This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
File: LVublUzRc7c_8Ifephh55IBR0js.mft (raw, json)
Hash identifier: GQ3WGmdfPtwHWe9RCu/upNMLCNZn2NwS1vF5ZqhyY8c=
Subject key identifier: 2D:E5:D8:20:24:25:DE:C1:C5:F9:72:28:45:FD:48:DA:BC:86:93:F9
Authority key identifier: 2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B
Certificate issuer: /CN=A912CA2D/serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
Manifest number: A3
Signing time: Tue 09 Dec 2025 04:22:25 +0000
Manifest this update: Tue 09 Dec 2025 04:22:24 +0000
Manifest next update: Tue 16 Dec 2025 04:22:24 +0000
Files and hashes: 1: LVublUzRc7c_8Ifephh55IBR0js.crl (hash: nV0C/TudXNScd4QYGxzI4QmxR/0o9EyWXWyHIbUv14M=)
2: D44647F42AA511F0B80C4C59C4F9AE02.roa (hash: oEbfhc32xCsA7ht+olvhbX7mQyxDotxJHN+kwhGPI7w=)
3: 2719F6E88BA311F0A0D19E2CC4F9AE02.roa (hash: D1S7iqXGUUZHfp/09w60bmU/i0252Rh24H8Dl+FipBU=)
4: 30376074EF8811EFABCDFD34C4F9AE02.roa (hash: bPtg4MjC7eLz+ZT6OurE6aN4wcUNr7U76NQbeUk0pjo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl
rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 04:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CA2D, serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
Validity
Not Before: Dec 9 04:22:24 2025 GMT
Not After : Dec 16 04:22:24 2025 GMT
Subject: CN=6937a400-b115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:2f:f3:49:7d:a5:54:20:00:45:c0:ca:d1:
f9:29:7d:f1:6e:83:13:5a:7d:a3:71:ce:2f:ee:71:
91:ef:2e:19:37:4a:15:b3:8c:32:51:72:8c:e7:d7:
a8:f6:02:0d:34:cb:0a:7a:80:11:24:ed:62:68:bb:
18:7c:22:66:ab:1f:f3:f4:01:69:1c:84:01:03:f1:
fc:8d:93:27:33:c4:c2:fa:96:f2:0d:69:f3:50:16:
57:3d:19:1a:41:d6:63:92:c3:3c:23:3f:ee:0e:d6:
e8:65:f9:e7:48:6f:70:67:ae:c0:7c:fc:2a:db:96:
13:54:c1:42:aa:f1:60:ea:d3:2b:a6:ea:db:be:7b:
6d:77:0a:74:03:a1:32:d0:1a:a0:dd:b6:7d:99:f3:
13:d4:c6:76:f4:7c:9c:df:4a:f7:50:0b:46:b9:b3:
ef:7e:34:cc:6a:73:7f:a1:a1:91:1c:32:93:37:68:
2d:de:98:26:03:99:71:b6:41:6e:95:75:1e:f3:d2:
66:3c:48:f4:d5:77:06:f8:5e:88:95:d6:ce:ca:87:
b0:d8:71:8c:a0:b9:9e:f0:f2:9c:0e:3b:49:5d:32:
a3:94:a2:12:5f:78:64:bb:ba:03:6b:54:6c:ff:71:
82:c2:ee:ca:45:aa:a3:82:99:18:ca:08:93:b2:26:
63:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E5:D8:20:24:25:DE:C1:C5:F9:72:28:45:FD:48:DA:BC:86:93:F9
X509v3 Authority Key Identifier:
keyid:2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:38:51:f3:f6:be:29:92:be:e0:8b:34:12:1a:8e:69:a8:68:
