This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
File: lqY1AntkplTYCJRduDWp4ox5SwE.mft (raw, json)
Hash identifier: xEmEEb5ccst4ArjDc+wLObVgeTMvW+9T7ewiyG+ZkgQ=
Subject key identifier: FF:E5:69:D0:1E:E0:9A:83:57:06:22:50:81:93:25:C6:22:F7:FD:80
Authority key identifier: 96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01
Certificate issuer: /CN=A9144391/serialNumber=96A635027B64A654D808945DB835A9E28C794B01
Certificate serial: ED
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
Manifest number: EA
Signing time: Fri 05 Dec 2025 03:27:13 +0000
Manifest this update: Fri 05 Dec 2025 03:27:13 +0000
Manifest next update: Fri 12 Dec 2025 03:27:13 +0000
Files and hashes: 1: lqY1AntkplTYCJRduDWp4ox5SwE.crl (hash: gJ/fZGVEhHfpRtXaQkQ4uHgcQPXEdjcU06a4ojeAezE=)
2: BBA8F97C70AF11EF9C9B2C0EC4F9AE02.roa (hash: EF4oE/lxCN23IMjmuuP02cCqUrL7uq26SoDsV63e3dw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl
rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144391, serialNumber=96A635027B64A654D808945DB835A9E28C794B01
Validity
Not Before: Dec 5 03:27:13 2025 GMT
Not After : Dec 12 03:27:13 2025 GMT
Subject: CN=69325111-9d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:a5:00:38:8b:bd:7d:31:39:a0:63:c2:9b:
b5:8c:22:d4:d9:d2:57:92:ac:43:7c:9a:6a:99:f9:
fc:66:1e:0f:16:30:38:7b:1b:1f:48:6e:86:7e:3b:
1e:62:69:27:1a:1a:85:2b:da:62:c8:d4:e3:59:c4:
58:94:34:60:a0:c7:97:ae:63:b3:d4:cf:27:5c:98:
02:52:dd:0d:ff:2d:91:d0:6b:fb:a8:4e:f9:85:1d:
01:bf:59:02:b1:de:ee:b8:cd:46:f3:30:80:c6:82:
ff:46:cf:24:ec:43:a2:fe:8c:c9:39:c3:4f:4d:ae:
7d:30:2f:81:52:1f:22:ef:b0:24:44:2b:32:e6:68:
c8:28:70:20:f7:33:a9:c9:8e:5a:4e:0f:4e:60:d5:
5f:99:9f:0b:50:81:99:41:78:4b:86:59:1b:58:03:
23:42:21:89:fa:fd:a7:bf:d5:80:97:a6:0b:7e:09:
24:3e:a0:89:83:df:7b:1c:f7:62:34:b3:d8:3e:4b:
c6:72:5e:53:c3:bc:3d:bc:3b:88:ca:fc:b7:7f:0b:
65:81:57:5c:ae:a3:6c:4b:cd:f8:0d:10:ae:80:4d:
88:8a:9d:6b:64:9c:45:cc:5b:d6:6b:78:82:d0:3c:
e8:c4:ad:04:6a:db:be:47:18:6e:03:0f:e9:0b:3d:
bd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E5:69:D0:1E:E0:9A:83:57:06:22:50:81:93:25:C6:22:F7:FD:80
X509v3 Authority Key Identifier:
keyid:96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:73:8a:bf:cc:26:c8:0d:c9:40:6b:f9:f4:a1:a9:b1:0f:3e:
f1:87:5f:dd:32:6e:6e:07:d2:21:b0:63:07:16:ba:5d:6a:98:
