This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
File: lRaRgJV2AETnT6qlSX0GcwraXzI.mft (raw, json)
Hash identifier: +n7V8JM6GHejGc+u6AlzMyBUx0HuhRV6G1RvIuuhodU=
Subject key identifier: 97:D5:87:7C:21:9B:59:9A:5C:6E:65:DA:E9:7F:E2:33:74:96:AC:40
Authority key identifier: 95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32
Certificate issuer: /CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32
Certificate serial: 06BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
Manifest number: 06B8
Signing time: Sat 06 Dec 2025 21:08:57 +0000
Manifest this update: Sat 06 Dec 2025 21:08:57 +0000
Manifest next update: Sat 13 Dec 2025 21:08:57 +0000
Files and hashes: 1: lRaRgJV2AETnT6qlSX0GcwraXzI.crl (hash: auxSw29FlgVh+l4dZi1rGXGkAl4l6aMqAsS9VJavYq0=)
2: 589FBEDC860311EBAFE18309C4F9AE02.roa (hash: QPlmMaSOgFDznMyc1xMqSWCG5G0RLk70r7GmVWThnas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl
rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1727 (0x6bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B334D, serialNumber=9516918095760044E74FAAA5497D06730ADA5F32
Validity
Not Before: Dec 6 21:08:57 2025 GMT
Not After : Dec 13 21:08:57 2025 GMT
Subject: CN=69349b69-1c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:32:8c:0f:d3:14:c9:8e:a8:9c:fa:79:cc:
1c:3d:0b:f0:aa:6d:b9:24:e4:8c:c7:c3:99:20:d9:
2d:56:b0:13:82:62:aa:d0:3d:ab:24:e3:fb:b2:39:
b0:ff:f4:f1:b7:03:cb:7d:72:a5:88:50:58:50:8f:
15:c2:22:e6:1c:fa:38:01:af:63:95:62:2c:1b:22:
4f:ec:e2:aa:13:dd:c1:9a:53:8f:12:5c:d5:99:55:
41:ac:d0:99:63:bc:e4:df:81:38:1d:10:f8:55:43:
8d:e1:1a:50:1c:b2:62:cf:22:94:fb:46:71:7d:53:
ad:a1:a5:7b:fe:d1:97:6d:6b:d0:50:e2:e2:46:17:
57:af:3d:9a:a0:82:bb:d1:0f:6e:ad:a0:2f:2a:b6:
19:b9:4e:16:d8:58:5e:76:45:7f:32:17:50:5b:eb:
ab:ca:cb:8a:f9:4e:8d:ff:b3:9f:51:0d:75:36:d7:
d2:ec:a2:2e:75:b8:52:e3:8a:8b:42:a1:fc:56:26:
19:46:b8:b6:25:b7:11:62:08:f3:e9:f8:c0:08:c6:
ac:ce:6c:0c:b0:c9:a4:f2:7e:ea:bb:42:19:bb:e0:
07:9d:48:2a:3e:75:ef:7b:92:6a:b4:65:1a:1e:86:
e2:ff:83:81:79:5e:e3:ea:ff:14:d5:50:e8:53:13:
61:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D5:87:7C:21:9B:59:9A:5C:6E:65:DA:E9:7F:E2:33:74:96:AC:40
X509v3 Authority Key Identifier:
keyid:95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:e0:9c:16:be:3e:4d:3b:12:90:09:ff:d1:62:e0:f4:84:3e:
c1:2e:61:6c:62:c9:53:11:ab:d3:fc:69:c0:81:b2:b7:1f:af:
f3:ab:cf:1a:b9:7c:e0:9b:64:61:51:78:3a:6f:5c:da:5c:fa:
99:f0:9d:39:ff:96:39:f0:7e:24:c2:58:a3:6b:1d:98:4b:9c:
53:ad:15:42:74:fb:8b:d7:f2:f1:0f:d8:e4:12:ff:95:c6:3e:
aa:bc:f3:5d:22:2a:f1:c1:12:a7:d8:6b:d8:f2:f5:cb:fc:25:
97:6b:3d:48:7e:9c:89:28:92:9f:b7:dc:33:84:98:da:27:44:
40:51:95:95:2b:2a:c0:1a:b6:82:91:1f:c5:ba:10:0b:b5:2e:
a9:d7:dd:bd:3e:6a:35:f5:c5:36:89:2b:d7:0a:9b:25:39:ee:
48:8c:d1:cf:99:fc:22:cc:28:e0:8a:16:c8:1b:d3:55:20:b5:
5a:0f:fb:dd:c6:2b:f9:91:14:c5:5d:67:e1:8f:80:88:67:48:
57:07:18:8e:b1:99:e6:a3:0b:96:7d:16:e1:00:32:49:cb:7d:
37:19:90:4a:f3:0e:d4:14:fb:e3:d1:c1:c1:8a:91:fc:77:86:
b5:60:6c:7a:0f:51:d9:82:81:10:a7:9e:5a:cd:e7:1a:4a:0b:
a9:b9:05:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:45:41 2025 by rpki-client