This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
File: LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft (raw, json)
Hash identifier: TgF0RLbD5rpxXZM9r2EhRIwXKb0SWeJ+EuoYO4u8CKA=
Subject key identifier: 3F:C2:CA:6C:62:F5:24:91:42:10:97:50:52:55:A8:BF:F6:A1:4C:65
Authority key identifier: 2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3
Certificate issuer: /CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3
Certificate serial: 0BF4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
Manifest number: 0BEA
Signing time: Sat 06 Dec 2025 18:11:32 +0000
Manifest this update: Sat 06 Dec 2025 18:11:31 +0000
Manifest next update: Sat 13 Dec 2025 18:11:31 +0000
Files and hashes: 1: LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl (hash: GXqb8ERn2H/Qj69n9Afjs9Ds9PwInbzAnCfaXqZ4XVQ=)
2: E40A00021F9311ECAF64925DC4F9AE02.roa (hash: IpF3dE92/TbQ62Lm9/2a1/eIhWDEF6cu9VkkblkvmV8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl
rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3060 (0xbf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9EBB, serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3
Validity
Not Before: Dec 6 18:11:31 2025 GMT
Not After : Dec 13 18:11:31 2025 GMT
Subject: CN=693471d4-00e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:91:bf:64:a2:ca:8d:89:4a:0b:8f:6d:c7:
f4:54:5e:2a:1a:cb:3b:cf:67:6d:5b:24:68:10:57:
a4:c7:e6:26:5e:f1:76:b6:44:de:bc:d3:06:0f:62:
45:98:a3:48:90:9a:e9:ec:b0:c8:86:fd:b5:61:2c:
ba:cf:48:45:1e:bb:b7:5c:24:3a:6a:5c:69:9a:ff:
7c:0f:ac:8e:b9:49:6b:8d:11:a9:e5:b2:49:f6:f9:
71:be:bc:4b:1c:4c:ae:98:3d:8c:8f:f3:2a:fe:df:
0e:52:9e:01:7d:ab:6a:42:98:a9:84:46:cb:c2:44:
c0:5e:81:51:07:9e:b4:e3:d6:59:c8:3f:7a:69:cf:
5b:8b:a1:84:2b:19:6c:6b:2c:91:b0:e0:4b:da:b4:
6e:5b:c8:6a:b4:fc:27:ad:74:92:d5:59:77:bc:d3:
65:76:5a:5a:ab:b1:3e:cd:99:c9:72:2d:93:bf:7e:
51:b4:99:56:f0:93:83:42:a7:e0:86:c0:e4:4c:4a:
7d:86:dc:de:0e:cf:9a:31:9a:2b:99:bf:db:cd:77:
b0:63:34:63:d3:29:46:21:f1:6e:6f:ee:f4:7f:49:
6a:96:e2:61:0e:6e:fe:21:5d:53:6c:07:2d:58:a2:
9d:e3:dd:e5:39:5f:4f:f0:cd:8e:3a:85:e6:51:db:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C2:CA:6C:62:F5:24:91:42:10:97:50:52:55:A8:BF:F6:A1:4C:65
X509v3 Authority Key Identifier:
keyid:2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:99:b0:15:3a:49:3a:61:80:31:19:8c:b7:c6:06:6f:8c:8c:
7c:41:91:ef:7f:30:5f:6f:5c:ea:c2:c0:ca:b2:1b:20:ea:b6:
25:88:67:1b:d8:6f:56:ed:c2:c9:5d:79:73:d8:ed:ec:3c:83:
50:21:da:c7:58:2c:92:67:9e:1a:c6:dd:7e:48:8d:e7:2a:1f:
d4:87:bd:23:59:bc:56:d8:fd:bf:7b:a0:75:bf:c7:99:5a:23:
7c:60:76:f5:a0:04:4d:78:d1:36:2c:38:7f:cb:00:ea:96:48:
b1:a6:ea:e9:ef:aa:01:4e:da:a0:29:ea:af:f0:bd:35:33:92:
06:07:33:4c:f5:1c:fc:9c:56:88:6b:06:a9:1b:55:f3:43:0d:
2a:e5:8c:3d:d2:b9:df:96:db:32:07:46:1c:2d:d3:37:ad:df:
28:da:4e:c7:a4:2b:4f:93:a2:50:c7:e1:6b:c8:3d:f7:65:a7:
02:74:13:9e:5e:ac:04:62:dc:c5:82:29:f2:21:a2:07:ec:fc:
bf:4e:7e:4a:85:81:81:06:47:c3:d3:9b:ff:df:43:46:c3:94:
cb:68:fc:74:93:fd:55:e8:c9:91:8b:5f:6b:89:79:a7:9d:f8:
97:99:34:7f:3b:f9:64:33:7a:00:40:10:72:ad:6e:f1:86:3e:
3d:a2:4c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:43:38 2025 by rpki-client