This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
File: LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft (raw, json)
Hash identifier: AOEMvC30DmhZcxgtcuns0GijXQmkvednovarVgdbzoo=
Subject key identifier: E8:FF:99:E3:42:98:F8:A7:79:CE:33:F5:16:A5:10:E4:9B:D6:79:28
Authority key identifier: 2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D
Certificate issuer: /CN=A9194093/serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
Manifest number: 0E
Signing time: Tue 09 Dec 2025 05:48:39 +0000
Manifest this update: Tue 09 Dec 2025 05:48:39 +0000
Manifest next update: Tue 16 Dec 2025 05:48:38 +0000
Files and hashes: 1: LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl (hash: FopjokPVfA9bMHBL2OsFTZmrjCJr/MPE/flMLhmwr7w=)
2: 3102D984C7A511F0AB2B8524C4F9AE02.roa (hash: OQj87ghxS5TbGdxIkx5R4cZ4gUWCAYoEWtR9bN5TBkE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl
rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 05:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194093, serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D
Validity
Not Before: Dec 9 05:48:39 2025 GMT
Not After : Dec 16 05:48:38 2025 GMT
Subject: CN=6937b837-4629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:ee:69:90:4a:39:97:94:07:d8:af:97:ed:
b5:30:5e:f0:f4:1a:e0:bf:50:64:b2:83:44:bd:07:
05:61:53:4f:fc:19:1b:3e:41:10:da:01:f9:0b:d5:
ae:0a:05:cb:d9:7b:d5:68:0b:74:2b:f0:42:ae:cd:
77:6e:77:e9:18:6a:eb:e4:7f:7a:ea:6a:b5:ee:8a:
cf:83:aa:39:c2:7b:84:74:d3:0d:02:98:c9:40:71:
82:6b:ea:a5:6e:f7:33:fc:eb:ae:30:85:5d:2f:12:
fb:24:26:03:82:4b:22:13:0c:04:1c:27:bc:8f:73:
8a:54:7e:f5:31:fa:41:4c:03:a2:c6:f0:1c:48:60:
97:14:5f:1d:1d:7d:9d:97:f3:d4:d3:06:57:d2:02:
97:a7:fa:b7:59:39:fd:40:80:06:97:6e:c5:cd:4e:
2e:33:fc:03:1b:6a:c3:78:95:33:99:f1:1a:e4:c8:
5c:b8:76:17:69:88:1f:ed:17:9b:9b:05:5f:14:e0:
6d:b2:94:1d:df:36:e1:e8:84:97:ef:59:34:ad:32:
b8:5c:ff:9a:b7:df:b3:7a:08:0a:ce:db:f0:27:8e:
69:6d:b0:78:50:c6:d2:fb:1d:10:de:dd:c7:90:22:
a0:56:2a:1a:ae:43:21:a6:a3:c5:8b:d9:48:01:3e:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FF:99:E3:42:98:F8:A7:79:CE:33:F5:16:A5:10:E4:9B:D6:79:28
X509v3 Authority Key Identifier:
keyid:2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:b2:73:e4:71:c1:65:fd:8c:a0:6b:c7:cb:f7:7b:00:dc:55:
d1:a3:f4:74:fb:04:83:c1:ea:cb:6c:49:38:82:15:40:14:da:
d9:13:18:a0:f7:6a:3a:6b:4b:03:43:cc:6e:f4:e2:88:75:28:
95:7b:3c:77:f5:1f:9c:1d:58:2c:9a:5e:f5:48:c2:41:31:cb:
50:03:e7:73:85:76:1a:47:ce:d2:e4:b8:1d:df:88:b5:11:5b:
df:dc:66:7f:5f:c8:00:47:d7:51:25:01:b5:bc:3e:74:30:88:
73:43:02:94:fc:f4:05:8f:78:3d:a5:90:11:10:0e:0c:51:5c:
e4:80:66:cf:57:f0:7c:74:3e:e8:fd:a8:34:bc:fb:36:a7:87:
0f:d2:e4:07:37:89:10:02:65:ad:77:24:e7:ed:9c:60:31:22:
df:b9:39:84:91:3c:b3:08:21:73:87:1f:6b:81:c6:e4:48:c3:
16:44:a8:9e:ae:c4:1c:5b:37:42:af:d4:91:73:14:95:a0:0c:
03:6d:e0:2d:a9:83:97:f1:ac:0b:5a:8e:44:88:0c:65:ea:1b:
dd:1a:c3:7e:e4:54:17:90:72:60:5e:05:a9:59:47:3b:0a:98:
07:41:40:ba:e5:31:e9:bf:a4:bc:2c:c3:b8:94:c9:50:6f:61:
a3:74:21:6a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
NDA5MzExMC8GA1UEBRMoMkQ3MzU2REExNzFCRkQ2NDAzQ0Q5RjMzRTNEQjk1QjQ0
Q0I0QkYxRDAeFw0yNTEyMDkwNTQ4MzlaFw0yNTEyMTYwNTQ4MzhaMBgxFjAUBgNV
BAMTDTY5MzdiODM3LTQ2MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyf+5pkEo5l5QH2K+X7bUwXvD0GuC/UGSyg0S9BwVhU0/8GRs+QRDaAfkL1a4K
BcvZe9VoC3Qr8EKuzXdud+kYauvkf3rqarXuis+DqjnCe4R00w0CmMlAcYJr6qVu
9zP8664whV0vEvskJgOCSyITDAQcJ7yPc4pUfvUx+kFMA6LG8BxIYJcUXx0dfZ2X
89TTBlfSApen+rdZOf1AgAaXbsXNTi4z/AMbasN4lTOZ8RrkyFy4dhdpiB/tF5ub
BV8U4G2ylB3fNuHohJfvWTStMrhc/5q337N6CArO2/AnjmltsHhQxtL7HRDe3ceQ
IqBWKhquQyGmo8WL2UgBPlizAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6P+Z40KY
+Kd5zjP1FqUQ5JvWeSgwHwYDVR0jBBgwFoAULXNW2hcb/WQDzZ8z49uVtEy0vx0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0MDkzL0NGQTBGOTkyQzdB
MzExRjA4NzE5MDEyMkM0RjlBRTAyL0xYTlcyaGNiX1dRRHpaOHo0OXVWdEV5MHZ4
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTFhOVzJoY2JfV1FEelo4ejQ5dVZ0RXkwdngwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0
MDkzL0NGQTBGOTkyQzdBMzExRjA4NzE5MDEyMkM0RjlBRTAyL0xYTlcyaGNiX1dR
RHpaOHo0OXVWdEV5MHZ4MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHCyc+RxwWX9jKBrx8v3ewDcVdGj9HT7BIPB6stsSTiCFUAU2tkTGKD3
ajprSwNDzG704oh1KJV7PHf1H5wdWCyaXvVIwkExy1AD53OFdhpHztLkuB3fiLUR
W9/cZn9fyABH11ElAbW8PnQwiHNDApT89AWPeD2lkBEQDgxRXOSAZs9X8Hx0Puj9
qDS8+zanhw/S5Ac3iRACZa13JOftnGAxIt+5OYSRPLMIIXOHH2uBxuRIwxZEqJ6u
xBxbN0Kv1JFzFJWgDANt4C2pg5fxrAtajkSIDGXqG90aw37kVBeQcmBeBalZRzsK
mAdBQLrlMem/pLwsw7iUyVBvYaN0IWo=
-----END CERTIFICATE-----
Generated at Fri Dec 12 07:58:45 2025 by rpki-client