This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
File: ak_LGM3Y70HSMyE57mLo_Sc7b98.mft (raw, json)
Hash identifier: h5EpbSuLQ6gjGtrK8zbozrVRnPYwv8OTMP3zVBt0904=
Subject key identifier: 5B:44:F4:E5:E2:07:D0:12:D0:BB:0C:94:B2:95:0A:48:1D:B2:7E:46
Authority key identifier: 6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF
Certificate issuer: /CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
Certificate serial: 0310
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
Manifest number: 030C
Signing time: Sat 06 Dec 2025 23:43:13 +0000
Manifest this update: Sat 06 Dec 2025 23:43:12 +0000
Manifest next update: Sat 13 Dec 2025 23:43:12 +0000
Files and hashes: 1: ak_LGM3Y70HSMyE57mLo_Sc7b98.crl (hash: Pf6hDvmAN9W0wLTd3AmtbzBSxAijrsS6AroQuEjsHKc=)
2: EF1B381EF93911ECBD1E663DC4F9AE02.roa (hash: LqMQ8S/3IECVVRLn50FlnyT89fd2Q+6nyvw3xYa+ytU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl
rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 23:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 784 (0x310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199B85, serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
Validity
Not Before: Dec 6 23:43:12 2025 GMT
Not After : Dec 13 23:43:12 2025 GMT
Subject: CN=6934bf90-cbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:21:e5:ed:13:57:89:52:97:03:25:32:80:31:
13:ee:7d:c4:88:f7:c3:ba:95:1e:89:7a:69:50:5e:
75:72:33:48:2a:af:f6:8b:5c:1f:79:a5:1d:17:24:
34:dc:ad:bf:42:85:a9:9c:1e:46:8c:0d:dc:a0:01:
1a:e5:70:a6:34:3d:f6:f1:d1:42:1c:49:e9:6a:e7:
18:8e:8a:15:9d:86:48:52:5f:08:fb:8d:02:06:b1:
28:00:19:88:fe:04:a5:1f:a9:9e:32:0b:78:c5:4c:
fd:7d:30:a8:66:62:11:38:27:1a:c9:8f:ca:9b:db:
57:39:45:da:46:91:59:ec:6d:ce:ad:f3:8a:d4:ee:
87:a3:83:06:04:55:22:45:81:96:10:f6:e2:45:2c:
e2:6c:ac:da:36:e2:c0:30:2a:70:fb:40:ea:cd:59:
1d:81:37:5d:77:3c:b9:4e:f7:59:c2:83:a0:29:23:
74:91:ea:f1:c9:55:ec:68:f9:dd:63:a0:56:4c:0d:
85:8c:77:2a:12:95:66:22:de:a2:aa:97:22:dd:45:
c1:e6:66:9b:17:16:c1:7b:19:25:f9:28:9f:76:a2:
35:14:ea:ad:16:02:d4:6c:1a:e7:4c:0e:28:69:57:
68:61:ad:b3:e0:6c:7e:8a:c0:c6:34:b4:02:43:85:
35:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:44:F4:E5:E2:07:D0:12:D0:BB:0C:94:B2:95:0A:48:1D:B2:7E:46
X509v3 Authority Key Identifier:
keyid:6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:69:3d:ca:18:89:2f:48:38:69:8c:7f:35:f7:cf:a5:16:ca:
41:c3:c6:f7:7b:30:5a:31:5f:3d:9b:7f:ac:8a:ff:b1:89:dd:
53:d2:bd:35:63:5b:a0:40:20:99:c4:39:36:56:a0:aa:33:35:
84:18:f7:00:29:c9:a4:a8:79:06:7f:e5:3f:a5:65:cf:bc:04:
9e:2d:ca:e0:7a:81:f1:20:c1:27:26:d6:74:e5:e5:0c:bd:ab:
cd:de:e9:20:11:b7:51:c8:7c:5d:13:5e:73:22:e0:b4:ea:14:
96:3e:59:ec:92:1f:ec:9b:d1:25:14:67:2c:32:e0:d1:4e:17:
a3:76:3c:17:b0:81:0c:0b:6a:84:fc:31:2c:a8:da:97:59:6c:
cf:2d:6e:65:e4:a7:44:02:ff:da:aa:4e:18:04:b7:c2:97:b6:
76:38:05:b2:fb:91:cc:32:34:57:6f:0d:96:57:a3:d7:83:ff:
ab:33:9f:5f:40:87:de:d4:87:ba:01:5a:ac:40:5e:c2:e2:67:
b1:8f:d9:b1:66:01:7b:61:f3:49:72:8f:fa:7a:8c:6d:d5:80:
59:ab:1d:fb:fd:14:16:69:13:6c:3e:07:95:02:c0:70:85:8c:
37:ff:43:4d:63:1f:90:35:b6:e7:81:8a:06:ac:ed:b2:b8:bd:
29:71:db:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:25:22 2025 by rpki-client