This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft
File: lAmAjIoyxYSU2uV00F1rsiJyw1o.mft (raw, json)
Hash identifier: 25BA+6VJNxbaJx37Ua+u9RCgx2Rg5d9J4W+bWxY3zBg=
Subject key identifier: 8B:2D:3F:D5:C5:39:4E:02:A3:FA:05:AB:DB:AB:96:22:FA:02:4A:D2
Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A
Certificate issuer: /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A
Certificate serial: 1EE9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft
Manifest number: 1ED9
Signing time: Thu 18 Dec 2025 15:57:12 +0000
Manifest this update: Thu 18 Dec 2025 15:57:11 +0000
Manifest next update: Thu 25 Dec 2025 15:57:11 +0000
Files and hashes: 1: lAmAjIoyxYSU2uV00F1rsiJyw1o.crl (hash: IBue4GFrM4hghWVWS+zOcMLdIsn1HizQAk54P97izl8=)
2: 4664F7042B7411EF9E28ED19C4F9AE02.roa (hash: mcsOJ/PSjF+pyGpbfB/eXtIe/0dKHqcd9NaSWEDdEYo=)
3: 45865ED62B7411EF9E28ED19C4F9AE02.roa (hash: G8JFHwSz1ocsPfiu5EdB881TguSYEm9QZ2Yz9AovjhA=)
4: C7D60D34CC0611EC93451840C4F9AE02.roa (hash: 0mgkLjgKwKqnZvyXs7R0/CM7YveV0fnq5l57+ocSN+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl
rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 15:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7913 (0x1ee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C77D, serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A
Validity
Not Before: Dec 18 15:57:11 2025 GMT
Not After : Dec 25 15:57:11 2025 GMT
Subject: CN=69442457-dc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:cf:b1:29:6c:6c:fa:58:84:0f:78:45:07:
90:61:d3:09:ad:69:6a:72:d3:3b:a6:30:5e:f9:54:
18:3d:ba:1b:60:8c:29:1e:da:c7:da:62:10:a8:7e:
ff:01:47:cf:d1:09:51:e0:41:91:40:23:f5:bd:81:
8a:13:6f:38:5a:a4:ff:6f:c0:85:1d:55:94:ec:81:
8e:e7:40:84:46:2f:bd:fc:f5:fe:e5:03:57:e4:38:
b6:21:f5:55:5a:be:56:dd:57:bc:67:56:77:dc:8f:
96:2c:f7:0b:5f:63:11:b1:71:3c:65:ae:eb:62:dd:
b0:75:51:34:db:1c:3b:27:2b:31:ce:b5:5b:11:84:
af:85:20:f2:85:98:25:7a:52:fd:a6:3e:4b:3b:aa:
60:2c:36:68:b6:2f:aa:53:f7:9c:56:af:3f:b3:e8:
ce:40:42:5d:6a:48:35:73:0d:91:94:fe:9c:27:bb:
c2:5f:7d:dd:12:2b:8c:25:96:fc:00:2a:6c:9b:ec:
90:ad:5d:b4:c6:32:d2:c2:e7:5f:5b:70:72:7e:47:
24:8e:44:e1:26:4b:e0:e9:c7:4f:01:2e:1a:be:fe:
af:24:68:50:35:f9:26:62:f9:1b:8c:e5:5a:a2:a8:
a8:3d:d9:51:36:71:3c:13:b3:db:47:38:f0:82:a1:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2D:3F:D5:C5:39:4E:02:A3:FA:05:AB:DB:AB:96:22:FA:02:4A:D2
X509v3 Authority Key Identifier:
keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:a0:bd:26:71:81:86:17:93:e7:b7:68:e1:15:0d:a7:84:a7:
d3:60:73:9b:97:69:dd:60:e1:07:95:ea:12:b8:47:dd:6b:1b:
95:18:cf:7f:ad:5b:ce:55:85:87:f8:c2:3d:72:a7:2a:3d:ce:
a9:42:e4:b0:b9:27:d2:5d:ca:c4:99:e7:16:bf:58:d2:9a:06:
21:9a:df:96:78:2d:65:b3:b6:c9:0a:d6:10:e0:0e:28:2f:86:
5e:61:27:41:d5:31:01:13:41:ef:2a:0e:7d:cd:67:c1:14:fc:
5a:c6:2b:78:6b:4e:ed:6f:2f:eb:b0:a5:3c:5f:bd:45:99:fb:
41:81:e9:ce:97:8c:6c:cd:4b:b9:f2:fb:61:c9:97:96:48:4a:
71:10:6a:98:a5:b5:05:1d:35:54:ab:32:51:30:58:63:6b:ec:
d4:4b:c0:44:88:ff:7f:cd:87:50:69:77:09:6a:d9:5e:aa:fb:
e3:f6:f2:f3:98:92:31:57:77:e4:f6:da:30:38:ff:53:ab:db:
c6:b7:e4:75:40:87:d8:3e:0b:1e:e1:8a:f3:eb:c6:96:62:02:
5c:07:ca:18:aa:a7:92:dc:ba:ac:6a:cf:68:34:0e:0e:c3:c6:
f5:b9:e1:0b:45:14:5c:40:95:18:0d:97:8a:7e:02:c6:4e:56:
ec:a6:1a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:24:06 2025 by rpki-client