This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft File: lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json) Hash identifier: GKaBZBPIsgZ0iZiInVaSi5N33ruZOtUdPqiA5UVFjBc= Subject key identifier: F4:57:12:A9:07:E4:96:CB:9E:13:D9:47:63:65:61:69:60:5E:DE:F8 Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft Manifest number: 0244 Signing time: Tue 23 Dec 2025 01:03:05 +0000 Manifest this update: Tue 23 Dec 2025 01:03:05 +0000 Manifest next update: Tue 30 Dec 2025 01:03:05 +0000 Files and hashes: 1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: fqmjXUqUtKFGKWQHOJK2CqweWq/ZJELf1l02pQxLRvY=) 2: 42C28C36A80711F0A622350DC4F9AE02.roa (hash: 7yzpPSeDBKG0ILP0wLSPkWToi/S3lPqOvxrezWtdGKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Validity Not Before: Dec 23 01:03:05 2025 GMT Not After : Dec 30 01:03:05 2025 GMT Subject: CN=6949ea49-741b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b1:99:c4:ba:c5:9f:89:d2:4c:bd:ee:e4:53: 28:78:84:85:f2:70:e6:d7:e6:c6:2b:54:05:cc:db: 06:1d:c6:4e:c4:be:27:e9:1d:8d:04:15:ed:95:ab: e3:9b:0b:f7:c4:b2:6a:5c:8f:1a:97:37:46:cf:07: 7d:32:0f:98:56:4a:db:ca:51:c2:9d:70:64:97:29: cd:e7:a6:36:e8:72:38:ff:6b:f9:f5:e3:65:97:3c: f1:95:d6:f0:0c:ba:8c:7c:fc:e6:35:66:03:f8:70: 09:15:2e:56:ed:0d:e1:2f:f6:41:99:7b:70:3d:b2: cf:15:4e:cb:08:c9:d0:73:61:d2:0f:0d:34:99:d4: 5b:2b:16:a6:e0:9d:33:d5:b1:fa:ce:b5:16:30:7d: 33:e6:5e:37:6c:42:9b:60:70:39:bc:5c:73:59:e2: cb:4c:43:31:86:c7:d9:78:9b:f8:05:cf:c0:57:03: ff:f7:ba:ee:ea:2f:16:d9:47:f1:74:ff:20:82:8f: ee:46:f5:f4:17:be:3e:38:02:9d:68:31:b3:51:d7: db:a1:3d:14:34:89:17:0f:18:77:93:05:db:10:bf: 61:4b:41:4c:71:d2:1a:a0:eb:a3:16:0d:c4:78:a6: 90:2f:fd:c0:78:4d:e5:76:c6:0d:77:57:78:28:c8: 8d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:57:12:A9:07:E4:96:CB:9E:13:D9:47:63:65:61:69:60:5E:DE:F8 X509v3 Authority Key Identifier: keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:22:86:c6:15:65:2d:8a:fc:e8:f8:e4:d4:6b:7d:30:6f:63: fd:49:66:a4:f3:32:d3:0e:e3:6d:f6:b4:96:e2:98:4b:69:ea: 76:c3:82:b3:83:80:c1:85:bf:37:08:93:46:4f:aa:a5:4d:bd: d9:f8:71:ce:43:74:7d:01:44:45:c7:df:b9:43:d3:ff:85:08: 99:08:0a:5b:0b:26:d5:6a:9f:a5:0f:97:08:de:5f:dc:97:c3: 05:eb:ce:bc:8d:79:1a:a8:cf:06:27:88:65:e8:56:af:bf:a4: e1:10:be:ce:74:7c:de:06:1b:cd:6f:23:64:7f:92:ed:f9:d2: 22:94:10:ce:36:cb:41:f3:4d:fb:ec:9a:e2:a9:bd:ac:5a:7a: ab:0c:f1:06:c0:0e:35:4a:41:ca:35:32:48:b3:3b:d2:b9:d6: 9c:78:15:f0:0f:11:f3:2e:00:99:d2:e1:8c:32:b2:a3:31:5a: c2:6c:c8:c4:a8:dd:69:2a:ea:e2:db:f2:09:74:cd:55:9d:1f: 21:47:30:e1:6d:38:ca:6f:df:c4:a2:95:21:92:9d:c9:2e:8c: 3e:4b:af:09:26:d4:ca:c4:bc:0d:3d:32:b4:0c:1b:ab:9b:12: d2:6a:cc:cb:42:00:51:e5:c9:e2:0a:db:24:da:a0:34:c0:ad: ca:4d:97:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG NDdBQzA2M0QwHhcNMjUxMjIzMDEwMzA1WhcNMjUxMjMwMDEwMzA1WjAYMRYwFAYD VQQDDA02OTQ5ZWE0OS03NDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7GZxLrFn4nSTL3u5FMoeISF8nDm1+bGK1QFzNsGHcZOxL4n6R2NBBXtlavj mwv3xLJqXI8alzdGzwd9Mg+YVkrbylHCnXBklynN56Y26HI4/2v59eNllzzxldbw DLqMfPzmNWYD+HAJFS5W7Q3hL/ZBmXtwPbLPFU7LCMnQc2HSDw00mdRbKxam4J0z 1bH6zrUWMH0z5l43bEKbYHA5vFxzWeLLTEMxhsfZeJv4Bc/AVwP/97ru6i8W2Ufx dP8ggo/uRvX0F74+OAKdaDGzUdfboT0UNIkXDxh3kwXbEL9hS0FMcdIaoOujFg3E eKaQL/3AeE3ldsYNd1d4KMiN8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRXEqkH 5JbLnhPZR2NlYWlgXt74MB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2 QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTA3MS8yRjBGN0E0ODg2QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIz WGhaSnVpVVBhWF8wZXNCajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjIobGFWUtivzo+OTUa30wb2P9SWak8zLTDuNt9rSW4phLaep2w4Kz g4DBhb83CJNGT6qlTb3Z+HHOQ3R9AURFx9+5Q9P/hQiZCApbCybVap+lD5cI3l/c l8MF6868jXkaqM8GJ4hl6Favv6ThEL7OdHzeBhvNbyNkf5Lt+dIilBDONstB8037 7Jriqb2sWnqrDPEGwA41SkHKNTJIszvSudaceBXwDxHzLgCZ0uGMMrKjMVrCbMjE qN1pKuri2/IJdM1VnR8hRzDhbTjKb9/EopUhkp3JLow+S68JJtTKxLwNPTK0DBur mxLSaszLQgBR5cniCtsk2qA0wK3KTZfP -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:28 2025 by rpki-client