This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
File: LgN_IhyajV_cyIxDyosl1ENrsDk.mft (raw, json)
Hash identifier: 00cLaGNhm+SYYeKz9NEeZKerHT7uK36848EeqrS8no8=
Subject key identifier: 45:31:90:8D:A6:54:2F:5C:A7:E0:5E:C9:31:A1:0C:4A:74:88:94:42
Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
Certificate issuer: /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Certificate serial: 8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
Manifest number: 8A
Signing time: Tue 09 Dec 2025 04:30:42 +0000
Manifest this update: Tue 09 Dec 2025 04:30:41 +0000
Manifest next update: Tue 16 Dec 2025 04:30:41 +0000
Files and hashes: 1: LgN_IhyajV_cyIxDyosl1ENrsDk.crl (hash: JbMmAlf8wuNHmduKUjD1tvgW6qaEYseMinPGBT2oawg=)
2: D3E69766027B11F0ACFB0B53C4F9AE02.roa (hash: rAyLEuhdwnMPn+ymXVwfBwimmdxQ/627KOj67XHuGHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 04:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Validity
Not Before: Dec 9 04:30:41 2025 GMT
Not After : Dec 16 04:30:41 2025 GMT
Subject: CN=6937a5f1-f636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a9:c6:8e:bf:49:e6:70:cd:86:3e:23:3c:be:
df:01:a1:8c:b5:db:45:db:73:af:5e:b9:50:00:f4:
2d:60:57:d3:00:62:1e:a1:59:99:d3:8a:f4:51:e5:
76:2c:de:a3:f3:9f:84:eb:6c:35:8e:95:1a:b4:2c:
a5:7e:5f:4c:2e:0f:7d:1c:1d:ca:08:ae:fd:8f:e6:
f0:7a:2e:27:4e:88:86:0e:83:54:3a:db:5f:47:f8:
a3:d5:7c:3f:88:a6:55:8b:a9:87:88:08:05:75:e9:
06:c8:aa:fc:58:12:c3:a2:2d:b7:69:58:0c:b3:86:
02:77:11:ea:7d:f6:37:53:1b:a2:74:c3:20:89:b4:
47:37:f5:74:3d:03:3a:7c:80:4d:7b:cc:c2:4d:33:
de:e1:b2:9c:52:95:d7:65:ca:7e:a2:d8:85:6c:f0:
cd:46:be:b6:69:e2:b3:e8:cd:98:24:a0:62:70:4b:
b4:3f:8d:a9:99:4d:e3:3f:84:1e:59:9a:df:05:94:
3a:dd:26:16:73:5a:e1:8e:0a:b7:2a:56:3c:70:35:
21:77:62:22:c5:d5:25:de:32:19:3a:47:3e:4f:3d:
94:9d:c6:4c:06:60:ac:26:ea:5e:19:e5:d1:a0:bb:
34:75:5f:27:64:7b:18:90:e4:53:d7:97:3d:d8:11:
f7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:31:90:8D:A6:54:2F:5C:A7:E0:5E:C9:31:A1:0C:4A:74:88:94:42
X509v3 Authority Key Identifier:
keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:26:3c:ce:6b:b5:e6:df:fb:92:6b:a9:67:6a:a6:2a:18:2b:
ec:a3:a0:49:4e:20:0f:50:b9:37:3f:25:36:4e:e3:34:b4:97:
cb:d7:2b:6c:bd:ac:02:18:26:7a:2e:ea:3c:5b:71:b1:26:be:
3d:7c:f2:bd:65:77:f2:fd:f1:8f:66:70:b8:4c:f3:2f:58:14:
7a:ee:ec:b8:8a:d9:09:17:ac:25:75:68:84:a3:d5:ba:c4:cd:
47:f0:2a:35:57:cd:98:ae:9b:1e:19:28:26:c0:45:cd:5b:0e:
86:e4:f3:cd:45:ab:74:ca:30:13:cb:12:ee:50:ea:04:6a:65:
24:5d:c1:c8:93:1e:8b:3f:ef:06:b8:f2:f4:04:5d:37:0c:02:
f5:a3:88:c9:c2:86:35:a6:f9:f0:2f:18:2d:74:0f:d6:2c:01:
54:27:ca:f1:1e:c6:c5:4d:d8:79:12:3a:5b:76:5b:47:a7:c9:
46:3f:45:b7:c0:70:8a:47:36:88:35:74:25:26:87:e6:99:86:
aa:e9:c5:3c:7a:73:d5:f2:4a:5c:e4:7d:27:18:65:ed:2f:aa:
5e:b6:79:ac:a1:8b:47:ff:2c:d8:17:59:95:8b:51:ef:9e:22:
40:79:cf:f3:31:ad:86:21:f6:80:83:4c:be:10:19:fe:1f:9a:
f3:94:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 11:25:48 2025 by rpki-client