This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
File: lTUaGSeo8Q660c48bEpaxGUVynA.mft (raw, json)
Hash identifier: cX1fBXPDEREDjLgAIoeGYimsnL9xVsOi4L6dv7hko/8=
Subject key identifier: F8:76:14:F8:E4:A0:3B:D3:1A:83:F7:3C:27:0E:1A:D7:DE:9D:BA:12
Authority key identifier: 95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70
Certificate issuer: /CN=A91D4E15/serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70
Certificate serial: 01E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
Manifest number: 01E1
Signing time: Fri 05 Dec 2025 00:58:52 +0000
Manifest this update: Fri 05 Dec 2025 00:58:51 +0000
Manifest next update: Fri 12 Dec 2025 00:58:51 +0000
Files and hashes: 1: lTUaGSeo8Q660c48bEpaxGUVynA.crl (hash: bdLl6tUNJWHiy6o9kXrIG7WCor5cOJvBa3o8MFuQ37k=)
2: 90F09734F1B311EDA789BB57C4F9AE02.roa (hash: nQOUg9YX4u69ZrVdmC/H632YznQdnlGcTOZN3JI/5dE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl
rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485 (0x1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4E15, serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70
Validity
Not Before: Dec 5 00:58:51 2025 GMT
Not After : Dec 12 00:58:51 2025 GMT
Subject: CN=69322e4c-aa82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:94:93:a4:71:a9:94:dd:9b:d4:4f:4a:9e:f4:
11:8b:4f:29:f8:2b:54:75:27:f6:35:a1:50:4a:b8:
2e:16:a6:95:85:3c:79:8d:d8:d0:80:99:b2:6b:f3:
34:02:42:ad:ed:2f:ff:7a:c0:ea:91:ac:98:2e:63:
63:2c:dd:9a:7b:70:71:0a:c8:4a:70:0c:b3:bb:0d:
1a:40:a5:be:ae:5b:ba:50:41:4b:db:5b:00:83:31:
52:db:0d:6e:bf:e3:f0:09:32:bf:ae:2c:06:6a:69:
b8:6c:af:66:44:45:f7:9f:61:6b:81:46:22:c9:d3:
8d:22:89:e4:37:61:79:1b:32:df:cc:38:22:c4:96:
76:1e:6f:4f:ec:95:f7:36:49:6d:6c:8d:6c:e5:f0:
5f:17:e3:4b:d9:31:4e:77:74:70:e8:8c:f8:96:e8:
c9:0c:e6:2a:24:2e:4f:d7:6a:b0:39:6d:3f:fc:6b:
5b:b3:60:b0:97:66:94:80:0c:72:a6:9a:34:28:11:
fb:91:ef:e5:38:45:5f:65:85:48:1b:d8:27:66:b8:
1c:d9:0c:24:cc:45:42:d7:d6:d7:27:f3:f3:cf:fc:
37:cb:cc:9a:18:98:51:83:1e:25:a5:94:d9:08:fc:
f2:2b:ae:f1:d3:b7:54:be:32:c3:aa:f0:22:8f:aa:
1a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:76:14:F8:E4:A0:3B:D3:1A:83:F7:3C:27:0E:1A:D7:DE:9D:BA:12
X509v3 Authority Key Identifier:
keyid:95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:c9:12:46:17:38:c6:ef:a9:d0:c5:26:a9:49:26:ea:ea:52:
2b:9d:3b:2d:2c:6f:cb:76:d5:ba:5f:1c:05:ef:f1:07:0a:13:
d7:dc:13:26:77:2a:0b:90:8d:cd:88:ea:66:36:89:6d:a0:69:
f4:eb:0a:f4:fe:b1:ad:39:22:2d:c7:86:d1:9b:0e:fd:82:e0:
ee:ba:82:3e:03:dd:6a:da:e4:1c:fc:d1:a2:4a:08:1e:e4:a9:
48:cf:c0:2a:96:46:26:f9:7f:d4:d4:b6:f6:cd:11:49:ed:af:
59:74:b0:cf:cc:90:d4:ca:6f:18:9a:43:69:6d:2c:d0:da:e5:
d6:5f:88:6f:c8:3a:24:c9:3a:e0:67:ca:b2:ae:a8:4d:7b:cc:
8e:e1:41:26:fc:48:24:bb:78:b8:65:2d:6c:4f:8e:0b:a9:cb:
42:72:bb:8e:23:3c:63:3d:b3:ac:d8:69:02:7f:1e:62:db:b1:
a3:12:48:77:7a:9f:5a:d5:82:86:f5:cb:6c:31:33:f4:0f:8b:
38:0f:21:34:88:03:85:3c:a7:c7:ea:ed:fd:69:55:05:7f:67:
e8:dc:4f:1c:10:b7:b5:50:3b:1b:5e:6f:73:b4:12:bb:6d:51:
6f:b9:b7:39:e4:95:eb:3c:7c:64:d9:1b:26:51:fb:04:82:c5:
e8:b5:53:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:28:37 2025 by rpki-client