This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
File: lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json)
Hash identifier: 4AkgY839ExOU8Iaj3iTtsuE9UbQdNrGAeuGXON3qG1w=
Subject key identifier: 67:0B:74:CB:68:B1:E0:EE:9A:EE:9A:9E:1C:C7:2E:90:76:4D:0D:F3
Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
Manifest number: 75
Signing time: Fri 05 Dec 2025 04:46:11 +0000
Manifest this update: Fri 05 Dec 2025 04:46:11 +0000
Manifest next update: Fri 12 Dec 2025 04:46:11 +0000
Files and hashes: 1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: SaA0vJLyJeWEK7XlKdhoiCcKRVh6Mz1vxkgVBbXp3bE=)
2: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: Jax3Kvx2J0ODr5GgDNYrVUtv6/aFnopa2LSsnYbiSlg=)
3: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: maMIBW8WqwpEw8k3CdK6BFRqFVm8airXL8KIFqvlGQs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Validity
Not Before: Dec 5 04:46:11 2025 GMT
Not After : Dec 12 04:46:11 2025 GMT
Subject: CN=69326393-4801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6b:13:9f:44:31:46:f6:31:cf:3a:3b:3c:83:
55:f2:b9:0d:62:30:cb:c0:3e:7b:44:61:26:ac:be:
a0:1a:fd:80:84:f7:f4:6a:ab:ea:d7:c6:39:bd:16:
86:e4:32:93:ad:eb:48:0c:95:48:d4:f1:77:ad:20:
90:a2:7e:fb:10:b4:8d:f1:9c:02:75:77:55:0f:36:
7e:71:95:f9:bc:fc:1c:86:72:40:a6:40:58:40:e6:
89:dd:1f:c3:25:74:bb:88:a9:b0:a9:3a:06:01:9d:
d3:6a:05:b7:e0:10:60:a8:2f:00:b7:3d:12:d1:80:
04:7c:15:21:70:22:8b:88:b3:03:5d:a9:b7:3c:49:
ee:a0:7f:04:4e:8a:25:d1:2f:5b:56:35:09:a4:9b:
78:a5:95:83:65:24:2d:78:76:d0:c6:6a:31:61:e1:
09:f5:c6:dd:b8:ee:87:f9:9d:40:23:16:e1:48:00:
ab:5b:2f:09:d9:62:0a:05:5a:11:63:52:bd:9f:30:
ab:37:18:7a:d1:e6:49:53:7b:3f:cd:f2:6a:51:2b:
20:b2:40:b0:29:04:a8:28:14:2c:c9:dd:53:13:76:
56:0e:3f:30:c9:d8:6f:2c:84:67:e3:75:60:5c:38:
9e:1f:69:95:bb:0f:03:28:a1:27:be:6a:84:96:1d:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0B:74:CB:68:B1:E0:EE:9A:EE:9A:9E:1C:C7:2E:90:76:4D:0D:F3
X509v3 Authority Key Identifier:
keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:45:f4:d3:99:86:45:25:80:e2:ff:f7:32:d6:3f:df:b0:ab:
fa:b9:2e:20:dc:17:67:82:a7:24:51:15:9c:a0:4f:11:7a:c2:
4b:b0:51:b8:ef:66:6c:b2:22:ca:8f:20:ae:b2:d8:cb:f9:b3:
7e:75:7c:4b:36:be:a6:c8:fb:87:80:e9:58:79:5a:3f:dd:91:
5d:ee:3b:dd:53:05:cc:0a:ad:7c:14:d6:00:b4:39:f8:15:21:
be:ff:a8:a0:ae:16:59:5c:9f:d1:63:44:27:ce:ae:67:36:8d:
98:34:2a:b3:13:38:3d:e4:ea:6b:bd:bb:8c:72:eb:ce:f7:74:
28:6d:a9:d8:e2:ff:52:87:c4:3a:28:27:8d:5e:01:4b:16:74:
f1:e1:da:19:cb:5a:1a:42:9d:65:c0:cb:81:2b:ae:27:5f:3c:
ba:59:90:70:82:54:ae:21:87:f8:80:d5:bd:e6:c5:32:cd:f0:
ae:fc:46:70:a6:1e:94:72:92:0f:d9:1c:a8:6f:9d:a7:1a:b7:
67:74:14:41:ce:7e:40:de:b2:79:5e:4f:4a:8a:f1:28:fb:5b:
36:e6:db:b3:b0:34:8c:b3:8e:0a:61:e8:b9:6f:05:46:78:ae:
54:7b:1e:16:68:f2:f7:55:3d:ab:14:4a:bb:de:70:03:a5:70:
ac:cf:e3:54
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MzdBQjExMC8GA1UEBRMoOTRDOEVGM0YyQTkyMkVFMTQ0QUE2RjBCNjY0MzZDQTQ2
NkNDNEIwQTAeFw0yNTEyMDUwNDQ2MTFaFw0yNTEyMTIwNDQ2MTFaMBgxFjAUBgNV
BAMTDTY5MzI2MzkzLTQ4MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSaxOfRDFG9jHPOjs8g1XyuQ1iMMvAPntEYSasvqAa/YCE9/Rqq+rXxjm9Fobk
MpOt60gMlUjU8XetIJCifvsQtI3xnAJ1d1UPNn5xlfm8/ByGckCmQFhA5ondH8Ml
dLuIqbCpOgYBndNqBbfgEGCoLwC3PRLRgAR8FSFwIouIswNdqbc8Se6gfwROiiXR
L1tWNQmkm3illYNlJC14dtDGajFh4Qn1xt247of5nUAjFuFIAKtbLwnZYgoFWhFj
Ur2fMKs3GHrR5klTez/N8mpRKyCyQLApBKgoFCzJ3VMTdlYOPzDJ2G8shGfjdWBc
OJ4faZW7DwMooSe+aoSWHei/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZwt0y2ix
4O6a7pqeHMcukHZNDfMwHwYDVR0jBBgwFoAUlMjvPyqSLuFEqm8LZkNspGbMSwow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzN0FCLzI2NDg0NTkwMjFG
MzExRjBBMjgxMzU3QUM0RjlBRTAyL2xNanZQeXFTTHVGRXFtOExaa05zcEdiTVN3
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbE1qdlB5cVNMdUZFcW04TFprTnNwR2JNU3dvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz
N0FCLzI2NDg0NTkwMjFGMzExRjBBMjgxMzU3QUM0RjlBRTAyL2xNanZQeXFTTHVG
RXFtOExaa05zcEdiTVN3by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFpF9NOZhkUlgOL/9zLWP9+wq/q5LiDcF2eCpyRRFZygTxF6wkuwUbjv
ZmyyIsqPIK6y2Mv5s351fEs2vqbI+4eA6Vh5Wj/dkV3uO91TBcwKrXwU1gC0OfgV
Ib7/qKCuFllcn9FjRCfOrmc2jZg0KrMTOD3k6mu9u4xy6873dChtqdji/1KHxDoo
J41eAUsWdPHh2hnLWhpCnWXAy4ErridfPLpZkHCCVK4hh/iA1b3mxTLN8K78RnCm
HpRykg/ZHKhvnacat2d0FEHOfkDesnleT0qK8Sj7Wzbm27OwNIyzjgph6LlvBUZ4
rlR7HhZo8vdVPasUSrvecAOlcKzP41Q=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:50 2025 by rpki-client