This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
File: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft (raw, json)
Hash identifier: u6c0H7x7nrQKMuxXZsMGgrLvlfP1m3nt7ILMugx/Iik=
Subject key identifier: DF:26:2F:FD:96:AB:C6:D0:60:2A:EB:FC:D4:72:B2:6D:7D:09:FE:96
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
Manifest number: ED
Signing time: Sun 21 Dec 2025 05:19:13 +0000
Manifest this update: Sun 21 Dec 2025 05:19:13 +0000
Manifest next update: Sun 28 Dec 2025 05:19:13 +0000
Files and hashes: 1: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl (hash: EJ2Vf+UbKg6ANL9whE+kbp0g4u9cgW61e7dMIfIe4PU=)
2: 1BD61F645C8711F0923DB116C4F9AE02.roa (hash: nRkOXuAiT1sPCocq+nXPsFuQBgyiZlYhGRugxDZwnSc=)
3: F830F4564F3611F0A970852BC4F9AE02.roa (hash: fiG3ruzyUrai5g5VaE9UAGeJtws3GlUHxnca+lWelW4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 05:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Validity
Not Before: Dec 21 05:19:13 2025 GMT
Not After : Dec 28 05:19:13 2025 GMT
Subject: CN=69478351-b903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:43:ef:b0:e3:3b:3f:04:c0:f4:0d:3d:34:ac:
b4:f6:ea:ee:b7:3b:e0:d6:e3:af:28:b3:4a:a0:f2:
34:7a:88:04:95:46:29:3a:4f:e2:b9:46:89:fd:42:
45:fa:45:9c:b5:53:f4:b2:0f:9c:38:34:47:d5:ce:
40:a8:b5:33:fe:60:41:dc:b0:b9:60:6a:60:41:e8:
78:67:c5:21:f1:d6:d1:b0:02:80:c4:cb:f6:9e:35:
43:12:5b:30:3c:7a:18:2e:5b:d4:00:b6:44:27:3e:
75:da:ba:b2:96:98:34:ec:92:ae:44:6e:48:1f:f7:
23:f4:2a:0a:fe:b6:93:f9:13:1c:e2:a3:ff:3d:06:
7c:0b:12:2c:24:73:ee:8d:0c:2c:69:b3:5b:27:4e:
9d:60:c7:1a:13:8c:1e:3f:06:c3:e5:66:5e:a9:0e:
4e:ea:2f:4c:e0:ad:7b:17:71:a4:7a:a3:cf:29:e9:
a6:fd:14:76:1d:72:f4:b1:a0:24:c5:c1:54:e9:ad:
bb:4a:15:34:7e:1b:45:e0:3b:69:94:68:56:23:79:
5e:32:92:c9:aa:a8:b0:7d:63:74:a4:ff:a7:69:27:
ba:f9:43:95:b5:9b:fa:ba:41:3d:03:c8:8a:36:48:
1b:b6:b1:fa:74:c0:51:ea:0c:47:e6:60:31:f4:de:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:26:2F:FD:96:AB:C6:D0:60:2A:EB:FC:D4:72:B2:6D:7D:09:FE:96
X509v3 Authority Key Identifier:
keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b4:a3:99:49:10:e8:78:bc:5a:5f:e5:f5:51:42:89:1b:31:
55:b9:61:5c:6c:df:b6:f7:59:a5:e4:0a:4a:fd:ed:6e:b3:2e:
83:8f:f4:08:98:69:99:1c:71:1d:a1:26:16:14:9b:87:7a:fd:
e5:a7:34:46:84:46:e3:73:7b:8a:bf:34:8d:90:ad:49:cc:3a:
1a:d1:83:7a:74:57:c4:11:f3:e1:5b:18:92:56:48:59:4b:a6:
4d:24:00:6d:64:bf:85:d8:ce:a4:4c:70:75:86:fa:0d:6a:b8:
d4:cd:f1:35:6d:de:7d:67:b2:36:3a:c8:bf:ff:70:a0:6f:2d:
81:2a:b3:80:8b:90:5e:2e:1c:47:3a:55:22:52:43:3c:50:f7:
00:d8:ef:b0:77:bb:d7:c2:04:e9:db:4d:fa:80:a0:fe:a2:0f:
ce:61:9d:03:68:57:60:51:22:b4:f7:6b:3e:92:df:00:70:23:
b1:5b:db:88:33:99:ee:39:2b:45:07:c6:f0:40:90:63:d8:8c:
f6:62:9f:9b:05:52:22:70:08:7e:54:e7:55:cb:d4:3b:70:e5:
4e:97:ea:d9:d6:3a:66:c4:95:d0:50:37:d9:12:c9:df:b3:46:
66:e7:16:28:ff:8c:71:76:71:a9:49:fb:45:b5:f8:74:5f:22:
ba:b3:2b:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU2NDgxMTAvBgNVBAUTKDJDMUMwN0QxNTEyNzE5NjlFMTNFMUNGRDE2MUIxRjYw
NzcwRTI5MEQwHhcNMjUxMjIxMDUxOTEzWhcNMjUxMjI4MDUxOTEzWjAYMRYwFAYD
VQQDDA02OTQ3ODM1MS1iOTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmUPvsOM7PwTA9A09NKy09urutzvg1uOvKLNKoPI0eogElUYpOk/iuUaJ/UJF
+kWctVP0sg+cODRH1c5AqLUz/mBB3LC5YGpgQeh4Z8Uh8dbRsAKAxMv2njVDElsw
PHoYLlvUALZEJz512rqylpg07JKuRG5IH/cj9CoK/raT+RMc4qP/PQZ8CxIsJHPu
jQwsabNbJ06dYMcaE4wePwbD5WZeqQ5O6i9M4K17F3GkeqPPKemm/RR2HXL0saAk
xcFU6a27ShU0fhtF4DtplGhWI3leMpLJqqiwfWN0pP+naSe6+UOVtZv6ukE9A8iK
NkgbtrH6dMBR6gxH5mAx9N4U+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8mL/2W
q8bQYCrr/NRysm19Cf6WMB8GA1UdIwQYMBaAFCwcB9FRJxlp4T4c/RYbH2B3DikN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTY0OC8yMThGMjY4QURD
OUUxMUVGOEI2MkRENUZDNEY5QUUwMi9MQndIMFZFbkdXbmhQaHo5RmhzZllIY09L
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xCd0gwVkVuR1duaFBoejlGaHNmWUhjT0tRMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTY0OC8yMThGMjY4QURDOUUxMUVGOEI2MkRENUZDNEY5QUUwMi9MQndIMFZFbkdX
bmhQaHo5RmhzZllIY09LUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCrtKOZSRDoeLxaX+X1UUKJGzFVuWFcbN+291ml5ApK/e1usy6Dj/QI
mGmZHHEdoSYWFJuHev3lpzRGhEbjc3uKvzSNkK1JzDoa0YN6dFfEEfPhWxiSVkhZ
S6ZNJABtZL+F2M6kTHB1hvoNarjUzfE1bd59Z7I2Osi//3Cgby2BKrOAi5BeLhxH
OlUiUkM8UPcA2O+wd7vXwgTp2036gKD+og/OYZ0DaFdgUSK092s+kt8AcCOxW9uI
M5nuOStFB8bwQJBj2Iz2Yp+bBVIicAh+VOdVy9Q7cOVOl+rZ1jpmxJXQUDfZEsnf
s0Zm5xYo/4xxdnGpSftFtfh0XyK6syvh
-----END CERTIFICATE-----
Generated at Sun Dec 21 09:03:48 2025 by rpki-client