This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
File: ljwgt9OATbgByuJXTDHXYNU9M0Q.mft (raw, json)
Hash identifier: DkhG8w5x77T3rUpkRQVGMQoulmrkuEryWxjQQSin/yw=
Subject key identifier: E7:03:13:5D:1E:09:EC:8E:21:CC:DB:22:61:CD:9D:84:89:B4:9C:61
Authority key identifier: 96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44
Certificate issuer: /CN=A91C6744/serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344
Certificate serial: 087C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
Manifest number: 0875
Signing time: Mon 22 Dec 2025 19:57:08 +0000
Manifest this update: Mon 22 Dec 2025 19:57:07 +0000
Manifest next update: Mon 29 Dec 2025 19:57:07 +0000
Files and hashes: 1: ljwgt9OATbgByuJXTDHXYNU9M0Q.crl (hash: kVe2ev8OO9WOqKhWGSyF7OUYYoJkQqKukXxujEElW4o=)
2: E088B4E8E41B11ED8B0EFC0DC4F9AE02.roa (hash: o6F0EuKwlTrnUOxPf4ItfWLnrfcMDydYUClJAnjBios=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl
rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 19:57:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2172 (0x87c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6744, serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344
Validity
Not Before: Dec 22 19:57:07 2025 GMT
Not After : Dec 29 19:57:07 2025 GMT
Subject: CN=6949a294-290a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:1e:a1:46:6f:53:ba:dd:80:f6:ca:af:a5:
21:94:1f:c7:31:39:fa:11:ef:bb:8d:ea:b7:08:94:
ba:29:05:71:91:94:ad:49:fd:25:16:fb:3d:2c:10:
07:e8:46:d2:eb:0b:79:b1:74:4e:c5:41:90:24:b2:
37:40:b3:12:8a:2a:fe:0e:a8:bd:c5:aa:68:3b:53:
e2:9f:49:e1:a0:c6:a5:4f:e8:2c:e3:e3:22:be:de:
e2:14:4b:5a:62:fa:10:32:33:91:5c:97:02:e3:3a:
44:6b:62:15:42:4d:04:d0:00:87:51:eb:0a:c7:ba:
a7:fa:de:79:c1:57:e8:fe:ea:a5:c9:59:24:98:d5:
54:b4:02:0c:1d:d2:81:ee:4f:e4:76:90:af:28:79:
f9:0a:61:18:66:e8:ef:88:94:bb:4a:35:e9:f0:84:
26:0b:23:ee:57:b1:16:7c:2f:57:ec:d9:f2:0d:66:
cc:56:42:11:6f:af:a0:ce:ac:1b:5c:ef:a7:d4:28:
8d:e6:a3:58:73:7b:fd:a1:fd:a9:33:18:a6:99:7e:
59:2c:11:9c:e0:5f:d1:67:bd:5b:32:ae:25:eb:7c:
f3:99:9b:0b:2a:5a:d0:1c:c1:86:87:c5:b3:23:5f:
1a:ea:73:53:9a:4f:41:d9:29:aa:13:ce:d4:81:c8:
4d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:03:13:5D:1E:09:EC:8E:21:CC:DB:22:61:CD:9D:84:89:B4:9C:61
X509v3 Authority Key Identifier:
keyid:96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:81:01:89:e8:d4:22:82:0d:71:02:0c:c3:e9:19:2c:17:96:
9a:48:22:7d:96:d2:5d:c1:40:10:52:34:3f:0f:32:a8:0d:02:
46:5a:fd:05:31:e5:27:6b:24:f3:f9:51:d5:66:0e:2e:f2:2f:
1f:93:23:5d:42:16:73:f5:0b:8c:a0:e2:ac:4a:13:44:c4:c9:
3a:7c:bd:34:55:a5:21:c2:21:22:53:ac:04:95:32:e1:9f:96:
45:a9:e3:7e:20:13:2b:b7:0e:4d:e0:f8:db:aa:f9:36:58:d1:
e5:09:47:10:25:35:55:3b:52:da:a1:33:6e:dd:cd:0c:68:90:
0a:62:33:8d:5b:36:a7:e1:77:03:63:44:e8:2a:e0:da:5e:11:
5f:98:28:fb:a5:75:4e:51:c4:dc:49:46:96:87:e2:8c:2d:1b:
31:44:32:da:6b:cc:d9:a8:ea:d0:da:d0:0a:ac:07:b1:20:10:
f8:53:d9:98:98:5b:fa:0f:ce:68:18:d9:41:81:66:8c:b8:ee:
b3:ee:28:a0:d6:78:eb:6f:f7:1a:1b:e7:fa:2f:84:af:8c:d3:
6a:22:43:96:33:a7:d4:7a:27:b7:65:9c:0f:9d:47:c4:40:ed:
f9:0e:a0:f4:b1:db:ec:6d:9e:60:f6:3b:d7:d1:2f:2d:40:6e:
84:ff:30:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:24 2025 by rpki-client