This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
File: LByXEgCqxo6oRewP3YfsjFAS8pw.mft (raw, json)
Hash identifier: t1fLerUvgFHQU8z8U+c7k426mEb0NR/6oU7AcarOSSs=
Subject key identifier: 38:94:4F:5E:51:7E:13:44:8B:E3:46:16:BC:DF:0D:37:8F:77:3D:56
Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Certificate serial: 0BAA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
Manifest number: 0B91
Signing time: Sat 06 Dec 2025 18:21:44 +0000
Manifest this update: Sat 06 Dec 2025 18:21:44 +0000
Manifest next update: Sat 13 Dec 2025 18:21:44 +0000
Files and hashes: 1: LByXEgCqxo6oRewP3YfsjFAS8pw.crl (hash: ZnMHh/WKbOQvIYdQvkXEjv5GU7Rimx/f1BO3fRB8pec=)
2: E57CEB8E15BC11F0B0C4DA24C4F9AE02.roa (hash: xt39h14o1313pmbs36BQLGWrDIIjLUsLHdJ1IsYxI9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl
rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2986 (0xbaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Validity
Not Before: Dec 6 18:21:44 2025 GMT
Not After : Dec 13 18:21:44 2025 GMT
Subject: CN=69347438-8b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f0:ed:27:b6:45:9b:47:31:d1:3d:c3:1d:74:
30:62:22:6b:b4:74:21:50:bb:fc:5f:6c:46:60:95:
40:01:26:5d:03:12:3c:66:f4:cd:2a:bd:24:c1:f9:
1f:c0:3d:f5:29:ab:f3:3e:10:93:c3:2c:3b:e8:e3:
65:36:54:5d:7d:7a:d4:da:63:70:a6:75:e8:c5:48:
0f:16:3a:9e:8b:72:85:a3:55:86:8c:ea:ad:bc:3c:
57:f4:47:83:c1:b3:f8:87:13:58:51:e2:7a:94:d1:
cf:eb:f1:66:79:15:e3:d3:b8:d4:47:98:47:1f:72:
30:e4:87:61:b7:75:56:84:5a:fb:53:71:89:75:e9:
40:18:ed:aa:b9:ea:12:4b:db:33:60:81:92:71:ea:
f8:20:b8:99:a8:85:cb:03:e6:b4:ad:ab:71:ee:e8:
64:16:eb:2a:a3:20:fa:c2:72:8e:1a:e4:60:51:25:
5d:41:f0:e8:89:0e:c0:24:e7:d3:3f:d0:01:94:1d:
15:c8:2a:78:bb:72:c7:f2:fd:a3:3b:6a:e9:e6:89:
d5:01:24:04:2a:ff:e5:78:1b:7a:92:d9:56:6c:8c:
e9:24:ad:b1:87:5e:20:c5:1a:16:61:a8:4a:77:3a:
0c:80:47:59:c9:e8:4c:5c:61:3a:55:cc:f4:ec:1c:
ee:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:94:4F:5E:51:7E:13:44:8B:E3:46:16:BC:DF:0D:37:8F:77:3D:56
X509v3 Authority Key Identifier:
keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:61:da:d0:5f:da:c6:8b:19:fd:86:d7:18:03:2b:5b:03:2c:
6e:ed:12:00:bb:d4:cb:1f:ba:98:7a:d5:c9:e4:a7:87:a2:5c:
05:d0:50:da:06:70:10:2c:79:a1:47:bb:d3:90:7f:57:8e:ba:
25:b3:11:90:af:29:62:e8:cb:85:34:fe:f1:cd:5c:9c:cd:4d:
c3:fe:d6:4b:8b:bc:bb:ee:f7:31:cf:d1:19:eb:9a:dd:95:7f:
ac:70:aa:7b:64:63:08:2c:99:a0:0e:a2:e4:62:0c:47:1d:2f:
ef:6a:a0:a5:35:f9:46:3e:9c:38:0d:6d:3e:a4:ee:40:d2:1c:
6f:d5:0c:eb:95:74:e4:5d:96:bf:5a:16:d3:56:31:36:e5:fe:
a5:62:8d:e5:28:09:a1:8e:70:35:b5:d0:b3:28:9a:20:b9:80:
d7:32:6e:e1:98:1d:45:46:b8:3b:db:fd:9b:40:4a:b1:5d:1b:
70:37:f0:44:fd:aa:11:80:f9:7c:8c:e1:c4:bc:a7:4b:00:74:
b7:4f:25:3f:5e:41:e2:2c:fc:de:37:7b:f4:42:d5:27:9d:4e:
14:c6:cf:58:91:ab:c6:0a:f2:a9:40:99:65:5f:01:91:44:aa:
64:19:e5:aa:d2:3d:0e:29:1d:14:e2:73:f6:6b:8b:40:11:0e:
00:20:8e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:59:31 2025 by rpki-client