This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
File: lFOfgqNeshWO18Ni1boVQz5-0uE.mft (raw, json)
Hash identifier: r6PfKnKBWIIC7h/pSf0LH2dY6xSpDKMOYMbpex8ggIk=
Subject key identifier: 9B:E1:B3:5B:81:80:DE:A9:C6:3A:7C:C9:2B:06:99:AF:94:D0:A1:9C
Authority key identifier: 94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
Certificate issuer: /CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
Manifest number: DC
Signing time: Fri 05 Dec 2025 03:40:31 +0000
Manifest this update: Fri 05 Dec 2025 03:40:30 +0000
Manifest next update: Fri 12 Dec 2025 03:40:30 +0000
Files and hashes: 1: lFOfgqNeshWO18Ni1boVQz5-0uE.crl (hash: ru8oB24WdVFmsdQxM2GsyGYA79t43LjvXPU2haeLDW8=)
2: 5C8A37FEBB0D11F0B828E842C4F9AE02.roa (hash: bAE1nN8/ltYESFoWRjpvSwAksmNLvoi9WWAZ51mQmjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179EAE, serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Validity
Not Before: Dec 5 03:40:30 2025 GMT
Not After : Dec 12 03:40:30 2025 GMT
Subject: CN=6932542f-e04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:de:d8:90:db:01:00:96:85:13:4f:97:06:
87:a7:85:5e:ce:45:29:2d:b6:4e:c0:d8:d8:e0:48:
46:96:1f:a0:67:86:6f:e4:38:00:cb:ab:03:3e:ad:
cb:42:7d:0d:47:60:c7:9a:5a:6d:16:97:29:9c:03:
e6:38:66:df:b6:b3:3d:fe:83:af:6f:21:78:72:38:
88:ae:d4:e9:86:80:27:ea:14:67:e3:0a:24:68:d6:
f4:eb:ae:94:30:58:c4:fc:4b:63:8f:0b:9b:32:6d:
95:e8:d2:db:0c:b5:25:12:df:d0:31:35:c4:a9:d0:
e1:e2:db:5a:46:89:88:39:e1:e2:d7:fb:39:59:19:
51:ae:bd:08:25:2d:2f:db:39:f2:ac:cc:9a:0a:74:
91:66:c1:38:6f:3b:f9:3e:c2:b1:74:a2:b9:0e:9b:
a3:b8:24:f6:6b:69:4a:46:e8:a4:8d:59:89:80:b7:
41:77:64:6d:c4:01:33:f6:fa:6d:e0:c8:27:02:78:
0c:25:43:14:6e:a8:62:fc:f6:d6:d1:de:d9:49:59:
6a:06:ee:1e:86:bb:48:ce:92:9b:6f:06:42:f7:1e:
05:af:fc:03:3c:7f:2f:54:62:8e:a6:1e:e9:ce:fe:
79:43:76:cc:87:3f:f2:87:3b:72:7e:77:0c:e9:85:
c7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E1:B3:5B:81:80:DE:A9:C6:3A:7C:C9:2B:06:99:AF:94:D0:A1:9C
X509v3 Authority Key Identifier:
keyid:94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:d9:06:3c:88:e9:35:3a:17:dc:74:b4:c6:ff:c9:f7:35:49:
e8:26:df:1a:e3:e6:6a:6d:0c:fb:c1:47:33:54:35:0c:4f:9b:
e1:1d:f7:99:9c:32:12:a3:2d:73:7e:f7:7d:57:2f:cf:37:fe:
15:dd:77:df:b9:fa:df:c1:52:a4:f1:ff:cd:c4:22:0a:f8:db:
9a:af:7a:2d:18:7a:72:dd:f3:95:70:cc:25:c7:06:34:35:02:
6f:45:1a:21:a2:13:85:93:e9:9e:8c:29:af:b7:61:1c:95:97:
48:59:24:25:02:66:cc:29:21:ad:19:1a:08:1f:79:0b:ef:33:
a4:88:2c:fc:ec:bb:34:a2:62:33:e8:79:4d:65:09:cc:79:82:
92:9c:d0:a3:4b:06:ba:e5:04:21:30:bd:39:4a:09:36:16:c2:
78:51:48:c9:bb:42:21:37:0a:a0:13:0d:12:94:49:fe:3e:a0:
bb:0f:a1:b8:9e:7f:72:6f:b9:9f:9c:41:7b:50:8d:2f:8b:94:
59:6c:a4:89:5e:45:a0:4c:bf:e1:0e:c9:34:43:b7:2f:44:57:
fa:dc:5f:85:76:a4:49:c1:29:f8:90:f8:8d:ef:65:7f:1c:de:
56:0a:ef:67:52:7a:b0:e5:fd:1b:06:b1:5e:47:fe:47:f8:50:
cc:1a:0f:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlFQUUxMTAvBgNVBAUTKDk0NTM5RjgyQTM1RUIyMTU4RUQ3QzM2MkQ1QkExNTQz
M0U3RUQyRTEwHhcNMjUxMjA1MDM0MDMwWhcNMjUxMjEyMDM0MDMwWjAYMRYwFAYD
VQQDEw02OTMyNTQyZi1lMDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0M7e2JDbAQCWhRNPlwaHp4VezkUpLbZOwNjY4EhGlh+gZ4Zv5DgAy6sDPq3L
Qn0NR2DHmlptFpcpnAPmOGbftrM9/oOvbyF4cjiIrtTphoAn6hRn4wokaNb0666U
MFjE/EtjjwubMm2V6NLbDLUlEt/QMTXEqdDh4ttaRomIOeHi1/s5WRlRrr0IJS0v
2znyrMyaCnSRZsE4bzv5PsKxdKK5DpujuCT2a2lKRuikjVmJgLdBd2RtxAEz9vpt
4MgnAngMJUMUbqhi/PbW0d7ZSVlqBu4ehrtIzpKbbwZC9x4Fr/wDPH8vVGKOph7p
zv55Q3bMhz/yhztyfncM6YXHgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvhs1uB
gN6pxjp8ySsGma+U0KGcMB8GA1UdIwQYMBaAFJRTn4KjXrIVjtfDYtW6FUM+ftLh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVBRS9BNDlDRERCODhE
MEUxMUVGQThGRTkzNzFDNEY5QUUwMi9sRk9mZ3FOZXNoV08xOE5pMWJvVlF6NS0w
dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xGT2ZncU5lc2hXTzE4TmkxYm9WUXo1LTB1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUVBRS9BNDlDRERCODhEMEUxMUVGQThGRTkzNzFDNEY5QUUwMi9sRk9mZ3FOZXNo
V08xOE5pMWJvVlF6NS0wdUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAp2QY8iOk1OhfcdLTG/8n3NUnoJt8a4+ZqbQz7wUczVDUMT5vhHfeZ
nDISoy1zfvd9Vy/PN/4V3XffufrfwVKk8f/NxCIK+Nuar3otGHpy3fOVcMwlxwY0
NQJvRRohohOFk+mejCmvt2EclZdIWSQlAmbMKSGtGRoIH3kL7zOkiCz87Ls0omIz
6HlNZQnMeYKSnNCjSwa65QQhML05Sgk2FsJ4UUjJu0IhNwqgEw0SlEn+PqC7D6G4
nn9yb7mfnEF7UI0vi5RZbKSJXkWgTL/hDsk0Q7cvRFf63F+FdqRJwSn4kPiN72V/
HN5WCu9nUnqw5f0bBrFeR/5H+FDMGg8T
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:32:02 2025 by rpki-client