This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
File: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json)
Hash identifier: +XRaDShRXq0AprmEixM02S8Y0D9Qinxsf2OPtr90HAw=
Subject key identifier: 23:2C:9C:C7:F8:27:7E:2C:BC:DE:20:85:00:52:F3:37:CC:F7:F3:68
Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76
Certificate issuer: /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
Certificate serial: 0818
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
Manifest number: 0809
Signing time: Thu 04 Dec 2025 20:06:29 +0000
Manifest this update: Thu 04 Dec 2025 20:06:29 +0000
Manifest next update: Thu 11 Dec 2025 20:06:29 +0000
Files and hashes: 1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: ds9ohLri7RystrGOITDmSmDWt03LkjKpQNj0ycWQ48Y=)
2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: wkWuHS/W7zmGTEYBssypeNIzyloTQsz7o6sC1nnuJqo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl
rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2072 (0x818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEDF7, serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
Validity
Not Before: Dec 4 20:06:29 2025 GMT
Not After : Dec 11 20:06:29 2025 GMT
Subject: CN=6931e9c5-9183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:f1:07:c4:ef:ad:57:d9:fc:0a:e1:ad:fe:
aa:05:4c:14:bc:4f:70:92:c1:52:42:91:20:ee:db:
78:a5:84:f3:5a:d3:c9:fb:a8:4a:04:3b:39:60:86:
1d:fc:dd:ed:4a:64:4e:20:36:0b:d7:a5:61:65:eb:
17:25:44:b3:7e:8d:01:49:4c:f4:b0:2c:ce:c5:4e:
01:14:6d:1a:22:c0:2d:bf:3e:5d:dd:a5:9f:ab:08:
83:2f:f7:ee:e3:66:85:6f:7d:03:f6:f5:e8:91:27:
b7:d7:4e:27:76:d9:a9:95:5c:45:60:1d:3d:5e:d7:
1e:98:8a:a1:e0:ed:a7:c4:4f:42:dc:ff:4f:96:4a:
72:9f:3d:63:d8:cb:e8:a8:cd:69:a3:cc:c5:55:f4:
58:dc:1f:06:da:cf:d1:99:dd:af:26:bd:e7:bb:47:
00:fc:b3:08:ce:2b:dd:90:e3:22:e7:73:d5:8b:a5:
a8:3d:e9:5e:b3:02:d7:bc:68:4e:de:09:f3:9d:37:
80:1c:ac:3b:3f:a8:9f:e7:97:01:34:71:10:9e:ee:
2e:f4:a0:11:c9:03:2f:de:ce:c0:86:09:e3:04:d2:
f7:20:0e:02:fd:44:53:6e:91:75:64:4f:37:90:ba:
25:66:6d:b0:a0:a6:f1:94:65:7e:b0:9a:b0:bf:b9:
8e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2C:9C:C7:F8:27:7E:2C:BC:DE:20:85:00:52:F3:37:CC:F7:F3:68
X509v3 Authority Key Identifier:
keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:f6:7f:e9:d8:35:60:32:13:89:7c:a4:95:ad:29:ae:4a:63:
96:6c:dd:da:a3:6a:cc:10:22:3f:14:fe:6b:75:44:f0:62:17:
fd:5a:34:13:31:dd:21:a6:59:35:6d:f7:11:c2:51:dd:f7:02:
2d:fe:63:5b:cf:79:73:4a:35:09:22:09:40:97:e4:9f:67:da:
3b:b7:5d:3d:b0:f9:cb:34:7a:a7:89:89:a6:7d:c5:bf:57:12:
4a:ee:c3:54:d6:bf:84:90:1e:72:f3:e8:0c:6f:28:94:60:b3:
6f:e8:83:4c:23:36:b4:c6:88:66:1b:35:13:8f:e3:0a:81:93:
b8:b3:53:63:fc:bf:be:bd:15:c4:20:23:8a:c0:dd:96:9f:5e:
69:3c:d1:ba:9d:ac:21:a8:5c:73:d4:70:4d:fc:f3:32:66:ff:
7c:8e:09:8c:cd:1a:e8:18:49:a2:2b:e1:5b:d3:50:5b:60:e0:
f5:b5:bc:ec:59:a8:42:4c:5e:52:6b:01:ff:15:b0:7d:60:90:
16:b6:47:bb:eb:06:e9:42:e9:1f:c8:bd:d3:f7:c6:4e:ee:8e:
ea:c0:eb:72:43:45:2f:42:c9:c4:46:8c:0c:ee:50:6f:d5:ef:
ae:82:94:7f:96:f3:9e:46:0e:e0:f9:6a:41:e4:6e:dd:cf:3b:
ca:1c:9c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:32:02 2025 by rpki-client