This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
File: LLjB-eoMe1qANok4hADMb9iwSdI.mft (raw, json)
Hash identifier: 7d8HCh/t7jwNMm31rJF+GSaZKgpgkI5kCkhcxMi4uj0=
Subject key identifier: 50:84:87:F0:B5:D7:4F:EF:FA:EF:B3:06:3B:43:12:71:20:2C:2A:7F
Authority key identifier: 2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2
Certificate issuer: /CN=A911015D/serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2
Certificate serial: 01C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
Manifest number: 01BF
Signing time: Tue 23 Dec 2025 02:03:06 +0000
Manifest this update: Tue 23 Dec 2025 02:03:05 +0000
Manifest next update: Tue 30 Dec 2025 02:03:05 +0000
Files and hashes: 1: LLjB-eoMe1qANok4hADMb9iwSdI.crl (hash: 47TyO0k28HwMz1yurN8IxxWsRYWCmnNqzlpWPMoVBoM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl
rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911015D, serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2
Validity
Not Before: Dec 23 02:03:05 2025 GMT
Not After : Dec 30 02:03:05 2025 GMT
Subject: CN=6949f85a-93d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:f9:04:a1:4b:80:85:41:c0:3c:05:ae:6c:
db:05:b4:98:fe:af:c6:62:de:01:9c:94:e1:88:bb:
f6:99:77:ef:3e:f2:4f:4e:1a:a1:2f:84:4e:59:f5:
d3:9e:6d:0f:99:72:75:1b:b6:29:06:d2:dc:aa:a1:
96:42:16:1f:41:ee:2d:ec:d8:19:aa:86:6b:1b:2a:
b3:de:d2:bf:ae:3a:9d:d1:f6:98:a1:b0:28:71:7f:
84:65:56:e2:47:e0:6c:92:08:83:48:80:d4:ae:c9:
28:7e:1d:ea:f4:16:8c:2e:a2:7a:53:5e:c5:72:69:
5e:9b:b6:7e:cb:0c:70:62:b3:dd:e6:22:52:41:bb:
ef:07:6d:72:0e:74:71:6b:60:88:ec:cb:ef:5a:a7:
b3:b7:52:86:6f:d3:a1:0d:39:2d:0d:29:57:4f:98:
06:bb:8a:55:08:36:36:5e:95:7a:22:9d:d8:f3:75:
16:90:23:bc:fa:83:be:fd:e4:74:d5:c3:47:b5:1a:
88:7a:aa:5b:7a:7f:f3:d3:73:b2:52:8d:1b:30:b9:
0c:b5:9e:80:18:97:cd:3c:58:cf:4c:22:90:5c:ae:
1b:ea:2d:e5:f4:e3:32:b1:81:93:52:8b:57:15:a9:
e7:be:4c:ed:be:66:fb:a4:30:15:26:21:db:2a:af:
b4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:84:87:F0:B5:D7:4F:EF:FA:EF:B3:06:3B:43:12:71:20:2C:2A:7F
X509v3 Authority Key Identifier:
keyid:2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:dd:3d:03:42:e0:1b:a6:5e:e1:0e:db:be:7b:10:24:13:fc:
b2:75:80:c0:a8:9a:65:94:17:8e:91:8a:ad:53:6e:2b:25:32:
b2:56:56:a9:1d:6c:a3:60:be:d5:15:6c:5d:35:14:d4:7d:eb:
2c:99:8f:fe:c3:b3:23:9b:b7:4c:09:1a:e5:48:8b:c9:cf:d5:
f2:64:1f:ef:93:8c:2b:fb:b7:31:e1:a2:8e:4d:f4:56:ee:ab:
94:c7:b4:31:8f:85:57:69:e9:ca:9a:b5:52:05:cb:6c:c7:0c:
98:a7:6c:5f:3d:1f:62:5f:a1:5e:08:e7:9f:e8:8f:49:1b:3a:
03:f1:9d:e9:25:45:5d:fd:dd:e5:2d:af:27:0f:15:00:5c:fb:
eb:9f:4b:53:1a:ab:b2:53:fb:5c:40:c5:a9:d6:a3:2c:3e:3a:
e8:b3:86:8b:80:9e:5b:7f:05:87:ed:2a:ad:d4:32:c9:a0:db:
41:3d:7f:74:fe:42:d2:ed:5c:2f:ed:7e:1b:bb:09:fc:93:62:
30:c4:0e:a3:e4:fb:91:66:8a:67:b4:ee:f8:8c:b7:d6:ca:4a:
6c:fd:40:f7:cb:97:e2:4e:11:43:52:68:c1:a2:8a:09:18:4c:
80:aa:92:2b:f4:cf:2f:70:04:f9:5e:5a:ad:0d:79:0b:35:8f:
ca:85:73:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:34 2025 by rpki-client