This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json)
Hash identifier: fMUwBj5RX7VRxDTQDsV6a2v2NNiYLM5slnQKf/nXwnc=
Subject key identifier: D7:AE:26:6A:27:72:B5:06:E3:61:6B:EC:C1:32:B0:AC:3F:7A:2C:50
Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A
Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A
Certificate serial: 029C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
Manifest number: 0294
Signing time: Thu 04 Dec 2025 23:54:09 +0000
Manifest this update: Thu 04 Dec 2025 23:54:09 +0000
Manifest next update: Thu 11 Dec 2025 23:54:09 +0000
Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: i+OCXZVTzdDt20mh7AWF2NTWHPmC7wJNL2UBClPjJfk=)
2: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: /QZn6eJNp1QkpQ2tx9f8l2ROi+aoRJ31N2B9Wc759hU=)
3: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: S7ZRwjfMRdXYDsbLwG2JwWob+OsTSSbwbMXmMEzGwj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl
rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:54:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668 (0x29c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A
Validity
Not Before: Dec 4 23:54:09 2025 GMT
Not After : Dec 11 23:54:09 2025 GMT
Subject: CN=69321f21-c060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:c5:3c:7c:90:50:7b:86:ef:81:a0:42:ef:
29:8e:f8:db:75:90:66:bf:ed:9b:9b:37:b4:fa:a5:
0e:da:55:70:8f:e0:0d:e4:97:12:90:33:23:f5:67:
da:74:7d:30:00:1f:ed:99:a6:a4:ca:10:e2:53:a7:
84:41:87:6e:54:2a:47:eb:b9:c6:91:45:9b:52:f1:
af:68:a9:77:06:f2:56:a1:5b:8f:c7:7e:17:cf:ef:
26:56:ab:29:cb:aa:0d:56:4b:33:d5:e7:5e:41:db:
a3:85:97:f9:cc:02:27:b8:c4:04:61:56:9c:59:10:
38:66:2d:d8:ff:28:de:68:9c:89:d8:e9:00:ac:7f:
93:b8:e2:9c:40:a8:31:11:d2:ec:95:d6:0b:98:73:
cf:dc:83:39:10:07:e1:79:f9:65:50:59:15:d0:f1:
d1:dc:90:cd:1d:9d:82:b9:6f:05:25:09:c9:f1:a3:
2d:48:b9:87:83:a8:84:e8:ce:a3:7e:94:cf:59:9f:
34:7f:56:01:a2:9b:4d:89:56:ea:b3:36:68:e4:19:
b3:20:bb:77:88:ca:1f:bf:9a:f2:29:22:11:b6:f5:
2d:df:49:41:b8:3f:46:de:d5:77:2b:33:0f:a6:bd:
1a:ea:57:3e:fd:9f:e4:a9:5c:3f:56:b3:d3:52:89:
4d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AE:26:6A:27:72:B5:06:E3:61:6B:EC:C1:32:B0:AC:3F:7A:2C:50
X509v3 Authority Key Identifier:
keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ac:fb:17:6c:71:d8:0f:d5:76:1f:dd:f2:f1:e5:a1:1e:a0:
4f:12:66:3c:61:97:fd:a0:22:ce:f9:5e:c6:8b:fa:b4:83:29:
94:07:ba:7e:c2:35:4a:7d:b3:41:10:69:c1:a6:6e:51:fe:d8:
14:61:06:d5:6d:06:e2:48:6a:cf:ae:e3:fc:57:7e:12:fa:29:
ce:68:9a:42:54:7e:5c:ff:74:11:97:e9:69:6c:cb:10:06:28:
f3:46:06:19:34:e2:c5:96:eb:b9:bd:8f:8d:f8:a6:09:c1:0c:
f6:e6:22:22:45:aa:3c:92:60:b5:9a:07:5e:6f:88:11:c8:b5:
17:e1:95:6f:9d:48:98:82:87:66:04:39:52:95:6d:f3:c4:b5:
8b:d1:fc:9f:1b:60:82:f8:a3:39:7a:4f:0a:41:14:4f:86:c8:
01:04:df:6f:dc:72:b6:e5:71:07:10:8c:a8:c6:8b:07:ab:42:
dc:4c:c7:50:d8:45:0c:72:31:c5:d7:78:68:6f:16:87:d7:7f:
dd:1e:02:32:9f:59:c8:aa:b9:d6:6f:8a:dd:51:be:ea:72:cb:
78:07:11:33:08:ec:1a:d3:15:2f:80:3f:e9:e8:d6:01:4f:e9:
8a:94:e6:44:37:66:1f:01:ca:11:93:5b:8d:a8:05:7c:fc:4a:
cf:85:40:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:59:19 2025 by rpki-client