This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft
File: 25LUPJBhJQWzr0bpZKaMyfXzsq8.mft (raw, json)
Hash identifier: gNLZwqS2Q56uoTtzmb87CpMlr4u2OGToHkqODgY9i00=
Subject key identifier: FA:CE:9B:87:CD:32:C9:77:5E:1F:B2:06:DC:C7:9B:5A:D2:F5:06:51
Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Certificate serial: 039B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft
Manifest number: 037F
Signing time: Thu 04 Dec 2025 23:20:56 +0000
Manifest this update: Thu 04 Dec 2025 23:20:56 +0000
Manifest next update: Thu 11 Dec 2025 23:20:56 +0000
Files and hashes: 1: 25LUPJBhJQWzr0bpZKaMyfXzsq8.crl (hash: MSP20KOGk3qGG8LYdV+qyAA1j2yPsAqM2RuUDN1OdEs=)
2: B2FCF1C07FF911F08FAAC57FC4F9AE02.roa (hash: MnpTevKrhY7L4cqXUyU9PXlqHjDSUZYAGeApiPXwlBI=)
3: 299F07F2E15611EFA15DF23DC4F9AE02.roa (hash: fuFQR3XBNeUBp3GuT5Rq8XdFNfctvFuOXUDcjAZyCQA=)
4: 9ABE08C606F311F08407D351C4F9AE02.roa (hash: Oo/z3Tl848fDTqTqN7CA+y187n0AUvuUe1PsbRy+loY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl
rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:20:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923 (0x39b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918213B, serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Validity
Not Before: Dec 4 23:20:56 2025 GMT
Not After : Dec 11 23:20:56 2025 GMT
Subject: CN=69321758-b482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a1:01:ea:6b:89:49:4a:05:cf:49:85:c4:43:
34:a6:c1:93:21:aa:27:3e:68:eb:1b:ef:db:9f:d3:
1b:da:5c:fd:be:40:f6:eb:c7:1c:e5:4f:45:7f:2f:
cd:c8:b9:4e:20:a4:2a:60:04:78:7d:7e:5e:15:7b:
17:0a:77:e6:22:2e:e5:8c:55:62:66:d4:a0:44:04:
e3:84:ea:03:7b:51:52:46:6b:9e:a5:eb:4f:04:b1:
a1:9d:3a:af:c6:2c:59:f1:e4:e2:02:9d:9f:55:05:
90:c2:f1:b6:89:55:07:75:fd:96:06:31:ac:5a:c7:
c0:cb:d1:c0:07:4b:67:c6:73:06:12:3c:b0:d7:e3:
4c:28:1d:6a:40:57:3f:90:8a:15:ad:e2:e1:d2:0c:
c4:8a:39:28:29:33:f8:80:43:05:c1:b8:85:f8:8e:
cb:2d:37:8f:1f:29:23:5f:bf:c1:54:8b:5b:21:a1:
39:d4:ec:7e:46:f4:c8:6e:93:a3:3a:e9:23:52:7f:
d0:b4:d3:26:63:25:3d:ae:a8:a4:71:86:c8:fb:b6:
86:86:09:eb:5e:31:84:5c:f9:01:7c:69:e5:b3:81:
4d:1c:2c:8c:c3:16:0f:07:1c:22:67:43:b8:ce:ef:
a2:c4:ef:7f:d6:a8:e1:43:73:0f:37:87:5a:15:a8:
74:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CE:9B:87:CD:32:C9:77:5E:1F:B2:06:DC:C7:9B:5A:D2:F5:06:51
X509v3 Authority Key Identifier:
keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:34:e9:1b:9c:b1:04:9d:d6:de:bf:65:01:8f:31:1c:3e:18:
0c:5e:e1:20:2a:a3:f8:4a:a1:7f:59:20:cf:88:14:8b:e5:f5:
e4:ad:99:a2:4a:97:58:21:44:f9:3d:a2:c9:54:f9:d8:b0:7c:
18:bd:c8:df:af:3c:75:e6:30:f8:83:c3:98:61:c5:5e:f9:64:
cc:47:eb:e6:81:c5:b4:cf:ad:c5:1c:39:aa:18:59:94:9b:d3:
27:81:eb:f3:77:e3:79:04:21:6f:3d:64:5d:dd:a9:12:b8:54:
f9:f0:a7:cc:d6:54:c5:ff:1c:36:df:e2:3b:af:14:82:7d:9d:
40:1a:56:1d:23:2e:ce:98:09:49:33:35:0c:7b:aa:3f:d4:58:
ef:00:3f:81:54:48:fa:f4:0b:5d:a3:49:2f:ff:19:08:9a:b4:
c9:67:a1:90:63:24:02:21:46:9b:5b:fd:00:a1:df:8a:c6:d9:
16:67:ab:97:be:09:b3:40:88:a6:03:66:c2:f8:2d:43:3d:e1:
c1:0f:03:df:62:cb:a6:82:b1:8e:89:f1:55:65:66:03:6e:0c:
eb:68:dd:d6:43:54:f4:10:93:11:16:1a:5b:9e:c4:bb:3a:22:
81:8b:c8:fd:20:af:9d:99:3d:c6:cd:60:b9:65:86:fb:55:ff:
ee:1a:67:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:26:46 2025 by rpki-client