This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft
File: LQx0fe_201Ecz11T86dlcA8cgqA.mft (raw, json)
Hash identifier: M84S4wA8adANb/dwkBg1qnbveo9UHrFoAshQqPTxI74=
Subject key identifier: 4B:E6:A5:93:3C:77:07:59:AA:DF:61:1F:10:31:C0:6C:04:CF:1E:F1
Authority key identifier: 2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0
Certificate issuer: /CN=A9170975/serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0
Certificate serial: 6B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft
Manifest number: 6A
Signing time: Fri 19 Dec 2025 05:57:07 +0000
Manifest this update: Fri 19 Dec 2025 05:57:06 +0000
Manifest next update: Fri 26 Dec 2025 05:57:06 +0000
Files and hashes: 1: LQx0fe_201Ecz11T86dlcA8cgqA.crl (hash: EXuEP3O27DDtrXLvVykj/EAnb95ynzyyzJRIWFJORdQ=)
2: B0B8FBDA3A2A11F09E37DB48C4F9AE02.roa (hash: Gk5HrV+ASLgWFwT9SMxMpFzIA+vBFJ75IOUj++Jvz6w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl
rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170975, serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0
Validity
Not Before: Dec 19 05:57:06 2025 GMT
Not After : Dec 26 05:57:06 2025 GMT
Subject: CN=6944e933-8a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:cc:4d:98:b1:11:fa:72:38:2a:d4:7d:c4:a6:
e0:a8:3a:7d:76:21:3e:a8:9a:5a:f3:64:83:be:bf:
c6:6d:9c:77:f1:0e:83:3e:84:2a:d7:5d:8c:f7:bb:
22:3b:58:de:3e:94:f8:31:ec:34:dc:8a:58:58:21:
59:0e:41:0d:a2:49:c6:9b:8e:41:80:c0:d2:cf:08:
e4:cc:8b:98:9e:c0:88:63:bf:ef:14:ad:e4:c1:4c:
91:d0:83:d2:8b:57:69:b6:07:f0:9b:23:4c:9b:a5:
43:71:68:cc:1e:31:a3:d3:1c:48:67:7b:99:aa:cd:
20:a2:ef:25:53:82:d1:ee:f4:ca:ea:bd:70:4c:4b:
09:cd:34:d1:07:10:ea:11:2e:59:ff:29:ee:4e:05:
64:a4:ee:b6:fe:1b:9a:30:ac:93:30:38:ed:ba:d4:
20:9f:83:00:2f:f3:19:5a:71:10:d0:62:e4:ae:c1:
2a:4e:b5:f2:82:81:14:d9:0e:1d:dd:84:78:4d:ef:
11:5a:ec:38:5d:5c:4b:9b:64:3a:08:fa:2b:69:2b:
06:8d:82:ea:46:45:84:a9:49:42:c6:5d:98:4b:73:
10:7f:83:a5:74:fa:6d:d4:59:a9:1f:5d:f0:8f:0d:
ec:54:0f:3d:eb:f7:d1:44:c6:1a:d5:6b:b1:c3:ac:
59:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E6:A5:93:3C:77:07:59:AA:DF:61:1F:10:31:C0:6C:04:CF:1E:F1
X509v3 Authority Key Identifier:
keyid:2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:29:0e:3b:aa:d2:f7:48:21:9b:21:57:7e:d2:24:06:72:a7:
f6:6e:10:66:61:2b:41:c5:86:96:77:c3:3c:96:0c:f6:1c:da:
