This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft File: lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft (raw, json) Hash identifier: Qg0YqJ+8UfJrVtGuGwunkgYhO+aFYzP9bqpLVydQnRw= Subject key identifier: 13:29:FD:19:6D:FA:ED:7C:08:24:4B:B4:B2:5F:5D:18:9E:26:9F:A4 Authority key identifier: 95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47 Certificate issuer: /CN=A919546B/serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47 Certificate serial: 06C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft Manifest number: 06BD Signing time: Mon 22 Dec 2025 21:28:03 +0000 Manifest this update: Mon 22 Dec 2025 21:28:03 +0000 Manifest next update: Mon 29 Dec 2025 21:28:03 +0000 Files and hashes: 1: lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl (hash: c0ppeYkUNLlZ11Q3yMK6hLv/ZnGOYKPnjB+IA12E3ZY=) 2: 270CD9841A7111F09FFEDF3BC4F9AE02.roa (hash: nNWr6J3AcReiPHvNk6340B1sT6j8vw6YrQdSHa29JIE=) 3: 652993B4884F11EBB2A8337FC4F9AE02.roa (hash: Xrevk4k6Cchylp30Kd2GrTW0U2Yau9k0gu1MIRCl1Z0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1732 (0x6c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919546B, serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47 Validity Not Before: Dec 22 21:28:03 2025 GMT Not After : Dec 29 21:28:03 2025 GMT Subject: CN=6949b7e3-1d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:dd:aa:d7:83:e6:f6:57:ff:84:38:64:d7:ef: ca:36:f5:87:2d:bd:9c:69:07:0e:6a:53:21:a0:4c: 5d:98:03:a0:59:ed:3f:98:ae:94:7f:e5:0a:ea:78: 4f:c7:e2:4d:97:96:88:e3:1d:74:6d:fd:b7:f8:45: ec:55:29:d2:8d:5a:1b:84:05:d9:a7:78:67:4d:c7: 02:b0:44:67:51:77:39:f2:88:80:ba:7e:a0:23:75: 36:a5:36:e0:bb:63:ee:3f:20:71:fd:61:88:57:ab: 32:40:e4:9e:b8:86:f9:ad:ba:9a:65:b6:72:d5:2c: 09:28:84:55:cb:74:5e:8c:5c:26:17:cb:3c:76:56: d1:ef:fc:24:2c:3d:e1:30:d4:8c:59:47:04:f1:2f: b2:0f:53:28:16:b8:91:a3:39:a2:1b:bf:47:e8:76: 51:cb:58:ec:19:c8:ae:2e:ca:a7:c1:34:95:7f:e2: 6b:d5:e8:e4:3f:cc:0b:24:42:1e:9c:66:9d:8e:4b: a0:f9:b1:9d:0c:d1:2b:71:48:04:fe:19:1f:02:32: a2:2b:87:49:53:ed:54:99:dd:e2:11:a8:ef:24:54: 98:0a:15:dc:eb:c4:20:54:3b:c5:be:2b:86:ae:70: 1b:50:6d:d3:c5:39:8a:54:c4:e0:c1:7a:89:d4:4f: 29:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:29:FD:19:6D:FA:ED:7C:08:24:4B:B4:B2:5F:5D:18:9E:26:9F:A4 X509v3 Authority Key Identifier: keyid:95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:10:64:34:a1:50:74:9b:46:4b:68:29:3d:c6:73:1d:56:0a: 