This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
File: LpwRxtKUXVL5XyTDndH0GHo0F-U.mft (raw, json)
Hash identifier: bSd7E23q93Lv6dJHoZezDJRkqidCp9UvSQ3VaCbh1+4=
Subject key identifier: 27:39:DA:D0:C4:D5:DC:F0:74:29:ED:E9:1B:45:F3:49:5F:F4:AB:B1
Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5
Certificate issuer: /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5
Certificate serial: 0211
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
Manifest number: 020C
Signing time: Tue 23 Dec 2025 01:20:27 +0000
Manifest this update: Tue 23 Dec 2025 01:20:27 +0000
Manifest next update: Tue 30 Dec 2025 01:20:27 +0000
Files and hashes: 1: LpwRxtKUXVL5XyTDndH0GHo0F-U.crl (hash: GI9gmhY/epe+2WdKp6Qg43uwPcfdUbgeFkrwqDkjd0w=)
2: AA12544E5AAF11EF86AAA442C4F9AE02.roa (hash: JysCwCJJxEUrqo1TsnL+HZ8PxWYOSwYy6QcS3aO9jis=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl
rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 01:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B31D, serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5
Validity
Not Before: Dec 23 01:20:27 2025 GMT
Not After : Dec 30 01:20:27 2025 GMT
Subject: CN=6949ee5b-b342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f8:99:aa:d6:4a:a3:68:3e:a5:ff:62:4b:34:
35:5b:38:f9:dd:73:67:71:9f:94:aa:2e:9b:5f:46:
ea:86:c5:f4:ed:32:73:c6:51:ef:93:e0:7b:aa:17:
0a:b6:fd:0c:82:58:e3:ee:0f:47:4b:66:9d:d5:fc:
8f:85:1d:8c:54:9e:29:33:83:29:1a:c1:7e:8b:2f:
f8:12:b6:d7:9a:be:63:0b:94:e2:22:a7:a3:3d:51:
5e:5d:50:fb:5a:94:7e:d8:77:34:0b:b4:c1:58:6c:
11:93:22:34:e1:71:87:d4:7c:15:a0:e7:76:e0:5c:
da:6d:85:6e:d4:09:bd:b5:bb:74:54:7d:ba:4f:16:
ad:3d:ac:8b:94:d6:4c:48:24:69:ac:be:08:18:1b:
7b:cf:b4:ad:ff:29:37:61:fd:51:d2:3e:15:a9:53:
03:e6:9c:02:53:d8:67:b6:6e:4a:af:5f:77:ac:17:
01:42:20:5b:9c:fd:b0:b1:d7:13:57:22:fc:61:2d:
3d:c3:2c:3e:8d:fd:de:e2:10:9c:78:b5:94:c5:6f:
87:9a:e7:58:17:8f:f8:4a:c7:6e:84:94:04:c0:45:
4e:cd:0a:89:18:8e:a5:21:35:b3:be:dc:58:56:12:
29:42:bc:a6:da:71:55:16:ff:22:8c:5b:87:af:5e:
6d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:39:DA:D0:C4:D5:DC:F0:74:29:ED:E9:1B:45:F3:49:5F:F4:AB:B1
X509v3 Authority Key Identifier:
keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:7d:d3:82:f6:8b:ef:8e:55:41:53:ef:19:e4:c5:6e:75:0b:
26:f5:8c:41:d8:ef:c7:b8:63:23:e4:4b:0d:4a:e0:4e:7b:02:
21:96:9d:9a:48:07:bf:bc:95:c6:35:e5:63:ac:be:7b:46:3e:
02:16:aa:ab:21:10:77:b7:89:53:4b:f7:44:e2:06:10:3e:18:
bf:75:80:4d:92:44:93:33:ed:18:7e:5e:7e:90:c8:b5:9e:9f:
93:89:d5:9e:26:22:02:31:23:9b:7c:f9:2c:08:c7:93:66:39:
13:ea:96:97:c4:c5:7e:bd:17:18:0a:1d:2b:1e:f7:9e:77:f2:
09:c9:e7:83:a8:18:08:c0:db:23:bb:91:28:ff:0c:fc:39:54:
44:b7:f7:6d:56:45:94:c1:46:24:e3:f5:e6:04:31:9e:f3:18:
06:d4:eb:8b:89:bb:b6:5b:e5:07:11:9b:77:55:00:c3:a6:f6:
64:e4:8d:24:5e:14:b9:49:a2:6d:cd:ba:0e:99:36:42:ab:71:
72:f4:0d:b3:f4:c6:ea:0d:f9:80:d1:13:31:86:a0:54:f7:2d:
60:a2:80:e8:b0:0d:ad:56:23:d5:ee:8a:a5:3f:18:16:fe:5a:
13:db:3b:79:9e:05:8e:95:0c:80:db:b0:a8:08:3f:aa:01:33:
04:bc:30:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:06:25 2025 by rpki-client