This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
File: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json)
Hash identifier: kUrZGOM5DBWacgySlZWDNOxHigXDn2IhoMAwihClSSQ=
Subject key identifier: 56:6E:1A:7F:6D:B8:72:1C:79:07:0A:B2:9C:2C:30:73:96:7A:DD:B0
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 4827
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Subject info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
Manifest number: 481C
Signing time: Sat 06 Dec 2025 15:11:43 +0000
Manifest this update: Sat 06 Dec 2025 15:11:43 +0000
Manifest next update: Sat 13 Dec 2025 15:11:43 +0000
Files and hashes: 1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: mb63jRf19Tt5/hh3DEwTFL8w5qOPm/mAq0fnB61iAY4=)
2: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (hash: NRcDr6REbVzbTiHoNzZyK4YoKwtLqg9UeS+C5SRci4o=)
3: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: fxyUaruAjaaco/fzq2Q5nRs7XM9NtVdLWIcLFflk+gY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18471 (0x4827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Dec 6 15:11:43 2025 GMT
Not After : Dec 13 15:11:43 2025 GMT
Subject: CN=693447af-87cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:87:22:18:76:af:5a:60:f5:75:f4:7b:e7:06:
8d:ab:b2:f3:5d:ee:bd:0c:d0:70:3c:50:7a:72:55:
a9:b5:e9:2b:d4:10:c2:17:2a:d6:da:4c:3e:e9:52:
45:8c:6e:33:27:8e:d5:75:4c:79:f6:92:bf:2c:0e:
ad:ca:1e:f6:df:2c:8b:fa:69:14:45:37:67:07:c8:
06:6e:87:b7:31:b2:a1:01:71:1c:07:98:c1:e2:bb:
40:4e:d2:92:95:e6:1d:f2:97:b0:2f:b6:3f:fe:f8:
d8:cc:9c:e9:5e:f9:12:dd:66:29:4e:67:ea:c4:58:
31:cb:49:36:84:ab:7d:ba:1c:4d:47:c2:63:93:2b:
ee:1a:6c:af:a5:d7:1d:66:c7:b1:98:dc:ce:39:39:
d3:df:71:d2:c3:68:ba:79:69:a3:2a:f0:04:ed:84:
44:d9:84:75:4f:b2:4d:8f:f5:2e:1f:76:dc:a2:8e:
5c:e1:5d:92:b4:86:f6:23:8a:76:87:6d:a7:69:22:
77:71:da:c0:a7:02:39:96:ac:2d:b5:2a:93:dd:cd:
5e:5d:4e:5f:e2:12:9f:ac:e3:e8:98:dc:d2:41:74:
50:ad:54:fa:d6:a6:1d:91:6f:12:40:9c:2d:71:7f:
4e:5b:2c:73:ae:85:32:bb:9a:13:48:9a:38:1c:0a:
1f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6E:1A:7F:6D:B8:72:1C:79:07:0A:B2:9C:2C:30:73:96:7A:DD:B0
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6a:b7:68:7b:83:43:1a:c7:d0:9c:00:53:21:90:18:ff:83:
ae:85:ed:da:d0:09:68:02:4e:f7:aa:83:28:27:d0:c0:7e:04:
11:4e:55:f7:6d:e0:0a:ad:97:e3:0c:f5:66:26:2d:96:b6:9a:
81:e7:d2:c3:12:23:e3:4f:4e:8d:40:1e:18:ec:88:bb:1b:40:
dd:52:24:fa:34:04:3e:b4:17:e4:e8:18:35:fd:4e:2f:c7:be:
17:ed:b4:40:08:16:2e:fb:71:a6:3a:0b:a4:db:24:4b:04:d0:
1c:11:d4:53:71:6a:c0:8f:e0:30:29:5b:f8:c6:c7:87:6e:73:
8a:96:4c:83:f0:e4:59:49:14:97:32:d8:6a:14:dd:87:cb:93:
62:ee:0d:6f:ab:d9:09:b8:72:d5:2d:6f:2b:ef:9c:c6:a2:c0:
cc:48:b4:05:b1:73:d6:85:3d:9c:60:38:0f:39:1b:ec:16:ce:
c7:c6:0f:b2:97:97:29:19:d2:fa:94:0f:c5:ff:e3:70:6d:8a:
10:bd:cc:51:b3:26:00:1f:34:52:53:73:1f:66:5a:a4:41:2f:
8c:8a:e8:44:60:15:60:a4:ae:61:86:17:f2:5a:d7:08:88:5f:
f4:80:4a:a7:d5:93:0f:6d:86:6d:4d:33:e9:07:e7:de:db:06:
46:2b:45:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:37:47 2025 by rpki-client