This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
File: lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json)
Hash identifier: KrEdb5lAV9c1IvJTtL72ec0vGCO+72CzrAWHOliSJrU=
Subject key identifier: 74:90:E6:F1:1C:A6:62:78:7F:F4:1C:06:E8:CB:AD:23:AF:FA:FF:12
Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
Manifest number: 7C
Signing time: Fri 19 Dec 2025 05:47:51 +0000
Manifest this update: Fri 19 Dec 2025 05:47:51 +0000
Manifest next update: Fri 26 Dec 2025 05:47:51 +0000
Files and hashes: 1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: +zK3KfUznEFzrwa9TXePxEtZjvN66kn/tifnKcXGB2c=)
2: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: maMIBW8WqwpEw8k3CdK6BFRqFVm8airXL8KIFqvlGQs=)
3: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: Jax3Kvx2J0ODr5GgDNYrVUtv6/aFnopa2LSsnYbiSlg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Validity
Not Before: Dec 19 05:47:51 2025 GMT
Not After : Dec 26 05:47:51 2025 GMT
Subject: CN=6944e707-3c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:cf:b8:da:25:56:99:91:3a:8f:b6:ea:f7:
00:1e:70:51:60:c0:d4:5d:43:36:5b:b8:4c:b2:4d:
b6:9f:d6:78:41:2c:3c:d0:aa:7c:e3:3a:2f:36:d4:
b0:44:ce:89:a4:de:26:e4:5d:f3:16:ca:5f:d5:8a:
cc:2c:6f:21:49:a8:02:ef:fa:8b:b8:06:7e:08:76:
e8:d1:ad:1d:79:56:73:4d:da:e6:36:aa:4d:e5:d7:
f3:f1:1f:3f:fa:19:36:8e:b6:a0:7a:2d:e6:ff:70:
3c:9d:dc:b1:b9:2e:91:c2:fc:38:cb:14:fe:9a:b9:
51:a5:b6:2d:14:8e:7d:32:3a:4d:8b:6f:91:13:b8:
fe:40:24:d3:7c:53:2e:95:b2:2b:88:37:53:da:73:
b3:80:7f:09:14:64:23:43:63:f5:b2:b2:99:56:81:
81:d7:96:77:16:db:9f:fd:38:b8:c0:a1:a8:05:d5:
e7:7f:20:2a:4c:ab:e6:29:4c:60:8c:59:ff:95:d4:
24:df:47:c1:39:a6:6b:98:9a:5f:75:89:db:95:1c:
66:d8:ba:3d:b7:17:c7:dd:1e:1f:72:44:57:b3:fd:
c0:d8:1e:ba:c3:1a:02:77:56:03:ac:d2:47:f1:41:
71:93:e4:dd:a4:62:56:b8:a5:ab:db:05:d4:05:23:
dd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:90:E6:F1:1C:A6:62:78:7F:F4:1C:06:E8:CB:AD:23:AF:FA:FF:12
X509v3 Authority Key Identifier:
keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:13:64:de:11:80:68:fb:82:b8:31:b2:af:07:5c:dc:c8:db:
55:48:eb:3b:5e:a2:7e:98:b6:1d:53:cf:6a:7e:df:9d:8b:84:
1d:ef:e6:89:61:8b:80:18:84:69:b7:36:84:21:87:a0:c8:8c:
a6:4e:8a:98:0d:d7:1a:13:07:b4:27:f0:fe:d3:0c:33:3a:2b:
ec:94:38:80:04:d8:98:05:23:99:a1:7f:c0:66:d2:e6:a6:44:
c6:13:cf:1b:22:af:dd:34:bd:ed:78:ef:91:cc:f9:a3:57:a8:
ec:9d:8b:14:3a:e3:d7:a7:4d:c4:71:cf:e8:3e:bd:27:6b:bc:
29:df:83:d1:a0:1e:65:06:03:92:bf:7b:e4:82:56:4c:2d:6a:
00:66:b9:32:72:59:c4:7e:d0:ee:2d:d3:c3:fe:dc:32:4e:bb:
d8:72:0f:df:91:8f:91:e2:bc:74:30:cc:f2:1d:61:8f:7d:d1:
43:37:0a:3e:52:fb:9d:f5:8b:c9:8e:5b:6b:a5:89:83:1c:0e:
c6:a6:2a:cf:89:7d:69:28:c4:87:6a:16:66:d8:70:fd:15:9c:
9d:0a:d0:9c:68:08:81:0c:95:3c:78:27:8e:37:ba:c2:96:47:
5d:6d:66:08:5b:1d:3f:d3:ec:d7:ff:8f:00:4a:f1:04:db:b2:
1d:fc:72:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM3QUIxMTAvBgNVBAUTKDk0QzhFRjNGMkE5MjJFRTE0NEFBNkYwQjY2NDM2Q0E0
NjZDQzRCMEEwHhcNMjUxMjE5MDU0NzUxWhcNMjUxMjI2MDU0NzUxWjAYMRYwFAYD
VQQDDA02OTQ0ZTcwNy0zYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApAHPuNolVpmROo+26vcAHnBRYMDUXUM2W7hMsk22n9Z4QSw80Kp84zovNtSw
RM6JpN4m5F3zFspf1YrMLG8hSagC7/qLuAZ+CHbo0a0deVZzTdrmNqpN5dfz8R8/
+hk2jragei3m/3A8ndyxuS6Rwvw4yxT+mrlRpbYtFI59MjpNi2+RE7j+QCTTfFMu
lbIriDdT2nOzgH8JFGQjQ2P1srKZVoGB15Z3Ftuf/Ti4wKGoBdXnfyAqTKvmKUxg
jFn/ldQk30fBOaZrmJpfdYnblRxm2Lo9txfH3R4fckRXs/3A2B66wxoCd1YDrNJH
8UFxk+TdpGJWuKWr2wXUBSPdzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSQ5vEc
pmJ4f/QcBujLrSOv+v8SMB8GA1UdIwQYMBaAFJTI7z8qki7hRKpvC2ZDbKRmzEsK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzdBQi8yNjQ4NDU5MDIx
RjMxMUYwQTI4MTM1N0FDNEY5QUUwMi9sTWp2UHlxU0x1RkVxbThMWmtOc3BHYk1T
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xNanZQeXFTTHVGRXFtOExaa05zcEdiTVN3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzdBQi8yNjQ4NDU5MDIxRjMxMUYwQTI4MTM1N0FDNEY5QUUwMi9sTWp2UHlxU0x1
RkVxbThMWmtOc3BHYk1Td28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYE2TeEYBo+4K4MbKvB1zcyNtVSOs7XqJ+mLYdU89qft+di4Qd7+aJ
YYuAGIRptzaEIYegyIymToqYDdcaEwe0J/D+0wwzOivslDiABNiYBSOZoX/AZtLm
pkTGE88bIq/dNL3teO+RzPmjV6jsnYsUOuPXp03Ecc/oPr0na7wp34PRoB5lBgOS
v3vkglZMLWoAZrkyclnEftDuLdPD/twyTrvYcg/fkY+R4rx0MMzyHWGPfdFDNwo+
Uvud9YvJjltrpYmDHA7GpirPiX1pKMSHahZm2HD9FZydCtCcaAiBDJU8eCeON7rC
lkddbWYIWx0/0+zX/48ASvEE27Id/HIG
-----END CERTIFICATE-----
Generated at Sat Dec 20 15:19:08 2025 by rpki-client