This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
File: LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft (raw, json)
Hash identifier: SuscmgtGTbHF1i77CVz7mn4RIfJynMq0VDXKP54qA5c=
Subject key identifier: 3C:49:59:09:F2:E4:E9:7A:D5:4C:7A:34:0E:A5:C6:40:48:68:DD:1B
Authority key identifier: 2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58
Certificate issuer: /CN=A91855B3/serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
Manifest number: 72
Signing time: Tue 23 Dec 2025 05:46:05 +0000
Manifest this update: Tue 23 Dec 2025 05:46:04 +0000
Manifest next update: Tue 30 Dec 2025 05:46:04 +0000
Files and hashes: 1: LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl (hash: RGBQoaImoGuHuF1OjQxaht0c9gkIy7xxTbqlEY/tAVs=)
2: E62BCC784C9211F09A2E3014C4F9AE02.roa (hash: 0xN1bZnq0dM0T8Sd8GlQedW1EDR0bZx7h7KAIQ4CSgw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl
rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91855B3, serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
Validity
Not Before: Dec 23 05:46:04 2025 GMT
Not After : Dec 30 05:46:04 2025 GMT
Subject: CN=694a2c9d-6426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:69:d4:d4:8e:bd:db:6a:97:64:0c:64:39:
fe:2e:e6:ac:68:b8:ce:d4:6a:f5:2a:8e:cf:a3:71:
fe:d1:43:d7:7c:b8:0e:7c:f5:30:b5:35:56:5e:b0:
cb:79:6e:d7:d9:82:0e:48:4e:99:ec:f6:34:52:5d:
54:97:0f:b8:9a:2c:fd:b1:82:e9:ab:54:79:6b:99:
2e:b2:4b:8a:c2:39:82:8e:e5:2c:ca:65:b9:56:71:
7c:10:00:b1:e9:55:02:df:b6:19:97:c3:82:40:63:
88:69:1c:99:5c:f1:71:66:b6:6f:2c:77:7f:1b:0e:
e2:43:55:69:0e:fd:d2:3c:7f:18:44:b3:fc:a4:c1:
0b:36:54:0e:c7:c3:94:7f:92:3a:74:7c:17:4a:28:
43:0f:fa:4f:57:5b:68:9b:8c:07:11:6f:47:fb:70:
2f:32:14:ef:d7:3a:65:e5:51:1a:f5:ae:97:33:e1:
7d:51:80:08:f6:a7:68:a3:6b:97:6e:85:3f:f8:04:
4f:b1:eb:eb:48:31:1b:cc:78:8a:8c:0d:f5:8f:f5:
36:44:0f:8a:4b:13:55:3f:ba:6c:fb:ad:38:85:63:
f8:e5:d3:e8:92:b4:98:f7:6e:25:62:d1:49:82:46:
6d:db:41:df:76:62:48:96:86:f5:76:28:9f:a8:81:
12:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:49:59:09:F2:E4:E9:7A:D5:4C:7A:34:0E:A5:C6:40:48:68:DD:1B
X509v3 Authority Key Identifier:
keyid:2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:0a:84:f0:2e:61:8c:50:2c:73:07:41:b9:d0:97:37:40:e2:
6e:cd:d0:54:83:a6:55:30:68:53:95:64:c3:60:3f:cf:58:18:
f1:b1:97:88:db:a4:3c:c4:bf:e5:ed:76:68:d7:c8:e8:83:57:
27:19:61:df:99:06:c2:75:86:63:f6:4e:f3:dd:cd:91:10:b9:
80:4d:b1:c3:50:37:12:87:39:4b:38:20:ef:d1:c9:ff:82:fc:
fb:7d:4a:96:2c:e7:43:9b:8f:cc:d1:f4:3c:e1:29:ec:a1:17:
50:c4:18:c0:df:e1:90:17:82:34:3e:d9:fa:12:5a:56:0f:3d:
6a:85:a0:21:c5:d4:89:af:08:21:a9:6f:04:01:5b:3b:6e:84:
42:fb:de:e6:ef:98:8d:3b:e1:71:30:b2:76:63:8e:e9:35:d4:
73:86:a5:e2:0e:a2:2a:ba:37:c8:20:df:17:9e:3a:63:d0:65:
5c:5d:13:92:fa:9d:97:fa:8c:67:b9:60:02:b9:03:3c:bd:a2:
df:2c:55:ee:66:98:52:ec:03:a1:cb:fa:65:e9:de:3d:86:e1:
7b:bb:75:3d:ea:99:c0:66:d3:c9:1c:4c:52:dd:5d:99:8d:23:
ad:1e:b0:5c:bb:23:4a:de:97:f2:25:2b:22:c0:f6:a8:88:ae:
92:15:eb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:53 2025 by rpki-client