This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
File: Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft (raw, json)
Hash identifier: 81S6cKZ2UDkOwLUgI7tKIfDUn7DGquHcTTFott/aNNU=
Subject key identifier: 3B:3C:59:79:A1:2A:F7:F2:29:89:A2:97:41:BF:10:8A:B0:9D:0B:8E
Authority key identifier: 12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA
Certificate issuer: /CN=A916DFDD/serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA
Certificate serial: 5F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
Manifest number: 5C
Signing time: Fri 05 Dec 2025 05:01:36 +0000
Manifest this update: Fri 05 Dec 2025 05:01:36 +0000
Manifest next update: Fri 12 Dec 2025 05:01:36 +0000
Files and hashes: 1: Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl (hash: DaCY+KhNPoRvrRVEKGGxEtrxPnExQSCibpLcYtFnO4A=)
2: 780B9CF8867811F0AA0D2534C4F9AE02.roa (hash: X3bLg+wYV1t3tD4gl+ObUUyr463NoOxUyC03tZzeKjA=)
3: 78817658867811F0AA0D2534C4F9AE02.roa (hash: XWnPSEphd3JYQ8zrDoJg7cr7D+uDeG7GtgQZULFil08=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl
rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DFDD, serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA
Validity
Not Before: Dec 5 05:01:36 2025 GMT
Not After : Dec 12 05:01:36 2025 GMT
Subject: CN=69326730-66f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3b:34:a0:87:11:5b:36:09:1b:4b:55:d2:0b:
23:2d:81:29:7a:6c:55:dd:ff:b8:17:27:eb:34:74:
c9:76:10:84:f1:7e:c6:51:b9:90:c3:2b:e7:9c:63:
33:e3:22:0f:ed:45:b4:86:95:6c:35:70:e5:8d:84:
7e:c9:e3:53:d7:57:e9:f2:56:00:90:66:b2:d6:25:
88:f1:34:9b:42:c1:30:b7:e2:42:22:cf:ed:eb:0b:
75:6a:b0:6e:aa:72:73:6e:b6:66:a2:71:54:da:96:
44:79:b6:40:e8:33:f9:4d:71:09:52:e8:29:73:43:
d0:b1:3d:93:37:a6:b3:3c:e2:7e:fb:67:74:e6:73:
51:07:b1:f9:64:bb:b2:f3:e1:93:5a:23:39:00:32:
b4:9b:32:0e:1b:cb:67:57:4a:05:56:e7:60:cc:50:
14:6f:44:10:94:ec:5d:14:02:49:d8:ad:dd:2f:e2:
c0:8a:59:d2:97:ae:a0:6d:1a:a3:a7:2e:77:22:39:
7d:3f:a8:81:8e:69:ef:e9:c6:09:b6:9f:99:b8:b2:
d6:ed:10:c8:55:5a:1f:de:69:13:d5:29:69:0f:8b:
62:b3:43:26:78:da:4c:c2:5f:a6:20:40:5e:cd:f1:
cd:02:7d:9f:95:33:f5:94:b0:8e:6c:e9:23:bd:81:
78:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3C:59:79:A1:2A:F7:F2:29:89:A2:97:41:BF:10:8A:B0:9D:0B:8E
X509v3 Authority Key Identifier:
keyid:12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:15:9d:c3:97:35:89:01:88:be:eb:ec:75:bc:3c:12:74:36:
e9:b9:f5:1c:11:72:3e:c7:59:cb:b6:bb:63:65:14:6b:89:a4:
33:09:f5:28:d8:2b:7d:bb:98:e7:10:4e:af:92:e4:a7:c5:5d:
87:aa:7f:27:60:6e:8c:fe:d5:02:f5:50:2a:ff:56:dd:58:25:
d4:14:dc:bf:ea:a8:2c:33:dc:30:fc:a7:d2:21:40:36:1a:1b:
7d:c4:93:b0:4f:d0:bb:ff:45:28:91:98:6f:3b:20:2a:df:5f:
e5:b8:95:5b:c1:62:47:31:54:a4:48:dc:7c:5d:bc:75:ba:88:
dc:5b:be:91:9b:94:d1:82:f8:bb:23:f5:57:99:df:24:27:d2:
97:a2:19:4b:95:4b:51:03:db:90:d9:52:a2:50:2c:17:cd:6d:
d6:76:5a:ec:eb:43:01:bf:1e:67:f3:71:43:f4:a6:e6:ca:57:
9f:7e:73:45:00:04:6a:82:d6:08:f5:ab:6e:9e:1c:e7:8e:3e:
35:28:27:cd:b1:e0:52:5f:81:0d:d9:5d:06:4d:97:d8:ff:12:
10:53:d5:9f:6b:32:fa:86:40:0c:9f:1d:31:c6:02:9c:2e:c0:
d8:2c:19:9b:8a:51:a5:7c:4a:11:ab:35:67:7d:72:b3:99:5b:
bd:2a:7e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:37:42 2025 by rpki-client