This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
File: lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft (raw, json)
Hash identifier: qIJM8AzWNgRE9yM3+H3Gr/OBOV8ggrE3iYApSOFSZDE=
Subject key identifier: 61:6A:9C:6D:A9:E5:2A:5C:82:C4:C6:64:FE:6D:A6:04:13:75:75:9D
Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F
Certificate issuer: /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
Manifest number: 0135
Signing time: Fri 05 Dec 2025 02:37:59 +0000
Manifest this update: Fri 05 Dec 2025 02:37:58 +0000
Manifest next update: Fri 12 Dec 2025 02:37:58 +0000
Files and hashes: 1: lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl (hash: b3eWfUJ+16pKbrqP0VDp6dGUc70ndyju9wELBbsuwSw=)
2: 1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (hash: IP1a/8lP5y1+PqhZxCqrwDfR6kczV/2vje4JuA8lz28=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl
rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917282D, serialNumber=95228338A85F248230312CF398B24F8119D8232F
Validity
Not Before: Dec 5 02:37:58 2025 GMT
Not After : Dec 12 02:37:58 2025 GMT
Subject: CN=69324587-2ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:63:10:f6:71:b7:4c:11:3b:10:1c:d0:21:
b1:47:6e:d2:e5:d6:ad:16:fb:36:95:22:ea:c6:a8:
89:70:0d:3f:f3:79:ac:66:65:2c:cc:d3:a8:f4:c4:
d2:5f:dd:23:84:8e:07:42:c2:3f:fe:94:24:ab:4a:
76:df:d4:7e:51:a8:42:7f:6e:2f:cc:77:57:b5:10:
30:72:c8:82:dd:e0:d5:22:9a:01:f4:37:94:bc:d5:
59:5c:fe:d4:70:70:a7:07:8d:15:cb:8a:4d:43:a3:
ed:93:bc:50:c8:82:01:32:ad:7e:fd:14:ae:ee:4a:
33:d4:c1:20:ff:da:de:08:52:23:89:73:cd:74:14:
28:9b:d0:82:6e:8a:d1:ae:9e:ca:9e:bb:61:9f:2a:
e1:31:28:ae:df:67:31:3d:07:a8:05:f8:bb:41:c1:
34:57:c5:87:25:6b:03:33:a8:32:0d:46:f6:27:5e:
84:cd:36:c1:4b:38:9c:a0:69:6e:80:0e:cf:fa:e8:
7b:38:cd:74:87:bf:65:27:62:4e:07:ae:2e:95:88:
ef:0e:86:9f:16:66:ab:6f:49:83:08:64:e6:76:43:
a1:7b:50:49:9a:85:0a:86:c5:09:d6:b4:74:48:0e:
15:49:fe:4a:05:d5:21:fb:b9:32:68:00:7d:82:b7:
fc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6A:9C:6D:A9:E5:2A:5C:82:C4:C6:64:FE:6D:A6:04:13:75:75:9D
X509v3 Authority Key Identifier:
keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:98:be:50:bc:6d:ac:0f:7e:3c:55:bc:9b:cc:f2:d7:a7:a1:
72:ad:ff:7e:59:c6:fa:bc:cb:d7:5a:d8:58:2a:0b:8f:c2:ce:
43:7d:2e:f5:2f:ed:1f:83:5d:d3:83:42:d0:23:ff:7c:8d:f3:
04:24:c8:f5:f8:d7:b3:c2:27:e1:99:9c:93:22:dc:b3:64:9e:
a2:78:a3:ba:81:8e:3e:f2:27:89:d3:1b:9c:d7:73:3d:8d:f8:
e0:ed:90:3f:bb:47:4e:47:35:09:ed:95:e7:d0:6f:da:2e:fe:
d4:2c:e8:59:7c:86:f6:69:c7:4c:5b:bd:91:2a:87:cb:a9:3c:
8a:8b:b8:eb:b5:1f:22:56:d0:b0:5e:89:98:64:a0:f8:b1:a9:
59:f1:4d:85:45:fc:a6:11:0c:bd:6c:a4:6b:f3:80:b0:15:6f:
43:50:5f:5d:93:35:ca:a4:20:50:d5:40:39:63:f6:07:7a:f6:
ec:4e:e8:d9:38:a7:41:95:e0:c4:77:d8:4b:61:a2:4c:a8:eb:
d0:68:2d:d6:9b:45:da:01:b6:ee:95:72:6a:0b:44:e2:55:2f:
51:6c:fb:94:19:33:0d:f1:45:fd:de:2e:e2:5a:ea:e6:b8:68:
45:58:94:98:03:c8:1c:e9:61:d7:51:90:4f:1e:3c:3c:90:ca:
d7:71:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:27:47 2025 by rpki-client