This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
File: LvRpVEOkwMezTqkbYqPY-OQUUX4.mft (raw, json)
Hash identifier: MmAa2u+EgQ0PWt9aNxbljt/d1rKlvLFXlGueva+9nrk=
Subject key identifier: 70:B5:B7:F6:15:E4:84:B2:22:08:14:14:53:4B:68:20:D3:46:EF:4E
Authority key identifier: 2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E
Certificate issuer: /CN=A9167A72/serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
Manifest number: 75
Signing time: Fri 05 Dec 2025 02:26:50 +0000
Manifest this update: Fri 05 Dec 2025 02:26:49 +0000
Manifest next update: Fri 12 Dec 2025 02:26:49 +0000
Files and hashes: 1: LvRpVEOkwMezTqkbYqPY-OQUUX4.crl (hash: vq6wW7DPeL/C9L5kVnYUMxu5BUU9J5FB5bCmHe4M/48=)
2: 206BA2C4AA2A11F0B670463FC4F9AE02.roa (hash: b16d+2kTdbON2ixe1jCa6GapHvNF5ngdixgV1f1xSyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl
rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167A72, serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
Validity
Not Before: Dec 5 02:26:49 2025 GMT
Not After : Dec 12 02:26:49 2025 GMT
Subject: CN=693242ea-63b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:95:f2:59:52:3d:9a:f1:c0:23:da:56:70:
e7:a9:ac:e3:a8:90:33:55:dc:45:b9:0e:ed:71:07:
80:7f:ec:15:16:ab:eb:aa:95:8c:2d:35:6d:d3:95:
4c:8e:9c:7e:b2:08:6d:68:23:e1:84:46:90:aa:99:
ec:e1:4b:82:8e:64:65:54:2f:0e:60:be:a6:a8:d6:
06:6c:34:1a:a7:f7:de:e1:4e:8d:74:46:1e:86:f3:
5d:c4:80:ec:4f:29:e9:3a:3a:49:fc:85:2e:7b:31:
91:90:df:27:32:1d:cb:b2:e6:86:39:fd:d5:15:e6:
0c:4f:4e:a5:23:2a:dd:97:4b:9a:28:29:46:67:ab:
a7:e4:c2:a6:6d:79:af:d4:60:af:7d:f1:b5:83:56:
63:16:0f:cd:92:f0:ff:be:39:51:8b:b4:31:97:01:
fe:fe:b0:dc:e0:b1:4e:dd:46:8d:8f:5a:49:9f:93:
8a:1f:e3:69:0a:13:ca:11:ae:91:04:b4:ae:30:b9:
18:6d:8f:27:15:11:d0:49:f1:79:e6:59:6f:3f:38:
14:b1:d1:44:c4:e4:05:af:62:43:36:e6:9e:49:43:
fb:b0:1b:25:19:0b:01:27:ff:7c:79:7f:f0:0e:04:
90:83:bd:28:e6:a3:9c:82:0c:79:90:0f:5e:c1:5d:
36:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B5:B7:F6:15:E4:84:B2:22:08:14:14:53:4B:68:20:D3:46:EF:4E
X509v3 Authority Key Identifier:
keyid:2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d5:ff:22:e7:6d:4a:7b:ff:ea:f9:36:2a:43:0b:1b:c1:a6:
11:55:29:23:38:50:25:37:15:53:8f:16:3f:c9:ec:ec:7d:c4:
8d:6d:dd:76:bf:3d:66:d2:8b:4e:00:90:b4:13:2f:34:54:f4:
74:c6:b7:e9:59:93:55:2c:89:51:f5:d5:d2:b9:a5:00:e0:68:
0b:4e:79:1b:d7:26:fd:3a:d7:49:79:5d:5f:bc:55:60:d7:fd:
92:4e:7c:bf:f7:50:46:f5:11:86:f8:8f:0f:dc:80:34:68:fc:
7a:4f:fd:86:67:f7:ee:4f:fe:31:9b:f6:90:d6:17:89:cd:08:
18:2e:29:fd:e6:de:b9:75:24:72:36:c9:88:a5:d1:ca:8c:b1:
2b:17:df:77:7b:c5:df:63:71:ff:7b:43:99:07:b0:b3:24:1e:
ae:a3:90:e9:e4:c1:97:9c:f8:5f:8d:59:a8:81:b8:36:cc:0b:
39:5f:a9:15:47:de:9f:c1:d4:e3:ca:e1:15:6e:ae:94:0d:40:
82:bd:8e:7e:b6:a7:88:ec:57:19:48:37:5d:05:c6:72:a8:9f:
df:d2:ec:41:c1:11:00:35:3c:96:37:77:03:72:81:56:24:40:
34:5c:4c:1d:e6:53:6f:75:a9:9f:a6:e1:4d:e6:4a:e9:e3:0e:
dc:2c:10:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:45:26 2025 by rpki-client