This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json) Hash identifier: ZefSBR/e6fuLsBWhmyOCF1VFbHXphBWt3Sn0Ex5DH0c= Subject key identifier: 9A:7F:44:C1:85:CB:BC:DB:00:9C:6A:F2:0D:9C:5C:8D:34:0B:E0:E8 Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 025D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft Manifest number: 0234 Signing time: Sun 07 Dec 2025 00:40:16 +0000 Manifest this update: Sun 07 Dec 2025 00:40:15 +0000 Manifest next update: Sun 14 Dec 2025 00:40:15 +0000 Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: zWTw/5XDVOCkLBAzKrVqUGCO6/JWlxn9nTlBoOB+3IY=) 2: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: wXTf+z0Iz/oOooXevNnn+Biz75JTj6NsQRj0igZe6hU=) 3: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: OQO/jbPkAmyrFrsJHCYsBxAyxffpT18gppoJG2tzj44=) 4: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: v0QyA38k1fUjIxLatTIS+A0JxElTy+cfv1Yt42+czGc=) 5: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: aDePEknIgdhY8grIVf2gq1/G7FHXPqP7qXCUTY/USYI=) 6: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: 7JORqu7sYrSri00VpAd97cPkbX0dugE57bkWBi2JQNk=) 7: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: o1y6sf6jxnpkhpP9iNHCGVK5mxUEq9Y1c62QeILr98U=) 8: C3481400917811ED904ACF83C4F9AE02.roa (hash: 8rDI8OMHiVeHq/X4uTQm2pENFtJiinbUxqvzVYGPFb8=) 9: 18498E84AA4911F0909AC335C4F9AE02.roa (hash: /nv+BWm8Pbai+ypGbGRHN+LGWddsvNd6k16CLCDQGr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 605 (0x25d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: Dec 7 00:40:15 2025 GMT Not After : Dec 14 00:40:15 2025 GMT Subject: CN=6934ccf0-3ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:80:60:1c:e9:63:eb:ec:13:17:a1:4b:54:36: c7:45:71:15:bc:cc:23:b4:0c:52:c5:55:68:38:1a: 9d:ad:fa:b1:8f:33:f2:30:ea:0b:52:1f:84:cc:33: 16:39:63:e3:5d:82:09:1e:70:7b:0a:ac:c2:5c:b5: b3:ee:e4:fa:f7:f8:7f:c0:a5:6e:14:37:eb:7d:ba: d8:74:5a:34:c7:d6:06:5f:37:78:cb:c9:59:bd:d5: 61:b8:9d:f2:01:66:be:1b:8a:1e:e9:c9:ee:15:18: 26:94:88:46:e6:33:07:ff:45:e6:c0:e8:af:0f:92: 2d:e8:c4:10:f6:b8:2f:31:ad:7e:13:27:81:ef:d8: 03:80:f8:9a:ec:a0:7f:8a:7b:41:f0:85:1b:7e:12: c9:27:f6:e2:b6:a4:fa:8e:56:e8:1a:80:41:76:85: d8:27:0e:05:a7:f2:7f:44:38:4a:a6:40:fb:cd:72: 86:44:6a:1b:5e:d6:53:c3:c4:eb:e0:8a:f4:19:fc: 36:ad:63:4c:7b:e8:8c:6e:1a:5c:9e:b3:c7:b6:0d: ed:67:41:4a:28:ff:c7:e9:7a:4b:4f:a3:94:08:91: f8:30:b2:62:b8:db:29:c9:72:43:65:55:03:63:96: 82:6b:70:ec:a7:fe:d3:81:3c:f0:c4:95:30:68:5b: 33:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7F:44:C1:85:CB:BC:DB:00:9C:6A:F2:0D:9C:5C:8D:34:0B:E0:E8 X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8a:99:82:09:f4:1d:21:ae:9b:d0:a9:7c:00:1f:ce:46:67: 79:5c:f5:92:8a:cf:77:b8:71:b3:d0:6a:cf:90:7c:57:a8:86: 24:da:9c:23:53:ff:32:bf:de:b6:15:07:a3:24:69:5f:ba:06: 75:2b:6b:bd:a8:bd:b6:90:e4:0c:27:da:b6:10:6b:85:5e:21: 2f:b6:9c:84:e2:15:aa:50:d3:d0:e6:22:6d:be:3c:93:fa:24: 63:6e:21:d4:e9:93:99:6d:dd:41:07:55:02:ee:fe:4a:56:ca: f7:d7:2f:2b:96:74:6f:54:29:b2:d6:38:86:3a:91:23:31:f9: 45:63:e1:7b:f9:54:16:1a:bb:67:81:c9:9a:8f:b4:4a:2a:8f: 73:00:7d:c0:0c:94:e1:08:64:e5:1b:33:a1:92:06:2c:03:0e: 52:8a:d7:20:8f:6b:43:a6:81:14:73:de:69:f4:e3:e3:2c:ca: 7d:29:aa:de:cb:3b:0d:f2:fc:48:cd:bf:49:e3:bb:76:8e:61: f9:dd:af:ba:e0:2e:3d:9d:b9:75:91:81:6c:db:e7:18:83:e8: fe:4a:7b:9f:8f:52:2b:77:ca:11:c1:56:92:c0:74:c7:b8:76: a4:63:42:95:ca:e4:70:43:dc:82:cf:3f:40:8b:9b:84:87:49: 1c:f6:29:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjUxMjA3MDA0MDE1WhcNMjUxMjE0MDA0MDE1WjAYMRYwFAYD VQQDEw02OTM0Y2NmMC0zYWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoBgHOlj6+wTF6FLVDbHRXEVvMwjtAxSxVVoOBqdrfqxjzPyMOoLUh+EzDMW OWPjXYIJHnB7CqzCXLWz7uT69/h/wKVuFDfrfbrYdFo0x9YGXzd4y8lZvdVhuJ3y AWa+G4oe6cnuFRgmlIhG5jMH/0XmwOivD5It6MQQ9rgvMa1+EyeB79gDgPia7KB/ intB8IUbfhLJJ/bitqT6jlboGoBBdoXYJw4Fp/J/RDhKpkD7zXKGRGobXtZTw8Tr 4Ir0Gfw2rWNMe+iMbhpcnrPHtg3tZ0FKKP/H6XpLT6OUCJH4MLJiuNspyXJDZVUD Y5aCa3Dsp/7TgTzwxJUwaFszxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJp/RMGF y7zbAJxq8g2cXI00C+DoMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTlCNi83OTE4Q0IwQzdGRjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhx Q1l5Vmk1Wk1NdHl4aTRBMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuipmCCfQdIa6b0Kl8AB/ORmd5XPWSis93uHGz0GrPkHxXqIYk2pwj U/8yv962FQejJGlfugZ1K2u9qL22kOQMJ9q2EGuFXiEvtpyE4hWqUNPQ5iJtvjyT +iRjbiHU6ZOZbd1BB1UC7v5KVsr31y8rlnRvVCmy1jiGOpEjMflFY+F7+VQWGrtn gcmaj7RKKo9zAH3ADJThCGTlGzOhkgYsAw5Sitcgj2tDpoEUc95p9OPjLMp9Kare yzsN8vxIzb9J47t2jmH53a+64C49nbl1kYFs2+cYg+j+Snufj1Ird8oRwVaSwHTH uHakY0KVyuRwQ9yCzz9Ai5uEh0kc9ily -----END CERTIFICATE-----Generated at Mon Dec 8 06:13:31 2025 by rpki-client