This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
File: lFOfgqNeshWO18Ni1boVQz5-0uE.mft (raw, json)
Hash identifier: 3XVLe/wmtMrf+Hm5l1BfDv2HcVsh7Grdsl5cyP8Z8yY=
Subject key identifier: B0:2D:E7:F5:D5:03:6B:DC:BA:6F:EB:3D:89:56:D9:1E:AF:47:E9:39
Authority key identifier: 94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
Certificate issuer: /CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
Manifest number: E3
Signing time: Fri 19 Dec 2025 04:42:31 +0000
Manifest this update: Fri 19 Dec 2025 04:42:30 +0000
Manifest next update: Fri 26 Dec 2025 04:42:30 +0000
Files and hashes: 1: lFOfgqNeshWO18Ni1boVQz5-0uE.crl (hash: oxtFFP+ZtpiG5CB9kzuN6pX3R9XfAiczQGCSspVsmG4=)
2: 5C8A37FEBB0D11F0B828E842C4F9AE02.roa (hash: bAE1nN8/ltYESFoWRjpvSwAksmNLvoi9WWAZ51mQmjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179EAE, serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Validity
Not Before: Dec 19 04:42:30 2025 GMT
Not After : Dec 26 04:42:30 2025 GMT
Subject: CN=6944d7b7-0583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:fe:2d:6f:62:c6:18:f9:19:29:73:fc:fd:
7d:df:4a:1e:a1:37:43:4d:43:57:22:d4:0b:d2:5d:
52:04:43:5f:72:dd:e5:ee:fd:23:d0:a4:86:f0:2d:
73:db:19:85:a4:37:53:35:a9:3a:fa:eb:13:50:00:
d0:4b:7c:90:73:c6:54:db:70:c6:27:86:30:a9:46:
28:54:16:c8:0c:85:a5:bd:29:88:46:61:e5:d2:f2:
c4:2c:cb:18:20:97:50:65:86:f6:a7:12:d0:90:1b:
88:ff:48:37:09:d9:49:ac:15:44:dd:0c:80:ac:ee:
60:73:94:14:9d:57:78:97:16:86:e7:2d:98:7a:f7:
6a:9e:a8:e7:56:7d:f0:23:cb:26:cc:4e:52:cb:30:
ab:99:24:5b:bc:d0:c2:15:09:11:fd:3f:5d:30:7a:
27:1c:f2:bf:6b:a1:54:3c:68:c5:c3:12:75:81:2d:
a0:e0:9c:ad:01:4b:40:65:13:e9:61:9d:8c:36:c4:
aa:ba:ff:4f:61:6c:13:8a:dc:31:f8:a1:6f:96:a6:
d9:15:bc:65:b6:e0:53:8d:2e:1b:92:05:7f:80:0f:
64:0b:7d:22:ac:25:92:08:5c:b8:ff:44:74:df:0f:
34:07:64:7d:47:9b:e6:41:6c:fe:41:9f:63:50:96:
25:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2D:E7:F5:D5:03:6B:DC:BA:6F:EB:3D:89:56:D9:1E:AF:47:E9:39
X509v3 Authority Key Identifier:
keyid:94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:98:cd:c6:08:d5:13:02:48:82:f6:b4:09:13:2e:d8:03:7e:
a2:18:3a:f2:09:0e:91:65:fc:e4:9c:18:08:12:8b:63:84:3b:
e8:77:02:4a:d3:8e:9d:96:50:c4:5f:b0:ef:7b:a4:8d:21:3c:
6c:34:6b:ea:9a:4e:d5:5a:fc:a5:f4:2d:53:0a:ef:7b:35:e5:
4b:77:23:e4:f5:bf:38:3b:6e:66:cb:92:1f:75:67:13:c8:2f:
9e:41:1b:8c:c2:07:2d:b8:c0:84:03:c9:84:70:ca:3b:30:e1:
d9:6e:5c:27:0f:b5:3a:e1:36:9b:7f:2b:be:76:d5:a5:33:cb:
4b:41:1d:58:ff:65:b2:7e:08:2f:e6:2a:75:09:9e:33:fc:77:
3b:7b:39:82:31:9f:ce:4e:1b:01:d0:1f:65:d4:71:71:2e:c3:
2d:66:b2:e9:ad:54:93:9c:fb:8f:f0:4c:5a:00:d7:36:1f:9c:
db:8a:96:97:2d:a0:07:cb:67:33:54:02:bc:9a:bc:94:79:16:
ea:bb:cc:0d:4c:21:2e:be:d2:30:0e:08:47:0c:be:46:e8:c8:
32:db:c3:c1:e4:ff:16:c8:b8:69:d8:7d:97:cb:e9:cf:5e:a0:
23:9d:bd:b1:a8:c2:32:15:db:91:f8:aa:c8:34:4b:df:ae:d2:
4e:14:25:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:01:03 2025 by rpki-client