This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
File: LgN_IhyajV_cyIxDyosl1ENrsDk.mft (raw, json)
Hash identifier: tS2uFhtsAOqcuSCBLdHBO3xAmCKEXNZJsVaFjqnuYkE=
Subject key identifier: 66:9B:85:6B:AC:0A:83:29:FE:DE:A6:A1:D0:4A:42:E5:3F:A3:68:D2
Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
Certificate issuer: /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Certificate serial: 94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
Manifest number: 92
Signing time: Thu 25 Dec 2025 05:28:50 +0000
Manifest this update: Thu 25 Dec 2025 05:28:50 +0000
Manifest next update: Thu 01 Jan 2026 05:28:50 +0000
Files and hashes: 1: LgN_IhyajV_cyIxDyosl1ENrsDk.crl (hash: CqYlHUvt0ymbpjegFC2i2AzZ770Sk9NzzMn47pdCAeI=)
2: D3E69766027B11F0ACFB0B53C4F9AE02.roa (hash: rAyLEuhdwnMPn+ymXVwfBwimmdxQ/627KOj67XHuGHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 05:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Validity
Not Before: Dec 25 05:28:50 2025 GMT
Not After : Jan 1 05:28:50 2026 GMT
Subject: CN=694ccb92-89c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:0f:ef:b0:1d:63:28:20:af:72:63:0b:05:
3f:52:af:22:1e:72:25:7f:61:f6:82:df:c8:c8:b6:
e4:4f:59:a2:8a:83:58:eb:02:33:36:e3:41:56:59:
64:04:58:de:96:35:0c:94:56:71:e0:d8:20:df:f1:
57:dd:f9:f0:b2:d2:b8:e0:44:a4:73:73:da:a7:63:
7f:49:dd:69:fe:5f:1e:4e:b4:10:56:b9:26:f2:fd:
2a:68:2d:0c:cd:1c:62:6a:5d:10:7c:b7:ff:d3:43:
0d:8d:f2:d5:58:36:98:fa:4f:c5:17:36:32:a2:53:
cf:bd:33:a2:79:4a:c5:44:c4:62:43:86:3c:52:9f:
b8:0c:16:bf:ea:68:13:4f:76:76:2b:ed:90:c8:d8:
45:23:da:a1:ec:ee:31:ab:eb:6b:b3:09:78:de:cf:
0c:2b:f9:48:b6:81:87:46:e0:93:f6:f6:b1:25:0b:
2b:7e:d4:7e:d6:1d:46:c5:b1:58:e5:c4:74:bb:5e:
b0:a6:8b:cb:52:6d:46:38:01:48:d5:ce:11:50:b1:
54:ab:49:9f:bc:a2:51:53:a8:47:09:9b:21:d5:57:
62:c9:ba:9f:9b:93:11:d5:61:dd:7a:a0:cf:e0:33:
4c:42:f3:57:df:83:8c:ac:08:d5:4b:b3:37:bc:71:
40:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9B:85:6B:AC:0A:83:29:FE:DE:A6:A1:D0:4A:42:E5:3F:A3:68:D2
X509v3 Authority Key Identifier:
keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:8a:65:56:39:bd:40:85:18:09:a6:10:7a:99:26:bd:cf:d0:
5f:f6:1d:63:f1:af:df:91:ee:75:b1:84:41:9c:ce:53:c7:e0:
09:10:00:84:ca:e2:98:37:75:b2:4b:4a:42:fd:18:6f:96:14:
25:4f:51:7b:ad:cd:0a:2c:4b:8a:01:a4:b4:59:41:29:06:3e:
f4:b0:98:9b:b7:21:f6:d8:e9:d0:68:b2:3e:0b:8c:48:88:8e:
0c:4c:59:17:ba:04:68:fd:b6:42:29:3b:74:37:cf:23:b8:be:
c8:d4:6a:bf:72:11:dd:22:b6:bf:2d:37:f3:f6:bf:a2:07:c5:
21:02:da:d1:04:4b:ea:ea:30:9b:aa:c7:d6:20:74:b5:d5:ab:
cb:24:21:11:09:5c:a2:ed:a3:b5:25:e6:37:dd:4b:5a:07:3a:
d9:0b:80:47:8f:c4:3f:ac:32:4b:f9:98:fe:ba:11:80:ac:33:
e2:c5:3d:27:ec:a3:cb:61:5b:6f:7f:68:a7:f0:d9:b0:80:63:
80:ab:3f:8e:c2:5c:2f:c3:0c:f0:a8:47:99:24:7c:94:5d:89:
cc:24:4f:55:20:96:3b:57:e6:39:ea:ec:46:14:51:3a:fe:ec:
c9:db:d2:b0:99:10:46:e5:5e:69:39:d2:3e:90:09:86:0d:c1:
52:ab:65:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 14:19:55 2025 by rpki-client