This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
File: luWqcIJLjRPdz-YfzJogytZeYME.mft (raw, json)
Hash identifier: gexfSOVm8me26kQ2Gn3GCkU7ZPHpipIXrTINbIwi0ZA=
Subject key identifier: 29:68:F1:11:AB:82:5E:BF:A9:43:24:97:75:A9:DA:E9:7A:0C:64:2D
Authority key identifier: 96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1
Certificate issuer: /CN=A9155688/serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
Certificate serial: 06D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
Manifest number: 06C7
Signing time: Sat 06 Dec 2025 21:05:59 +0000
Manifest this update: Sat 06 Dec 2025 21:05:58 +0000
Manifest next update: Sat 13 Dec 2025 21:05:58 +0000
Files and hashes: 1: luWqcIJLjRPdz-YfzJogytZeYME.crl (hash: 3Y4xDRHaxRKNSN92EK4y2hncd6ySIvsiuBgxwlDoDxY=)
2: 6656B366814C11EB913AEC78C4F9AE02.roa (hash: hWmIjVl3wq2WAFI85MCQWSOZgmGgPc2bb2Ktcia7bs0=)
3: 69FB4E726DC511F08948D952C4F9AE02.roa (hash: 7THfaaI2xr5bkDyTmWI45Sy1DSF1UxvdqjKUDobmspg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl
rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1744 (0x6d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155688, serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
Validity
Not Before: Dec 6 21:05:58 2025 GMT
Not After : Dec 13 21:05:58 2025 GMT
Subject: CN=69349ab7-042c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:3f:8b:c9:a2:51:13:11:08:65:22:42:4b:
bf:5c:6e:16:e3:03:d9:be:9a:25:bf:be:85:f7:1f:
ea:8a:7a:42:35:e5:d9:f2:50:aa:ec:1e:18:ae:57:
81:0c:48:91:a0:68:ad:f9:c8:f4:7b:f7:d2:15:56:
e4:35:28:9e:26:fb:57:5e:6a:02:3f:12:05:d8:7c:
d3:3e:6d:98:ef:c3:a0:f9:81:80:33:03:59:df:81:
ff:0b:5b:0f:ab:bd:c2:54:b8:fc:66:c6:7c:7c:ba:
1b:68:13:fe:ea:bf:f8:86:17:4b:59:ed:9c:77:05:
d9:1d:2f:92:4f:21:1e:67:1c:14:98:57:80:d3:8f:
3d:93:37:26:31:6a:26:12:74:49:09:33:f2:ae:2e:
f2:fd:fb:f5:c6:4e:7a:cf:cb:79:5a:45:ac:53:40:
f7:cd:d8:54:ad:8e:1f:5e:a5:63:3c:c6:13:71:32:
c5:32:d1:f4:38:89:5e:59:c0:18:3e:b6:cc:3f:ff:
83:20:7c:25:f6:d8:99:7c:19:c8:0b:5c:c0:53:b2:
90:16:17:f1:82:61:cd:7b:4d:8e:d6:1b:4d:da:35:
b3:a8:93:68:59:96:6d:7a:c3:86:da:fc:dd:9b:94:
fd:d9:9f:16:12:ab:b2:d7:98:08:36:91:5c:bc:2b:
a7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:68:F1:11:AB:82:5E:BF:A9:43:24:97:75:A9:DA:E9:7A:0C:64:2D
X509v3 Authority Key Identifier:
keyid:96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d1:a2:1b:56:c2:a6:93:60:46:db:27:79:34:20:8f:52:ce:
38:80:7b:93:60:2f:53:99:19:50:6b:23:c5:93:6a:78:1e:6c:
f9:47:05:f8:04:6c:12:11:5b:d6:11:29:e8:16:9e:3d:f3:7c:
3e:d1:2b:4d:1f:10:3e:8f:48:73:a5:2f:0d:d7:9f:a6:c5:6d:
f5:01:35:fe:00:20:28:11:35:9e:b2:2f:82:29:ea:7a:70:be:
42:1a:a8:5a:e1:e6:6d:26:57:58:79:5e:c6:73:2f:9e:a5:5b:
03:91:ec:c1:69:76:7a:aa:86:de:31:ae:4e:34:3c:b8:c9:b9:
cf:70:62:c3:c0:6a:e4:e9:d6:03:25:06:ee:ba:2d:dc:20:e2:
17:cf:43:09:b9:e4:5f:34:c3:6a:a1:39:81:82:f2:1d:9d:ac:
15:11:d8:dd:4f:25:95:13:d9:4c:b7:b5:63:b9:83:70:bb:f5:
51:97:90:87:b1:e2:28:1c:40:14:a8:78:9a:94:fd:93:57:2a:
76:4a:00:24:f8:b2:8d:4d:c3:3e:d9:49:7e:3c:b4:7b:56:2e:
23:5f:6c:e2:4b:ce:fa:e3:b0:4b:a1:b2:07:4c:f6:79:20:79:
d5:f6:a3:b2:71:72:d4:59:23:76:83:ff:6e:80:39:8c:cc:43:
3f:0e:d0:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU2ODgxMTAvBgNVBAUTKDk2RTVBQTcwODI0QjhEMTNERENGRTYxRkNDOUEyMENB
RDY1RTYwQzEwHhcNMjUxMjA2MjEwNTU4WhcNMjUxMjEzMjEwNTU4WjAYMRYwFAYD
VQQDEw02OTM0OWFiNy0wNDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwwU/i8miURMRCGUiQku/XG4W4wPZvpolv76F9x/qinpCNeXZ8lCq7B4YrleB
DEiRoGit+cj0e/fSFVbkNSieJvtXXmoCPxIF2HzTPm2Y78Og+YGAMwNZ34H/C1sP
q73CVLj8ZsZ8fLobaBP+6r/4hhdLWe2cdwXZHS+STyEeZxwUmFeA0489kzcmMWom
EnRJCTPyri7y/fv1xk56z8t5WkWsU0D3zdhUrY4fXqVjPMYTcTLFMtH0OIleWcAY
PrbMP/+DIHwl9tiZfBnIC1zAU7KQFhfxgmHNe02O1htN2jWzqJNoWZZtesOG2vzd
m5T92Z8WEquy15gINpFcvCunIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClo8RGr
gl6/qUMkl3Wp2ul6DGQtMB8GA1UdIwQYMBaAFJblqnCCS40T3c/mH8yaIMrWXmDB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY4OC85RDU2MjlBMDgx
NDIxMUVCQkQ4QzQyODRDNEY5QUUwMi9sdVdxY0lKTGpSUGR6LVlmekpvZ3l0WmVZ
TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x1V3FjSUpMalJQZHotWWZ6Sm9neXRaZVlNRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTY4OC85RDU2MjlBMDgxNDIxMUVCQkQ4QzQyODRDNEY5QUUwMi9sdVdxY0lKTGpS
UGR6LVlmekpvZ3l0WmVZTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCy0aIbVsKmk2BG2yd5NCCPUs44gHuTYC9TmRlQayPFk2p4Hmz5RwX4
BGwSEVvWESnoFp4983w+0StNHxA+j0hzpS8N15+mxW31ATX+ACAoETWesi+CKep6
cL5CGqha4eZtJldYeV7Gcy+epVsDkezBaXZ6qobeMa5ONDy4ybnPcGLDwGrk6dYD
JQbuui3cIOIXz0MJueRfNMNqoTmBgvIdnawVEdjdTyWVE9lMt7VjuYNwu/VRl5CH
seIoHEAUqHialP2TVyp2SgAk+LKNTcM+2Ul+PLR7Vi4jX2ziS87647BLobIHTPZ5
IHnV9qOycXLUWSN2g/9ugDmMzEM/DtCz
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:57:52 2025 by rpki-client