This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft File: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json) Hash identifier: ibOBffddahhflZ7bPwXciB9imkRUCarogW2dJWal+3M= Subject key identifier: BF:8E:05:84:6B:38:53:CC:61:AD:2C:63:8E:6A:62:6F:94:3D:DF:14 Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft Manifest number: 01B1 Signing time: Sun 21 Dec 2025 02:23:03 +0000 Manifest this update: Sun 21 Dec 2025 02:23:02 +0000 Manifest next update: Sun 28 Dec 2025 02:23:02 +0000 Files and hashes: 1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: uaZdVw7wx2C7Jh2QNjcJfue9gtRTMhnx2fs5bbf98x8=) 2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: 5pLKoX5v/Omt/7dfktvLKHUBbKLWsrZdltrbS963Wno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Validity Not Before: Dec 21 02:23:02 2025 GMT Not After : Dec 28 02:23:02 2025 GMT Subject: CN=69475a07-3e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f4:48:c0:05:e1:c3:48:6a:43:d4:18:0d:2f: 95:64:98:c3:17:7e:16:94:5d:10:c0:b8:60:d8:2d: 88:b8:92:67:c2:9f:9c:e1:ff:f8:f9:b2:a2:70:a6: 39:63:d7:a8:01:c3:8a:ba:9d:ee:53:00:1b:2f:e8: 9f:89:78:56:6e:77:e0:ca:b5:08:1f:a6:ca:e8:eb: cf:77:de:99:4f:71:b1:5e:54:72:75:b8:64:09:88: 2f:7f:79:d4:40:0c:81:02:c4:d5:f9:8d:73:ce:87: 32:30:eb:71:31:cd:e7:f9:90:66:1c:6b:82:d3:6f: 96:96:59:02:14:c9:bb:b5:de:09:6c:c7:01:ad:09: f0:55:83:0e:03:46:f3:c8:78:77:77:04:b6:02:ab: 6b:0b:20:b1:56:2b:b8:2f:ad:e8:ba:43:f5:e2:fd: 2f:ed:18:c8:3e:1e:77:1b:7b:45:64:5d:6f:8c:eb: c5:ae:b7:48:de:d5:d5:39:14:e8:ed:8d:97:33:f3: f7:94:81:0b:ec:f9:24:ae:17:33:4e:14:a0:33:b9: 4f:83:98:44:39:de:da:10:6d:73:63:19:e3:be:a5: 13:cb:56:c0:b0:c3:32:07:8e:76:98:f6:8e:64:e1: 8f:3e:78:00:f7:47:a3:23:52:a9:6f:73:04:b7:01: 0d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8E:05:84:6B:38:53:CC:61:AD:2C:63:8E:6A:62:6F:94:3D:DF:14 X509v3 Authority Key Identifier: keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d1:a3:fd:ce:f8:a9:fe:17:21:30:58:46:58:e6:06:c1:7a: 53:e6:66:af:54:2c:07:9e:72:af:1d:29:7b:7b:5d:fb:f3:5f: 28:88:0b:b2:92:85:c1:e4:c5:67:07:5c:54:4d:24:07:d6:d1: a9:e5:47:38:cf:30:e1:7c:7e:ac:97:ba:7d:6a:60:a2:68:d6: 1b:bd:83:49:2e:0e:ee:d0:fe:21:88:fb:cc:b4:4f:da:25:30: cc:7d:18:75:55:d5:54:74:f6:ea:4c:1d:32:59:a7:cf:1d:aa: 2d:43:d7:9a:60:3f:a3:3c:13:2c:16:85:d0:37:8a:14:c4:e1: 29:72:39:7f:1d:aa:de:9e:57:77:65:98:74:1d:b2:1b:62:2a: 3f:e1:75:87:08:b0:8c:5f:3a:63:f2:09:e8:18:ca:b1:8d:b2: 2b:c6:60:d0:1d:c3:79:a1:1f:11:1e:e9:a6:82:60:26:08:cb: 67:7e:6a:a5:28:10:cb:8e:91:99:43:14:ac:11:f9:70:78:92: 7c:f1:52:45:59:b2:fb:29:f0:59:27:de:1b:e3:d5:c2:4e:44: e4:61:b0:a2:d9:7f:bd:f4:40:34:6b:59:98:b3:78:1b:d8:c0: 73:46:cf:71:ff:01:15:98:47:28:88:fe:05:03:cc:39:02:f3: 85:7d:a2:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyRTExMTAvBgNVBAUTKEQ0QkM3OUE0QjE1MzdGRUIwQUQ5MkVCM0YwQTdDQUYz NDUzQThGNTIwHhcNMjUxMjIxMDIyMzAyWhcNMjUxMjI4MDIyMzAyWjAYMRYwFAYD VQQDDA02OTQ3NWEwNy0zZTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvRIwAXhw0hqQ9QYDS+VZJjDF34WlF0QwLhg2C2IuJJnwp+c4f/4+bKicKY5 Y9eoAcOKup3uUwAbL+ifiXhWbnfgyrUIH6bK6OvPd96ZT3GxXlRydbhkCYgvf3nU QAyBAsTV+Y1zzocyMOtxMc3n+ZBmHGuC02+WllkCFMm7td4JbMcBrQnwVYMOA0bz yHh3dwS2AqtrCyCxViu4L63oukP14v0v7RjIPh53G3tFZF1vjOvFrrdI3tXVORTo 7Y2XM/P3lIEL7PkkrhczThSgM7lPg5hEOd7aEG1zYxnjvqUTy1bAsMMyB452mPaO ZOGPPngA90ejI1Kpb3MEtwENhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+OBYRr OFPMYa0sY45qYm+UPd8UMB8GA1UdIwQYMBaAFNS8eaSxU3/rCtkus/CnyvNFOo9S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzJFMS85MDQ3RUYwNDQ2 OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYtc0syUzZ6OEtmSzgwVTZq MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmoxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzJFMS85MDQ3RUYwNDQ2OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYt c0syUzZ6OEtmSzgwVTZqMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi0aP9zvip/hchMFhGWOYGwXpT5mavVCwHnnKvHSl7e137818oiAuy koXB5MVnB1xUTSQH1tGp5Uc4zzDhfH6sl7p9amCiaNYbvYNJLg7u0P4hiPvMtE/a JTDMfRh1VdVUdPbqTB0yWafPHaotQ9eaYD+jPBMsFoXQN4oUxOEpcjl/Harenld3 ZZh0HbIbYio/4XWHCLCMXzpj8gnoGMqxjbIrxmDQHcN5oR8RHummgmAmCMtnfmql KBDLjpGZQxSsEflweJJ88VJFWbL7KfBZJ94b49XCTkTkYbCi2X+99EA0a1mYs3gb 2MBzRs9x/wEVmEcoiP4FA8w5AvOFfaLR -----END CERTIFICATE-----Generated at Sun Dec 21 21:33:09 2025 by rpki-client