This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json) Hash identifier: ycPlc6Sc4idgK9wNIuRNd+xIThwi8sv73SnOL1z7EOk= Subject key identifier: 4C:1E:D7:21:19:89:C2:38:B2:95:FF:60:91:EC:9E:03:E4:5E:BF:99 Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft Manifest number: 017F Signing time: Tue 23 Dec 2025 02:44:18 +0000 Manifest this update: Tue 23 Dec 2025 02:44:18 +0000 Manifest next update: Tue 30 Dec 2025 02:44:18 +0000 Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: CO48RmdsLasHGqXbAAUYothGF4JrfmdwfhcGIHrNMyQ=) 2: A5F4A536933D11EEA6B4A653C4F9AE02.roa (hash: 6tIF2i7E6pEkUpHmxtY4OrrXsVv0qE0EUaxM0hPMQog=) 3: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: jzviIcT36AX7+vIYnTcKiwwmHcmgLFxJ/UujmC0oCBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: Dec 23 02:44:18 2025 GMT Not After : Dec 30 02:44:18 2025 GMT Subject: CN=694a0202-5c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:07:f3:09:27:b7:f2:58:ed:9b:e8:49:f0:60: 1e:19:5b:01:73:29:41:3b:af:ce:c3:c8:4b:26:44: 0c:ee:29:1e:34:8a:68:41:47:2a:96:01:6c:ac:2f: 5d:28:79:a0:2b:ec:f7:c5:76:0f:61:0a:b2:e7:ce: 69:c1:e9:fc:6e:5f:08:fc:26:f5:89:b1:4b:78:79: d4:69:49:4c:53:51:41:57:70:10:20:05:d7:4a:61: b7:8b:f2:53:9b:d8:78:16:9d:66:39:ce:9b:2f:88: 4d:4b:4d:cb:af:ec:75:ed:ec:00:b7:1d:68:d9:57: e7:53:82:d9:a1:dc:cf:48:da:7c:46:ad:0f:3d:9e: 80:84:c1:cd:dd:91:b5:6b:81:c5:a6:c6:e8:b9:5c: a5:ac:c7:c1:f3:c8:f0:84:34:8b:e3:ca:5e:b3:b1: 1f:e8:86:cf:bc:05:72:5a:c0:4b:30:78:9e:22:21: 7f:f2:19:1c:31:d7:50:53:e4:56:ff:58:98:cd:b3: 94:5e:0c:dc:10:62:ad:5e:fd:46:82:94:21:3c:06: 0c:dd:47:52:cd:bb:0c:8e:ea:f2:b0:7f:e7:0d:a4: 30:97:29:97:32:95:27:4a:65:31:ee:1b:4f:7a:ac: 70:dd:25:94:74:da:74:3d:26:4b:28:99:99:81:d8: 95:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1E:D7:21:19:89:C2:38:B2:95:FF:60:91:EC:9E:03:E4:5E:BF:99 X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:67:c3:f6:c7:e2:36:9f:84:ae:32:f8:8b:88:5b:a1:aa:a0: ed:76:b2:84:d8:95:21:bc:c4:e5:ea:02:89:ff:d3:fe:fa:26: 8b:67:23:66:36:0d:c2:31:a9:2a:ac:c0:03:c2:90:f9:1e:06: 5e:87:b5:54:21:66:60:b0:63:f5:00:b0:e4:7a:48:c7:65:67: 85:8e:33:b7:bc:03:5b:b3:5d:da:af:e4:91:c6:29:a0:c2:90: 2d:24:f0:bc:9b:fc:7b:dd:bb:51:c4:47:e7:79:ae:40:75:97: 10:6a:b9:34:07:11:b6:97:6d:43:16:32:7a:e7:c8:76:6b:aa: 7a:df:80:03:c8:c0:ed:f1:52:30:68:1c:b5:6c:c6:8d:dd:3a: 8c:5c:a5:10:56:ef:97:94:20:96:99:9a:65:24:6c:af:f4:dd: 97:27:24:3d:a5:32:78:88:00:b1:b1:1a:23:13:bd:e5:c3:83: 14:4d:56:bc:10:cf:92:1b:82:62:ac:76:08:57:51:fa:83:bc: 9e:47:7b:af:23:da:09:09:1a:9a:f3:43:24:8d:8d:9d:2d:19: 52:c7:bb:84:d8:80:bb:be:f6:9f:2c:64:67:48:81:1f:d3:f2: e9:78:02:e5:ce:52:57:2f:0a:53:b6:5d:25:75:f5:85:0f:9e: 60:38:b1:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG NEMzREEyNzAwHhcNMjUxMjIzMDI0NDE4WhcNMjUxMjMwMDI0NDE4WjAYMRYwFAYD VQQDDA02OTRhMDIwMi01YzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwfzCSe38ljtm+hJ8GAeGVsBcylBO6/Ow8hLJkQM7ikeNIpoQUcqlgFsrC9d KHmgK+z3xXYPYQqy585pwen8bl8I/Cb1ibFLeHnUaUlMU1FBV3AQIAXXSmG3i/JT m9h4Fp1mOc6bL4hNS03Lr+x17ewAtx1o2VfnU4LZodzPSNp8Rq0PPZ6AhMHN3ZG1 a4HFpsbouVylrMfB88jwhDSL48pes7Ef6IbPvAVyWsBLMHieIiF/8hkcMddQU+RW /1iYzbOUXgzcEGKtXv1GgpQhPAYM3UdSzbsMjurysH/nDaQwlymXMpUnSmUx7htP eqxw3SWUdNp0PSZLKJmZgdiVxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwe1yEZ icI4spX/YJHsngPkXr+ZMB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyOS80QjNDRUVCNDkzM0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZ ai1oWURuRFIzbEQwdzlvbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwZ8P2x+I2n4SuMviLiFuhqqDtdrKE2JUhvMTl6gKJ/9P++iaLZyNm Ng3CMakqrMADwpD5HgZeh7VUIWZgsGP1ALDkekjHZWeFjjO3vANbs13ar+SRximg wpAtJPC8m/x73btRxEfnea5AdZcQark0BxG2l21DFjJ658h2a6p634ADyMDt8VIw aBy1bMaN3TqMXKUQVu+XlCCWmZplJGyv9N2XJyQ9pTJ4iACxsRojE73lw4MUTVa8 EM+SG4JirHYIV1H6g7yeR3uvI9oJCRqa80MkjY2dLRlSx7uE2IC7vvafLGRnSIEf 0/LpeALlzlJXLwpTtl0ldfWFD55gOLE+ -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:57 2025 by rpki-client