This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft File: LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft (raw, json) Hash identifier: DtlggUEb7jg8krAs3t6Sk7DEqa/ePeK1SerC2oJqKvE= Subject key identifier: 87:C7:20:8D:C4:1A:F5:0F:46:F0:26:25:94:19:E1:4F:18:13:9D:D7 Authority key identifier: 2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34 Certificate issuer: /CN=A916AE6A/serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734 Certificate serial: 34F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft Manifest number: 34F0 Signing time: Wed 24 Dec 2025 15:10:23 +0000 Manifest this update: Wed 24 Dec 2025 15:10:23 +0000 Manifest next update: Wed 31 Dec 2025 15:10:23 +0000 Files and hashes: 1: LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl (hash: RRsT+SLHYNT06FVyTxPB1kBEWfMyg7fQ3OL1z6NYbqQ=) 2: 22355CF4DE8411EDBC551D19C4F9AE02.roa (hash: cD8CzWCOccX7amwfxtqgHIbE7YwiBohTqztQjp4x6HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13556 (0x34f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AE6A, serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734 Validity Not Before: Dec 24 15:10:23 2025 GMT Not After : Dec 31 15:10:23 2025 GMT Subject: CN=694c025f-d6fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ec:f7:d6:06:f7:82:22:4d:50:b6:c9:78:a6: 00:21:ec:80:6b:c5:b2:a4:35:2f:db:7e:3e:70:4f: bc:26:5c:ef:ab:ca:e8:03:7b:c3:33:b8:6e:63:f1: 98:e9:5e:aa:1b:9f:85:33:27:61:36:4a:e7:15:a1: 80:b7:58:cd:14:16:08:60:52:17:f7:05:7a:af:54: 91:d1:24:cd:2a:f8:3a:df:8f:2f:a7:7e:55:26:ac: 4c:c3:53:ad:e9:49:31:5a:bc:9e:2c:92:dc:f5:f8: 72:89:19:5f:44:3b:27:80:ba:03:b1:ac:1e:9a:f9: d1:82:19:cc:96:2b:17:45:ad:9d:cd:09:78:09:37: b8:b8:e2:84:5f:01:59:1b:d0:0a:40:e9:cd:ea:3e: c2:bf:64:a3:df:19:66:e0:73:4d:85:3a:96:d8:8f: e5:fd:c9:ba:bf:3f:50:14:40:b8:12:98:b4:99:97: d1:67:c1:b3:67:b7:dd:86:bf:83:44:04:ad:60:e4: 5d:f1:12:9d:59:d1:82:bd:b7:d1:f2:56:41:7c:9c: 71:de:20:81:75:95:90:61:9d:02:5b:5f:8f:90:4a: 38:52:a0:27:ed:22:da:49:ef:a5:34:e2:e5:2a:a0: 56:b9:2c:61:2c:09:8f:0c:b1:97:86:03:3d:e5:b5: 7d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C7:20:8D:C4:1A:F5:0F:46:F0:26:25:94:19:E1:4F:18:13:9D:D7 X509v3 Authority Key Identifier: keyid:2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:05:79:ea:9e:e9:e6:1f:1b:08:4b:ac:5d:7c:38:05:7c:57: 34:c9:67:b7:66:e3:28:cd:96:42:0f:b1:8a:9f:fb:9e:fa:57: aa:4c:a7:f5:61:4d:97:fa:f9:c1:67:53:e3:80:e3:f5:8a:fa: 15:fe:97:82:e6:c6:c7:4e:bc:26:97:f3:9c:28:39:fe:b1:6d: c4:77:4a:08:5b:7c:21:0b:07:0c:d2:16:71:c0:77:df:be:fb: eb:64:a2:29:9e:41:3e:db:b8:c8:2f:17:45:a5:b4:c0:60:91: a2:32:09:75:4d:86:31:ea:84:e3:5f:92:52:24:a1:07:f9:a5: e7:8a:c1:dd:86:7b:71:27:9d:97:71:68:36:cd:06:2c:79:f5: 73:4b:e6:7f:75:06:8c:b8:3a:55:76:14:44:ef:4a:af:d3:6e: 85:84:cd:ba:03:1d:f7:69:0a:38:8f:10:52:c3:ed:54:b3:f3: 80:89:d3:08:46:29:d1:59:6b:3d:03:d3:c1:b4:e7:3e:c4:cb: 59:17:4e:01:ac:f1:16:55:de:54:d0:99:d8:f5:12:05:d5:4c: 52:7f:1b:b2:17:2e:7c:83:38:61:0a:16:30:e3:f6:27:88:ca: 7f:03:d7:a5:ae:b3:68:11:26:86:2e:11:6e:21:01:1b:cc:4a: 96:55:d5:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFFNkExMTAvBgNVBAUTKDJDODhGMzhGNkQ0Rjg0RjJDMTkxQTNGQTJCMTkxNUFF MDg5ODg3MzQwHhcNMjUxMjI0MTUxMDIzWhcNMjUxMjMxMTUxMDIzWjAYMRYwFAYD VQQDDA02OTRjMDI1Zi1kNmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk+z31gb3giJNULbJeKYAIeyAa8WypDUv234+cE+8Jlzvq8roA3vDM7huY/GY 6V6qG5+FMydhNkrnFaGAt1jNFBYIYFIX9wV6r1SR0STNKvg6348vp35VJqxMw1Ot 6UkxWryeLJLc9fhyiRlfRDsngLoDsawemvnRghnMlisXRa2dzQl4CTe4uOKEXwFZ G9AKQOnN6j7Cv2Sj3xlm4HNNhTqW2I/l/cm6vz9QFEC4Epi0mZfRZ8GzZ7fdhr+D RAStYORd8RKdWdGCvbfR8lZBfJxx3iCBdZWQYZ0CW1+PkEo4UqAn7SLaSe+lNOLl KqBWuSxhLAmPDLGXhgM95bV9sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfHII3E GvUPRvAmJZQZ4U8YE53XMB8GA1UdIwQYMBaAFCyI849tT4TywZGj+isZFa4ImIc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUU2QS81ODMyNDVCNjFE QUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQTEJrYVA2S3hrVnJnaVlo elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJanpqMjFQaFBMQmthUDZLeGtWcmdpWWh6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUU2QS81ODMyNDVCNjFEQUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQ TEJrYVA2S3hrVnJnaVloelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADBXnqnunmHxsIS6xdfDgFfFc0yWe3ZuMozZZCD7GKn/ue+leqTKf1 YU2X+vnBZ1PjgOP1ivoV/peC5sbHTrwml/OcKDn+sW3Ed0oIW3whCwcM0hZxwHff vvvrZKIpnkE+27jILxdFpbTAYJGiMgl1TYYx6oTjX5JSJKEH+aXnisHdhntxJ52X cWg2zQYsefVzS+Z/dQaMuDpVdhRE70qv026FhM26Ax33aQo4jxBSw+1Us/OAidMI RinRWWs9A9PBtOc+xMtZF04BrPEWVd5U0JnY9RIF1UxSfxuyFy58gzhhChYw4/Yn iMp/A9elrrNoESaGLhFuIQEbzEqWVdUC -----END CERTIFICATE-----Generated at Wed Dec 24 18:56:10 2025 by rpki-client