This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
File: ll15uIln4ofmpRU6EE_BTsEYWxE.mft (raw, json)
Hash identifier: OYup3aFfVWINbWwV4C21PygpTEgdMHF7Hp0EWEsiyV8=
Subject key identifier: D0:FF:9A:03:55:CE:13:CB:D0:AD:9A:58:06:15:0A:A4:46:74:D1:BB
Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11
Certificate issuer: /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
Certificate serial: 03DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
Manifest number: 03D2
Signing time: Thu 18 Dec 2025 23:52:02 +0000
Manifest this update: Thu 18 Dec 2025 23:52:01 +0000
Manifest next update: Thu 25 Dec 2025 23:52:01 +0000
Files and hashes: 1: ll15uIln4ofmpRU6EE_BTsEYWxE.crl (hash: F8OSSU9PW9NW7aZI0QCYdVYrlDUaUElUe7QfNELpOjY=)
2: 1CDBD11CAE3711ECB61BED46C4F9AE02.roa (hash: 2gg461BffUf/xT7BkrRnrVM5ZugLJyBnhbCMdi11J1w=)
3: 1C43D57EAE3711ECB61BED46C4F9AE02.roa (hash: ZnO5JlWoEl5dNZhohsJyvbgouMlAXBiHwRW5x4khv3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl
rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 988 (0x3dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF859, serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
Validity
Not Before: Dec 18 23:52:01 2025 GMT
Not After : Dec 25 23:52:01 2025 GMT
Subject: CN=694493a2-4a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:98:c0:81:9c:d7:e5:05:9c:2d:19:31:34:01:
3a:b0:f5:48:9c:76:85:f3:da:47:02:41:77:1e:87:
3f:db:6b:61:01:fd:03:08:bc:eb:88:9b:1f:29:f1:
39:e9:d6:54:df:63:23:98:cc:75:03:24:e4:8b:b3:
8d:65:10:7e:2f:7b:72:31:9b:a6:5f:78:4e:05:67:
44:ce:ac:f3:20:92:59:4e:4f:1e:0c:c9:e7:d2:f2:
45:8a:f9:a3:5e:f0:c9:a1:18:7e:6f:37:fd:69:46:
9f:eb:b6:19:0a:3e:87:0a:85:48:d5:f8:df:86:c3:
35:17:62:ad:11:01:69:1d:75:3c:52:3b:09:b2:dc:
3b:24:ee:f0:b0:97:59:c6:64:c6:a5:45:0c:8a:9e:
dd:be:21:73:40:da:8f:0e:8c:e3:6d:b2:f1:81:4e:
0e:4a:0c:44:0e:f7:27:d9:4c:6f:52:cb:8a:9f:25:
fb:3a:bd:4b:c5:74:e3:5e:64:a6:31:9c:b8:95:17:
39:8e:98:09:c1:0c:b3:8f:0b:04:f4:d2:c8:d6:d2:
9a:67:90:29:5d:27:e6:6d:bc:f9:e5:82:a0:0c:53:
11:a0:3c:84:48:ca:a8:63:aa:36:3f:bd:cd:9c:6f:
39:03:c1:ce:87:18:4e:d3:79:44:fe:7f:6b:95:27:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FF:9A:03:55:CE:13:CB:D0:AD:9A:58:06:15:0A:A4:46:74:D1:BB
X509v3 Authority Key Identifier:
keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:63:4c:2b:1e:52:d4:08:c6:46:33:40:d3:85:c9:46:8a:8e:
a7:50:a7:b9:7a:46:6d:15:b4:44:e8:74:a4:fb:5e:c9:0a:d4:
db:94:32:08:77:5f:bf:3b:39:d1:93:50:69:1a:7b:fc:1d:88:
03:98:11:8e:59:b5:14:7f:48:64:31:42:79:d1:2f:a2:56:30:
1f:0a:94:a5:36:2b:d2:22:d2:f9:85:59:9a:50:f9:f3:7d:5c:
0a:ec:3c:be:c8:93:88:d0:89:0e:1b:17:f1:78:49:9b:31:1d:
2c:40:40:fb:e6:af:45:fd:5b:3c:de:a3:82:27:a8:d4:65:54:
e3:24:be:34:44:35:9d:f0:f0:2b:8f:a9:b5:25:18:1c:ea:08:
ae:ea:95:20:c8:49:7a:4a:27:62:1f:22:ad:56:a0:e2:38:9d:
bd:15:df:fd:3c:8b:a4:33:a2:fc:fe:d0:1b:cc:95:5e:28:e7:
7c:75:b1:50:c4:ae:60:87:a7:3f:ee:05:b0:8b:d1:3f:03:de:
a0:93:75:2f:18:e1:8b:a2:35:d2:3c:99:ad:14:b0:15:ca:d9:
73:f9:9b:e1:7e:cc:36:6a:aa:7d:af:cf:eb:33:e3:bb:31:e4:
38:a1:fb:a1:ef:b8:b9:c9:18:0a:5a:bc:21:c8:aa:6b:8d:42:
2c:fd:b3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:06:17 2025 by rpki-client