This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft
File: 1l59EGxXG0LrbOL4iHLeery6-7g.mft (raw, json)
Hash identifier: Y84GL033eH2FknJ3XrbsRNQ/1JkXzJmlhKYbN10pQcA=
Subject key identifier: C0:26:91:B8:DA:8B:CB:D2:4A:B2:A2:C3:A6:EE:4E:F7:6D:2D:32:F8
Authority key identifier: D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8
Certificate issuer: /CN=A913C34F/serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8
Certificate serial: 32BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft
Manifest number: 32BA
Signing time: Thu 04 Dec 2025 15:14:28 +0000
Manifest this update: Thu 04 Dec 2025 15:14:27 +0000
Manifest next update: Thu 11 Dec 2025 15:14:27 +0000
Files and hashes: 1: 1l59EGxXG0LrbOL4iHLeery6-7g.crl (hash: LEuYlOpsAxiCV18U2JPN62QOwINV0VJQiUrTzcxVqkQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl
rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 15:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12986 (0x32ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C34F, serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8
Validity
Not Before: Dec 4 15:14:27 2025 GMT
Not After : Dec 11 15:14:27 2025 GMT
Subject: CN=6931a554-364b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:ff:85:c2:9b:fc:f6:e2:9e:d6:4c:21:34:
f3:a2:33:02:4e:2e:0c:4e:07:8f:c6:c4:95:91:8c:
a6:e0:3f:78:d5:88:92:03:f9:7d:b6:35:17:be:b6:
b0:5f:0d:b4:5b:f7:e3:9d:06:26:89:60:52:f6:2a:
c0:5d:65:ae:cc:4e:c2:27:03:96:cc:49:1c:76:6e:
c5:80:bd:59:a1:29:b2:d0:1c:8b:1e:27:2e:de:f4:
a6:2f:98:80:7e:2f:fe:92:7c:0c:e5:1f:ed:3c:e8:
22:e9:37:32:3d:12:15:ba:bc:57:a8:ee:3e:57:c0:
23:cd:0d:31:61:7e:da:ba:9c:7a:52:4f:dc:33:e1:
4a:cd:c2:47:af:fd:c3:cb:8e:6f:6a:f9:04:18:6b:
d2:91:d2:c9:c4:7a:bc:48:c3:e8:b4:fb:84:75:dc:
87:f8:bf:98:46:a3:3c:6b:fd:b4:51:71:61:1c:b2:
aa:bf:f6:79:57:a5:f0:17:c3:57:24:66:0c:bd:02:
14:be:fb:70:e2:7d:c5:33:8f:9f:06:e1:bb:3b:f9:
f5:84:fe:c2:47:6f:d1:95:4a:40:c5:cc:8f:32:ee:
ba:b3:bd:62:9c:a3:cb:d5:8d:93:0e:a6:34:5e:0f:
dc:27:93:b1:ee:70:13:1b:f5:5f:58:c6:6f:86:5f:
a9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:26:91:B8:DA:8B:CB:D2:4A:B2:A2:C3:A6:EE:4E:F7:6D:2D:32:F8
X509v3 Authority Key Identifier:
keyid:D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:29:c0:c9:84:9b:b9:0c:68:e5:80:00:38:53:30:5e:2f:6e:
33:61:dc:2d:ac:96:d6:7b:4a:46:e5:69:b0:01:71:5c:11:06:
6f:01:2d:cf:67:e2:78:b2:28:fc:88:2f:8d:57:e4:e2:ff:67:
b8:81:6f:bb:ed:59:2a:74:22:2b:2d:7f:71:fc:39:2f:b8:76:
be:c3:7e:14:e9:f3:18:19:a2:7f:b2:db:2d:3a:51:39:56:bc:
43:e5:01:62:2b:b2:c3:22:2e:58:8f:89:cc:3c:04:97:fa:db:
79:20:3c:94:ac:0c:f4:b1:20:bb:bd:ef:d5:0e:bd:ca:95:e8:
af:9f:15:a1:da:7f:3d:29:c4:1e:e3:11:1a:37:cb:cc:15:2b:
7c:95:a6:1f:54:35:f0:9e:ec:ed:cd:74:a8:59:d0:4b:29:38:
49:44:23:23:ac:20:ce:57:45:76:f2:bd:69:e8:87:7a:b4:e2:
6c:3a:16:43:36:0c:02:5e:e6:9c:c7:10:d7:b3:43:6b:84:e5:
de:1b:8f:9a:91:df:2e:af:e5:76:9d:d8:f1:96:46:9c:bc:6d:
a7:0f:18:ad:45:1c:7a:d9:39:d4:15:b0:70:d2:a9:48:1e:a1:
76:9d:88:38:80:0b:e1:43:e4:58:e9:bd:be:f2:99:90:90:de:
22:97:e5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:33:02 2025 by rpki-client