This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft File: LE66ORmVzLAcUT5PjmHtkUKW5sE.mft (raw, json) Hash identifier: BaFVIrD/CocQXytXhxXp4BpQncS+HvFyIgF6Vbif8cg= Subject key identifier: 19:15:CB:C2:39:C0:E8:EF:D6:AA:70:D1:02:9F:C1:C3:F7:08:4D:30 Authority key identifier: 2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1 Certificate issuer: /CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft Manifest number: 01CB Signing time: Fri 19 Dec 2025 02:05:22 +0000 Manifest this update: Fri 19 Dec 2025 02:05:22 +0000 Manifest next update: Fri 26 Dec 2025 02:05:22 +0000 Files and hashes: 1: LE66ORmVzLAcUT5PjmHtkUKW5sE.crl (hash: 4gfoMWwLIqoylBkJsR9m6GOgd8jjwLPIRvtZ6ti024U=) 2: 7CBC92D21C7811EEA8F76D7FC4F9AE02.roa (hash: w2G6mnACs8k8ArQ9Khbqaqk7miaXJQo8wHP+q2xbHko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129209, serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1 Validity Not Before: Dec 19 02:05:22 2025 GMT Not After : Dec 26 02:05:22 2025 GMT Subject: CN=6944b2e2-495e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f4:c4:58:6c:c3:da:27:d0:e6:63:c7:bf:e6: 24:77:d9:9d:e7:34:70:b5:dd:89:c3:cf:ae:6d:b5: 63:6c:98:9c:62:eb:c6:3a:c5:af:2d:79:c9:52:f3: 88:f1:6e:42:7d:c7:6f:7b:65:c4:fe:2b:da:ab:77: 75:2c:ac:a4:7d:03:4f:df:23:a0:ea:54:86:d4:fe: 19:fc:09:b2:7e:b3:02:63:fa:5c:dd:a7:e6:2a:db: a6:f6:72:2e:96:b0:ce:67:27:10:2b:de:e8:76:de: 72:fc:71:d4:97:f8:16:c8:3c:7b:20:52:4f:6c:20: d3:b7:10:07:58:0c:56:45:c1:c9:b2:ae:8a:61:d5: 0f:63:9b:3a:c0:07:de:b5:aa:ce:fa:33:25:7e:be: ac:e0:29:5c:56:11:e1:f0:5e:10:81:65:f0:5b:73: 55:a1:28:2d:2c:fa:c5:c7:6e:03:64:c9:0c:01:f6: bd:5c:3d:f8:8d:ad:1a:91:da:b0:14:8e:77:fc:86: ef:c3:8c:b8:f5:c8:a9:c1:0c:da:71:f7:29:6a:01: da:16:56:d5:60:27:d8:ce:b5:71:09:c3:25:ba:3a: d1:b9:3b:47:30:a8:c8:92:ec:d0:d3:d9:22:5e:5e: c2:6c:fc:e9:8f:45:3b:c3:2d:a3:28:a8:f8:4a:17: 11:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:15:CB:C2:39:C0:E8:EF:D6:AA:70:D1:02:9F:C1:C3:F7:08:4D:30 X509v3 Authority Key Identifier: keyid:2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:16:97:30:f5:b1:c5:37:e8:c9:f1:85:cb:5a:4a:1e:4b:8c: 07:6f:32:de:5c:52:fc:15:19:bc:d9:3f:1d:6e:02:61:ac:30: 06:96:6a:b4:25:eb:51:37:2d:22:c7:47:dc:6e:19:25:7c:c0: 38:51:00:ea:ee:8b:c3:5e:03:e5:63:cf:67:8d:9f:3c:f2:a7: c2:e6:4c:1a:3f:21:48:ed:02:b9:d4:4d:32:10:21:8a:c1:11: 0e:0f:f3:dc:7d:19:2a:16:9e:71:6f:fe:62:50:90:99:c8:23: ec:2c:94:9c:99:49:bb:2d:6c:21:18:4e:5e:2e:25:59:1d:6a: 53:70:4f:ee:ca:19:90:62:69:a4:86:1b:ef:ea:e9:22:8d:a9: 21:70:e6:69:37:d8:19:14:04:74:a9:29:d4:68:6b:6d:81:80: 71:6d:1a:25:23:82:b0:b5:9e:c2:8b:29:81:36:20:dd:49:63: a9:30:b9:9c:9a:5c:c5:a8:bc:d1:3a:6d:65:c1:40:c3:b7:a7: ce:e7:09:f0:e8:5d:3f:48:b6:de:10:4b:2e:3c:be:c6:38:0b: 23:85:f2:d3:dc:6e:63:85:22:57:5b:7e:08:7e:da:77:35:08: 9b:0f:95:3a:01:bd:fc:69:38:7e:8c:92:4e:43:03:52:ff:ec: ef:9b:6a:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkyMDkxMTAvBgNVBAUTKDJDNEVCQTM5MTk5NUNDQjAxQzUxM0U0RjhFNjFFRDkx NDI5NkU2QzEwHhcNMjUxMjE5MDIwNTIyWhcNMjUxMjI2MDIwNTIyWjAYMRYwFAYD VQQDDA02OTQ0YjJlMi00OTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5vTEWGzD2ifQ5mPHv+Ykd9md5zRwtd2Jw8+ubbVjbJicYuvGOsWvLXnJUvOI 8W5Cfcdve2XE/ivaq3d1LKykfQNP3yOg6lSG1P4Z/AmyfrMCY/pc3afmKtum9nIu lrDOZycQK97odt5y/HHUl/gWyDx7IFJPbCDTtxAHWAxWRcHJsq6KYdUPY5s6wAfe tarO+jMlfr6s4ClcVhHh8F4QgWXwW3NVoSgtLPrFx24DZMkMAfa9XD34ja0akdqw FI53/Ibvw4y49cipwQzacfcpagHaFlbVYCfYzrVxCcMlujrRuTtHMKjIkuzQ09ki Xl7CbPzpj0U7wy2jKKj4ShcRXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkVy8I5 wOjv1qpw0QKfwcP3CE0wMB8GA1UdIwQYMBaAFCxOujkZlcywHFE+T45h7ZFClubB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTIwOS9CODFFMzE4QTFD NzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpMQWNVVDVQam1IdGtVS1c1 c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNjZPUm1WekxBY1VUNVBqbUh0a1VLVzVzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTIwOS9CODFFMzE4QTFDNzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpM QWNVVDVQam1IdGtVS1c1c0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVFpcw9bHFN+jJ8YXLWkoeS4wHbzLeXFL8FRm82T8dbgJhrDAGlmq0 JetRNy0ix0fcbhklfMA4UQDq7ovDXgPlY89njZ888qfC5kwaPyFI7QK51E0yECGK wREOD/PcfRkqFp5xb/5iUJCZyCPsLJScmUm7LWwhGE5eLiVZHWpTcE/uyhmQYmmk hhvv6ukijakhcOZpN9gZFAR0qSnUaGttgYBxbRolI4KwtZ7CiymBNiDdSWOpMLmc mlzFqLzROm1lwUDDt6fO5wnw6F0/SLbeEEsuPL7GOAsjhfLT3G5jhSJXW34Iftp3 NQibD5U6Ab38aTh+jJJOQwNS/+zvm2pH -----END CERTIFICATE-----Generated at Sat Dec 20 11:37:59 2025 by rpki-client