This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
File: l9pBnzurP2V6paXATgV8StlhvFs.mft (raw, json)
Hash identifier: AYIUZG5onhNlXQAowzuDsXuoG+FlQ2kez4Vm6osJjjQ=
Subject key identifier: EA:55:21:EA:39:6A:8E:DD:42:37:84:6D:47:4D:C0:E5:A2:22:B6:28
Authority key identifier: 97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B
Certificate issuer: /CN=A911251C/serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B
Certificate serial: 0245
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
Manifest number: 0240
Signing time: Fri 19 Dec 2025 01:21:08 +0000
Manifest this update: Fri 19 Dec 2025 01:21:07 +0000
Manifest next update: Fri 26 Dec 2025 01:21:07 +0000
Files and hashes: 1: l9pBnzurP2V6paXATgV8StlhvFs.crl (hash: l9Bmvwu7MJMKwgV0j+Jd4CbF4vO5XlC9QQ5afZkQ25A=)
2: B2F017A26BE311ED8B83B484C4F9AE02.roa (hash: eEPdVRPjMFChXAnZ+AFBDP2qN9nX/mupKkDoS8rA9tY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl
rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:21:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911251C, serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B
Validity
Not Before: Dec 19 01:21:07 2025 GMT
Not After : Dec 26 01:21:07 2025 GMT
Subject: CN=6944a884-eb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:eb:78:ea:34:a1:81:06:5b:45:92:47:11:96:
d2:06:7d:d2:cb:b8:ad:2c:ba:da:8b:e9:24:e4:a1:
4c:df:38:99:73:cb:65:0f:3b:89:67:d2:be:5d:39:
6c:e3:a2:e5:79:ab:7c:37:4e:f9:46:d6:6e:4a:7d:
57:b8:22:1c:80:4e:3b:db:dd:06:40:70:d2:ab:77:
4d:6a:fc:34:aa:1d:51:1f:e3:95:c0:0a:52:cc:18:
cc:03:3a:37:4a:08:40:4c:a5:a6:63:f6:ef:2e:61:
c3:b0:cc:cf:21:5c:4f:55:77:74:d2:a3:68:3c:0c:
de:a0:2c:20:5a:00:dc:96:18:7d:bb:ac:b3:72:3a:
2e:46:45:1d:2f:b5:db:20:87:0d:92:f5:a8:6a:f7:
93:0c:7a:61:4d:be:63:64:ab:86:49:75:fb:60:26:
c7:c1:ed:b8:b1:1f:5b:76:a2:72:b4:d0:d1:90:38:
26:f2:a3:76:26:79:ed:a5:6b:92:d2:a4:0c:71:f4:
cf:70:b6:f8:3f:37:df:d5:e5:db:30:e5:fe:b5:72:
b0:54:8f:76:64:ed:de:03:a6:24:bc:47:53:db:0f:
79:49:1a:22:c1:58:f6:da:16:0d:32:02:2b:44:67:
6d:85:44:e6:14:15:5e:ff:7f:27:98:dd:40:a3:98:
10:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:55:21:EA:39:6A:8E:DD:42:37:84:6D:47:4D:C0:E5:A2:22:B6:28
X509v3 Authority Key Identifier:
keyid:97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:65:16:94:da:c4:73:70:a2:f5:e8:44:a4:62:ab:3c:04:13:
d7:f5:00:b2:23:73:95:7a:7e:30:3d:19:00:01:38:1b:f1:0e:
18:c4:e8:db:a6:07:59:94:f8:ac:ab:e8:03:2f:d3:90:90:db:
88:9e:43:a0:26:b2:b9:de:0b:86:bb:6e:8d:b0:46:1f:32:df:
66:50:80:74:ee:8b:58:4b:6a:1c:fe:6b:28:29:7d:e6:20:32:
27:e9:0f:0f:22:53:8c:dd:19:08:01:40:f2:6b:d8:97:d4:09:
c1:a0:ee:ef:4a:30:72:58:ef:f1:b0:a9:f0:c6:fc:e8:e6:37:
50:c3:c1:35:59:0c:60:1e:38:99:f3:6b:ad:89:91:91:f6:b1:
80:3c:e7:6b:6d:23:99:ba:74:cf:09:84:6a:41:c3:9c:cf:5c:
82:29:c8:b6:a1:09:43:0f:45:6b:c3:db:74:71:74:3f:db:24:
18:fe:21:e1:f1:c7:8c:eb:9b:60:60:b1:7e:42:40:81:d1:30:
55:f9:3a:b4:bb:df:7d:0e:18:4e:42:76:7a:56:b3:c9:c0:17:
e3:aa:5b:ba:c0:31:0c:58:1b:40:fe:70:fa:75:39:62:15:e3:
1f:e5:e0:0e:a8:7e:3e:88:82:a4:c5:d2:d6:fd:9c:8e:b5:77:
a4:aa:ff:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MTI1MUMxMTAvBgNVBAUTKDk3REE0MTlGM0JBQjNGNjU3QUE1QTVDMDRFMDU3QzRB
RDk2MUJDNUIwHhcNMjUxMjE5MDEyMTA3WhcNMjUxMjI2MDEyMTA3WjAYMRYwFAYD
VQQDDA02OTQ0YTg4NC1lYjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjOt46jShgQZbRZJHEZbSBn3Sy7itLLrai+kk5KFM3ziZc8tlDzuJZ9K+XTls
46Lleat8N075RtZuSn1XuCIcgE47290GQHDSq3dNavw0qh1RH+OVwApSzBjMAzo3
SghATKWmY/bvLmHDsMzPIVxPVXd00qNoPAzeoCwgWgDclhh9u6yzcjouRkUdL7Xb
IIcNkvWoaveTDHphTb5jZKuGSXX7YCbHwe24sR9bdqJytNDRkDgm8qN2JnntpWuS
0qQMcfTPcLb4Pzff1eXbMOX+tXKwVI92ZO3eA6YkvEdT2w95SRoiwVj22hYNMgIr
RGdthUTmFBVe/38nmN1Ao5gQhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpVIeo5
ao7dQjeEbUdNwOWiIrYoMB8GA1UdIwQYMBaAFJfaQZ87qz9leqWlwE4FfErZYbxb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjUxQy9GOEY3RTI1MDZC
RTAxMUVEOTkxOTZGNjJDNEY5QUUwMi9sOXBCbnp1clAyVjZwYVhBVGdWOFN0bGh2
RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w5cEJuenVyUDJWNnBhWEFUZ1Y4U3RsaHZGcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjUxQy9GOEY3RTI1MDZCRTAxMUVEOTkxOTZGNjJDNEY5QUUwMi9sOXBCbnp1clAy
VjZwYVhBVGdWOFN0bGh2RnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBdZRaU2sRzcKL16ESkYqs8BBPX9QCyI3OVen4wPRkAATgb8Q4YxOjb
pgdZlPisq+gDL9OQkNuInkOgJrK53guGu26NsEYfMt9mUIB07otYS2oc/msoKX3m
IDIn6Q8PIlOM3RkIAUDya9iX1AnBoO7vSjByWO/xsKnwxvzo5jdQw8E1WQxgHjiZ
82utiZGR9rGAPOdrbSOZunTPCYRqQcOcz1yCKci2oQlDD0Vrw9t0cXQ/2yQY/iHh
8ceM65tgYLF+QkCB0TBV+Tq0u999DhhOQnZ6VrPJwBfjqlu6wDEMWBtA/nD6dTli
FeMf5eAOqH4+iIKkxdLW/ZyOtXekqv+h
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:56:12 2025 by rpki-client