d3:08:e7:28:ad:20:06:60:6a:a2:85:45:31:23:70:a7:ea:85:
92:5f:5f:9d:aa:20:41:18:30:7d:21:2d:f0:b9:2b:88:e7:26:
84:fd:19:4b:88:9f:34:b0:82:92:31:7a:ed:a3:35:30:3b:82:
10:c0:aa:c5:39:a6:1b:bd:56:e4:08:54:c5:02:b9:86:4f:2d:
2f:9a:a6:6c:f8:cd:1e:77:ef:58:3d:0f:05:96:4a:61:de:20:
d6:21:62:7a:3b:36:ea:d6:79:11:34:fa:e1:ec:fd:b6:fa:1e:
34:b1:fc:7a:64:25:4c:26:c5:f2:6e:43:4c:65:6c:6f:f2:f5:
34:e4:a6:7e:45:d7:6d:7e:ff:1f:10:a5:23:33:20:6d:8a:d0:
c1:a4:77:24:9d:a1:28:80:bb:73:32:80:45:cf:98:fa:ac:86:
78:e1:fa:4d:48:d8:a2:3c:2e:72:c0:56:9d:43:6c:49:95:c4:
bb:6a:7a:9f:c3:ea:04:a7:a6:4b:02:1e:df:89:bd:05:2e:96:
b2:e5:09:da:0f:2e:b9:84:c7:2a:db:35:ec:2f:c3:d5:59:26:
0a:f0:33:aa:7b:ff:7a:78:b7:3d:91:d7:53:b3:b6:53:03:49:
43:e3:e5:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkNBMkQxMTAvBgNVBAUTKDJENUI5Qjk1NENEMTczQjczRkYwODdERUE2MTg3OUU0
ODA1MUQyM0IwHhcNMjUxMjA5MDQyMjI0WhcNMjUxMjE2MDQyMjI0WjAYMRYwFAYD
VQQDEw02OTM3YTQwMC1iMTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnpgv80l9pVQgAEXAytH5KX3xboMTWn2jcc4v7nGR7y4ZN0oVs4wyUXKM59eo
9gINNMsKeoARJO1iaLsYfCJmqx/z9AFpHIQBA/H8jZMnM8TC+pbyDWnzUBZXPRka
QdZjksM8Iz/uDtboZfnnSG9wZ67AfPwq25YTVMFCqvFg6tMrpurbvnttdwp0A6Ey
0Bqg3bZ9mfMT1MZ29Hyc30r3UAtGubPvfjTManN/oaGRHDKTN2gt3pgmA5lxtkFu
lXUe89JmPEj01XcG+F6IldbOyoew2HGMoLme8PKcDjtJXTKjlKISX3hku7oDa1Rs
/3GCwu7KRaqjgpkYygiTsiZjpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3l2CAk
Jd7BxflyKEX9SNq8hpP5MB8GA1UdIwQYMBaAFC1bm5VM0XO3P/CH3qYYeeSAUdI7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0EyRC8yNTYxODdGMkVG
ODcxMUVGQTdCMUMyMzBDNEY5QUUwMi9MVnVibFV6UmM3Y184SWZlcGhoNTVJQlIw
anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xWdWJsVXpSYzdjXzhJZmVwaGg1NUlCUjBqcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Q0EyRC8yNTYxODdGMkVGODcxMUVGQTdCMUMyMzBDNEY5QUUwMi9MVnVibFV6UmM3
Y184SWZlcGhoNTVJQlIwanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9OFHz9r4pkr7gizQSGo5pqGjTCOcorSAGYGqihUUxI3Cn6oWSX1+d
qiBBGDB9IS3wuSuI5yaE/RlLiJ80sIKSMXrtozUwO4IQwKrFOaYbvVbkCFTFArmG
Ty0vmqZs+M0ed+9YPQ8Flkph3iDWIWJ6Ozbq1nkRNPrh7P22+h40sfx6ZCVMJsXy
bkNMZWxv8vU05KZ+Rddtfv8fEKUjMyBtitDBpHcknaEogLtzMoBFz5j6rIZ44fpN
SNiiPC5ywFadQ2xJlcS7anqfw+oEp6ZLAh7fib0FLpay5QnaDy65hMcq2zXsL8PV
WSYK8DOqe/96eLc9kddTs7ZTA0lD4+WD
-----END CERTIFICATE-----
Generated at Thu Dec 11 06:58:08 2025 by rpki-client