This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
File: L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft (raw, json)
Hash identifier: cXnzrX+1X93kC67OpIo2Omd0BdqQsActb8XZA7VeTKU=
Subject key identifier: 4E:83:EF:6E:C1:F4:41:76:A9:12:1F:51:55:E0:2A:93:87:AE:DB:B9
Authority key identifier: 2F:6B:CB:5C:5E:BF:73:67:36:65:68:44:B1:16:C4:8D:A5:51:12:59
Certificate issuer: /CN=A918049D/serialNumber=2F6BCB5C5EBF736736656844B116C48DA5511259
Certificate serial: 17
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
Manifest number: 16
Signing time: Fri 05 Dec 2025 05:41:24 +0000
Manifest this update: Fri 05 Dec 2025 05:41:23 +0000
Manifest next update: Fri 12 Dec 2025 05:41:23 +0000
Files and hashes: 1: L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl (hash: ePhQ1+hHv+V/Rtn4xpbKl4khTvWlglu50TnDTuMDHnI=)
2: 541D17D2B2C811F092F27081C4F9AE02.roa (hash: Bo/+kZ5KOHNuiEOOVJQGjVbjfu7e6AaHxR3mGm0eu6I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl
rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:41:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918049D, serialNumber=2F6BCB5C5EBF736736656844B116C48DA5511259
Validity
Not Before: Dec 5 05:41:23 2025 GMT
Not After : Dec 12 05:41:23 2025 GMT
Subject: CN=69327083-0963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:62:97:4f:15:a4:bf:36:99:8d:4b:0a:5c:4f:
57:80:b9:e8:0c:d1:e3:50:ef:80:36:33:51:75:2e:
64:21:cf:1f:48:30:2a:ec:be:f3:02:36:25:fb:2f:
d0:f5:cf:7e:d7:c1:35:c7:68:2d:cd:ba:c7:a6:e8:
5e:07:a9:86:af:ac:84:45:f2:40:fe:ed:ba:0f:7c:
da:7b:c6:37:c9:fc:7f:c4:57:22:c3:d7:19:6c:a5:
8b:e9:64:f0:62:03:cd:16:07:28:ec:64:a9:be:ba:
b3:62:53:99:10:ea:3b:c4:c5:88:a6:d2:e9:01:1c:
61:63:33:52:a6:14:f3:d2:75:e9:d5:97:f1:83:22:
96:cd:75:f0:51:9c:24:ff:3d:ed:69:d8:74:c0:34:
05:f5:7d:09:09:81:ec:f1:66:b2:fb:7b:95:d1:3f:
69:20:ca:83:ac:4b:8a:a9:4e:90:87:89:f0:42:e3:
9a:00:ba:3d:fc:9e:19:da:42:1b:38:e5:0d:b6:5e:
b2:7e:a2:a3:0f:3c:75:27:3c:62:ec:b1:cf:da:b9:
9e:31:fc:fd:d0:9b:94:49:d1:8f:93:31:c4:a5:b2:
41:86:4d:78:49:0c:91:d8:cf:0a:36:37:77:cd:b8:
b1:17:22:6f:ea:ad:26:6a:2f:35:3e:cc:df:b6:63:
77:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:83:EF:6E:C1:F4:41:76:A9:12:1F:51:55:E0:2A:93:87:AE:DB:B9
X509v3 Authority Key Identifier:
keyid:2F:6B:CB:5C:5E:BF:73:67:36:65:68:44:B1:16:C4:8D:A5:51:12:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:71:06:1c:58:b2:1c:65:c3:da:d3:c4:b1:33:8b:c9:0e:19:
71:41:e3:03:e8:5c:03:01:15:64:58:e4:70:35:09:9f:3b:07:
3d:1f:b6:7a:9a:1f:47:ca:71:8d:52:b7:2c:e2:3e:8c:f0:c6:
5c:99:eb:c7:ae:29:f8:20:0a:4b:dc:7f:97:bc:38:be:05:2f:
5d:a8:70:62:4d:fa:03:06:fe:fa:36:c1:4a:e4:af:3f:dd:27:
74:c7:fe:f4:1d:69:21:21:15:61:0c:95:43:98:32:f1:d8:8b:
83:4e:d9:b0:05:83:33:ea:8d:b2:f0:a3:6c:21:63:fd:b2:ca:
6b:27:78:c2:f4:58:59:8a:03:7f:e1:cb:5b:3c:6d:a8:1f:0f:
b8:3b:dc:10:93:85:20:d1:cb:89:53:48:2d:ba:f8:ea:a0:16:
0b:9c:7c:02:6b:24:5a:38:e8:0f:1b:30:ca:20:19:5c:0f:69:
c7:9b:3f:4d:73:c3:59:8d:3c:dd:d2:98:f4:db:d5:c9:7f:93:
24:72:06:4b:35:a9:47:e6:41:fc:60:ef:75:3c:47:8b:ee:64:
68:fb:86:cd:5b:9e:d8:8d:a0:d3:79:2a:a7:d6:13:dc:01:f3:
6b:1c:b4:4a:51:e3:f1:d6:e3:94:fa:1f:54:27:fe:2b:d9:fe:
34:ed:95:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:22:03 2025 by rpki-client