This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
File: LtaWwj0zRedLDXNOJLcQqniq5fo.mft (raw, json)
Hash identifier: CtWSMiNwkUbpfGnPk5G+TxNwgx7b3gSPrVC7+uh8gR8=
Subject key identifier: 41:DD:B5:B2:DE:42:90:FA:66:ED:38:83:62:13:66:66:E4:FD:62:B5
Authority key identifier: 2E:D6:96:C2:3D:33:45:E7:4B:0D:73:4E:24:B7:10:AA:78:AA:E5:FA
Certificate issuer: /CN=A913714B/serialNumber=2ED696C23D3345E74B0D734E24B710AA78AAE5FA
Certificate serial: 1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
Manifest number: 19
Signing time: Fri 19 Dec 2025 06:45:01 +0000
Manifest this update: Fri 19 Dec 2025 06:45:01 +0000
Manifest next update: Fri 26 Dec 2025 06:45:01 +0000
Files and hashes: 1: LtaWwj0zRedLDXNOJLcQqniq5fo.crl (hash: 4XTbHhdxg5QD8djbmco0/ZR7HmKkYjBAwITXzuXByUM=)
2: 5D7ACB26B90811F0ADC46B62C4F9AE02.roa (hash: 7vtN8AsvURmlMFj193nZHd0LnrqmSd3t3WOD+mI+WHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.crl
rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:45:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913714B, serialNumber=2ED696C23D3345E74B0D734E24B710AA78AAE5FA
Validity
Not Before: Dec 19 06:45:01 2025 GMT
Not After : Dec 26 06:45:01 2025 GMT
Subject: CN=6944f46d-da5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:03:fd:d0:92:00:86:27:8b:52:41:9e:fb:
fe:74:29:c5:78:ca:af:e2:de:58:31:d0:f3:2e:84:
08:dc:72:2d:77:a5:4e:eb:43:14:19:72:a7:84:8d:
e3:0d:50:43:be:3a:c0:c2:0d:19:e3:a3:8d:62:54:
33:83:d2:3f:28:d9:f7:67:6c:93:c4:eb:8e:a1:7f:
5b:3d:22:45:99:6a:04:a2:9d:96:ae:e5:a1:38:48:
d7:3f:a1:10:69:66:2b:13:fb:db:ea:6e:a8:d8:7c:
97:7f:74:c1:69:6f:91:e6:dd:5e:ce:51:6c:dd:a9:
50:1e:71:3d:f0:4e:f8:76:59:d3:b4:79:97:a3:a0:
b4:c9:a6:73:a4:4c:f5:73:ba:4b:59:ca:6b:b1:b6:
5f:bd:ef:5c:68:b1:e3:ad:11:00:50:b7:be:d4:c9:
4b:84:ec:16:03:70:9d:10:0f:64:4e:e1:08:1f:e0:
70:82:b5:6c:8b:d5:85:c7:6f:0e:35:f0:8a:2e:06:
9a:84:af:5a:23:21:99:74:d7:95:fe:62:6c:a1:71:
74:af:6b:08:0d:41:c3:c1:fd:1e:0c:91:37:03:38:
72:f2:e2:be:2c:ab:63:22:87:94:8c:a3:d3:80:6a:
13:50:a1:bf:10:91:77:b6:23:77:d7:47:8b:f5:11:
2f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DD:B5:B2:DE:42:90:FA:66:ED:38:83:62:13:66:66:E4:FD:62:B5
X509v3 Authority Key Identifier:
keyid:2E:D6:96:C2:3D:33:45:E7:4B:0D:73:4E:24:B7:10:AA:78:AA:E5:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:63:f6:02:26:0f:04:29:5d:1e:c2:b7:ae:72:3c:3c:cf:aa:
32:66:76:a2:d0:1a:74:f2:54:19:b0:1b:9b:3b:81:46:9d:e3:
a0:93:1a:87:b1:bd:35:21:93:66:dd:f2:8e:d5:2e:72:d6:0e:
90:86:ce:08:95:dd:fc:ed:9a:91:df:a9:38:60:e4:7c:dc:1b:
24:e9:67:e6:34:1b:19:9d:61:21:2f:d5:1b:78:6f:6c:af:52:
d4:33:7a:30:01:64:1c:94:e8:67:e9:06:cd:da:6d:19:ac:a9:
52:ec:2b:06:3a:fc:0c:17:1e:9f:62:eb:e4:b2:07:1e:d9:a6:
0f:ad:4c:4b:ca:cc:2c:e4:c4:5f:5f:1c:31:91:79:e8:48:86:
e7:16:2d:5f:dd:26:14:9c:28:e8:b3:5f:47:a5:37:76:38:20:
16:ad:e7:27:e1:37:29:cc:4f:8c:91:9a:17:09:46:0c:df:96:
18:9a:03:24:f3:81:b7:f6:09:bb:77:a9:bd:98:7b:24:d1:f3:
c9:83:b3:d8:7a:5a:32:d3:5d:5c:a6:d3:76:47:cc:3f:10:09:
92:71:9f:01:73:ab:bf:92:8a:be:53:a9:d5:88:7c:d7:70:90:
f6:0b:2e:e1:d7:60:99:50:fb:30:2f:f4:ba:97:26:c7:89:3c:
bd:1e:58:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:42:13 2025 by rpki-client