32:33:03:ff:8a:66:35:1f:6f:71:9c:61:05:6c:f0:e0:18:a9: 87:02:72:4d:24:e4:b1:7c:d2:5a:2d:6d:eb:46:c0:a8:84:e7: c6:f0:c1:5b:e2:85:ca:5c:93:3a:d0:0b:f0:7a:49:09:ee:d8: af:c2:6b:aa:38:62:b9:62:14:8a:2f:1f:4d:8e:3f:62:82:99: 98:4b:4e:63:76:82:c4:a1:e1:3a:7a:33:a1:7a:19:17:14:61: ad:6c:d1:e5:f2:8b:0a:28:6f:5c:a6:87:d0:c7:9f:32:fb:aa: 6a:d3:b6:92:4b:0d:3c:48:d2:50:e2:dc:27:83:39:da:cb:95: 1f:43:2c:9d:d1:89:9f:9e:92:86:b6:1b:74:ac:1e:e6:13:60: ab:24:82:4b:1d:f8:af:d8:c3:fd:2f:0d:80:2c:a3:9f:c9:a6: 7f:b0:d1:cb:19:cb:9c:bc:26:6b:ee:89:8a:26:16:52:3e:7c: 44:9d:66:a3:52:0d:27:82:bd:f8:f3:41:0b:6e:6b:b0:b6:80: 53:c8:9e:b1:67:28:59:29:6f:8c:d6:e4:fd:41:b3:07:c5:f9: 00:86:81:a6:07:c4:e8:2f:60:71:5e:c5:b6:94:41:32:5c:3b: 3f:9c:c5:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0NkIxMTAvBgNVBAUTKDk1OTUxRUNGQzkxRDBGNTVBRDhFRDhBRkJGRTYzQ0I0 MTYxOUZDNDcwHhcNMjUxMjIyMjEyODAzWhcNMjUxMjI5MjEyODAzWjAYMRYwFAYD VQQDDA02OTQ5YjdlMy0xZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8t2q14Pm9lf/hDhk1+/KNvWHLb2caQcOalMhoExdmAOgWe0/mK6Uf+UK6nhP x+JNl5aI4x10bf23+EXsVSnSjVobhAXZp3hnTccCsERnUXc58oiAun6gI3U2pTbg u2PuPyBx/WGIV6syQOSeuIb5rbqaZbZy1SwJKIRVy3RejFwmF8s8dlbR7/wkLD3h MNSMWUcE8S+yD1MoFriRozmiG79H6HZRy1jsGciuLsqnwTSVf+Jr1ejkP8wLJEIe nGadjkug+bGdDNErcUgE/hkfAjKiK4dJU+1Umd3iEajvJFSYChXc68QgVDvFviuG rnAbUG3TxTmKVMTgwXqJ1E8ppwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMp/Rlt +u18CCRLtLJfXRieJp+kMB8GA1UdIwQYMBaAFJWVHs/JHQ9VrY7Yr7/mPLQWGfxH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTQ2Qi9FNUFFNDQwQTg4 NEQxMUVCOTg1RUUzN0RDNEY5QUUwMi9sWlVlejhrZEQxV3RqdGl2di1ZOHRCWVpf RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xaVWV6OGtkRDFXdGp0aXZ2LVk4dEJZWl9FYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTQ2Qi9FNUFFNDQwQTg4NEQxMUVCOTg1RUUzN0RDNEY5QUUwMi9sWlVlejhrZEQx V3RqdGl2di1ZOHRCWVpfRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqEGQ0oVB0m0ZLaCk9xnMdVgoyMwP/imY1H29xnGEFbPDgGKmHAnJN JOSxfNJaLW3rRsCohOfG8MFb4oXKXJM60AvwekkJ7tivwmuqOGK5YhSKLx9Njj9i gpmYS05jdoLEoeE6ejOhehkXFGGtbNHl8osKKG9cpofQx58y+6pq07aSSw08SNJQ 4twngznay5UfQyyd0YmfnpKGtht0rB7mE2CrJIJLHfiv2MP9Lw2ALKOfyaZ/sNHL GcucvCZr7omKJhZSPnxEnWajUg0ngr3480ELbmuwtoBTyJ6xZyhZKW+M1uT9QbMH xfkAhoGmB8ToL2BxXsW2lEEyXDs/nMVz -----END CERTIFICATE-----Generated at Wed Dec 24 15:14:02 2025 by rpki-client