This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
File: LhWWOMt5D3lFFyLlKs602oBfi5c.mft (raw, json)
Hash identifier: GkNFCZN7QZW7ANtmyJHmeJIHce2G3rPxrY8/O4FqiTw=
Subject key identifier: 3D:62:9F:AA:FC:CE:BD:B8:FD:30:D6:B1:BD:E0:FA:EC:AC:0C:6C:D7
Authority key identifier: 2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97
Certificate issuer: /CN=A91A1E13/serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
Certificate serial: 06BC
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
Manifest number: 06BA
Signing time: Thu 18 Dec 2025 21:36:26 +0000
Manifest this update: Thu 18 Dec 2025 21:36:26 +0000
Manifest next update: Thu 25 Dec 2025 21:36:26 +0000
Files and hashes: 1: LhWWOMt5D3lFFyLlKs602oBfi5c.crl (hash: BGcUfIfdlctp6bQvIsRLFyfvn/AXiqtrvhtC2IoAnvc=)
2: 6981A2B8879A11F0A06BE519C4F9AE02.roa (hash: zJFBrogxJmrgFn6KndJfwEvlPnHVGLhKeq6Q6YowlNA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl
rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 21:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1724 (0x6bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1E13, serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
Validity
Not Before: Dec 18 21:36:26 2025 GMT
Not After : Dec 25 21:36:26 2025 GMT
Subject: CN=694473da-2981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ae:df:24:eb:05:9c:53:97:c9:45:4f:da:88:
64:a5:36:b6:f3:28:fe:a6:a4:0c:d4:11:5e:b5:67:
c3:d6:da:fc:60:2c:96:a4:87:0b:8d:7a:7c:5b:f1:
86:60:b5:3c:70:3d:89:3e:ec:96:99:2b:9a:da:93:
37:a7:5c:c4:cb:e2:bb:9b:09:05:b4:88:42:a9:cf:
f9:71:1d:a4:d1:49:3f:dc:31:49:c2:ec:0b:56:25:
82:97:a9:1c:60:ee:83:80:a9:93:61:8d:4c:b6:71:
35:0a:cb:54:85:30:6d:09:35:71:f4:f2:90:bb:1b:
d4:52:13:31:f4:dd:e8:76:5a:db:35:3a:7a:ff:ff:
ca:0b:89:87:b2:b7:f1:18:e0:91:52:ec:5d:44:fc:
7e:91:af:9c:db:c9:b1:3a:ba:2f:fd:89:93:4c:cc:
78:95:73:b4:17:ff:8c:13:f3:22:f8:ec:83:89:1b:
b0:47:d3:da:52:8e:dd:6e:5e:43:0f:60:0e:85:78:
82:95:ab:bb:9f:ee:0a:c1:83:76:ff:d1:cb:00:11:
fd:08:00:59:26:b0:d8:06:1e:8c:48:9f:4e:cd:22:
ae:99:7d:9e:49:94:d1:da:42:43:8a:62:ab:2b:df:
84:03:96:e9:8b:d0:59:e0:22:e3:f2:68:7a:a3:a6:
b4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:62:9F:AA:FC:CE:BD:B8:FD:30:D6:B1:BD:E0:FA:EC:AC:0C:6C:D7
X509v3 Authority Key Identifier:
keyid:2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:26:68:46:40:6e:e6:6d:f4:03:ec:47:5b:bb:ee:c5:c7:2c:
b2:0b:3c:5e:95:05:da:86:5d:6c:1e:b7:da:f2:5a:65:54:e3:
e1:37:a1:b8:6c:c2:c8:07:0a:f6:0f:94:e7:d5:49:8b:50:03:
4d:3f:c4:61:5b:0b:09:13:70:d3:40:4c:ba:cb:a2:ab:05:63:
ef:41:92:32:5f:1a:37:e2:19:eb:ef:cc:8d:c1:c9:e8:a6:94:
ac:3c:62:e7:93:3c:87:9a:5f:e4:96:29:b8:5a:c0:7e:19:51:
ac:37:5f:03:ca:c4:db:68:df:82:be:84:20:e4:f5:fb:df:89:
fd:60:89:d0:95:a5:53:db:30:75:0b:a3:66:e2:a9:b6:0c:24:
04:fa:dd:9a:37:73:89:16:f2:3a:83:06:97:83:1f:6e:18:25:
45:1f:db:90:74:a2:3b:78:04:8d:cf:c0:ca:65:58:6b:08:d1:
4a:45:e7:a2:e1:d2:b2:5b:74:9b:18:05:7f:ad:f3:ab:a8:39:
f1:e0:55:c1:9a:a9:33:6e:af:16:62:7a:f7:e9:e7:93:db:76:
2f:81:ae:c3:b7:b8:76:40:55:4b:f5:fe:6a:52:1d:e0:2c:74:
98:f5:74:7e:cd:33:2d:e6:1e:04:8c:58:d2:24:77:f7:1a:a9:
74:08:ea:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:07:47 2025 by rpki-client