This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
File: lTU3mXduubP_WHJemdAqplT7GgQ.mft (raw, json)
Hash identifier: ayAowIpRatKpzcTCBRtVkoCTagOxCz87kCC25rSQXPA=
Subject key identifier: B1:7C:F4:8B:23:37:0F:7A:12:D7:0B:DC:33:4F:5E:50:15:DD:B9:30
Authority key identifier: 95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04
Certificate issuer: /CN=A9113E15/serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04
Certificate serial: 0621
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
Manifest number: 061B
Signing time: Thu 18 Dec 2025 22:12:03 +0000
Manifest this update: Thu 18 Dec 2025 22:12:03 +0000
Manifest next update: Thu 25 Dec 2025 22:12:03 +0000
Files and hashes: 1: lTU3mXduubP_WHJemdAqplT7GgQ.crl (hash: dng83UEOp12BBZI3Jd7CB5wbnfZ0rT0m81AYMJVoF8w=)
2: F9869896C8F411EBB460DB52C4F9AE02.roa (hash: IerjiVdpTpomboBtzuyqypAEqQk0Qd/Z1MS5uP0DEYU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl
rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1569 (0x621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113E15, serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04
Validity
Not Before: Dec 18 22:12:03 2025 GMT
Not After : Dec 25 22:12:03 2025 GMT
Subject: CN=69447c33-dc6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:3c:6e:e2:e3:c3:39:d0:4e:72:3c:22:d5:
b0:b4:60:92:22:e3:c8:98:8d:26:40:e5:b5:21:b8:
51:41:92:3b:dd:d6:fe:c0:63:50:a6:6d:71:9b:37:
45:00:6b:fe:f9:1d:48:8d:3f:0a:2e:ad:8b:49:e8:
b7:aa:69:7e:c6:8b:6a:d3:13:68:50:0f:ef:6f:5d:
7c:da:13:ff:91:37:c1:c2:a4:17:0f:88:c0:6e:52:
08:5b:3d:bc:94:27:28:d4:21:bf:be:86:89:71:a3:
79:2e:f5:e0:0a:d5:cc:35:a5:26:65:fa:27:de:91:
74:1e:0b:b8:8f:5d:65:60:e2:e7:ac:db:cf:50:24:
70:dc:f5:f9:ee:f5:85:0b:c5:61:95:fe:db:fd:f3:
43:22:d0:fc:b8:cb:b7:d0:ba:e2:6e:88:7c:e6:14:
89:f4:0b:d9:a8:c9:bc:d9:d9:f7:7c:4c:2d:6d:e9:
cf:28:11:27:d1:c2:9e:bf:b5:3f:cd:14:4b:08:52:
6b:5b:d4:94:5a:9a:5c:7c:e7:0d:65:55:06:69:b0:
d0:df:a6:30:f0:4f:60:55:42:4a:3e:fb:43:26:ac:
4a:02:a3:ca:09:ef:16:07:60:fe:fe:e0:47:5f:3c:
13:55:79:26:65:a7:47:09:e3:e3:df:2a:d7:fd:ef:
bf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7C:F4:8B:23:37:0F:7A:12:D7:0B:DC:33:4F:5E:50:15:DD:B9:30
X509v3 Authority Key Identifier:
keyid:95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:80:f9:be:64:34:aa:e6:7c:8b:87:62:13:d9:85:24:ce:59:
ee:e4:a1:b2:75:84:31:f7:8f:c5:43:2a:26:2c:b5:8b:7d:09:
d3:fa:83:8e:25:bb:f5:42:87:1b:cb:9b:d9:a6:91:50:23:7c:
38:55:cb:01:b6:c5:8a:d6:d3:ac:00:c7:22:60:eb:de:20:98:
ff:08:8e:29:e9:2f:6d:1a:3f:4a:0f:34:17:8f:3e:60:a7:03:
2a:bf:01:6a:cf:96:a6:ac:02:57:a8:13:68:d1:1d:b4:89:da:
78:c5:5f:87:78:0a:c9:a5:e7:4e:35:98:cf:0a:c4:61:a2:04:
17:76:6e:c1:10:84:07:43:89:e4:5c:b0:c7:6a:1d:11:16:cc:
1d:90:47:ff:a7:a9:7a:3f:94:e0:db:7c:93:9f:07:d4:d9:d1:
c8:80:d5:14:32:fe:7f:7f:e7:ad:51:98:89:2a:7f:4a:57:a0:
be:ce:66:3d:98:d4:28:8d:75:aa:57:04:7d:a5:54:e1:9e:48:
9a:2a:43:40:28:7b:ee:92:ee:74:a5:66:10:d9:3c:57:a5:62:
c0:41:62:5d:b1:3c:91:b2:c0:5c:0f:ab:0e:05:51:fb:6e:8e:
37:f1:63:06:cb:93:d6:4a:85:23:23:82:09:66:7f:41:93:13:
a4:ce:32:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNFMTUxMTAvBgNVBAUTKDk1MzUzNzk5Nzc2RUI5QjNGRjU4NzI1RTk5RDAyQUE2
NTRGQjFBMDQwHhcNMjUxMjE4MjIxMjAzWhcNMjUxMjI1MjIxMjAzWjAYMRYwFAYD
VQQDDA02OTQ0N2MzMy1kYzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAol08buLjwznQTnI8ItWwtGCSIuPImI0mQOW1IbhRQZI73db+wGNQpm1xmzdF
AGv++R1IjT8KLq2LSei3qml+xotq0xNoUA/vb1182hP/kTfBwqQXD4jAblIIWz28
lCco1CG/voaJcaN5LvXgCtXMNaUmZfon3pF0Hgu4j11lYOLnrNvPUCRw3PX57vWF
C8Vhlf7b/fNDItD8uMu30Lriboh85hSJ9AvZqMm82dn3fEwtbenPKBEn0cKev7U/
zRRLCFJrW9SUWppcfOcNZVUGabDQ36Yw8E9gVUJKPvtDJqxKAqPKCe8WB2D+/uBH
XzwTVXkmZadHCePj3yrX/e+/awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLF89Isj
Nw96EtcL3DNPXlAV3bkwMB8GA1UdIwQYMBaAFJU1N5l3brmz/1hyXpnQKqZU+xoE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0UxNS82NzBDMDk4MEM4
RjIxMUVCOEUzRkFENTBDNEY5QUUwMi9sVFUzbVhkdXViUF9XSEplbWRBcXBsVDdH
Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xUVTNtWGR1dWJQX1dISmVtZEFxcGxUN0dnUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
M0UxNS82NzBDMDk4MEM4RjIxMUVCOEUzRkFENTBDNEY5QUUwMi9sVFUzbVhkdXVi
UF9XSEplbWRBcXBsVDdHZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBegPm+ZDSq5nyLh2IT2YUkzlnu5KGydYQx94/FQyomLLWLfQnT+oOO
Jbv1Qocby5vZppFQI3w4VcsBtsWK1tOsAMciYOveIJj/CI4p6S9tGj9KDzQXjz5g
pwMqvwFqz5amrAJXqBNo0R20idp4xV+HeArJpedONZjPCsRhogQXdm7BEIQHQ4nk
XLDHah0RFswdkEf/p6l6P5Tg23yTnwfU2dHIgNUUMv5/f+etUZiJKn9KV6C+zmY9
mNQojXWqVwR9pVThnkiaKkNAKHvuku50pWYQ2TxXpWLAQWJdsTyRssBcD6sOBVH7
bo438WMGy5PWSoUjI4IJZn9BkxOkzjLU
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:33 2025 by rpki-client