This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft
File: L__8o-ZL11oIXmx2cyYl8iTHRDI.mft (raw, json)
Hash identifier: +WlxCKaFd1YjV7hA6ru3pcAfOVNIxb/ZaWwF5w+vCro=
Subject key identifier: D0:CE:57:87:9D:11:10:79:CD:92:5D:3E:AB:6D:62:89:2D:31:62:6F
Authority key identifier: 2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32
Certificate issuer: /CN=A9193604/serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432
Certificate serial: 017A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft
Manifest number: 0177
Signing time: Fri 19 Dec 2025 02:59:28 +0000
Manifest this update: Fri 19 Dec 2025 02:59:28 +0000
Manifest next update: Fri 26 Dec 2025 02:59:28 +0000
Files and hashes: 1: L__8o-ZL11oIXmx2cyYl8iTHRDI.crl (hash: 9qExwUouZoN8Vq/UBU7RgPk0GeN9XV0YDyJ+0iIiXp4=)
2: 4578BBA89F4E11EEB293B87EC4F9AE02.roa (hash: 3yiW508L3oftd11FyXYrUNBNgcv/84LhY7x8tmbtRS4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl
rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193604, serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432
Validity
Not Before: Dec 19 02:59:28 2025 GMT
Not After : Dec 26 02:59:28 2025 GMT
Subject: CN=6944bf90-2107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:08:78:1d:ae:77:52:9a:9d:7c:17:39:8d:4b:
d0:6e:56:85:bd:16:9a:cc:c1:36:b2:6e:81:ba:58:
cc:d4:8b:ba:b5:2f:95:16:93:65:c7:0a:d2:91:84:
91:6d:08:0c:dd:4b:3c:dc:6c:a2:99:47:cb:12:3d:
5e:02:95:57:d3:0f:db:43:01:60:6b:28:60:4d:5e:
da:ed:af:4f:74:94:75:40:02:51:c1:f1:0b:ca:29:
2e:55:2d:f9:ab:c6:26:d5:60:18:de:24:87:2f:d7:
86:d6:1b:d4:4f:63:31:fd:a7:99:94:da:bd:d1:0c:
14:5e:b3:93:9e:ef:05:c7:82:4c:d1:50:c1:db:40:
b8:1e:63:95:4c:c7:b9:27:e6:22:10:b0:72:bf:9c:
8d:32:b6:11:8f:d3:76:36:72:86:49:72:63:c1:6e:
ea:39:40:68:12:ef:a1:7b:78:ca:60:f4:b6:20:d3:
91:fb:13:e0:d3:f6:1f:1f:d4:f8:64:6c:33:14:bb:
4b:51:36:50:c9:e5:a9:9a:2f:07:e8:bd:2e:dc:19:
05:fb:3b:d9:33:cb:e8:72:61:d5:16:26:2e:09:2e:
8f:ce:3a:24:28:16:87:51:0e:96:4b:cd:af:35:d8:
86:77:c3:4f:27:62:54:79:7a:31:9f:3c:3d:53:f8:
94:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CE:57:87:9D:11:10:79:CD:92:5D:3E:AB:6D:62:89:2D:31:62:6F
X509v3 Authority Key Identifier:
keyid:2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:1e:5e:5f:91:c9:e5:7f:31:e9:34:01:39:7f:86:5a:25:24:
f5:88:63:12:1b:90:22:e5:c5:76:0b:e0:33:9a:91:a5:6a:88:
6e:07:54:70:39:98:77:c6:9c:0a:ad:f8:36:ce:ab:37:24:83:
08:90:6d:a6:7d:5d:d0:09:69:aa:7a:df:7e:05:8d:f1:9d:01:
d6:37:bb:ef:e9:4e:78:7a:ed:7c:5e:31:bd:af:aa:60:a6:0e:
83:de:cf:e2:eb:8b:3f:3b:00:3b:8a:21:c5:80:19:a6:35:f3:
de:81:3f:ff:02:b7:67:aa:22:6f:bf:61:6d:17:34:b5:30:9a:
6e:69:45:39:14:70:15:b7:48:02:5f:12:c0:97:f6:e6:29:3e:
9a:9f:b4:ed:c3:9d:81:ac:51:d8:62:c4:da:0f:ae:d6:6d:a2:
f2:f0:8f:a8:e8:4d:b9:f5:06:9d:d6:4f:3b:44:7c:95:01:14:
30:69:48:b4:fc:c6:b8:dd:65:17:a3:7f:e6:c8:66:68:41:d0:
3f:65:7b:d8:20:f0:97:96:4d:00:49:42:92:b7:8f:bd:b5:72:
d8:96:10:19:e4:36:c9:d2:9f:8f:25:86:4e:4e:97:19:4b:e8:
cb:2e:00:77:69:55:0a:ac:c3:39:1e:ed:9f:84:b1:09:2b:91:
d3:13:3c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:58 2025 by rpki-client