This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
File: lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft (raw, json)
Hash identifier: TFVjO00Ft///Z6Q4VdYATDdrt58PvRI/bRIp9xtaeBI=
Subject key identifier: 1C:A8:38:07:6A:B5:F6:61:FF:6F:D4:79:11:50:C5:49:7B:F5:86:6D
Authority key identifier: 95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47
Certificate issuer: /CN=A919546B/serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47
Certificate serial: 06C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
Manifest number: 06BB
Signing time: Thu 18 Dec 2025 21:38:18 +0000
Manifest this update: Thu 18 Dec 2025 21:38:17 +0000
Manifest next update: Thu 25 Dec 2025 21:38:17 +0000
Files and hashes: 1: lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl (hash: qrgf6cheIy9TkVJi0XyO+Ahca9EdBuq5lu5vxZ2pkbg=)
2: 270CD9841A7111F09FFEDF3BC4F9AE02.roa (hash: nNWr6J3AcReiPHvNk6340B1sT6j8vw6YrQdSHa29JIE=)
3: 652993B4884F11EBB2A8337FC4F9AE02.roa (hash: Xrevk4k6Cchylp30Kd2GrTW0U2Yau9k0gu1MIRCl1Z0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl
rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 21:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1730 (0x6c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919546B, serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47
Validity
Not Before: Dec 18 21:38:17 2025 GMT
Not After : Dec 25 21:38:17 2025 GMT
Subject: CN=6944744a-bfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e4:7d:f2:af:d6:bf:5c:c5:c5:77:96:9b:17:
7d:08:b7:ed:1a:50:31:07:88:95:d8:89:75:77:24:
f8:1f:e7:a0:41:3c:10:6c:d2:d0:18:c9:30:b3:42:
4b:ff:c7:b7:71:c9:55:8f:a4:72:32:27:69:15:a0:
86:ae:98:26:29:b8:5a:fe:ae:d2:fe:c9:e0:ec:06:
a0:1e:d8:59:f8:04:ea:ca:03:8c:bb:5f:c5:92:20:
04:d1:a5:29:6d:a1:06:95:fc:56:60:11:28:c9:4a:
14:3b:4b:fd:59:15:98:1f:b2:39:f7:6a:ae:da:9e:
9f:b8:27:e6:81:82:ab:0d:1f:51:6e:c6:a7:53:ec:
54:c6:9f:d1:7d:ce:c6:ed:20:32:4c:b3:d2:c4:51:
ae:e4:61:b2:c6:59:70:12:22:21:19:bc:0b:56:09:
f7:c2:ce:0e:68:f0:8b:c7:82:27:7a:bf:e8:79:c9:
04:75:59:fd:30:3c:fd:dc:ab:47:22:5a:8d:c4:3f:
c9:03:d5:65:0b:ec:08:d4:72:88:7a:ae:da:a6:d5:
39:ee:d7:3a:5e:85:20:11:8e:2a:0d:e9:5c:cb:76:
64:14:48:3b:1f:22:ed:2a:59:28:f8:63:50:6d:b0:
7c:8f:e5:bf:fd:ca:01:0f:76:be:2e:1c:16:12:d9:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A8:38:07:6A:B5:F6:61:FF:6F:D4:79:11:50:C5:49:7B:F5:86:6D
X509v3 Authority Key Identifier:
keyid:95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:18:fa:56:d7:c5:e7:33:72:d7:e0:fd:63:fd:52:17:a8:d6:
9d:40:0e:7d:f4:9f:72:6e:bd:99:59:b3:81:5c:22:5d:c0:52:
70:e8:9f:a9:f7:55:7b:80:22:2b:02:74:d2:ed:c0:3c:17:cb:
44:88:9d:eb:37:1f:e0:5b:62:6d:93:18:67:10:99:ac:e4:dc:
08:ef:71:2e:6e:67:08:c2:1d:e1:9a:35:94:3f:00:f9:18:e8:
ba:9c:1f:45:e5:f3:7e:34:8d:90:5b:8a:63:eb:5e:9e:0a:a5:
c1:2c:f9:94:ae:b6:b4:d4:d9:78:8b:84:ff:c3:80:d4:87:25:
96:05:60:fe:45:a9:5c:2e:f9:51:c7:57:95:5d:6a:c0:4f:b1:
68:11:23:03:db:70:55:2e:1c:12:b5:bd:f7:c6:fa:11:d6:76:
af:af:7f:6f:cb:0e:bc:5c:16:20:fe:3e:a0:a7:fd:d7:19:da:
28:a9:ba:02:04:01:15:48:65:45:fc:af:9f:03:68:14:81:51:
77:30:f6:28:33:31:1f:4f:e8:c8:d8:99:4d:1b:21:6c:8a:e6:
fd:33:f0:97:84:fa:04:83:72:0c:d0:0e:d2:0d:10:46:1c:d1:
33:7d:d1:ca:cf:ca:93:24:3a:3d:dd:28:5c:79:fb:9e:36:41:
d4:c9:f9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:24:07 2025 by rpki-client