ec:49:b5:57:49:1e:66:35:1a:ab:16:f6:f8:18:9b:dc:97:d5:
73:9e:e1:a5:68:bf:0d:f7:82:53:71:7b:6a:33:6a:c7:c3:b8:
1d:93:5f:2d:63:1d:7f:16:5c:3a:fa:06:cb:df:95:b8:2d:ba:
90:77:39:dd:57:aa:d8:eb:93:59:05:dd:cb:1d:06:f2:de:a1:
ab:bc:42:5f:3f:7e:89:7c:ff:75:b6:36:c8:0a:1e:16:52:27:
06:9f:24:c7:fa:33:98:ae:28:fa:d1:1a:06:53:de:81:fa:da:
5e:ba:15:d6:6e:05:d8:39:d4:00:a4:c6:ea:77:69:cf:f6:c6:
11:59:60:f5:31:69:65:50:76:fb:2d:14:af:c7:82:08:ae:22:
b3:e3:90:81:c2:00:62:2a:9b:89:04:29:ff:c0:3a:a9:cb:f1:
bd:12:8c:e0:8b:bc:bb:98:0a:d9:c4:3f:24:07:66:2e:ed:fc:
52:82:78:94:06:48:b8:06:c3:0c:31:92:4b:4d:f7:79:10:da:
2b:25:81:ac:0e:8e:35:22:08:b9:ca:a8:80:7a:04:f7:a4:a1:
e9:cf:81:a3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MDk3NTExMC8GA1UEBRMoMkQwQzc0N0RFRkY2RDM1MTFDQ0Y1RDUzRjNBNzY1NzAw
RjFDODJBMDAeFw0yNTEyMTkwNTU3MDZaFw0yNTEyMjYwNTU3MDZaMBgxFjAUBgNV
BAMMDTY5NDRlOTMzLThhOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD0zE2YsRH6cjgq1H3EpuCoOn12IT6omlrzZIO+v8ZtnHfxDoM+hCrXXYz3uyI7
WN4+lPgx7DTcilhYIVkOQQ2iScabjkGAwNLPCOTMi5iewIhjv+8UreTBTJHQg9KL
V2m2B/CbI0ybpUNxaMweMaPTHEhne5mqzSCi7yVTgtHu9MrqvXBMSwnNNNEHEOoR
Lln/Ke5OBWSk7rb+G5owrJMwOO261CCfgwAv8xlacRDQYuSuwSpOtfKCgRTZDh3d
hHhN7xFa7DhdXEubZDoI+itpKwaNgupGRYSpSULGXZhLcxB/g6V0+m3UWakfXfCP
DexUDz3r99FExhrVa7HDrFkFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS+alkzx3
B1mq32EfEDHAbATPHvEwHwYDVR0jBBgwFoAULQx0fe/201Ecz11T86dlcA8cgqAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTc1LzVGOTAzNUY2M0Ey
NjExRjBCQ0NGNUUxRkM0RjlBRTAyL0xReDBmZV8yMDFFY3oxMVQ4NmRsY0E4Y2dx
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTFF4MGZlXzIwMUVjejExVDg2ZGxjQThjZ3FBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw
OTc1LzVGOTAzNUY2M0EyNjExRjBCQ0NGNUUxRkM0RjlBRTAyL0xReDBmZV8yMDFF
Y3oxMVQ4NmRsY0E4Y2dxQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEIpDjuq0vdIIZshV37SJAZyp/ZuEGZhK0HFhpZ3wzyWDPYc2uxJtVdJ
HmY1GqsW9vgYm9yX1XOe4aVovw33glNxe2ozasfDuB2TXy1jHX8WXDr6Bsvflbgt
upB3Od1Xqtjrk1kF3csdBvLeoau8Ql8/fol8/3W2NsgKHhZSJwafJMf6M5iuKPrR
GgZT3oH62l66FdZuBdg51ACkxup3ac/2xhFZYPUxaWVQdvstFK/HggiuIrPjkIHC
AGIqm4kEKf/AOqnL8b0SjOCLvLuYCtnEPyQHZi7t/FKCeJQGSLgGwwwxkktN93kQ
2islgawOjjUiCLnKqIB6BPekoenPgaM=
-----END CERTIFICATE-----
Generated at Sun Dec 21 06:44:28 2025 by rpki-client