This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft File: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft (raw, json) Hash identifier: cfRzlzs425bj2t4h9vM4rurdrKnPxH+uAkTocIK7iuM= Subject key identifier: 49:F1:FD:59:11:C9:76:64:DF:44:67:D3:EA:60:B5:0A:E1:C4:70:27 Authority key identifier: D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 Certificate issuer: /CN=A91311BC/serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft Manifest number: 0131 Signing time: Tue 23 Dec 2025 03:34:59 +0000 Manifest this update: Tue 23 Dec 2025 03:34:59 +0000 Manifest next update: Tue 30 Dec 2025 03:34:59 +0000 Files and hashes: 1: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl (hash: adlsn/wV33V/yB00BGa9cQeEUB1mKBleyG6oPXWd8Pg=) 2: 4B0C31680FA511EFA3249B35C4F9AE02.roa (hash: xyAm+OptmLWgEZqD9AH33MZxMqQhEFXVgaoDCMDjmoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91311BC, serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Validity Not Before: Dec 23 03:34:59 2025 GMT Not After : Dec 30 03:34:59 2025 GMT Subject: CN=694a0de3-f3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b5:d7:ad:ac:8c:58:9d:55:af:ac:41:a8:ca: de:65:0c:c3:3b:9f:15:17:7e:65:e2:ef:c6:b7:d2: 1d:60:58:cf:d0:93:2b:0d:6b:ef:d7:72:bd:24:1b: f0:88:ac:e5:d9:34:0b:f8:35:87:f4:8a:b6:81:c8: d4:ef:f6:99:b3:85:10:41:40:1d:31:50:6b:c6:fb: e4:e2:ad:4c:17:e3:4d:27:e8:16:44:8c:06:aa:ec: 40:66:5a:d0:7a:9a:c4:eb:62:72:66:ba:fe:57:4f: 10:8b:7a:45:10:cf:03:da:22:aa:ec:78:34:6d:ce: ab:78:8f:49:f3:b0:3f:cf:1b:f9:e9:f2:c3:d0:32: a8:c8:57:a1:e7:0e:bf:54:c7:c2:3b:0f:af:3b:1b: cc:13:5c:bb:64:c3:19:21:12:d2:f9:c5:1a:ee:05: 26:62:fd:28:ea:30:db:ad:45:92:a4:a3:ed:f6:10: 02:28:4c:f8:16:00:1e:20:76:af:c3:df:90:49:6d: 3f:81:51:e7:51:58:a9:ff:c6:a7:09:8e:89:d8:9e: 37:b4:d1:33:f9:9e:d1:63:ca:5e:0c:0d:f0:f8:29: df:8a:2b:d1:43:ad:5f:b4:8b:e5:81:89:25:78:07: 6b:12:b2:58:45:6d:3b:ac:5b:01:a0:ae:68:a2:d0: 3b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F1:FD:59:11:C9:76:64:DF:44:67:D3:EA:60:B5:0A:E1:C4:70:27 X509v3 Authority Key Identifier: keyid:D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:10:35:6e:e0:b0:6b:07:36:34:00:bf:6c:bc:4a:8a:d9:37: ce:1b:4d:74:f6:cf:0f:e3:08:c8:0c:34:98:8a:46:97:8a:70: 26:eb:eb:2a:97:af:e7:f4:36:da:93:d5:f9:3b:ca:00:a3:58: 33:c4:1f:76:fd:e1:ec:fe:96:17:6c:48:09:0f:1e:55:be:db: 8f:d8:b8:ab:33:2c:63:25:3a:20:fb:0a:3c:06:51:25:42:ad: a7:3e:78:01:f6:c4:d3:40:d0:32:cc:52:d6:f4:ee:a0:81:1d: 09:5b:f7:f1:c6:0b:5a:b5:6e:3a:57:8e:66:73:d8:9c:31:72: 87:df:90:b1:7a:8c:0b:31:ae:aa:7d:0d:c6:0d:0c:d0:6b:e1: 13:2f:b7:c5:16:e7:d5:32:8f:9b:07:7d:7d:d5:ad:f2:8b:f7: 67:65:1a:9d:ab:16:37:9a:a5:27:fc:62:00:4d:7c:0d:c3:e9: b0:80:28:36:39:fb:65:5a:e0:29:88:36:86:03:61:23:f1:4b: a4:81:cc:ce:22:3e:13:58:47:de:a6:07:5a:29:8e:f7:26:92: bd:b0:5c:5c:b9:09:5e:68:55:59:20:80:28:f1:50:94:a2:6f: a4:56:5f:e4:db:9d:da:42:e0:76:2b:85:85:10:fa:0e:36:30: 74:7e:2e:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzExQkMxMTAvBgNVBAUTKEQ0QjFERDNFQjFBMDZGQTI2MkFCNkM1RUJGNEFGNTM2 NzFBQ0QyRjQwHhcNMjUxMjIzMDMzNDU5WhcNMjUxMjMwMDMzNDU5WjAYMRYwFAYD VQQDDA02OTRhMGRlMy1mM2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8rXXrayMWJ1Vr6xBqMreZQzDO58VF35l4u/Gt9IdYFjP0JMrDWvv13K9JBvw iKzl2TQL+DWH9Iq2gcjU7/aZs4UQQUAdMVBrxvvk4q1MF+NNJ+gWRIwGquxAZlrQ eprE62JyZrr+V08Qi3pFEM8D2iKq7Hg0bc6reI9J87A/zxv56fLD0DKoyFeh5w6/ VMfCOw+vOxvME1y7ZMMZIRLS+cUa7gUmYv0o6jDbrUWSpKPt9hACKEz4FgAeIHav w9+QSW0/gVHnUVip/8anCY6J2J43tNEz+Z7RY8peDA3w+CnfiivRQ61ftIvlgYkl eAdrErJYRW07rFsBoK5ootA7WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnx/VkR yXZk30Rn0+pgtQrhxHAnMB8GA1UdIwQYMBaAFNSx3T6xoG+iYqtsXr9K9TZxrNL0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTFCQy8wNUVFQUJGQzBG QTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2SmlxMnhldjByMU5uR3Mw dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMSGRQckdnYjZKaXEyeGV2MHIxTm5HczB2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTFCQy8wNUVFQUJGQzBGQTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2 SmlxMnhldjByMU5uR3MwdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHEDVu4LBrBzY0AL9svEqK2TfOG0109s8P4wjIDDSYikaXinAm6+sq l6/n9Dbak9X5O8oAo1gzxB92/eHs/pYXbEgJDx5VvtuP2LirMyxjJTog+wo8BlEl Qq2nPngB9sTTQNAyzFLW9O6ggR0JW/fxxgtatW46V45mc9icMXKH35CxeowLMa6q fQ3GDQzQa+ETL7fFFufVMo+bB3191a3yi/dnZRqdqxY3mqUn/GIATXwNw+mwgCg2 OftlWuApiDaGA2Ej8UukgczOIj4TWEfepgdaKY73JpK9sFxcuQleaFVZIIAo8VCU om+kVl/k253aQuB2K4WFEPoONjB0fi5V -----END CERTIFICATE-----Generated at Wed Dec 24 10:49:56 2025 by rpki-client