This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
File: -luvRrfLLI40Y4OqgMs5ayuBxkw.mft (raw, json)
Hash identifier: BLWLt/6WzmBfrRZI97szzHGUnPyxK1UMrYNpwfZEs+w=
Subject key identifier: D4:2E:DB:53:38:5E:51:9C:20:43:42:6D:04:0D:6C:9E:0A:11:5C:93
Authority key identifier: FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C
Certificate issuer: /CN=A91A29D7/serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
Manifest number: 25
Signing time: Fri 19 Dec 2025 06:40:07 +0000
Manifest this update: Fri 19 Dec 2025 06:40:07 +0000
Manifest next update: Fri 26 Dec 2025 06:40:07 +0000
Files and hashes: 1: -luvRrfLLI40Y4OqgMs5ayuBxkw.crl (hash: 2EDw5AOMJsFu5tR4WESLm6vBfYef3wjDSVUEDmPeXI0=)
2: 753E1B20B1B311F0BD0C0785C4F9AE02.roa (hash: ZEgQ8tbj5F35NBxvxNkrasJNkBRbUBDhID22q1DgVs8=)
3: 603EEC5ED0F811F0A0F75447C4F9AE02.roa (hash: +CbZpgm+4vyB8fOl/TuKcq6Ycobk7P+jIHSjzgCG4eI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl
rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29D7, serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
Validity
Not Before: Dec 19 06:40:07 2025 GMT
Not After : Dec 26 06:40:07 2025 GMT
Subject: CN=6944f347-a9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:40:57:a4:61:7e:95:b8:12:e3:53:30:49:76:
1c:8f:a5:43:c7:40:e1:49:5b:5e:d8:83:87:d5:dd:
bd:a2:49:30:ab:9c:29:4d:c5:50:01:5f:24:f1:25:
7e:10:44:b7:cb:02:96:29:93:5e:c1:b9:0b:d2:6b:
94:87:b2:ad:ba:71:ad:9b:54:a8:48:1f:47:79:ef:
52:dc:98:e9:0a:f4:77:dd:fd:29:24:2e:82:87:10:
e2:1a:ec:1c:33:5b:34:f6:5f:4b:0d:5c:e7:95:6f:
af:bf:ef:3f:f5:e1:ac:81:b9:8e:56:1a:19:25:12:
a8:f4:25:da:aa:5c:b3:17:d5:42:c5:c6:5b:65:0a:
46:e1:23:f0:12:59:21:60:3d:a1:b4:ed:0e:fd:df:
eb:9e:2e:dd:bd:f3:84:a2:43:c1:24:17:be:bf:5e:
7b:7e:91:b3:b5:30:83:a1:f0:b3:38:73:7f:2f:9b:
d8:2d:d7:cf:af:4b:85:80:9c:99:e5:97:05:04:3d:
30:bc:8e:fb:05:b9:a2:e0:4f:fc:ef:e9:96:f2:4f:
7d:ce:81:0e:95:59:ed:d0:2a:1f:95:60:0f:e5:55:
02:47:3b:93:4e:de:b7:51:fd:c8:a3:c0:62:0c:6b:
79:ec:8a:2e:7e:59:2c:fc:91:3b:43:de:6b:d0:33:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2E:DB:53:38:5E:51:9C:20:43:42:6D:04:0D:6C:9E:0A:11:5C:93
X509v3 Authority Key Identifier:
keyid:FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:e2:3e:ef:4f:18:94:f2:58:6b:01:52:a3:43:3f:21:54:b0:
70:8c:41:bb:d9:e5:27:d4:04:15:66:be:a9:6e:36:ed:ee:54:
b4:17:27:45:bf:5d:c2:58:bc:99:a7:73:48:9a:82:fb:e4:d3:
72:97:a8:10:67:e3:48:61:53:80:63:6d:5a:2e:9d:8d:cb:bd:
58:92:97:72:70:4f:21:16:0c:10:9a:fc:4e:03:29:0d:27:a5:
be:0d:60:da:37:4f:ef:1d:3a:d4:7b:1e:20:97:30:67:a9:83:
d8:79:40:8b:1c:56:fd:4d:0e:62:67:26:50:56:90:bb:45:7e:
99:96:9b:08:32:11:62:11:3b:28:17:e0:4c:96:09:f0:73:92:
67:98:9d:a4:c2:3e:21:45:06:d3:2d:2b:5c:d9:15:11:b1:18:
c3:83:a0:89:27:31:ce:0d:5d:90:89:21:15:83:5b:4e:74:bd:
7a:b3:7c:f9:22:97:8d:48:a5:24:1e:8d:cd:ac:dd:0e:96:7c:
20:cd:73:dc:8a:2f:f3:11:54:05:8a:78:c3:ba:4d:4e:da:2c:
24:4d:dc:64:42:3a:37:08:07:cd:d5:22:04:dc:4d:a2:19:01:
4e:67:d6:87:04:ed:8b:7e:7e:ef:eb:32:20:74:b9:a5:fd:0c:
79:f3:89:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:55:17 2025 by rpki-client