This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
File: l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json)
Hash identifier: pj9oqIMhKucfiymRWXzNwws1Oho6eMlXg+0exJrFlO4=
Subject key identifier: 42:C8:40:F8:78:0A:99:99:8C:48:42:87:43:D6:ED:20:8D:F2:01:37
Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B
Certificate issuer: /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B
Certificate serial: 0CDE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
Manifest number: 0CD7
Signing time: Thu 18 Dec 2025 17:55:07 +0000
Manifest this update: Thu 18 Dec 2025 17:55:06 +0000
Manifest next update: Thu 25 Dec 2025 17:55:06 +0000
Files and hashes: 1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: rn4gQIZXWBY+6U3iDSB/XtCFU2Kzyjah4f8xghjceFQ=)
2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: ivTBLc1IHemjBh5C9Wu0pV5fBOGymo+VSgfkbB+w5w8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl
rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3294 (0xcde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B
Validity
Not Before: Dec 18 17:55:06 2025 GMT
Not After : Dec 25 17:55:06 2025 GMT
Subject: CN=69443ffb-b00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:15:6a:13:46:3f:16:c2:ef:4b:d3:20:d1:
5e:b1:99:f6:4c:7e:ee:5e:e7:d0:41:fe:95:84:a5:
d9:01:6c:c1:54:ba:77:2f:e7:d6:21:a3:fd:d2:ea:
22:4f:a1:07:ad:8a:44:18:a7:40:34:f9:b6:1a:ed:
7a:33:98:21:97:59:69:31:4b:23:7c:3d:fb:09:28:
bb:a3:1b:60:67:16:09:5b:84:99:c0:a0:68:a4:fa:
39:fc:d0:67:43:54:f4:6f:62:58:f6:54:d1:2d:ea:
57:20:7f:77:15:c8:03:0b:e4:75:66:1a:40:d7:c7:
c6:98:00:8c:e7:ee:94:02:3c:b8:f7:17:11:a6:e9:
96:9a:b3:40:65:18:5d:b9:d4:40:1e:4f:3c:84:d1:
71:d1:a8:b1:7c:2a:f3:15:62:17:b8:1d:07:42:9f:
37:51:a4:19:90:b0:e4:29:8a:84:1c:09:24:fc:10:
1a:62:16:47:6e:58:a6:cd:e5:98:23:f3:3a:41:94:
7e:f4:8b:c1:f0:fa:c8:3d:04:ef:f9:56:b7:56:7c:
34:8e:e3:1c:81:48:71:b5:f3:49:73:ad:7f:0e:e6:
c0:b2:91:b1:82:84:22:79:f7:c7:39:e4:26:47:dc:
fd:ce:ec:04:d0:34:ae:f5:68:f8:80:5c:0e:45:9c:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C8:40:F8:78:0A:99:99:8C:48:42:87:43:D6:ED:20:8D:F2:01:37
X509v3 Authority Key Identifier:
keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:48:3c:29:28:46:f8:bd:74:8b:f5:e2:3e:91:75:1c:70:15:
1b:06:b5:fa:d5:c8:12:37:77:f9:ef:82:72:90:bc:8d:db:e4:
73:5c:76:6b:b5:43:9f:78:b5:dc:e5:68:25:9d:e6:2d:11:0c:
9b:f3:c6:87:2a:6a:8e:16:3e:38:50:3c:15:f4:d7:e1:fe:4f:
80:ac:59:dc:47:c4:61:ef:dc:26:28:2a:14:d5:d1:6f:f1:38:
3d:75:98:a5:d8:76:a0:b0:2d:9d:0a:1c:61:c1:0c:f1:51:85:
67:81:f8:dd:ff:f8:f2:ba:5f:67:99:0a:5b:12:dd:c1:9d:89:
b9:97:81:9b:9b:63:23:33:fe:25:a2:1d:20:f6:11:be:22:76:
5f:57:71:6c:c7:4c:81:2f:14:a1:f8:43:8c:c9:0f:4b:f9:21:
07:f6:dd:88:d2:42:64:1e:dc:4e:17:db:fb:94:05:43:6b:76:
8f:b3:a9:36:b0:bd:cb:77:f8:be:a9:31:cc:c0:97:d1:73:ee:
80:8e:7c:97:7b:9e:5f:de:ae:ac:ff:86:42:0e:5b:30:24:69:
a3:8e:a8:9c:84:e2:07:b9:4d:07:9d:79:77:bf:c3:5d:4c:57:
6a:07:97:0c:6d:5a:c4:07:2c:6b:a1:3d:9c:b1:ba:50:87:a0:
76:24:9a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:55:55 2025 by rpki-client