This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
File: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json)
Hash identifier: sIZybtmYhCUR/1x9LXStM781/UsHv2br448pjd3ceVg=
Subject key identifier: CA:4F:29:A1:E4:DE:58:0A:76:2A:F0:15:EA:3C:F1:65:05:FA:AA:E9
Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
Certificate issuer: /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
Manifest number: B0
Signing time: Fri 05 Dec 2025 04:05:10 +0000
Manifest this update: Fri 05 Dec 2025 04:05:10 +0000
Manifest next update: Fri 12 Dec 2025 04:05:10 +0000
Files and hashes: 1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: Xm1Yq2+HTMC1LLCGUPX8G3HfcH2eHOVhcv+86jezIr4=)
2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: kwAnzY8sy28GuHuTAHp4dfauwLru447J5nFlWPhA168=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Validity
Not Before: Dec 5 04:05:10 2025 GMT
Not After : Dec 12 04:05:10 2025 GMT
Subject: CN=693259f6-22dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:cb:7d:31:0a:0a:9e:76:e0:a4:33:e6:81:
b8:55:ef:57:88:e9:79:12:c0:d3:70:ff:70:b9:e5:
09:29:12:e9:45:db:ae:3f:47:21:46:0b:65:09:53:
f9:0d:6a:d1:fc:29:b9:d9:66:28:be:ce:17:63:b8:
7e:16:03:c5:40:20:70:28:5f:b3:80:49:4c:d5:c9:
87:bb:67:0e:bc:68:77:b0:e9:bc:db:71:ae:86:51:
46:be:76:cf:78:e2:05:8b:0d:5b:3a:e8:54:71:7d:
29:3c:c6:6d:1f:36:8b:07:d8:84:41:a0:77:d1:41:
86:cb:18:1b:19:c1:fd:b6:e4:7b:d0:8c:f5:4a:70:
5e:f9:56:f7:b5:64:81:74:44:e1:b1:5a:4a:91:da:
62:bc:9e:1d:b8:b8:0f:15:b4:01:f2:d2:4e:ec:bd:
19:2c:6d:93:7d:96:61:ae:7d:a3:f6:d3:ef:58:ee:
88:72:7d:38:c9:c8:e8:e7:c3:75:b7:d0:5c:f4:31:
83:0a:c6:68:15:78:5c:8a:73:51:ef:16:c4:aa:f5:
72:71:48:ca:87:67:33:e6:34:7e:84:b8:30:4c:41:
26:2e:2c:14:64:5f:f8:50:10:36:54:b4:2e:88:36:
f0:dd:53:be:ef:59:cd:54:21:72:37:f0:c1:9b:03:
8b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4F:29:A1:E4:DE:58:0A:76:2A:F0:15:EA:3C:F1:65:05:FA:AA:E9
X509v3 Authority Key Identifier:
keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:ab:24:30:7a:32:5b:cb:50:73:05:d9:96:48:54:70:a5:10:
4c:53:da:3f:4a:fa:ec:6e:fe:cc:f8:42:e7:f6:1e:17:d2:ba:
f2:5a:2e:c3:d2:fa:09:69:8f:92:83:bd:47:4b:bb:59:a2:c3:
65:2a:bf:8f:67:14:8c:af:54:af:9f:b3:e1:5c:a8:0b:c1:32:
12:f6:c2:e3:0f:23:a4:72:34:1b:31:27:d5:f5:9f:b2:28:af:
8e:ad:e0:37:6a:31:cb:9b:89:b8:2b:df:05:3f:75:a6:67:b4:
dc:d0:1d:b8:4d:c7:52:d7:1e:fd:a4:48:2d:36:b5:bf:f1:25:
c3:0b:0a:6c:8e:4b:71:2d:5e:59:e9:b2:57:d6:2e:dd:99:92:
d7:11:3e:7d:96:9e:a1:22:9c:ce:e7:2d:bf:d6:cc:cd:97:a1:
7e:ee:21:aa:75:e3:b6:14:ae:ca:85:db:d3:50:a3:9b:99:3b:
41:7c:34:d4:8d:dd:fa:3e:cc:f7:46:ce:9f:8d:dd:c6:7f:d5:
ea:6d:58:e0:75:66:a8:13:21:5e:1b:86:e9:0c:62:55:ce:5a:
40:ed:ec:23:ad:ce:0a:4e:3d:b9:49:c2:1a:70:b6:ef:eb:15:
ae:39:3d:6f:e4:be:2c:d0:83:32:db:87:1e:75:af:f0:c3:7c:
04:37:a0:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUYyMDcxMTAvBgNVBAUTKDJEMjIzQjU2RUQ0RDE3QTgxNzhGRTlGQzYzRTM4MDFB
OTNCNUExRDMwHhcNMjUxMjA1MDQwNTEwWhcNMjUxMjEyMDQwNTEwWjAYMRYwFAYD
VQQDEw02OTMyNTlmNi0yMmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArHjLfTEKCp524KQz5oG4Ve9XiOl5EsDTcP9wueUJKRLpRduuP0chRgtlCVP5
DWrR/Cm52WYovs4XY7h+FgPFQCBwKF+zgElM1cmHu2cOvGh3sOm823GuhlFGvnbP
eOIFiw1bOuhUcX0pPMZtHzaLB9iEQaB30UGGyxgbGcH9tuR70Iz1SnBe+Vb3tWSB
dEThsVpKkdpivJ4duLgPFbQB8tJO7L0ZLG2TfZZhrn2j9tPvWO6Icn04ycjo58N1
t9Bc9DGDCsZoFXhcinNR7xbEqvVycUjKh2cz5jR+hLgwTEEmLiwUZF/4UBA2VLQu
iDbw3VO+71nNVCFyN/DBmwOLjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpPKaHk
3lgKdirwFeo88WUF+qrpMB8GA1UdIwQYMBaAFC0iO1btTReoF4/p/GPjgBqTtaHT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjIwNy9BQ0IwNjg1RUMy
MjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9MU0k3VnUxTkY2Z1hqLW44WS1PQUdwTzFv
ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xTSTdWdTFORjZnWGotbjhZLU9BR3BPMW9kTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjIwNy9BQ0IwNjg1RUMyMjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9MU0k3VnUxTkY2
Z1hqLW44WS1PQUdwTzFvZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZqyQwejJby1BzBdmWSFRwpRBMU9o/Svrsbv7M+ELn9h4X0rryWi7D
0voJaY+Sg71HS7tZosNlKr+PZxSMr1Svn7PhXKgLwTIS9sLjDyOkcjQbMSfV9Z+y
KK+OreA3ajHLm4m4K98FP3WmZ7Tc0B24TcdS1x79pEgtNrW/8SXDCwpsjktxLV5Z
6bJX1i7dmZLXET59lp6hIpzO5y2/1szNl6F+7iGqdeO2FK7KhdvTUKObmTtBfDTU
jd36Psz3Rs6fjd3Gf9XqbVjgdWaoEyFeG4bpDGJVzlpA7ewjrc4KTj25ScIacLbv
6xWuOT1v5L4s0IMy24ceda/ww3wEN6Bs
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:12:49 2025 by rpki-client