This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
File: L0yMSsxFXG1aSQxAkLOjUqivHLU.mft (raw, json)
Hash identifier: oEa5n3TybRi/WTelHQgj3ucPorjTd+yL3WLvVLb/tiU=
Subject key identifier: 8D:33:DC:55:3D:99:66:F7:EB:38:9D:E6:66:61:BB:D3:80:76:CF:7B
Authority key identifier: 2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5
Certificate issuer: /CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
Certificate serial: 0490
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
Manifest number: 0485
Signing time: Mon 22 Dec 2025 23:09:35 +0000
Manifest this update: Mon 22 Dec 2025 23:09:34 +0000
Manifest next update: Mon 29 Dec 2025 23:09:34 +0000
Files and hashes: 1: L0yMSsxFXG1aSQxAkLOjUqivHLU.crl (hash: GIrNEgkkL1Tt5SWkiPEi9D0Jdt1iK7N5bJ6+MpWOPyo=)
2: BD6C86326AEC11ECB61ECF30C4F9AE02.roa (hash: ycvRnCz+W4ba8DDROuCngyAKLqsVfBGFpl90bOtHXMA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl
rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1168 (0x490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130128, serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
Validity
Not Before: Dec 22 23:09:34 2025 GMT
Not After : Dec 29 23:09:34 2025 GMT
Subject: CN=6949cfaf-ea92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5b:e4:7e:c1:bf:31:25:15:46:c6:5d:32:9e:
2b:44:c7:55:e7:b3:cd:dc:84:e4:b3:ae:f4:f6:4e:
0b:19:be:ec:bc:6f:96:cc:d6:8a:ee:6b:e4:a1:c0:
72:d3:80:1f:30:16:24:48:39:88:9c:c6:34:1a:34:
82:94:a5:74:f1:54:62:2b:f1:fc:57:06:ed:92:52:
c1:9f:cc:a5:42:b5:74:ce:c6:5f:33:d5:e3:e5:a7:
98:06:6d:80:f2:09:58:e9:6c:ca:37:33:e7:fa:45:
c1:11:ec:87:8f:db:70:03:fc:fe:2b:6d:ee:05:9b:
26:96:28:89:9a:16:44:46:b1:09:10:fd:eb:eb:7f:
ad:6e:84:b5:81:b8:1e:6c:0b:a8:a6:e2:e3:c1:1d:
80:99:68:ef:c1:73:3c:98:ee:a8:e9:e3:1a:38:50:
b5:b0:01:f9:d6:bf:95:e2:5e:66:a3:af:8e:aa:96:
1b:24:00:f6:b5:9f:bc:e6:df:80:bf:ea:82:af:4c:
c5:35:0e:e8:26:1a:5a:79:d8:02:31:e9:13:0a:ff:
75:db:9f:44:e4:ac:74:f4:5d:e8:04:c8:64:f7:1d:
02:0b:f7:b6:de:fb:ab:78:38:a3:71:d2:17:fb:23:
1a:ad:1b:39:93:75:1e:3a:93:58:c1:0a:15:54:8d:
e8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:33:DC:55:3D:99:66:F7:EB:38:9D:E6:66:61:BB:D3:80:76:CF:7B
X509v3 Authority Key Identifier:
keyid:2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:e3:70:28:2b:28:c0:52:7d:85:8f:d0:60:9a:ca:78:e4:7e:
37:43:38:97:cc:29:6c:01:e3:75:8f:ae:b0:d6:cf:e1:9e:50:
b5:a6:b9:1e:38:7f:6d:79:ba:65:3b:cd:e1:08:40:11:f3:01:
08:19:99:6a:68:ce:6c:e8:10:4d:25:65:4b:50:57:23:09:c7:
2b:67:e1:6d:79:ec:03:aa:e5:2c:61:68:7b:fe:02:f3:ef:4b:
fd:b6:dc:d0:8d:39:f0:76:e0:fb:da:69:d0:1c:f5:56:b8:03:
af:c0:3f:bc:81:09:67:d7:a6:eb:9d:aa:20:21:c5:98:90:74:
ec:77:ad:dc:0f:2f:60:9d:ab:e7:ae:55:eb:af:03:09:a0:0e:
5f:da:35:1e:ad:eb:88:5d:a9:f4:5f:9b:b4:3e:3a:50:4c:74:
ea:8d:af:49:b1:aa:11:20:59:3a:bd:70:28:18:05:a7:df:04:
6e:99:62:d9:95:62:5e:1c:3e:c2:94:2c:ec:14:2d:fc:09:66:
63:39:80:df:cb:0e:cd:40:9b:db:c7:55:55:b7:3e:1f:6a:1d:
ad:15:bb:c1:2b:b0:8f:aa:ca:88:74:ad:32:90:b4:c4:ae:cb:
4c:80:66:eb:15:4a:73:3d:f8:0b:2e:c6:4d:41:10:58:11:77:
b9:50:5a:60
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzAxMjgxMTAvBgNVBAUTKDJGNEM4QzRBQ0M0NTVDNkQ1QTQ5MEM0MDkwQjNBMzUy
QThBRjFDQjUwHhcNMjUxMjIyMjMwOTM0WhcNMjUxMjI5MjMwOTM0WjAYMRYwFAYD
VQQDDA02OTQ5Y2ZhZi1lYTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3VvkfsG/MSUVRsZdMp4rRMdV57PN3ITks6709k4LGb7svG+WzNaK7mvkocBy
04AfMBYkSDmInMY0GjSClKV08VRiK/H8VwbtklLBn8ylQrV0zsZfM9Xj5aeYBm2A
8glY6WzKNzPn+kXBEeyHj9twA/z+K23uBZsmliiJmhZERrEJEP3r63+tboS1gbge
bAuopuLjwR2AmWjvwXM8mO6o6eMaOFC1sAH51r+V4l5mo6+OqpYbJAD2tZ+85t+A
v+qCr0zFNQ7oJhpaedgCMekTCv91259E5Kx09F3oBMhk9x0CC/e23vureDijcdIX
+yMarRs5k3UeOpNYwQoVVI3oeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0z3FU9
mWb36zid5mZhu9OAds97MB8GA1UdIwQYMBaAFC9MjErMRVxtWkkMQJCzo1Korxy1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEyOC85MUJDMzc1MjZB
RTgxMUVDQTQ0ODQ2NUJDNEY5QUUwMi9MMHlNU3N4RlhHMWFTUXhBa0xPalVxaXZI
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0wweU1Tc3hGWEcxYVNReEFrTE9qVXFpdkhMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDEyOC85MUJDMzc1MjZBRTgxMUVDQTQ0ODQ2NUJDNEY5QUUwMi9MMHlNU3N4RlhH
MWFTUXhBa0xPalVxaXZITFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDM43AoKyjAUn2Fj9Bgmsp45H43QziXzClsAeN1j66w1s/hnlC1prke
OH9tebplO83hCEAR8wEIGZlqaM5s6BBNJWVLUFcjCccrZ+FteewDquUsYWh7/gLz
70v9ttzQjTnwduD72mnQHPVWuAOvwD+8gQln16brnaogIcWYkHTsd63cDy9gnavn
rlXrrwMJoA5f2jUereuIXan0X5u0PjpQTHTqja9JsaoRIFk6vXAoGAWn3wRumWLZ
lWJeHD7ClCzsFC38CWZjOYDfyw7NQJvbx1VVtz4fah2tFbvBK7CPqsqIdK0ykLTE
rstMgGbrFUpzPfgLLsZNQRBYEXe5UFpg
-----END CERTIFICATE-----
Generated at Tue Dec 23 10:51:30 2025 by rpki-client