This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
File: LPF-aFt4j16uSgHViDUmG18LLqQ.mft (raw, json)
Hash identifier: 6EJbqP0OPlrHrF37MAYQQKNzlt0f6/rVlipyek42l60=
Subject key identifier: DD:F0:48:52:DC:F8:E9:1A:7E:68:B8:3C:A2:5B:8F:65:59:54:65:5C
Authority key identifier: 2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4
Certificate issuer: /CN=A91FABEF/serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4
Certificate serial: 014F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
Manifest number: 014F
Signing time: Fri 05 Dec 2025 02:20:58 +0000
Manifest this update: Fri 05 Dec 2025 02:20:57 +0000
Manifest next update: Fri 12 Dec 2025 02:20:57 +0000
Files and hashes: 1: LPF-aFt4j16uSgHViDUmG18LLqQ.crl (hash: CO2/+uxp91oub13oAj6C/6Guk71Y8DLMJKKNGvbJWMs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl
rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FABEF, serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4
Validity
Not Before: Dec 5 02:20:57 2025 GMT
Not After : Dec 12 02:20:57 2025 GMT
Subject: CN=69324189-0cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:67:7d:6e:eb:d7:56:a5:a2:63:31:35:15:
8e:1e:5b:9f:84:2b:57:04:11:ca:69:6a:6b:5a:8b:
17:53:f4:dd:3d:e0:5a:c8:6a:c4:e4:4a:6f:61:6e:
be:87:f9:78:64:7c:fb:7c:3f:69:1e:49:5c:1c:11:
c7:04:58:a7:fb:f9:df:a5:9b:c9:a1:9f:6f:69:b2:
d5:01:0e:ed:2b:42:54:f1:39:35:bd:4d:be:74:fa:
c2:71:61:88:03:9b:85:1e:0c:a4:0c:03:56:ee:b0:
95:ce:d4:96:09:12:79:03:bb:a6:6c:29:e0:50:29:
1a:0d:33:9f:fd:d5:93:6d:84:a1:7a:c2:30:38:4e:
aa:63:64:b3:28:c8:ec:6f:8d:01:10:45:7c:71:91:
60:f2:9b:19:50:dc:5e:c2:1b:f8:51:53:15:c5:f9:
74:bb:7c:fa:f1:5a:d3:d7:1d:d9:bc:76:4b:5b:88:
a6:02:db:25:8a:ae:aa:bc:a4:09:09:0a:14:de:e0:
46:d1:7e:d0:4b:8d:fa:fe:77:0a:a9:94:dc:70:f9:
8e:d0:ed:66:b5:c1:11:b0:2d:de:0e:46:61:d9:e3:
65:26:32:58:ee:5c:19:53:30:29:08:6f:f6:f1:81:
5d:d4:4c:34:3c:35:89:05:77:2e:38:b3:29:20:c6:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F0:48:52:DC:F8:E9:1A:7E:68:B8:3C:A2:5B:8F:65:59:54:65:5C
X509v3 Authority Key Identifier:
keyid:2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:53:80:1c:57:b5:a8:70:84:10:bb:d3:28:95:36:f8:df:6f:
95:f0:48:9e:dd:9f:39:fc:f8:05:c2:69:e5:26:29:ac:31:39:
39:a2:a1:f4:c1:ea:14:be:2c:1c:af:a2:4c:b0:57:ee:3d:d7:
39:d8:c5:25:05:bf:bd:da:ed:ff:89:51:97:7f:b4:20:6b:0e:
e6:ea:ce:7c:ea:e1:a2:01:27:54:76:3b:94:1b:b2:10:55:63:
47:95:b6:7b:05:1c:2a:67:81:df:8d:b9:25:c5:35:73:47:cd:
25:6e:55:d2:c0:c4:ff:d2:4f:fa:24:f4:8f:68:e7:77:84:72:
4f:d7:0c:9a:c8:ae:b4:6b:f8:b9:cd:fd:8e:21:62:4c:5b:6b:
51:00:e9:e1:af:90:03:df:86:68:2f:7a:f7:79:fb:09:24:f0:
f4:21:56:7d:28:ca:3e:fc:ed:d7:c5:85:f8:57:07:be:83:48:
f4:e2:d4:d6:3a:54:93:3c:52:9d:ed:2a:e2:98:50:2f:fe:67:
1c:5a:51:7c:6f:54:21:c7:0e:1f:36:01:48:46:07:55:50:5c:
57:57:8a:02:c9:de:d1:37:96:8a:21:66:5c:03:98:8c:24:b9:
7b:d4:34:16:2f:f4:48:d0:0d:30:3c:51:15:bc:4a:8f:eb:35:
17:6e:72:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:51:23 2025 by rpki-client