This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft
File: LtTacwW1lNyVt6BBDZrLKN4pIL8.mft (raw, json)
Hash identifier: Ud92oFEIk8G81fZTN0RvHv8Nn3hh7WEx59z6IgQLnds=
Subject key identifier: C5:9A:A3:0C:BE:7F:1B:D1:B0:25:A2:A2:7B:81:E5:1F:06:56:17:8D
Authority key identifier: 2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF
Certificate issuer: /CN=A91454E4/serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF
Certificate serial: 04EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft
Manifest number: 04E1
Signing time: Thu 04 Dec 2025 22:20:45 +0000
Manifest this update: Thu 04 Dec 2025 22:20:45 +0000
Manifest next update: Thu 11 Dec 2025 22:20:45 +0000
Files and hashes: 1: LtTacwW1lNyVt6BBDZrLKN4pIL8.crl (hash: JQVC0jfgPfuY16SDoGihH8b/1C/BBMeCF/oD4SZ4q4o=)
2: A88BB9A01CA011EFB3F91015C4F9AE02.roa (hash: XmiVLeP2/s1DW27hoy1zX73fTUJ6HYcFrkZxidVKlRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl
rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1259 (0x4eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91454E4, serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF
Validity
Not Before: Dec 4 22:20:45 2025 GMT
Not After : Dec 11 22:20:45 2025 GMT
Subject: CN=6932093d-2a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:34:98:97:6a:99:09:a1:2c:ed:37:50:8f:e8:
08:7e:85:e9:fc:73:5d:78:0f:5e:d8:79:81:b4:e2:
ef:d7:a9:1f:ad:cc:ba:81:11:97:c4:54:c5:bc:40:
21:dc:06:24:ca:cf:62:7e:99:e2:c1:9a:99:bd:4c:
d5:25:2f:9f:c9:61:40:5e:59:0a:c9:26:68:18:b7:
fb:60:3c:16:ef:ba:03:ce:ea:4c:0b:28:d3:ac:ff:
de:31:1b:a9:ea:3c:ea:48:67:12:1f:bd:ec:98:dd:
cd:a4:b6:ae:92:f8:a9:d4:df:b5:b3:38:ab:3e:b3:
75:36:28:98:d8:da:7a:05:82:bd:11:bb:6e:68:a1:
b7:ec:e2:bc:93:cb:9a:a1:90:77:bf:17:48:1b:6b:
83:0e:8c:b8:86:03:33:ac:95:90:78:0d:f9:92:c0:
4b:ea:88:60:7a:2d:c1:d6:67:8f:1c:10:16:d1:7e:
c1:51:d9:d3:ae:d4:6e:47:f4:90:80:f9:52:99:26:
20:80:f2:3d:f1:42:d3:f2:61:a1:ba:6c:08:47:6e:
52:b3:24:e4:cd:54:c2:da:ab:57:83:fb:87:70:f1:
c7:b3:2c:95:c5:5e:d5:ae:6c:25:fa:b1:b6:ec:9c:
89:28:bc:bc:b0:74:4a:62:f7:1b:21:57:af:59:44:
dc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9A:A3:0C:BE:7F:1B:D1:B0:25:A2:A2:7B:81:E5:1F:06:56:17:8D
X509v3 Authority Key Identifier:
keyid:2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:0e:3c:67:a9:80:b8:fa:14:e6:c3:0d:d0:af:86:59:14:11:
cc:54:bb:3c:63:0f:0e:0b:76:be:06:d5:4b:ec:87:8f:3c:d5:
44:47:dc:eb:57:9f:9b:47:eb:0c:61:77:c8:c8:9a:ea:98:af:
79:7b:f8:e5:30:4e:5a:f5:7d:4f:12:ee:87:8d:43:10:c8:2c:
9a:a5:64:56:0d:68:58:19:44:05:6c:c3:71:13:a4:a7:94:ff:
33:48:21:39:72:ff:66:16:03:18:49:88:7b:c3:17:98:56:ac:
ff:1e:ab:db:17:8c:30:43:c0:d9:2b:a7:ae:a5:0e:8b:cb:21:
f9:d6:0a:92:ff:59:c9:72:c3:c7:82:99:30:f9:b2:96:bf:25:
55:12:bb:f9:cf:a0:1e:7f:0a:2b:3f:08:43:63:92:7e:6d:78:
13:e5:a6:a7:86:11:0d:f3:d3:b1:61:04:27:0b:85:96:16:f4:
df:e2:3c:0f:60:1f:73:ab:ce:c5:70:ef:40:89:af:0c:f5:56:
1a:84:3c:6e:85:ca:6e:ac:c6:21:b8:e5:42:6c:cc:22:7c:cd:
17:18:60:11:c7:b3:8c:0a:22:c3:a5:4f:e0:09:73:bc:61:5a:
5a:af:bc:a2:2f:a2:32:77:69:ce:3a:26:f7:2b:f6:66:fe:48:
39:56:de:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU0RTQxMTAvBgNVBAUTKDJFRDREQTczMDVCNTk0REM5NUI3QTA0MTBEOUFDQjI4
REUyOTIwQkYwHhcNMjUxMjA0MjIyMDQ1WhcNMjUxMjExMjIyMDQ1WjAYMRYwFAYD
VQQDEw02OTMyMDkzZC0yYTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwjSYl2qZCaEs7TdQj+gIfoXp/HNdeA9e2HmBtOLv16kfrcy6gRGXxFTFvEAh
3AYkys9ifpniwZqZvUzVJS+fyWFAXlkKySZoGLf7YDwW77oDzupMCyjTrP/eMRup
6jzqSGcSH73smN3NpLaukvip1N+1szirPrN1NiiY2Np6BYK9EbtuaKG37OK8k8ua
oZB3vxdIG2uDDoy4hgMzrJWQeA35ksBL6ohgei3B1mePHBAW0X7BUdnTrtRuR/SQ
gPlSmSYggPI98ULT8mGhumwIR25SsyTkzVTC2qtXg/uHcPHHsyyVxV7Vrmwl+rG2
7JyJKLy8sHRKYvcbIVevWUTctQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWaowy+
fxvRsCWionuB5R8GVheNMB8GA1UdIwQYMBaAFC7U2nMFtZTclbegQQ2ayyjeKSC/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRFNC83NzE0QzY3QTQz
ODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxOeVZ0NkJCRFpyTEtONHBJ
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0x0VGFjd1cxbE55VnQ2QkJEWnJMS040cElMOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTRFNC83NzE0QzY3QTQzODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxO
eVZ0NkJCRFpyTEtONHBJTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCJDjxnqYC4+hTmww3Qr4ZZFBHMVLs8Yw8OC3a+BtVL7IePPNVER9zr
V5+bR+sMYXfIyJrqmK95e/jlME5a9X1PEu6HjUMQyCyapWRWDWhYGUQFbMNxE6Sn
lP8zSCE5cv9mFgMYSYh7wxeYVqz/HqvbF4wwQ8DZK6eupQ6LyyH51gqS/1nJcsPH
gpkw+bKWvyVVErv5z6AefworPwhDY5J+bXgT5aanhhEN89OxYQQnC4WWFvTf4jwP
YB9zq87FcO9Aia8M9VYahDxuhcpurMYhuOVCbMwifM0XGGARx7OMCiLDpU/gCXO8
YVpar7yiL6Iyd2nOOib3K/Zm/kg5Vt6Q
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:54:47 2025 by rpki-client