This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
File: LnG4umMF_9SMEx0IYK8sGs9tIrY.mft (raw, json)
Hash identifier: Sxp1SXr3cl+j6uTXVSLeVizdIZR6148/AiLck9GL33I=
Subject key identifier: BA:42:39:A5:0A:CC:F7:48:16:E7:2B:EC:A5:FC:D6:E7:88:3D:88:FA
Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
Certificate issuer: /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Certificate serial: 022A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
Manifest number: 0226
Signing time: Fri 05 Dec 2025 00:24:15 +0000
Manifest this update: Fri 05 Dec 2025 00:24:15 +0000
Manifest next update: Fri 12 Dec 2025 00:24:15 +0000
Files and hashes: 1: LnG4umMF_9SMEx0IYK8sGs9tIrY.crl (hash: 39qqY55Tf39/3xi0+ntc6oDaWVWiVtz21jtUCvvbRVo=)
2: D08310DE94C511EDB2732947C4F9AE02.roa (hash: Xy93j2wiTLRQmJ+0n87qnILIP2Iwo0hp0rGxKJhzYuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165D52, serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Validity
Not Before: Dec 5 00:24:15 2025 GMT
Not After : Dec 12 00:24:15 2025 GMT
Subject: CN=6932262f-88f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7e:ae:b7:c0:af:09:60:72:c3:d3:35:66:f5:
4c:a6:55:ac:cd:c2:fd:19:02:5d:ae:64:71:3d:5c:
c2:1a:3f:a3:1f:6b:cb:82:d5:b0:cf:bd:e4:64:45:
e9:c4:22:a9:fa:fb:84:2b:77:01:01:76:13:45:f6:
df:4f:e4:42:0b:69:1f:c2:03:a2:09:73:86:06:21:
45:5d:28:89:56:8d:9f:73:cf:de:28:87:54:f8:c3:
c9:a9:87:3f:49:da:50:9a:3e:0f:b8:cc:3b:70:91:
5d:d9:89:33:ec:b5:65:4a:7a:ee:f5:60:7a:b0:b0:
13:7a:da:83:73:24:4d:e0:e8:d5:23:41:61:77:14:
8d:8d:a5:d1:e5:0a:5d:56:2e:73:64:e5:32:8b:4c:
c0:6d:70:88:11:7a:85:83:45:1e:d2:aa:52:30:00:
9b:60:39:93:c4:38:e0:2a:f9:56:8a:36:6c:c9:6a:
9c:d8:3b:70:3f:39:a2:62:9e:50:ce:61:e4:77:ef:
09:1b:17:94:27:13:bc:c4:35:fe:d5:04:25:5b:07:
56:fe:8d:fa:d0:88:03:41:f4:b6:a3:e0:b6:90:48:
5a:ee:15:3e:47:f0:9f:c8:2c:4f:85:80:34:56:3a:
ae:78:da:c1:87:ea:51:bf:89:7e:59:19:01:2c:fe:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:42:39:A5:0A:CC:F7:48:16:E7:2B:EC:A5:FC:D6:E7:88:3D:88:FA
X509v3 Authority Key Identifier:
keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:ae:9f:05:d3:07:df:31:42:ba:19:d5:1a:ce:fa:02:22:84:
31:8d:52:df:79:48:ec:7e:c3:aa:1f:01:8b:92:6f:cf:b2:5d:
cb:7a:08:c2:b4:1e:8d:8e:01:f6:a6:15:d4:c9:04:26:24:fe:
12:2a:d3:35:71:36:ec:bf:c8:1f:ef:c2:d5:45:d5:33:c2:5e:
6f:53:a2:2c:0b:c8:a2:05:c0:85:84:1f:22:83:9a:4a:2f:95:
19:c8:4c:7e:d5:5c:7b:05:a7:20:1a:29:0c:8b:e2:c1:0c:a2:
9a:98:1c:33:bb:10:df:a8:d3:19:19:63:62:bd:c7:b9:ad:43:
02:3d:c7:92:d7:6a:47:09:bf:d6:89:cf:5a:05:a4:92:f3:3b:
25:7a:e2:54:72:14:fd:e7:77:82:51:fe:93:36:c5:12:53:6e:
f8:e1:ba:e4:74:22:78:06:b0:5f:3b:76:be:3c:0a:08:d1:10:
7e:02:e8:3c:c1:0a:1b:e6:7b:87:84:f5:a6:17:37:db:87:49:
64:49:db:93:27:49:42:84:6f:69:99:10:75:18:43:99:79:27:
3e:0a:b0:ae:41:91:9d:f6:9d:ee:3f:63:72:6e:ee:45:ac:4b:
7f:78:5e:7c:fd:de:b5:cb:54:48:f8:59:c4:80:e8:3a:35:53:
28:8c:16:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:28:31 2025 by rpki-client