This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
File: l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json)
Hash identifier: mYdEXCtbHqUt84g77wUHiq83G6sfsyj1sx6XU7Ji60A=
Subject key identifier: 95:82:EE:E0:2C:67:E9:51:80:46:B9:C3:7B:D0:0F:70:91:79:94:2F
Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B
Certificate issuer: /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B
Certificate serial: 0CDF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
Manifest number: 0CD8
Signing time: Sat 20 Dec 2025 17:48:08 +0000
Manifest this update: Sat 20 Dec 2025 17:48:07 +0000
Manifest next update: Sat 27 Dec 2025 17:48:07 +0000
Files and hashes: 1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: rwVxz1PPbM+2caFq5a+BwHFg/kADVZ++USm0G0uEZVA=)
2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: ivTBLc1IHemjBh5C9Wu0pV5fBOGymo+VSgfkbB+w5w8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl
rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 17:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3295 (0xcdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B
Validity
Not Before: Dec 20 17:48:07 2025 GMT
Not After : Dec 27 17:48:07 2025 GMT
Subject: CN=6946e158-21c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:bb:8d:ff:c7:ae:3e:42:d7:95:c6:18:ab:
18:40:9c:25:5a:1f:b9:3d:4c:63:f3:a0:47:54:cd:
2b:fc:3f:81:ea:01:c7:6b:e1:83:de:80:64:cc:48:
a0:80:04:8f:e8:77:d8:2a:44:39:ac:72:07:a2:7b:
b0:9d:c9:50:98:94:66:84:10:9b:68:c6:1d:8d:6c:
14:69:d6:f2:fd:c0:6c:00:5c:7b:ea:78:93:19:bb:
b0:af:08:1c:5a:7c:e5:e3:e4:e1:24:d3:2b:d8:75:
3d:18:8b:e8:28:af:ed:4b:93:6f:c4:ca:b3:59:03:
50:03:48:09:91:cc:30:1b:b8:7d:af:34:7c:e3:43:
2e:31:d5:61:7d:f7:00:39:3a:4f:fe:02:9b:60:eb:
22:12:31:96:bd:d0:1f:1a:33:c4:20:1e:eb:51:05:
63:f6:70:7b:cb:35:27:90:bb:93:97:41:cc:50:90:
b0:5b:19:11:13:6f:c3:c1:67:b9:82:af:c2:78:bd:
02:8f:97:86:1c:0d:bd:eb:d8:d8:3d:95:b3:1f:0d:
a6:bf:3c:64:9f:1d:cb:57:f9:6b:e6:30:b0:1a:01:
21:a1:50:86:23:1b:04:46:b8:f7:c7:a5:b9:c6:be:
49:6f:a5:cd:09:72:d0:43:5f:2b:0d:da:95:fd:97:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:82:EE:E0:2C:67:E9:51:80:46:B9:C3:7B:D0:0F:70:91:79:94:2F
X509v3 Authority Key Identifier:
keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:de:7f:b4:7f:9a:50:96:1f:5b:53:a4:61:8d:12:97:31:9d:
22:94:e4:e8:fc:93:8f:ad:6a:8a:cd:be:82:e9:bc:68:a5:19:
38:1e:07:0e:94:3d:ed:fa:5b:58:fd:4e:b1:51:fc:70:11:27:
9f:96:e4:a1:02:e7:b1:18:f9:20:93:a6:71:41:bd:26:d1:dd:
ce:ad:6a:13:7e:f2:d0:9e:a5:bd:5a:86:2b:b8:ca:16:9f:fa:
2e:63:79:3d:02:f1:96:3f:75:58:54:bf:89:3b:b4:a3:0e:aa:
8e:80:f6:75:d0:bb:e7:77:d6:61:04:f6:41:f8:e7:ec:93:92:
2e:ea:be:8b:3a:51:6b:7f:f3:b6:cd:88:7c:2b:78:92:06:55:
d2:43:80:c2:e2:7d:e0:83:26:0b:6b:bb:94:fa:0e:9c:af:1d:
4f:db:fc:72:9c:da:9d:e3:82:42:11:0c:38:82:ad:92:33:f4:
cd:09:50:4a:87:0f:20:f2:d1:ea:8b:52:98:ec:19:34:49:f2:
f7:7e:d4:e3:0f:23:48:d2:f9:23:55:cd:3e:7d:e2:96:c9:ca:
ab:00:ed:3a:d2:99:70:01:64:70:ca:a6:6e:b7:d3:dd:33:24:
78:b8:37:c8:a3:af:ad:d8:96:d0:85:eb:a5:c6:ff:a3:3c:b8:
f6:88:46:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:40:04 2025 by rpki-client