This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
File: ak_LGM3Y70HSMyE57mLo_Sc7b98.mft (raw, json)
Hash identifier: KkrA2JArtR6DylKZCIVWxf+V3pD1FHfLcF6+3vH+pl4=
Subject key identifier: C2:06:B6:76:64:B5:1A:22:91:10:9C:D8:3B:32:4C:28:DA:E1:B4:5A
Authority key identifier: 6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF
Certificate issuer: /CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
Certificate serial: 031B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
Manifest number: 0317
Signing time: Mon 29 Dec 2025 00:11:15 +0000
Manifest this update: Mon 29 Dec 2025 00:11:14 +0000
Manifest next update: Mon 05 Jan 2026 00:11:14 +0000
Files and hashes: 1: ak_LGM3Y70HSMyE57mLo_Sc7b98.crl (hash: Frpme7lEBTqCfRsZlhwzBGKYAJL5o7OjCRyQ7oX5/l8=)
2: EF1B381EF93911ECBD1E663DC4F9AE02.roa (hash: LqMQ8S/3IECVVRLn50FlnyT89fd2Q+6nyvw3xYa+ytU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl
rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Jan 2026 00:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 795 (0x31b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199B85, serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
Validity
Not Before: Dec 29 00:11:14 2025 GMT
Not After : Jan 5 00:11:14 2026 GMT
Subject: CN=6951c723-ab5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:dd:0d:c0:84:96:ad:51:2b:f7:84:02:cc:
fc:b7:66:49:8f:b7:0c:cf:cf:69:53:d1:1c:ce:07:
27:fb:2b:bb:00:3c:0a:f7:56:15:4d:77:21:4e:e5:
d3:96:2e:64:4e:e3:63:bc:f8:a2:01:ba:e7:26:11:
48:39:8b:56:cb:ed:37:eb:f5:b9:25:90:29:96:d5:
c3:3e:23:8d:0a:48:7b:0c:9f:53:f2:e8:28:ee:64:
3e:20:2f:b0:f3:34:b1:9b:60:4a:48:65:0a:10:4f:
0e:6d:7e:e3:d2:c5:9f:42:78:59:29:ff:48:ac:d9:
fc:e6:1e:fb:ac:93:da:e4:5e:9a:3c:d8:de:cb:38:
07:8d:7a:e0:5f:ae:af:1b:cc:d9:cf:ee:b9:f4:65:
f4:58:6a:7c:46:9a:fe:4f:dd:6a:24:cd:16:c6:44:
33:f2:a2:1f:bb:e0:17:6d:af:c8:2d:09:f5:33:b9:
dc:08:9d:78:6b:8a:0b:7e:16:11:5a:4c:55:ae:95:
62:21:7d:b3:9d:ea:9d:5a:74:e6:7b:c4:14:9c:03:
a4:89:a9:b0:60:23:fd:95:f9:95:6f:ff:dd:6e:1d:
35:15:17:4c:90:40:4e:0b:f6:da:ea:67:ff:7f:2a:
52:57:3b:cd:93:34:3c:16:36:66:a7:25:88:b5:f4:
4f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:06:B6:76:64:B5:1A:22:91:10:9C:D8:3B:32:4C:28:DA:E1:B4:5A
X509v3 Authority Key Identifier:
keyid:6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:b2:73:9b:33:67:6a:1f:86:da:ba:cd:27:69:b7:e0:5b:2c:
15:ba:94:69:c3:c5:18:83:df:fd:25:79:23:46:af:cc:7b:81:
63:d1:6f:6a:2a:be:a1:f3:e2:96:0d:d4:e9:48:d9:d1:60:fb:
78:89:c6:5c:fc:92:3f:62:c0:35:0d:2a:2e:8c:94:c8:83:b0:
0b:98:0d:ef:e5:72:e3:b2:14:bb:fd:9e:dc:6b:a3:b1:19:04:
1c:2a:ef:69:18:50:78:fb:ca:a8:ee:d4:ab:fa:01:17:3c:b8:
a7:c0:d2:8f:83:68:83:61:ed:2f:f5:46:04:8e:3c:42:cb:82:
5e:a7:39:c1:60:01:6b:7c:35:b7:5c:e0:9a:07:87:ca:6e:ed:
ab:ed:f9:e5:51:f0:81:e8:a3:a1:be:32:49:be:1c:52:09:fa:
ab:2e:1e:a7:3f:6f:0a:b6:28:d4:28:19:10:7a:ff:d4:b3:1a:
29:0a:d5:af:71:3f:f1:ea:52:39:d6:81:9d:39:46:4a:93:2a:
45:9c:7e:45:7d:3d:b8:a8:a4:5e:b6:63:ce:11:ff:e5:ba:2e:
c0:06:78:c8:8a:4a:0c:1d:8b:58:52:85:3f:1b:08:81:85:ac:
b4:22:b3:a1:61:f7:ba:df:85:15:b5:6e:41:8a:34:7c:d2:ed:
57:fd:9c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 07:04:36 2025 by rpki-client