This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
File: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft (raw, json)
Hash identifier: 0YrcO3YAG55gftR4RoavjGNO83JQMVbkW3qwZ7oqlFA=
Subject key identifier: 5D:78:AB:98:6E:EE:D7:00:85:A6:20:3A:19:1F:90:2B:BC:43:6C:4F
Authority key identifier: 96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3
Certificate issuer: /CN=A918779B/serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3
Certificate serial: 105B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
Manifest number: 1785
Signing time: Thu 04 Dec 2025 16:58:47 +0000
Manifest this update: Thu 04 Dec 2025 16:58:46 +0000
Manifest next update: Thu 11 Dec 2025 16:58:46 +0000
Files and hashes: 1: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl (hash: FK93yduiR5gdO66R4tPWocSdXQa1q04ylvut5S2GK6c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl
rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 16:58:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4187 (0x105b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918779B, serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3
Validity
Not Before: Dec 4 16:58:46 2025 GMT
Not After : Dec 11 16:58:46 2025 GMT
Subject: CN=6931bdc7-eaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:20:3c:94:2e:68:8b:0f:9f:ee:98:ca:00:
9d:01:03:5e:59:62:c1:31:ae:52:5b:c6:15:1a:da:
9b:05:01:7d:d0:4e:bd:e0:f7:69:96:19:fd:84:7a:
70:81:29:c2:54:8b:88:dc:e0:28:c4:fe:f8:d9:18:
55:cd:28:1f:59:e1:80:ff:0b:26:32:ac:13:00:9f:
10:26:29:ad:1d:9e:7b:2a:06:03:3f:c8:6e:32:1c:
a3:69:59:cb:be:47:c2:a6:5a:34:5a:04:3c:47:8e:
b2:32:dd:b3:2c:49:68:b9:cc:14:5e:0f:0f:4b:17:
35:43:5e:38:88:fc:27:b4:0c:71:43:8d:70:6e:d0:
b9:5c:8b:c3:57:29:da:8b:94:27:d2:47:3a:0b:69:
21:b0:e1:40:a6:83:b8:20:33:c0:19:76:60:97:68:
2b:c3:2a:bd:9b:d1:a9:dc:2b:f4:15:98:28:5f:91:
1b:e2:c6:a8:ed:20:6a:94:59:41:1b:fa:1a:13:32:
90:12:70:cd:76:43:b0:4c:00:d4:81:a8:64:f6:8b:
3e:1a:89:fd:f0:f5:77:45:f8:7e:41:01:af:29:99:
0d:cc:e5:e2:3c:e7:0c:89:72:4d:27:ac:92:e8:0d:
44:4c:6b:b5:47:af:7a:54:ae:0b:6b:48:7e:ae:52:
43:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:78:AB:98:6E:EE:D7:00:85:A6:20:3A:19:1F:90:2B:BC:43:6C:4F
X509v3 Authority Key Identifier:
keyid:96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:18:ab:42:8c:0d:61:8e:17:73:5e:70:68:d2:0c:73:b9:92:
a9:59:cd:8a:c7:28:29:59:f5:21:26:5d:bb:44:ed:3a:2d:37:
8f:4b:4b:a5:f7:59:46:65:77:a4:e0:fe:a4:56:7d:4e:bd:38:
fb:69:55:34:94:19:ac:a7:1d:00:32:09:09:b3:30:ff:0d:c2:
9a:9d:3d:73:b5:e4:58:77:d3:87:fa:46:fc:bf:54:bb:c2:af:
24:cc:84:da:04:d1:b6:da:f1:2a:76:af:39:d2:e9:9a:02:11:
2b:54:99:a4:09:c6:e4:55:f7:d0:5a:13:c7:b6:73:ec:38:d1:
d0:4e:7d:ac:6e:1b:31:5d:e2:9a:cf:05:f6:20:da:b4:fb:23:
39:26:a4:96:91:07:08:e4:b0:43:e5:73:58:a7:27:29:ed:21:
24:e6:c2:a5:f4:12:68:6f:a7:93:2b:71:fd:65:f6:ee:ed:af:
92:4e:a2:97:5f:a6:d8:fe:1d:72:ba:ce:d3:a1:5b:8d:1b:3c:
f9:35:5f:3a:78:06:86:9a:05:6e:5e:b6:71:01:6a:87:fb:9d:
67:0e:ef:c8:2c:fb:fb:1c:ce:2c:91:a0:02:4f:bb:9b:34:f6:
c5:4f:7d:1b:ab:cc:85:eb:8b:08:29:76:67:53:84:fe:15:90:
38:bc:68:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:14:39 2025 by rpki-client