This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft File: lBEWOnNX79ihLWm2yUdlT0Xebio.mft (raw, json) Hash identifier: peeHNtyF/j3qYCNVlApWSFpzJCkAKVtrShHaFP7mdcg= Subject key identifier: 31:3A:6C:70:C2:60:5F:E5:4F:3E:B6:19:21:35:68:A1:16:86:E6:37 Authority key identifier: 94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A Certificate issuer: /CN=A911695A/serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft Manifest number: 10 Signing time: Tue 23 Dec 2025 06:48:22 +0000 Manifest this update: Tue 23 Dec 2025 06:48:22 +0000 Manifest next update: Tue 30 Dec 2025 06:48:22 +0000 Files and hashes: 1: lBEWOnNX79ihLWm2yUdlT0Xebio.crl (hash: n3sfm/RoiNNx4Z2uDoT7n4A3aRp0ESZGm0rJdoOz5pU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911695A, serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A Validity Not Before: Dec 23 06:48:22 2025 GMT Not After : Dec 30 06:48:22 2025 GMT Subject: CN=694a3b36-864f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:33:d0:9a:d5:23:9a:67:d8:70:54:ca:d1:a2: 50:1a:71:3c:bf:87:da:cc:21:1a:be:c5:eb:76:2c: b7:45:08:06:38:31:87:13:d3:10:91:93:2c:4d:eb: ae:7f:8b:49:6a:ed:fa:5f:c6:df:a6:d3:4b:c9:df: 75:a8:34:63:17:bb:2e:bf:8e:be:25:29:4d:c9:cd: 43:8e:93:a1:19:19:43:00:66:80:84:72:46:9a:1c: 7c:09:83:44:3c:3b:d5:4c:c5:02:e2:95:80:c0:6d: 1b:a0:8a:5b:8a:08:f8:73:d1:58:96:4d:1d:6f:17: 44:1f:a6:75:1a:1e:d4:33:ad:b1:9a:2d:62:1f:aa: fe:52:52:3e:73:34:42:4e:63:e7:ba:6d:c7:38:26: ac:ed:dd:8c:12:07:76:9b:6d:fa:6e:60:90:e5:5c: 57:0a:23:51:29:6a:1c:7d:5b:72:83:06:27:7f:3b: c9:93:8f:d3:64:15:ee:50:88:48:a4:19:61:29:eb: 36:b6:2e:ac:02:fb:0e:a9:96:86:83:92:d0:3f:6f: 25:5f:4e:e4:c5:75:fb:8f:05:d8:36:02:2b:77:b9: 47:ec:01:70:d0:89:8e:86:16:ae:18:e6:c5:a5:64: 42:91:bb:bc:c2:b1:e7:eb:9e:a0:91:3c:6a:81:72: 02:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3A:6C:70:C2:60:5F:E5:4F:3E:B6:19:21:35:68:A1:16:86:E6:37 X509v3 Authority Key Identifier: keyid:94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:7f:38:4a:0c:e2:6f:f8:1c:43:22:91:7d:8c:6a:04:f3:ad: 3c:c8:4b:14:e4:9f:72:43:91:b8:b4:f1:0c:6f:c8:39:e4:21: c3:3d:12:35:aa:c0:ec:2b:53:d4:8e:f0:aa:d3:db:ee:c2:af: 4e:3a:44:f3:64:35:4a:8d:fc:d1:41:a6:ca:47:bb:6d:8d:1e: ad:4d:f6:13:c3:25:95:1b:b6:dd:01:f3:f5:70:c2:c3:d1:a2: c7:a7:9b:cf:8c:ef:76:f8:c2:96:ea:1a:3d:37:5f:bb:a9:bc: e5:18:d3:ee:75:07:58:c7:c6:d4:06:8d:a6:e2:80:b6:72:5d: 5f:06:84:bf:c5:e3:68:73:68:87:01:e7:44:ba:34:59:6f:93: 30:2d:f4:1d:60:30:c9:2c:28:d4:73:b7:11:4a:e3:46:aa:0f: de:5e:9c:99:28:b6:84:0b:cf:57:2f:cc:59:0f:fa:2c:0e:2b: 17:68:0d:2f:67:00:a6:82:e2:2c:9f:ab:f2:25:8f:49:25:12: 8a:58:68:7c:45:1d:8b:5c:fb:f3:a3:e4:91:7a:4c:aa:f7:37: dc:74:34:1e:be:06:bd:0c:c7:9d:3b:67:13:d2:fe:e9:65:ee: 24:b0:f8:29:42:4b:26:f8:56:eb:61:30:ef:b0:2d:6d:f1:66: 5b:b5:66:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Njk1QTExMC8GA1UEBRMoOTQxMTE2M0E3MzU3RUZEOEExMkQ2OUI2Qzk0NzY1NEY0 NURFNkUyQTAeFw0yNTEyMjMwNjQ4MjJaFw0yNTEyMzAwNjQ4MjJaMBgxFjAUBgNV BAMMDTY5NGEzYjM2LTg2NGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRM9Ca1SOaZ9hwVMrRolAacTy/h9rMIRq+xet2LLdFCAY4MYcT0xCRkyxN665/ i0lq7fpfxt+m00vJ33WoNGMXuy6/jr4lKU3JzUOOk6EZGUMAZoCEckaaHHwJg0Q8 O9VMxQLilYDAbRugiluKCPhz0ViWTR1vF0QfpnUaHtQzrbGaLWIfqv5SUj5zNEJO Y+e6bcc4Jqzt3YwSB3abbfpuYJDlXFcKI1Epahx9W3KDBid/O8mTj9NkFe5QiEik GWEp6za2LqwC+w6ploaDktA/byVfTuTFdfuPBdg2Ait3uUfsAXDQiY6GFq4Y5sWl ZEKRu7zCsefrnqCRPGqBcgLRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMTpscMJg X+VPPrYZITVooRaG5jcwHwYDVR0jBBgwFoAUlBEWOnNX79ihLWm2yUdlT0Xebiow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2OTVBLzYzNTMwQ0ZFQzhG MTExRjA4Rjk5Mzc3NkM0RjlBRTAyL2xCRVdPbk5YNzlpaExXbTJ5VWRsVDBYZWJp by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEJFV09uTlg3OWloTFdtMnlVZGxUMFhlYmlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 OTVBLzYzNTMwQ0ZFQzhGMTExRjA4Rjk5Mzc3NkM0RjlBRTAyL2xCRVdPbk5YNzlp aExXbTJ5VWRsVDBYZWJpby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIx/OEoM4m/4HEMikX2MagTzrTzISxTkn3JDkbi08QxvyDnkIcM9EjWq wOwrU9SO8KrT2+7Cr046RPNkNUqN/NFBpspHu22NHq1N9hPDJZUbtt0B8/VwwsPR osenm8+M73b4wpbqGj03X7upvOUY0+51B1jHxtQGjabigLZyXV8GhL/F42hzaIcB 50S6NFlvkzAt9B1gMMksKNRztxFK40aqD95enJkotoQLz1cvzFkP+iwOKxdoDS9n AKaC4iyfq/Ilj0klEopYaHxFHYtc+/Oj5JF6TKr3N9x0NB6+Br0Mx507ZxPS/ull 7iSw+ClCSyb4VuthMO+wLW3xZlu1ZmM= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:28 2025 by rpki-client