This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
File: ld96gQDZeVNoc6wP-Z9uRyhSupk.mft (raw, json)
Hash identifier: oi/qquKIl/rgeSecCVQ8liT0PZ/H4DIMD3TIXsMXSZI=
Subject key identifier: 78:05:0D:28:E0:47:2E:A9:1E:C8:FF:66:51:A6:ED:D4:FB:F8:06:47
Authority key identifier: 95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99
Certificate issuer: /CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99
Certificate serial: 076F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
Manifest number: 0769
Signing time: Thu 18 Dec 2025 21:04:40 +0000
Manifest this update: Thu 18 Dec 2025 21:04:40 +0000
Manifest next update: Thu 25 Dec 2025 21:04:40 +0000
Files and hashes: 1: ld96gQDZeVNoc6wP-Z9uRyhSupk.crl (hash: 6Ukbpb5VHvLESB91JNIzTuZ4rLAmvvuPKPVni8yi8WA=)
2: 02DAC07852C611ED845AB22BC4F9AE02.roa (hash: qvspaedVSxXhNT9OPfm4dmWtO2TlaRcmc3pC2Y/603Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl
rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 21:04:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1903 (0x76f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91987D0, serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99
Validity
Not Before: Dec 18 21:04:40 2025 GMT
Not After : Dec 25 21:04:40 2025 GMT
Subject: CN=69446c68-068d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:28:d2:54:23:1a:22:14:51:28:1c:9d:a4:
ef:ca:12:e2:ee:03:e4:fe:04:02:4e:92:02:76:7d:
67:3d:be:34:22:f9:22:81:bc:6d:4c:27:76:16:c1:
cb:77:3a:61:96:d9:07:6b:20:15:66:5c:37:5f:1c:
cd:fa:d4:62:86:81:a6:0c:52:8b:60:49:bc:89:2e:
05:e5:cd:9a:0c:c5:81:04:99:27:44:98:23:f9:4a:
0b:2a:c4:a2:60:4d:f0:65:02:78:c9:08:ab:b5:5c:
0c:2f:74:e3:ed:b1:14:a9:c1:d7:39:a9:15:89:c5:
ff:bf:52:4a:d7:e3:84:19:9d:d8:6d:a0:2e:41:9b:
d7:1a:12:a3:40:df:9f:76:df:e4:7b:51:6d:85:69:
8b:67:ed:d1:83:0b:bf:3a:ec:51:c8:40:db:42:dd:
76:94:75:ec:be:46:28:cd:c6:54:f4:c7:fd:9c:a8:
93:b6:52:28:55:b7:f1:c1:4a:22:d5:5c:64:57:82:
0c:c1:c2:3a:00:44:86:d0:d4:f3:15:f3:65:d4:91:
a8:0c:2e:8a:4d:36:c1:53:30:48:60:8e:01:46:d3:
10:e7:57:b5:39:7e:ae:62:10:7e:cb:0b:76:be:ec:
1e:a7:e5:5e:c6:0d:bd:84:f3:e3:b0:ca:65:a2:a4:
6a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:05:0D:28:E0:47:2E:A9:1E:C8:FF:66:51:A6:ED:D4:FB:F8:06:47
X509v3 Authority Key Identifier:
keyid:95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:61:ea:df:38:b8:e9:f4:81:1e:ce:8c:e4:86:e0:ad:17:54:
1e:f2:92:9a:07:61:ac:d0:ea:47:42:87:e0:99:6d:98:da:0d:
5a:6c:cd:7b:e2:58:af:3b:ff:f9:de:c5:19:d5:fd:04:0f:f8:
b2:a1:67:ed:48:ae:9c:35:c1:5f:a9:5b:e4:05:53:12:a5:e9:
da:8d:56:0e:e6:8b:35:d2:01:24:67:24:8f:dd:29:9b:9b:8e:
ac:d8:42:42:d1:77:f9:7e:f3:2c:d7:20:a4:53:18:29:cb:82:
76:5f:41:51:76:44:14:7a:9e:0a:6e:87:a2:53:67:d4:1f:3c:
f8:fc:0c:a2:17:c7:55:b8:b1:0e:93:42:ae:4b:9f:46:fd:82:
8b:ee:e0:43:03:8c:dd:7e:7c:d9:5c:52:ad:7c:36:e1:4b:de:
ff:bb:24:61:25:8c:81:40:b0:9a:5a:19:e1:c4:bc:95:ba:9e:
0b:42:72:de:65:3d:37:58:be:14:a3:c8:d4:80:93:09:ea:e1:
bc:ef:69:3b:27:a4:22:a7:d0:12:a5:7e:38:df:f9:f9:79:25:
45:45:18:ae:0a:ab:d7:89:b5:54:a0:d6:24:8e:1a:0f:0e:5a:
1b:ec:e1:3d:6d:6c:de:13:3f:9a:00:08:16:2e:8e:61:5f:f6:
77:95:d8:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg3RDAxMTAvBgNVBAUTKDk1REY3QTgxMDBEOTc5NTM2ODczQUMwRkY5OUY2RTQ3
Mjg1MkJBOTkwHhcNMjUxMjE4MjEwNDQwWhcNMjUxMjI1MjEwNDQwWjAYMRYwFAYD
VQQDDA02OTQ0NmM2OC0wNjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApHko0lQjGiIUUSgcnaTvyhLi7gPk/gQCTpICdn1nPb40IvkigbxtTCd2FsHL
dzphltkHayAVZlw3XxzN+tRihoGmDFKLYEm8iS4F5c2aDMWBBJknRJgj+UoLKsSi
YE3wZQJ4yQirtVwML3Tj7bEUqcHXOakVicX/v1JK1+OEGZ3YbaAuQZvXGhKjQN+f
dt/ke1FthWmLZ+3Rgwu/OuxRyEDbQt12lHXsvkYozcZU9Mf9nKiTtlIoVbfxwUoi
1VxkV4IMwcI6AESG0NTzFfNl1JGoDC6KTTbBUzBIYI4BRtMQ51e1OX6uYhB+ywt2
vuwep+Vexg29hPPjsMploqRqgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgFDSjg
Ry6pHsj/ZlGm7dT7+AZHMB8GA1UdIwQYMBaAFJXfeoEA2XlTaHOsD/mfbkcoUrqZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODdEMC8xOEVCMDc1MjQy
QkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVWTm9jNndQLVo5dVJ5aFN1
cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xkOTZnUURaZVZOb2M2d1AtWjl1UnloU3Vway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODdEMC8xOEVCMDc1MjQyQkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVW
Tm9jNndQLVo5dVJ5aFN1cGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCmYerfOLjp9IEezozkhuCtF1Qe8pKaB2Gs0OpHQofgmW2Y2g1abM17
4livO//53sUZ1f0ED/iyoWftSK6cNcFfqVvkBVMSpenajVYO5os10gEkZySP3Smb
m46s2EJC0Xf5fvMs1yCkUxgpy4J2X0FRdkQUep4KboeiU2fUHzz4/AyiF8dVuLEO
k0KuS59G/YKL7uBDA4zdfnzZXFKtfDbhS97/uyRhJYyBQLCaWhnhxLyVup4LQnLe
ZT03WL4Uo8jUgJMJ6uG872k7J6Qip9ASpX443/n5eSVFRRiuCqvXibVUoNYkjhoP
Dlob7OE9bWzeEz+aAAgWLo5hX/Z3ldjv
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:27:41 2025 by rpki-client