This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
File: lSamckeK-nVEXY0H3MV8BYlm7-I.mft (raw, json)
Hash identifier: 7SzaeiLXSTZFTTX/xWL/61FVZlIsW6+9iHOAy81UVHM=
Subject key identifier: ED:B9:F4:1E:3A:33:66:F6:CD:EB:FF:8E:82:BB:E6:7D:85:11:88:C8
Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2
Certificate issuer: /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
Certificate serial: 028F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
Manifest number: 0287
Signing time: Sun 07 Dec 2025 00:06:20 +0000
Manifest this update: Sun 07 Dec 2025 00:06:20 +0000
Manifest next update: Sun 14 Dec 2025 00:06:20 +0000
Files and hashes: 1: lSamckeK-nVEXY0H3MV8BYlm7-I.crl (hash: yzmnoyvVbTspJvMvxyDWVAxfvtOHOHUlBrXTWNmdl4M=)
2: 6F46908C2D3411ED92165562C4F9AE02.roa (hash: sR0eTjFYTlKs7mzVHMIl7telIMsp7nYju6MlYaiMBkg=)
3: 6E98B3182D3411ED92165562C4F9AE02.roa (hash: 64gg/L8X7dQV3AAOAv3MN1klInujbmxMEcZ9X63m+I4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl
rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655 (0x28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA1BE, serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
Validity
Not Before: Dec 7 00:06:20 2025 GMT
Not After : Dec 14 00:06:20 2025 GMT
Subject: CN=6934c4fc-aeb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:eb:bd:8a:85:13:fc:32:a3:4a:b3:14:80:2a:
f4:98:7a:4b:c9:8b:67:c3:bf:7f:60:6f:f0:fe:7f:
de:ee:73:d1:21:17:3d:0e:c7:db:ac:06:fb:91:5b:
f4:61:0f:c1:b0:6a:eb:d1:d6:71:90:71:74:37:27:
1c:db:33:f5:15:e2:97:f8:83:80:97:64:a7:04:80:
38:a5:8f:61:91:7b:d6:35:1a:31:db:f5:db:85:18:
f1:6a:b3:e8:b1:49:5a:79:64:74:bc:52:7c:12:08:
83:ed:1d:52:e6:4e:26:c6:61:94:63:21:23:89:48:
29:51:c7:f6:ec:5a:de:4f:35:29:f7:d4:f1:03:00:
5f:62:c1:69:29:c3:d3:ce:26:b4:1c:70:f9:ad:3f:
1d:19:82:ff:2b:c6:86:c8:d2:61:26:9f:ce:34:e3:
3a:2f:cb:9b:c3:a8:e3:7f:1c:6c:8a:95:19:a3:68:
9c:2f:b0:f0:17:d8:0f:ed:5c:bc:b8:a7:77:02:d6:
7f:38:14:02:85:25:04:0b:7a:3d:bc:0e:65:73:0f:
07:44:ca:5c:5f:4a:11:c4:f3:03:b6:2c:3c:86:6c:
3f:b0:9b:77:0c:e1:b2:80:7a:b2:9c:ca:97:89:16:
e4:ca:9e:f7:93:22:67:85:57:ef:0e:c2:0d:66:a0:
2b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B9:F4:1E:3A:33:66:F6:CD:EB:FF:8E:82:BB:E6:7D:85:11:88:C8
X509v3 Authority Key Identifier:
keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5a:07:fc:56:60:fb:16:34:94:44:07:45:84:ad:b0:c5:1a:
94:c5:c8:5b:55:ec:c3:2d:c8:16:e1:f5:3d:45:d1:2e:98:9a:
4d:54:3c:ec:c0:1c:20:fd:49:ab:88:a8:c6:d0:ea:32:3f:1b:
f6:36:83:5c:7f:5b:39:f4:5f:95:f3:74:51:92:c4:b7:24:e5:
2c:84:68:cd:bf:c7:dc:50:bd:8f:05:77:27:77:a2:59:c7:17:
1e:e5:bd:57:88:06:f2:ed:07:87:e5:61:28:9d:f3:69:e6:3e:
c5:3d:c0:c7:ad:54:44:2f:31:f2:bb:b4:15:aa:7a:b9:97:94:
91:76:50:45:d8:24:36:c8:64:c1:ef:ec:63:19:9c:e2:cc:55:
af:fd:f9:89:48:8e:7b:41:01:6a:48:b6:8a:db:fd:84:3f:47:
7d:70:2a:22:8d:78:4b:29:26:1a:f5:cd:d4:14:ae:be:d8:91:
5a:2b:00:09:ec:36:6a:3a:1b:cb:04:33:36:02:27:a3:10:18:
ad:c0:c3:26:77:cd:87:91:af:f7:8f:df:27:c8:a3:1b:d5:a4:
60:3c:fe:d7:11:6f:0c:39:7c:29:68:1b:c4:23:a2:c1:12:cd:
f4:e1:1e:77:03:20:bd:ce:9b:b5:c0:6d:33:71:97:bb:ba:6c:
96:61:2b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:30:23 2025 by rpki-client