12:5a:ff:50:a3:55:66:ad:69:f0:6e:bb:53:36:37:e4:de:f5:
bb:8f:fb:bb:14:ee:ac:5c:d7:b2:18:e0:d0:64:9f:e3:20:c0:
03:0e:1b:eb:97:75:01:f4:dc:a4:c1:d8:27:8d:f7:70:47:82:
86:a3:30:62:2f:59:70:54:aa:49:00:d3:cb:d5:ac:b9:e3:f2:
30:a7:3c:28:2f:ec:33:2c:3a:9a:95:16:b3:98:ce:ea:90:f5:
bb:89:31:ac:97:9a:bc:00:e7:97:06:fd:4e:23:be:13:7a:fa:
6c:9f:e7:2e:9b:dc:3b:54:3a:5a:44:d0:64:b1:36:a4:71:f7:
85:0c:5f:7d:24:1d:d8:1e:4e:85:7b:b6:ec:b2:74:31:a2:75:
71:50:2a:90:bb:4f:64:a3:dd:47:13:68:d9:c4:6c:74:6e:15:
c7:d3:9b:a2:73:1e:7e:ec:4b:3b:0f:07:9a:bc:0b:74:1a:6a:
c4:c6:ae:a7:17:af:1c:ca:79:12:0d:89:d3:bc:81:52:f6:74:
d0:6a:6d:20:93:28:4e:f9:3d:54:65:9e:dc:43:b7:98:77:dc:
d3:a8:42:a9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQzOTExMTAvBgNVBAUTKDk2QTYzNTAyN0I2NEE2NTREODA4OTQ1REI4MzVBOUUy
OEM3OTRCMDEwHhcNMjUxMjA1MDMyNzEzWhcNMjUxMjEyMDMyNzEzWjAYMRYwFAYD
VQQDEw02OTMyNTExMS05ZDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyMKlADiLvX0xOaBjwpu1jCLU2dJXkqxDfJpqmfn8Zh4PFjA4exsfSG6Gfjse
YmknGhqFK9piyNTjWcRYlDRgoMeXrmOz1M8nXJgCUt0N/y2R0Gv7qE75hR0Bv1kC
sd7uuM1G8zCAxoL/Rs8k7EOi/ozJOcNPTa59MC+BUh8i77AkRCsy5mjIKHAg9zOp
yY5aTg9OYNVfmZ8LUIGZQXhLhlkbWAMjQiGJ+v2nv9WAl6YLfgkkPqCJg997HPdi
NLPYPkvGcl5Tw7w9vDuIyvy3fwtlgVdcrqNsS834DRCugE2Iip1rZJxFzFvWa3iC
0DzoxK0Eatu+RxhuAw/pCz290QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/ladAe
4JqDVwYiUIGTJcYi9/2AMB8GA1UdIwQYMBaAFJamNQJ7ZKZU2AiUXbg1qeKMeUsB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDM5MS9GNzIwOUMzMjcw
QUQxMUVGQTg0OEIwNjhDNEY5QUUwMi9scVkxQW50a3BsVFlDSlJkdURXcDRveDVT
d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xxWTFBbnRrcGxUWUNKUmR1RFdwNG94NVN3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDM5MS9GNzIwOUMzMjcwQUQxMUVGQTg0OEIwNjhDNEY5QUUwMi9scVkxQW50a3Bs
VFlDSlJkdURXcDRveDVTd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBcc4q/zCbIDclAa/n0oamxDz7xh1/dMm5uB9IhsGMHFrpdapgSWv9Q
o1VmrWnwbrtTNjfk3vW7j/u7FO6sXNeyGODQZJ/jIMADDhvrl3UB9Nykwdgnjfdw
R4KGozBiL1lwVKpJANPL1ay54/IwpzwoL+wzLDqalRazmM7qkPW7iTGsl5q8AOeX
Bv1OI74Tevpsn+cum9w7VDpaRNBksTakcfeFDF99JB3YHk6Fe7bssnQxonVxUCqQ
u09ko91HE2jZxGx0bhXH05uicx5+7Es7DweavAt0GmrExq6nF68cynkSDYnTvIFS
9nTQam0gkyhO+T1UZZ7cQ7eYd9zTqEKp
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:58:31 2025 by rpki-client