This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
File: LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft (raw, json)
Hash identifier: 6VsMZwu7qVN3fYdQ2wycTnAesHu3QuUQu3+5uKCWtCk=
Subject key identifier: 78:85:85:E3:B8:6C:73:22:F1:93:37:11:EE:02:9D:63:FF:CC:F5:0B
Authority key identifier: 2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F
Certificate issuer: /CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F
Certificate serial: 0676
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
Manifest number: 095D
Signing time: Thu 04 Dec 2025 21:22:28 +0000
Manifest this update: Thu 04 Dec 2025 21:22:27 +0000
Manifest next update: Thu 11 Dec 2025 21:22:27 +0000
Files and hashes: 1: LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl (hash: uePaWJQPf5F1y+evyEy1dd5qGFLTNc1WlBhF2mtGIPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl
rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1654 (0x676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE75F, serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F
Validity
Not Before: Dec 4 21:22:27 2025 GMT
Not After : Dec 11 21:22:27 2025 GMT
Subject: CN=6931fb93-1470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:53:4f:05:70:ea:21:89:bd:30:95:11:5e:
57:7a:e0:d0:f9:ce:82:41:ae:42:2f:8a:cd:b8:37:
3c:10:2d:8e:9f:33:be:00:77:55:b0:0e:5a:aa:aa:
e0:bb:a3:2c:da:85:25:aa:db:1b:40:f3:bc:f1:b3:
ba:51:ff:e0:7a:05:7e:b4:39:ad:9b:1c:6e:d3:94:
4e:fa:6d:b3:56:c7:98:48:94:bf:f6:b4:ad:18:cc:
41:99:c0:d4:74:71:44:06:e6:44:9e:53:4b:75:65:
4f:8c:67:7f:bd:77:e5:3c:7c:3a:45:02:f8:6b:33:
20:e7:57:4b:67:66:65:16:d4:6c:91:5b:e5:8d:2c:
a7:00:90:ad:e5:ad:52:38:50:62:4d:13:f9:4c:0a:
bb:2b:97:35:9e:7f:e0:f1:76:53:7a:21:f6:de:47:
67:f3:48:64:4d:13:f2:e3:ce:88:6e:30:6c:09:0c:
53:d1:00:28:d2:49:66:3d:14:d7:66:1e:1a:48:95:
df:01:e1:11:86:35:76:4c:f5:89:cb:1d:a3:62:09:
b0:88:21:ad:98:68:5c:dd:44:7c:8b:f6:2b:4f:df:
3c:1b:17:cd:da:c7:0c:02:26:d1:35:aa:5e:13:7e:
6d:13:cc:b9:8f:f4:97:33:97:0b:6c:4b:c5:36:ba:
53:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:85:85:E3:B8:6C:73:22:F1:93:37:11:EE:02:9D:63:FF:CC:F5:0B
X509v3 Authority Key Identifier:
keyid:2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:67:f7:62:6d:c2:07:88:5f:ff:5e:0f:48:e8:23:ed:7c:78:
8a:9c:5e:cf:5c:5a:06:c7:ce:12:be:1f:0e:b1:fa:9b:48:91:
75:c3:ec:41:29:52:dc:7b:4a:2c:59:1d:6d:e0:37:e9:9b:20:
d5:cd:af:cf:10:d2:f5:5d:5a:bb:8f:88:75:f0:22:1a:f0:1a:
aa:57:31:7c:63:6c:55:6e:b6:57:f5:3e:34:6d:1c:64:62:0b:
e1:20:ab:f0:b8:e9:ab:89:61:a4:85:c4:4c:c2:a4:c3:8e:47:
70:71:c3:fc:64:f8:ff:33:90:b4:61:6f:6d:37:fd:7f:e7:f2:
10:30:c1:ab:64:7d:7c:21:98:32:6b:1c:eb:98:0d:57:7a:d8:
b1:7a:f8:22:0c:4c:3a:82:66:ac:64:cf:05:60:c3:2b:75:2d:
d5:b6:aa:86:71:e3:1b:7f:a9:63:a2:f9:21:5d:3b:4a:7b:55:
62:54:f4:c3:3d:92:4c:2e:18:bf:e5:af:93:8a:c7:72:1f:7c:
cc:14:b4:62:e3:21:2b:30:0a:81:55:f0:aa:c2:92:cb:8f:1d:
09:d9:76:1e:9e:1c:6d:fc:40:da:93:e4:9c:50:be:71:b3:78:
c9:6b:6f:e8:27:32:29:cd:70:d4:3f:b3:5e:1e:dc:9d:02:74:
4f:41:dd:fe
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3NUYxMTAvBgNVBAUTKDJEQjZGMDEzNjVCMzU5RTMwQUE4MTczRjVENEE3MjhD
N0U4NUVBNUYwHhcNMjUxMjA0MjEyMjI3WhcNMjUxMjExMjEyMjI3WjAYMRYwFAYD
VQQDEw02OTMxZmI5My0xNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr81TTwVw6iGJvTCVEV5XeuDQ+c6CQa5CL4rNuDc8EC2OnzO+AHdVsA5aqqrg
u6Ms2oUlqtsbQPO88bO6Uf/gegV+tDmtmxxu05RO+m2zVseYSJS/9rStGMxBmcDU
dHFEBuZEnlNLdWVPjGd/vXflPHw6RQL4azMg51dLZ2ZlFtRskVvljSynAJCt5a1S
OFBiTRP5TAq7K5c1nn/g8XZTeiH23kdn80hkTRPy486IbjBsCQxT0QAo0klmPRTX
Zh4aSJXfAeERhjV2TPWJyx2jYgmwiCGtmGhc3UR8i/YrT988GxfN2scMAibRNape
E35tE8y5j/SXM5cLbEvFNrpTyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiFheO4
bHMi8ZM3Ee4CnWP/zPULMB8GA1UdIwQYMBaAFC228BNls1njCqgXP11Kcox+hepf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc1Ri9BQjlFQjhDQUE5
RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldlTUtxQmNfWFVweWpINkY2
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xiYndFMld6V2VNS3FCY19YVXB5akg2RjZsOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RTc1Ri9BQjlFQjhDQUE5RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldl
TUtxQmNfWFVweWpINkY2bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAnZ/dibcIHiF//Xg9I6CPtfHiKnF7PXFoGx84Svh8OsfqbSJF1w+xB
KVLce0osWR1t4DfpmyDVza/PENL1XVq7j4h18CIa8BqqVzF8Y2xVbrZX9T40bRxk
YgvhIKvwuOmriWGkhcRMwqTDjkdwccP8ZPj/M5C0YW9tN/1/5/IQMMGrZH18IZgy
axzrmA1XetixevgiDEw6gmasZM8FYMMrdS3VtqqGceMbf6ljovkhXTtKe1ViVPTD
PZJMLhi/5a+TisdyH3zMFLRi4yErMAqBVfCqwpLLjx0J2XYenhxt/EDak+ScUL5x
s3jJa2/oJzIpzXDUP7NeHtydAnRPQd3+
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:39:30 2025 by rpki-client