This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
File: lLA392-iN6eOqVSONVel4W7WJJo.mft (raw, json)
Hash identifier: Y5pnQn3O6YM9UqHeq1w88u7Ut/wacZyOcgBcCgegyOs=
Subject key identifier: 7C:76:76:AF:5A:B3:9D:C8:F2:8C:11:4A:62:1D:09:11:93:B6:72:D6
Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A
Certificate issuer: /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
Certificate serial: 01B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
Manifest number: 01AB
Signing time: Tue 23 Dec 2025 02:16:27 +0000
Manifest this update: Tue 23 Dec 2025 02:16:27 +0000
Manifest next update: Tue 30 Dec 2025 02:16:27 +0000
Files and hashes: 1: lLA392-iN6eOqVSONVel4W7WJJo.crl (hash: sszEKRCr0cKduPUSGuKjRtYGSz1q8N7TJWcVY+KeUds=)
2: 26C760F002EA11F0836EF72FC4F9AE02.roa (hash: /0dTnWT2FRET+08FVC1mUWomcC2kAcAYkpb9MNNV3d8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl
rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147BF1, serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
Validity
Not Before: Dec 23 02:16:27 2025 GMT
Not After : Dec 30 02:16:27 2025 GMT
Subject: CN=6949fb7b-2928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:71:6a:06:40:de:8d:0b:e2:15:d8:f6:89:
65:cb:ed:40:b6:e3:a9:70:36:89:35:2f:b1:33:d0:
f4:f8:54:06:e6:63:ba:f8:ea:cf:2e:6f:91:8c:79:
2c:a5:b5:68:24:25:f3:34:31:e8:bc:f1:59:f6:13:
12:03:32:97:e0:60:b7:f2:0c:ad:40:30:ce:98:62:
b7:87:d2:b2:c9:e0:01:0a:bb:b3:6a:15:5c:07:01:
72:fc:40:19:01:06:f0:39:ed:7b:5e:95:e9:c7:42:
09:e7:60:e9:51:85:6c:1f:85:7b:d5:6e:f4:bb:09:
07:1c:08:3b:99:33:4c:c8:4f:f9:5d:66:d3:22:38:
9e:24:a4:05:ed:08:e4:46:ca:05:48:b2:97:d1:de:
60:6e:a6:f7:03:44:57:c3:de:91:3f:a1:70:81:d8:
9e:6c:04:a7:c1:96:17:ac:6e:0b:aa:30:86:af:56:
1e:f7:ec:48:c9:30:9f:ca:fc:04:be:4d:19:80:55:
a2:3b:f4:78:8d:65:7c:a5:7b:eb:37:da:c6:35:81:
8d:0b:f4:50:ad:0c:7a:1a:22:8b:c2:34:fa:80:ab:
ca:99:a9:ad:9e:e4:52:c0:ce:93:c4:15:1f:c7:cb:
55:4e:05:d8:3a:c5:e5:f6:7e:25:1f:f3:02:cf:9a:
f2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:76:76:AF:5A:B3:9D:C8:F2:8C:11:4A:62:1D:09:11:93:B6:72:D6
X509v3 Authority Key Identifier:
keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b6:41:3e:93:ec:6a:55:d0:74:89:9b:2a:54:79:46:60:37:
55:82:f4:82:f2:94:06:b9:be:45:5b:fb:8e:b7:e0:55:02:28:
71:4c:f2:b5:a1:3f:e0:5f:3a:5a:d8:9c:8c:f2:3c:b9:8c:71:
e0:30:03:ca:6b:76:b6:e5:66:89:82:f4:a6:d1:b8:72:f5:ab:
14:a4:0c:59:65:f6:38:a3:ce:56:e9:70:42:05:5b:37:43:14:
cc:5c:d2:19:5d:ac:2d:ef:c0:49:cd:52:0d:43:0c:6c:6f:bf:
5f:4e:f5:78:b1:cf:f3:11:2b:48:67:5e:24:49:25:39:97:ea:
ac:a0:be:90:f5:80:ee:ce:56:1b:80:78:89:6d:f6:56:6c:43:
5a:68:89:d4:b7:0d:30:89:01:cc:5a:ad:ee:af:07:5e:5c:9d:
b5:62:f7:b0:94:b4:f5:0a:15:dd:9d:e3:e3:b5:d3:66:94:7e:
e3:30:35:9d:ae:16:69:14:5b:eb:5b:bc:c9:e0:4e:e2:4e:59:
03:ad:07:04:d9:78:c6:aa:8b:71:c3:6c:85:29:ca:bd:78:6a:
53:1f:d3:6c:2b:64:24:fe:5e:4e:dd:6f:f0:3f:71:36:ec:99:
d6:3e:e3:9d:5a:32:26:1f:34:1e:7c:56:b9:3a:23:4a:e5:60:
03:15:e0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:23:50 2025 by rpki-client