This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json)
Hash identifier: tgOPmE/vWbUq0SYgqf8r7wKZ133ughlEi42pe4Um1ZQ=
Subject key identifier: A2:00:C5:A6:86:B9:4B:84:3E:E9:87:6C:D6:EC:46:90:B8:4F:5C:AF
Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A
Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A
Certificate serial: 029D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
Manifest number: 0295
Signing time: Sun 07 Dec 2025 00:05:09 +0000
Manifest this update: Sun 07 Dec 2025 00:05:08 +0000
Manifest next update: Sun 14 Dec 2025 00:05:08 +0000
Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: xXt7FRV1iJnUj60cq3PPKgNTibx31oWlZi8Ambsa2Gk=)
2: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: /QZn6eJNp1QkpQ2tx9f8l2ROi+aoRJ31N2B9Wc759hU=)
3: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: S7ZRwjfMRdXYDsbLwG2JwWob+OsTSSbwbMXmMEzGwj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl
rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669 (0x29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A
Validity
Not Before: Dec 7 00:05:08 2025 GMT
Not After : Dec 14 00:05:08 2025 GMT
Subject: CN=6934c4b4-6340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9b:a3:45:31:25:98:d2:ef:ef:57:79:d6:b2:
95:8c:0a:d3:b1:74:be:8b:e4:e2:51:62:a9:78:b7:
f2:d0:ec:54:a0:f7:65:0f:4c:db:d4:dc:dd:66:15:
9e:c7:68:bc:f3:04:f4:eb:c2:d6:cf:f9:26:c1:79:
55:62:a4:86:17:63:a9:eb:b1:9f:c5:bd:b3:9f:f9:
87:dd:38:8c:f7:90:90:3a:9c:8f:dd:3f:33:1e:af:
45:e9:2a:18:a4:3a:02:79:8a:05:a4:c8:96:4e:0a:
2e:bb:d8:a1:f9:d7:da:12:6e:7b:87:3b:8d:41:13:
72:a5:85:3a:3c:22:bc:f7:62:5b:1f:83:dd:76:72:
f5:98:42:c3:5c:98:2d:97:f0:a7:aa:65:e3:57:8e:
44:8d:58:b7:18:92:a2:1d:07:a1:d5:14:20:91:c5:
65:6e:90:36:ca:a1:ff:2c:82:ab:50:ee:6c:20:cf:
1d:77:ca:24:7d:83:91:96:ea:4f:bc:a1:e3:78:0e:
bc:e6:1f:a4:d7:9c:cb:c9:7b:5e:ac:14:40:e2:92:
34:16:8c:a6:e9:9a:dc:13:a4:89:ba:1b:fa:bb:e7:
c7:c8:3d:2d:c4:fe:aa:f0:f8:d4:8c:8a:cb:1c:f1:
d1:8c:51:5f:56:c1:ad:8b:3e:90:c2:b5:60:15:6e:
61:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:00:C5:A6:86:B9:4B:84:3E:E9:87:6C:D6:EC:46:90:B8:4F:5C:AF
X509v3 Authority Key Identifier:
keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:e8:95:2b:22:cb:18:8e:dc:50:eb:ac:44:aa:97:81:e2:c6:
7c:88:3c:06:4b:7d:50:b4:0c:27:52:de:4d:5c:0f:1e:a8:20:
25:4b:5e:12:3a:55:b5:04:a2:a0:0e:4a:36:2e:ba:0c:19:af:
b4:d9:68:5e:ea:ca:9b:6b:72:be:d1:77:e3:6f:37:db:3e:a8:
92:a5:76:e6:ff:66:9f:cd:e8:12:61:28:27:2d:1a:2a:73:41:
bc:58:69:50:8a:f2:71:57:2b:49:19:01:02:b7:9e:a9:22:00:
61:28:ee:14:e1:63:6e:a1:92:c5:d2:22:1c:2f:75:6e:e5:db:
df:58:43:af:c2:c0:dd:28:88:3c:e8:f5:06:7f:27:c6:eb:8f:
b0:1c:12:7f:95:52:f5:8d:ce:dc:8d:3b:b6:80:a0:50:92:ae:
55:d0:6a:63:c0:c1:61:e9:21:0a:5d:ab:d0:28:00:66:35:aa:
f1:88:c1:d2:46:74:99:be:cd:ad:a1:a8:cf:db:57:ad:7a:b3:
da:75:56:66:71:66:39:c9:df:4c:db:d9:4a:6c:a6:ee:c8:15:
a8:69:cb:8d:21:ad:83:2a:29:ff:3b:e7:ce:b2:57:c3:a3:05:
36:82:71:98:a1:16:6d:4c:29:5c:4b:a3:8e:cd:14:17:4f:23:
3f:a8:7b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:37:47 2025 by rpki-client