This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
File: 0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json)
Hash identifier: V6rP073XRs/wnHndMAJfcTrj1TlbDBU0EHsYJzP6O2o=
Subject key identifier: 0F:EA:D4:D4:88:50:5A:3F:73:D2:40:8D:7D:59:43:54:5B:23:3B:E8
Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5
Certificate issuer: /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
Certificate serial: 017E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
Manifest number: 0178
Signing time: Tue 23 Dec 2025 02:49:56 +0000
Manifest this update: Tue 23 Dec 2025 02:49:55 +0000
Manifest next update: Tue 30 Dec 2025 02:49:55 +0000
Files and hashes: 1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: k3td/UXcXb7ex71lLq2tErxjECBE+bCEeE4/2p8yPZc=)
2: 511C5136A2F011EEBBE10D80C4F9AE02.roa (hash: 7696MMuvciabX1nFuz0iuQ3b+zF4t5sdAPgAUCluYpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl
rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
Validity
Not Before: Dec 23 02:49:55 2025 GMT
Not After : Dec 30 02:49:55 2025 GMT
Subject: CN=694a0353-b6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:50:ee:d5:fd:88:8b:64:25:70:7c:a5:4b:
a3:de:e7:cd:9f:ff:31:7b:d0:0c:cc:30:11:63:d8:
03:a3:b9:90:58:44:ef:b2:fd:c5:3c:ff:b7:bc:ea:
7e:ae:2d:ae:bd:e3:d4:dc:86:af:8b:4a:b2:f5:68:
35:71:f8:61:d4:20:04:49:20:b9:aa:2a:8e:23:f6:
46:75:8c:4a:5e:90:bf:a5:08:31:c0:87:b2:96:0d:
73:9a:44:27:4b:7c:d4:de:c9:ec:1c:a2:b7:db:0d:
73:12:bc:3e:a5:d3:40:c1:c8:bb:c2:ea:c2:6d:6c:
b3:a8:0b:28:a0:fe:f1:50:e4:a1:0b:73:2b:4d:24:
20:9f:89:c5:4e:cc:df:11:2b:b6:72:30:a1:95:80:
53:1d:f2:cf:23:c4:0c:6d:5b:cd:5d:a3:b5:51:9b:
80:45:8a:09:95:31:12:79:76:99:a5:c8:49:f3:37:
0f:84:f4:b0:1d:63:10:8c:02:14:26:5e:10:ed:f3:
6c:2b:b1:ba:25:ff:c1:84:74:4c:01:95:1e:57:b3:
c8:3c:b9:f2:30:6f:a8:43:f2:ff:19:12:f4:4e:83:
42:5a:dd:5c:f0:34:24:63:be:68:d3:58:94:af:26:
ed:f7:ca:cd:5e:4e:2f:f3:32:c7:57:b8:9d:3c:e6:
32:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EA:D4:D4:88:50:5A:3F:73:D2:40:8D:7D:59:43:54:5B:23:3B:E8
X509v3 Authority Key Identifier:
keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:7e:55:89:3f:5f:39:8d:ae:e5:04:7b:65:7f:41:27:25:59:
fd:37:68:62:0e:68:b0:0c:f2:00:b5:92:46:4a:41:d7:6c:ee:
1e:7e:83:6b:b7:6b:54:fe:c3:8a:05:82:7f:78:14:62:e4:df:
f7:0e:19:12:3c:a4:ee:1e:03:e6:37:17:b7:74:50:c0:fb:50:
ce:c4:af:b1:c5:74:36:32:52:25:ce:ba:8d:42:44:40:db:cb:
58:50:a6:23:5a:84:4e:5b:02:35:09:f6:cc:25:01:6e:5f:65:
e6:b2:04:e5:81:55:ee:d0:c7:df:11:4f:09:32:62:ba:10:1c:
a2:56:d0:e0:a4:2d:3d:0d:80:44:1c:67:9f:d3:13:92:53:c6:
3f:d8:c3:cc:45:72:58:72:fc:ff:81:c1:41:04:f4:90:04:20:
3d:c3:25:6f:8d:9c:e4:62:4a:bb:a4:1b:8c:6c:9b:cf:18:d1:
4d:09:d8:0c:b4:81:cd:d9:60:23:22:83:26:f2:c4:9a:46:78:
01:7e:41:bf:6d:fe:26:70:fb:7d:9a:dd:c8:d0:6d:2b:78:9c:
8b:da:f5:c7:84:e8:31:13:c4:97:f1:f1:79:6a:9a:d0:27:82:
ff:10:7c:9c:72:4f:09:ef:99:7f:ba:b2:a7:c0:58:df:82:e2:
e7:cc:33:84
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQzMDYxMTAvBgNVBAUTKEQwQjQ3OTI4QkZEQjlEQjM1MUUxRDQyNTZBRDAyQjY3
MjhGOTVDRjUwHhcNMjUxMjIzMDI0OTU1WhcNMjUxMjMwMDI0OTU1WjAYMRYwFAYD
VQQDDA02OTRhMDM1My1iNmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuDlQ7tX9iItkJXB8pUuj3ufNn/8xe9AMzDARY9gDo7mQWETvsv3FPP+3vOp+
ri2uvePU3Iavi0qy9Wg1cfhh1CAESSC5qiqOI/ZGdYxKXpC/pQgxwIeylg1zmkQn
S3zU3snsHKK32w1zErw+pdNAwci7wurCbWyzqAsooP7xUOShC3MrTSQgn4nFTszf
ESu2cjChlYBTHfLPI8QMbVvNXaO1UZuARYoJlTESeXaZpchJ8zcPhPSwHWMQjAIU
Jl4Q7fNsK7G6Jf/BhHRMAZUeV7PIPLnyMG+oQ/L/GRL0ToNCWt1c8DQkY75o01iU
rybt98rNXk4v8zLHV7idPOYytwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/q1NSI
UFo/c9JAjX1ZQ1RbIzvoMB8GA1UdIwQYMBaAFNC0eSi/252zUeHUJWrQK2co+Vz1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDMwNi8yQjVBRUM3MEEy
RUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5iTlI0ZFFsYXRBclp5ajVY
UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBMUjVLTF9ibmJOUjRkUWxhdEFyWnlqNVhQVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDMwNi8yQjVBRUM3MEEyRUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5i
TlI0ZFFsYXRBclp5ajVYUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQATflWJP185ja7lBHtlf0EnJVn9N2hiDmiwDPIAtZJGSkHXbO4efoNr
t2tU/sOKBYJ/eBRi5N/3DhkSPKTuHgPmNxe3dFDA+1DOxK+xxXQ2MlIlzrqNQkRA
28tYUKYjWoROWwI1CfbMJQFuX2XmsgTlgVXu0MffEU8JMmK6EByiVtDgpC09DYBE
HGef0xOSU8Y/2MPMRXJYcvz/gcFBBPSQBCA9wyVvjZzkYkq7pBuMbJvPGNFNCdgM
tIHN2WAjIoMm8sSaRngBfkG/bf4mcPt9mt3I0G0reJyL2vXHhOgxE8SX8fF5aprQ
J4L/EHycck8J75l/urKnwFjfguLnzDOE
-----END CERTIFICATE-----
Generated at Wed Dec 24 17:34:59 2025 by rpki-client