This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
File: L4vvSDpBiuHAMSMIGG70zXskZuU.mft (raw, json)
Hash identifier: WpGWBtewhUKQq/9W7ayN89cb7DA/bVdz00a6G8yRrrg=
Subject key identifier: D0:77:5E:CE:B2:51:5E:DA:80:4E:F3:62:80:AD:25:58:1E:2F:8E:78
Authority key identifier: 2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5
Certificate issuer: /CN=A9125758/serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
Certificate serial: 0299
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
Manifest number: 0294
Signing time: Thu 25 Dec 2025 00:37:18 +0000
Manifest this update: Thu 25 Dec 2025 00:37:17 +0000
Manifest next update: Thu 01 Jan 2026 00:37:17 +0000
Files and hashes: 1: L4vvSDpBiuHAMSMIGG70zXskZuU.crl (hash: SWR6NEQ1nGhEt8U6i0hHk0WpS8VXTu3sKmT7i50csdM=)
2: 117300B62CDB11EDB2E1DD0DC4F9AE02.roa (hash: YiqHt1NmkyZeQGkCylb3t5kmyZBllHOZPJhWp7tXWTc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl
rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 00:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665 (0x299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125758, serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
Validity
Not Before: Dec 25 00:37:17 2025 GMT
Not After : Jan 1 00:37:17 2026 GMT
Subject: CN=694c873e-d8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a2:ae:02:08:d7:bb:e0:7b:12:87:63:df:99:
2a:d2:a3:55:38:7c:b8:2e:49:c6:df:4a:95:b2:7b:
d8:19:f4:e6:c8:d5:70:34:23:31:5f:f0:38:84:fa:
e6:45:5f:1c:88:05:12:8c:4c:0a:98:4a:e7:39:27:
c5:08:ee:ca:d0:e7:bb:50:4b:c6:d5:18:46:2c:87:
2c:8c:9f:f9:09:6b:87:8c:0d:1d:0b:2f:5e:a3:85:
01:d8:b7:37:88:77:63:23:1d:c7:22:e0:80:84:31:
ff:41:52:bc:4c:34:16:71:8b:53:a4:42:6f:ba:f9:
59:eb:5c:2d:23:bb:32:fe:34:af:98:c0:71:62:ce:
92:26:6d:1e:ca:2f:84:db:cd:8c:fa:46:ef:56:21:
f5:c0:58:85:b2:57:6c:43:b3:06:45:e5:1d:9f:7b:
4f:e0:49:a2:c9:9e:0e:ff:93:23:b2:99:1b:6d:92:
58:f0:fc:65:8a:d3:c9:b0:f1:da:cb:dc:06:f7:a7:
9e:c0:2e:4a:0a:21:a4:20:f0:8d:ae:c2:d9:fa:03:
8b:2c:9e:9d:4a:74:2b:38:d9:b8:68:c1:33:cc:98:
18:84:84:a8:f6:a2:07:9a:45:06:54:7f:5a:9f:67:
cf:e1:51:ab:dd:d1:ff:f7:16:83:56:ff:39:af:38:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:77:5E:CE:B2:51:5E:DA:80:4E:F3:62:80:AD:25:58:1E:2F:8E:78
X509v3 Authority Key Identifier:
keyid:2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:08:9e:ba:51:0f:6c:4f:e7:b5:85:12:38:24:a8:f2:2f:da:
4a:42:c8:b7:73:26:93:b0:13:67:46:8b:3c:4c:23:87:ab:24:
d7:4c:4a:35:d2:e6:25:71:74:b6:6b:fb:50:3b:f6:14:dc:74:
58:85:62:e1:25:c7:54:25:f0:cb:be:b9:ea:32:77:48:73:13:
7d:88:51:08:03:b3:a0:5c:72:7a:13:9f:ba:a8:48:e1:77:68:
48:0e:9d:87:d2:a0:fd:b2:18:79:24:9b:c2:da:fd:62:e0:a0:
42:fd:f1:5c:99:7a:8a:9d:01:7a:04:12:07:22:65:17:91:e4:
21:ac:95:33:da:81:d7:49:d3:89:5d:99:fe:7a:eb:bb:db:5a:
c8:bc:ba:4b:0e:9f:e8:36:c5:6f:47:a8:5b:91:f6:2c:b1:94:
6e:88:55:56:81:ba:ef:01:98:33:bb:a1:03:9d:0e:9a:dd:98:
36:d0:e5:33:77:3b:59:9c:f8:86:35:be:5c:88:08:fe:65:ce:
ce:64:aa:42:ff:ec:86:29:d2:15:ce:8e:f2:cd:59:d7:db:6e:
b4:60:55:79:f7:56:8a:4e:96:65:20:3b:85:fa:50:b9:3d:2d:
8e:fd:65:3a:fd:38:b5:62:f9:68:ec:83:86:e2:13:94:53:d7:
96:a9:bd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 04:51:20 2025 by rpki-client