This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
File: LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft (raw, json)
Hash identifier: HqgkskdSfdXXLSDPvPzk69LsA20OvWM2aOqpL75HNXU=
Subject key identifier: EF:DC:91:75:7E:CA:8E:96:1F:A8:55:8A:AF:8C:FC:4C:F0:89:E2:CD
Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
Certificate issuer: /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Certificate serial: 0BAF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
Manifest number: 0B7F
Signing time: Sat 06 Dec 2025 18:26:23 +0000
Manifest this update: Sat 06 Dec 2025 18:26:23 +0000
Manifest next update: Sat 13 Dec 2025 18:26:23 +0000
Files and hashes: 1: LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl (hash: edlL2OxLt85Jw23DZvrn5jHBSIvZaspqL8aVAadHsBc=)
2: 155B355E414311EE8E969116C4F9AE02.roa (hash: 8n8jzkGbayepgQzEpsL65F4oyNOM3A+zDOLQR9DNID8=)
3: 1629BA5A414311EE8E969116C4F9AE02.roa (hash: KzwFd8PDenGf+ZwF13ldlpLL32AHpZJ+BkfX9UFd2E8=)
4: 953250CAE90011EB8DE96E50C4F9AE02.roa (hash: 1/sB6pu/nvBS4QJYppsZekVqlkIQlRDFcO4hqm31NTM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl
rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2991 (0xbaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918919A, serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Validity
Not Before: Dec 6 18:26:23 2025 GMT
Not After : Dec 13 18:26:23 2025 GMT
Subject: CN=6934754f-43dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:09:41:46:16:c2:d3:7f:19:e1:7a:5c:92:
27:1d:f2:f1:c5:26:a6:3e:84:0a:7a:5d:a6:58:41:
90:6a:88:5c:50:b9:3f:b6:38:07:0b:80:e4:2f:c7:
49:df:22:50:d3:75:57:98:c2:4a:8d:2b:b7:ab:9b:
1f:5c:0e:3c:e9:67:ba:a8:02:ba:40:4f:63:04:4b:
0d:4a:63:f9:f5:56:fa:13:b1:3c:be:66:6b:4d:db:
c8:63:f3:a4:91:54:59:8b:4d:c1:39:b8:0e:3a:90:
59:7a:79:43:54:83:1f:ba:74:a4:d9:5d:82:fe:bd:
4d:19:9c:d1:48:d0:db:a9:50:15:20:76:67:52:9a:
09:36:5b:51:83:3d:ea:b7:f2:1f:d5:69:28:f4:80:
f3:8d:20:31:36:ae:ec:a7:da:3a:38:fa:11:1a:f2:
84:84:f7:f9:07:eb:5c:7e:62:4f:e6:0e:8f:97:7f:
3b:b3:c5:0f:5e:ce:0e:3f:5c:23:c3:ae:a4:11:81:
7b:7f:9d:a1:54:ee:98:5d:80:08:e4:17:c1:50:37:
66:a0:81:2b:22:dd:3d:1e:55:ba:ca:2d:de:96:94:
f1:74:3a:a2:fe:bd:3c:d5:04:cc:3c:63:6d:fa:a4:
1c:30:f4:2e:ac:99:b0:49:de:34:95:08:1e:2e:e7:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DC:91:75:7E:CA:8E:96:1F:A8:55:8A:AF:8C:FC:4C:F0:89:E2:CD
X509v3 Authority Key Identifier:
keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:cc:3b:85:b2:6e:0b:c2:9b:fa:12:af:0c:80:db:7b:ed:4c:
10:3d:42:fd:da:03:e2:97:cc:b3:d4:6e:52:1b:24:12:dd:4d:
e2:81:c0:23:7d:d3:db:26:22:ef:5f:60:5a:bc:99:1e:64:44:
21:1f:a6:22:9e:50:56:a0:26:05:8f:d5:6e:7d:f2:fd:1c:b3:
9a:90:5d:04:42:dd:1a:c2:8c:19:8d:75:82:fb:38:50:a2:67:
7c:bf:ad:b2:c7:a5:b5:aa:8d:52:f0:8f:b2:ab:cc:1a:39:47:
7d:fb:00:01:24:6a:61:08:d2:9e:ec:06:c6:1c:56:c1:5a:b3:
0b:99:98:87:eb:1c:04:c7:49:76:b7:ce:30:6f:65:6b:e4:48:
69:39:12:2b:90:39:19:32:aa:4c:61:92:03:8e:0d:92:6e:a0:
17:e5:61:0d:b0:bd:f4:f0:10:ae:84:50:7b:06:f8:19:d6:45:
c6:b1:34:a8:40:bf:c6:a3:56:04:54:ed:6d:d3:ce:43:e7:6f:
3b:f4:06:86:b0:02:09:52:b4:28:e8:43:db:de:66:1d:57:ff:
8b:9f:d2:14:78:aa:9f:df:3e:b4:0f:46:a9:11:58:67:be:18:
e6:b8:24:98:f0:de:59:f2:80:13:5e:e5:03:d2:20:9e:69:ff:
41:ff:53:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:29:00 2025 by rpki-client