This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
File: LNEILrR3cdIdqQBYLz7IfGndXMw.mft (raw, json)
Hash identifier: fAG5L/7Jl3PiOrpC/6gI7ayZwwrwsDlmLi50cJ60mZI=
Subject key identifier: 9F:75:48:74:AB:37:D5:5F:C4:AC:1F:78:EA:89:AD:56:6E:75:0A:74
Authority key identifier: 2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC
Certificate issuer: /CN=A91D84F7/serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
Manifest number: FC
Signing time: Fri 19 Dec 2025 04:16:06 +0000
Manifest this update: Fri 19 Dec 2025 04:16:06 +0000
Manifest next update: Fri 26 Dec 2025 04:16:06 +0000
Files and hashes: 1: LNEILrR3cdIdqQBYLz7IfGndXMw.crl (hash: RQQfzdpFXPsdZngI/zw/JLiEnQbOnA2hYfHLN+FESVM=)
2: AAFB89C25B8E11EF8774691FC4F9AE02.roa (hash: Z8UDv1UV/5P3Y0FPBjtW9ftg+P9GP6R45lfE98ZqVpY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl
rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:16:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D84F7, serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC
Validity
Not Before: Dec 19 04:16:06 2025 GMT
Not After : Dec 26 04:16:06 2025 GMT
Subject: CN=6944d186-2413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:64:61:c6:c1:2c:db:07:5b:8a:39:2f:6a:
27:d2:28:04:5f:5e:4b:46:c8:bc:ef:0d:4d:17:5f:
98:6c:a6:a7:fe:4c:b2:f5:8d:8b:85:e2:a2:1a:f6:
8c:a0:e8:fb:78:6e:1e:82:e5:fd:b4:03:0b:0a:6f:
47:cc:6b:f4:6f:da:64:d3:5d:12:91:fa:60:2c:aa:
0e:27:90:58:99:a2:79:20:25:bb:75:b6:90:18:80:
11:97:ec:3c:c7:ea:8b:8b:f0:03:de:8e:31:6e:2c:
0b:d5:8b:3e:61:ca:98:3e:44:0a:41:5b:d7:4c:bc:
19:58:9c:72:98:13:46:5f:58:4c:57:13:23:5e:1c:
fe:71:2a:da:03:d2:c8:cc:4b:8e:f4:ed:f2:9d:95:
2a:70:be:a3:78:c5:97:3e:76:51:bc:f6:a1:7c:61:
b8:f8:bb:21:1d:b8:68:3d:4a:31:19:df:a6:f3:48:
cd:bf:22:c8:b4:cc:1e:af:ff:b7:bb:02:dd:39:f0:
0d:d8:81:2e:ed:d2:07:d2:a6:2f:bb:65:50:56:06:
86:21:41:f0:36:dc:44:e8:bb:19:7b:e6:c5:53:da:
ee:a7:41:51:5d:5a:f7:d2:a3:28:67:3d:a6:ca:e6:
11:e9:f6:45:11:5c:e9:99:17:dd:ba:53:37:3d:d2:
a7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:75:48:74:AB:37:D5:5F:C4:AC:1F:78:EA:89:AD:56:6E:75:0A:74
X509v3 Authority Key Identifier:
keyid:2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a4:8f:36:18:79:ea:8d:8a:2a:a7:c3:f2:85:4c:96:ad:bb:
31:44:99:12:01:67:c4:b3:35:52:92:f8:18:46:dd:af:0e:ed:
a2:db:a6:64:45:88:6a:f7:21:f9:40:ac:0a:bf:c3:f1:11:81:
14:2b:e0:13:db:bd:ce:dc:e6:23:66:ad:d7:35:67:3b:a1:79:
45:26:55:9e:4f:58:81:c1:0f:2e:ac:9d:2f:75:96:6c:a0:59:
c3:e9:8b:a2:ef:b1:ff:eb:1c:7a:ee:ff:6e:87:59:88:66:09:
87:e2:21:13:36:c2:79:36:22:56:ee:87:c4:2d:4c:d7:bb:99:
d2:e9:6a:cd:0b:83:39:10:b4:cb:60:32:31:6a:9d:58:67:8d:
e1:df:dd:09:77:73:1a:4b:a4:bd:4f:a3:15:7e:78:0a:75:cc:
89:4b:2e:e1:ad:3b:11:be:1e:cd:d5:75:56:fb:30:54:3f:d3:
b5:3e:44:09:14:b4:5c:3f:f5:b4:29:ac:86:9e:78:9b:b8:d6:
fb:0f:c7:71:2f:9b:ec:f8:69:65:be:8e:c6:ca:bf:e2:fc:43:
8e:24:71:4c:f8:69:20:08:3b:f9:4b:f7:33:50:4e:07:cb:58:
75:de:a4:7d:59:9c:78:5d:50:f7:93:a6:79:62:5c:ba:ac:86:
15:0c:f7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:56:19 2025 by rpki-client