEQUzVl4vNrF0Rh8qFTxQmjyIJ0+7whM/9kfM
PaVjaoyG3AIkz8+qBixSRjB9+MQGLzBJgbYBbB2fsrvNlf2uquyuEf0wbHxZxUvP
O0tuA6/tWeI5+KcH6DQQtK7Nb8CuuCfuLyTkWDLaNEEjcfNedxwNlieGsDTLDrYn
/JFYSHviHwB9cHErRpcqOk50qKNY+o7sjf/incRj6+l6As+vtxbjRCbfKKAfVq5w
TjL478DV54g/Yz2li5H8ECE+FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKd+pEln
7bTdEMDkcV6Dlqu/uCLLMB8GA1UdIwQYMBaAFC6cEcbSlF1S+V8kw53R9Bh6NBfl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjMxRC9FN0U3RUM1MEJE
NjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhWTDVYeVREbmRIMEdIbzBG
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xwd1J4dEtVWFZMNVh5VERuZEgwR0hvMEYtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjMxRC9FN0U3RUM1MEJENjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhW
TDVYeVREbmRIMEdIbzBGLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBwNwBuQM4hIMUZtC1g5eny43TLxPu3yRGxPOxeKYQzwYWIqLBVpM1K
dn1vigXnUdGSpWdH7hOL7RGfFQhM3U+qRyh5odk5jMmVNFbdAa7i2qSGkkxF5EFa
O+H3uUYF/EcvZsW50QO/OLA0caYY2+X9chBNyEi06pp+giGVgZ/FnZ/sH5uEwbQ4
S0pgVbsJ94lnTBomIZdgjHkc12KDgUOcXUgbFKSM9M3oRKtzn6BC7W6lykWnsgy9
i3C5H5zob76D3ZEpAGTBNE/xN240yIup0tp7TAiwSEPlY+5Y2lR4D1TbsJsXuO3b
aasJQ8GvUEsyju2y79t3Fiy1oVpH5cvs
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:03:46 2025 by rpki-client