This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
File: llSi8IRZeiuRrAAqdgfhPBXQlJE.mft (raw, json)
Hash identifier: Fr6ZecgK7yE/s8PRd78eSh7lBAZV8CDD2qUSTzfkb6A=
Subject key identifier: 3D:36:3A:80:97:EB:47:C2:F2:5B:6D:F6:E1:BB:FF:4F:66:13:59:67
Authority key identifier: 96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91
Certificate issuer: /CN=A9153303/serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
Manifest number: 010F
Signing time: Tue 23 Dec 2025 03:54:59 +0000
Manifest this update: Tue 23 Dec 2025 03:54:58 +0000
Manifest next update: Tue 30 Dec 2025 03:54:58 +0000
Files and hashes: 1: llSi8IRZeiuRrAAqdgfhPBXQlJE.crl (hash: mKCs25EM7/LR0t+2fu7YTPCFgrNzHX1LyppfyAggvQg=)
2: 29A436623FE111EFB5A50814C4F9AE02.roa (hash: 6fHZUduLlppKNeQyv7MyGz7d2EPeIy77Os8/ALcrrKI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl
rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153303, serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491
Validity
Not Before: Dec 23 03:54:58 2025 GMT
Not After : Dec 30 03:54:58 2025 GMT
Subject: CN=694a1292-64ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:04:5f:c8:5b:fa:de:c3:86:da:2d:09:6b:7e:
a3:1c:34:7c:5e:d6:ab:37:fa:18:e4:f2:91:f3:27:
91:90:59:32:23:b2:8b:87:88:25:1b:b1:08:f4:f6:
3b:56:0a:58:65:78:70:13:3e:f7:fc:49:59:fa:1e:
af:91:69:18:27:d9:8a:e5:67:38:64:36:a4:2f:a6:
e5:80:a1:17:0e:db:4c:07:49:36:b7:bb:41:7c:0e:
30:fe:5a:a8:ca:05:7c:7f:2e:41:6c:66:f8:12:26:
7f:66:ba:72:81:e6:f2:fa:b5:dd:8f:61:bc:5f:eb:
8e:ad:9e:5f:39:d0:87:a8:17:98:3c:15:46:0d:99:
4f:67:86:5b:09:08:b4:ee:4a:eb:bb:72:1c:35:76:
0f:b5:c2:c7:8f:4c:eb:01:44:28:22:39:dc:6f:9c:
da:99:f3:a9:bf:2a:15:2a:28:f5:e4:87:60:20:8b:
47:10:60:98:c2:e5:1b:c0:72:5d:5c:0a:07:60:a7:
81:be:b4:9a:4a:eb:a7:d3:e4:33:b2:33:76:8a:62:
41:29:4f:2a:5a:29:ff:1d:4b:9b:25:2d:43:07:11:
de:b8:10:c4:4f:26:f8:e2:7b:ed:a8:7d:10:4e:f4:
30:ad:fd:75:12:a9:98:11:19:0a:64:7e:50:8b:bc:
7a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:36:3A:80:97:EB:47:C2:F2:5B:6D:F6:E1:BB:FF:4F:66:13:59:67
X509v3 Authority Key Identifier:
keyid:96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:70:0a:b9:eb:f6:82:d8:7c:85:f9:c7:90:f1:b0:9f:b7:12:
de:f0:e1:dc:4b:71:c1:99:31:c4:0d:cd:8c:0c:01:ea:51:da:
bf:0e:fb:80:7b:7c:48:c8:6c:d3:a1:98:b2:b3:ca:05:61:6c:
e9:73:35:d6:75:aa:72:20:07:97:6a:c2:90:c6:d1:0a:a4:b1:
60:04:17:9d:ed:51:d8:48:70:3c:1a:0a:86:58:74:8d:77:79:
db:06:e0:f8:69:c3:53:8a:02:60:12:5f:b0:07:f0:ac:c8:47:
4d:2d:ba:18:d8:d7:92:05:7b:07:23:9d:fb:c8:47:93:29:86:
87:1d:b9:cf:b3:14:f0:99:3d:09:a6:84:df:3f:5a:62:94:83:
ba:85:dc:c6:ff:b7:eb:8b:36:8f:c4:49:76:04:0d:7a:08:5c:
d6:d6:12:47:b5:0d:e2:d7:59:eb:da:b5:c2:b8:95:78:60:fb:
87:66:64:99:ba:e1:a8:7a:77:6b:43:46:6a:b7:8b:67:d5:25:
d7:65:c5:e8:bd:c7:07:34:04:c4:94:77:d7:6c:de:88:86:d0:
7e:a6:4b:a6:92:d1:70:fe:92:f2:4d:ae:b0:63:20:19:7c:82:
4d:02:a8:cd:06:82:ab:bf:72:a9:b9:2b:e8:50:d1:fa:6b:99:
8f:f6:04:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 20:20:59 2025 by rpki-client