This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
File: lVqjNNYHfBfALW18rdIVmRIeTvo.mft (raw, json)
Hash identifier: dMVDl4v81INEcmkwUb3FbRZW+ohxS2kT+br1CbOxAk4=
Subject key identifier: 16:D3:7C:64:ED:11:6B:AB:19:87:CA:DE:D4:CC:C6:4C:1C:18:E3:AF
Authority key identifier: 95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
Certificate issuer: /CN=A91D01AF/serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Certificate serial: 083C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
Manifest number: 0834
Signing time: Thu 04 Dec 2025 19:52:41 +0000
Manifest this update: Thu 04 Dec 2025 19:52:41 +0000
Manifest next update: Thu 11 Dec 2025 19:52:41 +0000
Files and hashes: 1: lVqjNNYHfBfALW18rdIVmRIeTvo.crl (hash: 8Bk7ayfmB0fC1tmVVlQH44aJF67bKa6G11TmR97NciY=)
2: AD797FA2F17E11EAA3CC597BC4F9AE02.roa (hash: FrUF8k+q0iQX/Bos2myD8zLROjp2eOpyug9lyw9AGzE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2108 (0x83c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D01AF, serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Validity
Not Before: Dec 4 19:52:41 2025 GMT
Not After : Dec 11 19:52:41 2025 GMT
Subject: CN=6931e689-fb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:ff:9c:39:5e:44:6a:73:df:09:32:7c:10:
dc:31:f4:56:3f:08:a3:ae:53:47:24:5d:72:88:07:
8b:8b:c7:d4:d3:d6:46:94:76:f8:9f:35:ce:0a:1a:
94:a1:b5:39:9d:31:6c:2d:ea:f1:24:f2:61:d6:ff:
06:4d:d2:f2:0a:ef:52:33:55:60:d7:38:4a:dd:06:
39:b7:83:03:30:c0:89:88:74:48:d9:99:f4:78:8f:
ee:14:15:73:d6:61:eb:8e:c4:15:d1:36:b1:3a:44:
85:75:f5:d9:c0:7f:71:0a:62:90:69:4e:55:7b:e3:
04:db:34:61:25:3a:dd:f3:86:2e:32:a1:56:f9:19:
47:83:aa:df:52:1f:ac:36:73:42:9a:54:2f:19:bc:
f4:38:fc:6d:c0:20:26:f9:d9:74:91:07:27:c9:bb:
b0:06:ce:6b:f3:61:83:71:62:36:97:6b:bc:14:9f:
5f:9f:6e:9f:c4:74:f6:20:19:60:4d:73:50:3e:35:
18:64:7d:a6:6f:4b:76:4a:3e:12:6a:25:ff:f8:0f:
f2:73:7d:26:a1:28:32:72:00:a8:a0:8e:b4:bf:d6:
05:eb:e9:d8:e6:64:61:6d:1c:74:c1:cb:f5:82:3b:
e2:57:d9:e7:28:14:7c:05:fe:f1:ba:fd:c9:6b:3c:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D3:7C:64:ED:11:6B:AB:19:87:CA:DE:D4:CC:C6:4C:1C:18:E3:AF
X509v3 Authority Key Identifier:
keyid:95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:24:be:7f:3b:fc:d9:a7:bf:80:bf:34:2e:5c:6d:7c:39:69:
01:95:2d:fb:2e:27:c7:f6:26:ed:6c:64:a9:a7:79:eb:41:f4:
d2:f3:3d:17:da:45:f2:a1:9c:a7:81:b7:3c:db:2c:a2:60:36:
4e:14:27:05:c8:8d:a3:91:ff:ff:de:f8:9e:17:09:1e:62:1b:
06:c8:ce:b9:79:22:af:0b:16:23:d6:70:a5:d8:69:6e:21:52:
53:7d:b9:e5:c4:80:d7:9d:46:3e:8f:cb:d3:36:25:5f:03:35:
c2:7c:2d:9d:19:03:0b:4d:46:ea:d0:0b:3e:3b:fa:3f:d4:b3:
8b:11:25:60:eb:91:14:67:a3:f7:76:3e:fb:50:a4:e3:af:8b:
88:eb:aa:95:9d:dc:9b:64:27:93:48:4e:20:f2:2e:29:6e:70:
c2:1c:6e:48:5f:06:f2:0c:1c:16:54:b0:40:c9:cd:da:29:ea:
07:58:bc:67:fb:65:91:8e:76:42:da:10:00:6c:c8:0e:bf:0b:
d7:cf:f0:fe:45:70:02:bd:cf:be:cc:84:1c:b5:7d:8d:ad:a1:
9c:33:f8:40:16:04:3a:68:e9:75:77:0f:56:2c:fb:75:34:21:
a9:17:15:8b:4f:89:bc:66:c1:b2:2a:0a:1a:07:e5:6c:5c:88:
b6:a7:fc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:05:11 2025 by rpki-client