This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft
File: LRgGu3n37GppfLCmWiHlyxIv3nY.mft (raw, json)
Hash identifier: 0a6H1M4sJyAV98Bgi+hWJHKmeCYPe4UJPJzgDR8MLio=
Subject key identifier: EF:9D:D9:EF:5B:80:B4:D2:95:F3:4B:DB:D2:CC:44:82:C6:6C:1D:DC
Authority key identifier: 2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76
Certificate issuer: /CN=A9165A58/serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft
Manifest number: E0
Signing time: Fri 05 Dec 2025 03:31:28 +0000
Manifest this update: Fri 05 Dec 2025 03:31:27 +0000
Manifest next update: Fri 12 Dec 2025 03:31:27 +0000
Files and hashes: 1: LRgGu3n37GppfLCmWiHlyxIv3nY.crl (hash: ieXN3TmssSmUrRvGeuQW4Kh4iSVydh3W7r8reGznnEQ=)
2: BDBEED967C0011EFB63C7076C4F9AE02.roa (hash: GquKmtZlMDJv9N8EiV5JY0q+tYOnvaRmJYnuHr77saU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl
rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165A58, serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76
Validity
Not Before: Dec 5 03:31:27 2025 GMT
Not After : Dec 12 03:31:27 2025 GMT
Subject: CN=69325210-3460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:66:73:8b:27:91:37:57:b4:61:ae:3b:fd:
8e:f5:83:96:5a:0c:49:f0:42:85:21:0f:ae:8a:6b:
f7:2b:12:94:40:9b:6f:93:6b:3c:40:f3:7d:f2:29:
07:f3:db:75:ee:3e:de:62:18:6d:cf:ab:b1:cf:af:
c0:6d:a1:8a:0e:a0:8a:af:11:80:d1:a5:94:8a:63:
4c:8f:e0:ea:d3:e5:3a:41:45:bd:b4:75:5d:90:ba:
48:49:84:b4:22:8b:7d:31:9b:75:fe:2a:b0:54:39:
d3:60:28:81:3c:a2:bc:94:01:20:94:7b:e2:57:42:
75:a3:4c:77:64:8a:d2:31:81:96:4e:ec:a5:f4:dd:
53:ee:86:c8:57:4f:b5:53:9b:41:33:68:3a:52:19:
c8:c5:58:79:12:76:49:6e:b4:ea:c3:c8:71:9d:86:
53:4f:25:12:93:3c:9e:bf:c0:54:dc:60:23:59:38:
dd:4c:15:ea:af:4c:be:b5:65:89:d7:1c:2d:9f:a7:
2c:41:d3:6b:6e:1f:24:e1:17:e4:13:df:af:7f:cb:
43:7c:ba:fe:11:9e:b8:11:e5:f7:61:54:52:f3:bf:
ee:83:7e:ea:46:1d:c9:0b:d1:eb:b5:95:20:25:6c:
16:a3:f2:fb:3d:b0:ee:d7:13:7e:de:c7:18:56:41:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9D:D9:EF:5B:80:B4:D2:95:F3:4B:DB:D2:CC:44:82:C6:6C:1D:DC
X509v3 Authority Key Identifier:
keyid:2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:55:1b:79:08:65:d7:3b:3e:60:01:5e:86:4a:3f:22:1a:ed:
9e:29:72:73:1b:00:d1:91:e1:33:4c:cb:ce:4f:e1:71:ba:97:
7a:cd:53:d9:38:d1:a1:1f:cd:fc:41:df:ba:87:a3:1c:ae:e9:
96:5a:b7:62:3b:a9:bd:31:d4:c2:96:f9:df:3a:a1:b2:24:9d:
f1:30:83:f8:89:cd:bf:74:e0:f2:c8:01:9d:32:40:c3:d7:d1:
eb:a2:a4:cc:77:7d:2d:fa:f9:56:eb:81:c8:47:8b:0d:39:c1:
db:67:d3:54:d2:31:31:4b:10:d0:17:12:88:4d:64:4e:49:65:
d1:0a:ae:04:5f:02:6c:b9:eb:c2:85:45:15:c4:00:40:9b:91:
56:21:9b:b4:2f:d6:7e:41:30:36:f5:a2:3f:25:d6:7c:78:1c:
34:cf:cd:c3:b6:b3:df:0e:cc:d9:fa:65:65:f0:16:5e:a1:47:
df:1f:ae:be:41:b3:0d:b6:42:cc:96:24:08:dc:a4:a7:07:54:
d9:63:65:3a:4e:7e:ce:37:d7:dd:38:3f:44:70:68:2c:e2:49:
25:4e:38:48:38:47:2c:7e:93:cd:24:88:b7:5d:ba:6c:39:7a:
e3:ad:09:45:dd:91:fd:7d:0c:70:b2:7e:d4:23:1a:bb:59:b4:
60:ec:7e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:45:07 2025 by rpki-client