This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
File: 9UTm_uoP5rnfex2j2aWS_Lispik.mft (raw, json)
Hash identifier: Qo7k7tc9i54hPJwlDOAd+OLNVHFVHMh34hqUp78Qz6o=
Subject key identifier: 74:07:1B:FA:61:46:35:B0:9D:37:7F:9E:A3:FF:45:BF:B3:DC:E1:9C
Authority key identifier: F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29
Certificate issuer: /CN=A91DD55B/serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
Manifest number: 019A
Signing time: Tue 23 Dec 2025 02:25:05 +0000
Manifest this update: Tue 23 Dec 2025 02:25:05 +0000
Manifest next update: Tue 30 Dec 2025 02:25:05 +0000
Files and hashes: 1: 9UTm_uoP5rnfex2j2aWS_Lispik.crl (hash: LjGEnkTzNzZX8MTSEsDeSxLuJaOFzBcnQiM8iV/bivM=)
2: 6C3D2A826D7911EEBA9F0F7AC4F9AE02.roa (hash: s8O1c6uFUTxJrWDusqeQGdV8g8M1UT5EVFIautQIKN4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl
rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD55B, serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629
Validity
Not Before: Dec 23 02:25:05 2025 GMT
Not After : Dec 30 02:25:05 2025 GMT
Subject: CN=6949fd81-9fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:df:b7:a6:96:49:54:eb:74:36:a4:5d:c8:0a:
28:7e:60:3a:f3:24:a6:83:a3:4c:18:48:b5:b7:31:
a9:ed:85:42:bd:9d:96:56:a0:80:70:3a:3d:cd:96:
bf:11:d6:7e:ee:b2:1a:f8:c0:de:16:e0:33:7d:83:
24:69:d2:be:4d:66:5c:ab:2f:55:40:75:13:d1:ae:
2d:c1:6e:65:1f:d4:f7:24:5e:1f:fe:89:d4:9c:12:
e2:6a:7a:61:b6:1d:68:28:0b:3e:0c:65:1f:cb:7f:
8e:e2:4b:d4:02:71:b4:6f:c3:2d:3f:06:da:e0:1a:
dc:5e:8e:47:6d:0b:78:a9:88:2a:10:8f:26:ba:41:
fe:dc:68:05:0a:86:66:3b:47:4e:6f:a4:96:c0:0b:
ab:bf:c3:d8:a9:71:2f:ae:8f:51:d3:f2:88:a3:98:
b6:75:b2:10:7f:76:2e:37:17:fc:b0:56:4c:66:34:
12:1d:07:21:09:f3:89:66:55:4c:52:87:7b:cc:73:
cf:ce:ee:bc:93:6d:17:6e:13:93:75:06:dd:b5:ce:
40:c2:3b:0a:9e:51:e8:a3:9e:cd:42:4f:53:88:a5:
32:e2:64:6d:da:80:6e:76:7f:e1:51:aa:6b:e8:fb:
9f:d3:8e:a9:27:7e:a7:83:c0:33:f3:32:7d:d6:95:
b6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:07:1B:FA:61:46:35:B0:9D:37:7F:9E:A3:FF:45:BF:B3:DC:E1:9C
X509v3 Authority Key Identifier:
keyid:F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:d5:c9:b0:f6:a0:63:39:b0:d8:b1:3c:e2:58:ca:e7:3f:18:
3d:ee:83:5b:e4:1c:b9:aa:3b:a8:9f:e1:92:f3:0f:9e:7b:15:
53:b5:d1:1b:c7:20:be:44:64:4d:c3:01:27:4d:fb:c3:6a:35:
32:aa:62:14:a2:ba:c7:41:0d:a5:fb:48:0b:f6:75:dd:ba:7f:
55:63:07:01:c9:ef:18:4b:88:85:5d:d9:d1:1a:8a:68:5b:e9:
11:62:13:9a:5a:4e:fd:00:34:58:f5:ce:07:71:d5:28:48:d9:
19:eb:c6:48:d3:b0:2a:1c:b0:26:55:79:7d:ae:b7:45:3f:33:
53:8d:0c:2f:dc:d8:06:2f:ac:f8:4c:2a:3e:a6:77:a9:30:62:
44:60:de:14:fc:35:45:ec:ec:cf:22:42:08:73:41:cd:0e:32:
9e:d5:5d:4b:50:13:f1:05:6c:fc:6e:ea:6e:7b:8f:87:3b:92:
3e:70:0a:02:80:1f:24:2d:7e:5f:6b:70:4f:4c:24:dc:b5:4c:
83:de:6c:54:7c:ff:10:3e:2d:33:0b:4d:4b:b3:ea:9b:a3:ac:
00:7a:35:f5:2c:77:dc:fb:5b:84:bd:cb:97:e5:12:99:ae:16:
a4:9c:22:04:13:15:40:25:67:bd:89:3f:db:b3:1f:4a:0d:49:
b1:38:ae:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:07:48 2025 by rpki-client