This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft
File: lqeZovSzCLIlIrzkXjGNanAmKSs.mft (raw, json)
Hash identifier: UvY1dMMeH2DHwj6CoYe3Z5SKCO9bwafDanYPZt6fc5s=
Subject key identifier: 88:CF:8B:7F:05:8F:B3:B2:80:4B:CE:CD:85:DB:B8:7D:6F:73:43:4C
Authority key identifier: 96:A7:99:A2:F4:B3:08:B2:25:22:BC:E4:5E:31:8D:6A:70:26:29:2B
Certificate issuer: /CN=A911BA4B/serialNumber=96A799A2F4B308B22522BCE45E318D6A7026292B
Certificate serial: 1200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft
Manifest number: 11F2
Signing time: Tue 30 Dec 2025 16:55:46 +0000
Manifest this update: Tue 30 Dec 2025 16:55:45 +0000
Manifest next update: Tue 06 Jan 2026 16:55:45 +0000
Files and hashes: 1: lqeZovSzCLIlIrzkXjGNanAmKSs.crl (hash: WccU5eQX1RU3QRUcyBql5TirWI+38d31gdfHLQWYRnc=)
2: 318BC266FEA911E8BF138B59C4F9AE02.roa (hash: yyuOkKMjkxOCaqRu1AYzdE+AAsdFHVWrA4FcabEJaF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.crl
rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Jan 2026 16:55:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4608 (0x1200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BA4B, serialNumber=96A799A2F4B308B22522BCE45E318D6A7026292B
Validity
Not Before: Dec 30 16:55:45 2025 GMT
Not After : Jan 6 16:55:45 2026 GMT
Subject: CN=69540411-27ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:0a:ef:de:6e:ad:f6:7a:9b:59:ae:c5:0e:
93:aa:4a:44:c2:e9:dd:d0:a6:ee:c0:43:d8:69:7c:
de:d0:46:b6:f2:5a:6b:7c:f2:79:fe:ce:5a:61:a5:
9a:1b:93:27:ae:b7:75:25:52:fd:7e:18:cc:01:08:
5d:7a:62:33:e1:64:a2:97:9a:c7:27:d5:04:0b:6a:
eb:df:ee:a1:47:f6:42:19:b5:93:bb:58:44:16:9f:
2a:39:f8:68:9d:53:96:38:88:5d:0b:70:c4:7f:e5:
38:ba:1c:b1:3d:32:ec:ab:fd:77:59:f2:24:59:76:
b3:d8:1b:4a:0a:02:5f:68:8f:ee:a4:e3:4e:ea:d5:
3c:3b:96:5b:d1:a9:b6:ce:11:f7:11:16:69:a7:f0:
99:88:18:ac:43:c0:90:34:05:88:41:1e:ab:cd:10:
4c:13:54:f8:0d:29:8f:0b:58:f8:e3:5d:c6:cb:8a:
0f:2a:ed:63:d4:11:74:b7:68:bd:22:79:52:55:fb:
55:2a:7c:ba:2a:c9:89:ef:af:e7:25:c4:83:eb:a9:
60:6d:e7:72:9a:39:59:74:17:00:67:99:3f:a0:2d:
66:b6:c4:03:9e:f2:87:83:c4:7f:63:61:e0:f5:43:
96:e8:21:2d:e9:69:5f:0b:f3:8e:b7:a2:30:2f:ba:
b7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CF:8B:7F:05:8F:B3:B2:80:4B:CE:CD:85:DB:B8:7D:6F:73:43:4C
X509v3 Authority Key Identifier:
keyid:96:A7:99:A2:F4:B3:08:B2:25:22:BC:E4:5E:31:8D:6A:70:26:29:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:f2:e9:26:86:dc:8c:22:5d:a6:b1:84:47:a7:1a:a4:7d:ee:
29:0e:32:e7:e0:fa:bd:e0:44:83:27:92:ba:47:d5:4a:8e:c5:
c0:97:89:1f:4f:f9:49:df:ff:f0:20:02:fb:64:85:7f:a8:28:
80:96:14:d8:14:27:77:c5:65:40:b5:cb:c4:9d:ef:36:76:fa:
72:20:c9:1c:bc:8f:f4:07:ce:a8:18:ad:17:cf:d8:e9:8f:e7:
ef:c3:67:20:a1:5c:96:39:60:3d:7a:29:59:9e:59:db:37:14:
d8:81:2e:e2:80:30:73:dc:71:1a:de:07:97:8c:2e:a5:ea:42:
0e:90:9c:5b:be:4b:32:62:e1:31:aa:06:be:de:b5:d9:1b:81:
71:bb:4b:0c:8e:b4:93:14:79:ec:71:e9:8c:be:76:06:af:42:
dc:30:7a:65:16:4e:04:ce:cd:c9:7e:29:0a:3f:45:ad:0f:de:
6f:ba:1e:0b:39:07:6f:2d:a5:e4:dc:6b:35:de:48:ee:b0:7f:
8b:8e:50:c5:e7:d0:ca:52:24:0b:7f:36:30:06:e1:a0:6c:07:
99:76:88:81:5f:d2:fb:b6:e5:88:96:cf:ba:d5:48:b2:13:35:
59:f6:50:b5:b2:c7:1f:77:20:d7:44:2d:94:56:28:5f:22:d2:
69:91:87:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 09:01:39 2025 by rpki-client