This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
File: LhWWOMt5D3lFFyLlKs602oBfi5c.mft (raw, json)
Hash identifier: 77xPmJPXTqVkqSE9wW1OlPDKxhE3pKs1S6iTdg8QoQI=
Subject key identifier: 31:02:79:C3:B3:97:BD:C0:AD:7B:8C:B6:C6:DC:BE:A7:A9:37:F8:55
Authority key identifier: 2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97
Certificate issuer: /CN=A91A1E13/serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
Certificate serial: 06AB
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
Manifest number: 06AA
Signing time: Thu 20 Nov 2025 21:10:25 +0000
Manifest this update: Thu 20 Nov 2025 21:10:25 +0000
Manifest next update: Thu 27 Nov 2025 21:10:25 +0000
Files and hashes: 1: LhWWOMt5D3lFFyLlKs602oBfi5c.crl (hash: NREEh465yNnLaK8iA7p7zcQzzz+ZhBoC/VTLRDBnHrc=)
2: 6981A2B8879A11F0A06BE519C4F9AE02.roa (hash: 7R6c3P6vpeH4DdhQAPICMa8Q+S+CZI2f3bujefwXy6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl
rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Nov 2025 21:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1707 (0x6ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1E13, serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
Validity
Not Before: Nov 20 21:10:25 2025 GMT
Not After : Nov 27 21:10:25 2025 GMT
Subject: CN=691f83c1-e46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:79:bd:0c:f2:7d:30:25:d1:f6:34:6f:34:
c4:ef:d4:08:33:30:a1:54:29:44:e5:ef:24:0b:38:
7b:bc:b6:bb:b2:6e:1a:2f:ea:22:73:82:91:94:bc:
60:f7:8f:ca:a8:4d:a5:5d:1e:3f:68:f3:c9:d9:35:
be:a2:3f:26:2a:d1:5e:03:3e:fb:4f:26:95:ea:e2:
47:45:2c:87:6d:1f:54:f3:19:78:57:0c:ab:8e:a1:
93:7c:b9:be:23:76:de:5c:7d:9a:fc:58:75:c2:ba:
11:5d:ca:a0:b6:19:86:36:93:ab:19:55:ed:18:b2:
fb:db:02:f4:19:69:cc:b6:23:22:55:41:63:c8:07:
0c:2c:f8:c5:73:ca:15:f9:7e:1c:1a:ce:85:e3:0f:
42:82:fd:bc:a1:61:62:94:77:34:14:5e:30:d3:22:
58:25:a9:a4:8a:37:32:a5:5b:86:b5:2b:7c:e7:57:
c1:8e:27:5b:ae:98:cb:ee:be:83:16:0b:b1:d6:7e:
be:2a:15:a6:4d:be:e6:65:c0:45:31:a8:3e:40:10:
a1:57:5f:b9:cd:0d:fe:d3:f1:7d:7a:f9:e0:61:61:
7d:bd:0c:0e:55:7b:01:2b:40:f0:46:39:9c:2a:81:
b7:d0:5e:7e:67:05:cd:69:0c:c6:5c:a6:4e:19:84:
eb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:02:79:C3:B3:97:BD:C0:AD:7B:8C:B6:C6:DC:BE:A7:A9:37:F8:55
X509v3 Authority Key Identifier:
keyid:2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:c2:b7:4f:87:ef:22:fe:de:91:ab:c2:2a:ad:d0:0a:68:8e:
29:e2:ef:ed:24:08:2f:26:53:75:ce:94:bd:85:c6:d1:c7:0d:
4d:0b:66:64:4e:de:4a:08:e3:f1:f1:dc:b2:51:2f:f3:29:24:
69:64:3c:d5:96:d5:ec:27:94:c7:4d:dc:b1:67:ff:9a:21:0c:
a6:1e:1c:3b:4c:da:11:31:b6:17:5a:05:ea:22:00:f6:ad:f5:
ab:78:9d:e7:47:48:85:6a:78:f5:41:a5:36:1b:d8:2a:06:f8:
fa:7b:73:8c:e9:c1:e0:83:ac:80:df:b4:27:07:b9:44:1c:9a:
78:a3:f1:30:bc:c7:fb:f1:cf:fe:28:95:b9:32:d4:1c:21:93:
dd:0c:90:5d:b1:c2:18:93:68:1b:96:c4:cb:fa:3f:0b:a0:00:
8d:3d:2e:e0:59:bc:de:3d:3d:2f:6a:76:24:79:15:1a:32:93:
84:16:b2:0f:eb:4d:4f:8f:d9:93:84:64:50:ad:bc:5a:23:6a:
07:03:6f:26:7d:84:a7:e9:e0:6c:02:ec:6d:64:db:12:7f:4d:
7a:bf:f4:20:c5:ff:16:17:ba:4e:eb:8d:41:df:5d:91:d6:b6:
15:9e:18:9e:1b:eb:61:7f:46:08:cd:9c:9f:ae:77:e1:c9:0e:
15:63:a2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 22:06:05 2025 by rpki-client