This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft File: LEUCOU_ZzE2HemU5c1CklTBhNsE.mft (raw, json) Hash identifier: /cmUesmeVFhoNxFceY/mAfFW+WfOg2x3uBs/pgKXIZ4= Subject key identifier: F3:F8:B0:7C:74:EC:6F:8D:2B:5A:28:60:F3:44:2D:33:C4:22:F5:0F Authority key identifier: 2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1 Certificate issuer: /CN=A912D8C3/serialNumber=2C4502394FD9CC4D877A65397350A495306136C1 Certificate serial: 0628 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft Manifest number: 0620 Signing time: Mon 22 Dec 2025 21:58:36 +0000 Manifest this update: Mon 22 Dec 2025 21:58:36 +0000 Manifest next update: Mon 29 Dec 2025 21:58:36 +0000 Files and hashes: 1: LEUCOU_ZzE2HemU5c1CklTBhNsE.crl (hash: KlK3a2xWsJMohMEaWbnPSe+P00wsfpn/jLWp3QMKd8Q=) 2: B69382D2CCC911EBB3A3513CC4F9AE02.roa (hash: HE6I/F13bN4XohmVDBqxBCGNwt3v/V2iNwzXes290uY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1576 (0x628) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D8C3, serialNumber=2C4502394FD9CC4D877A65397350A495306136C1 Validity Not Before: Dec 22 21:58:36 2025 GMT Not After : Dec 29 21:58:36 2025 GMT Subject: CN=6949bf0c-965f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a0:21:65:3d:6f:5f:e7:40:e3:1c:05:b8:e3: 7a:ba:04:d3:4f:a6:f8:32:89:84:bc:4c:f2:cb:8b: 00:9d:1a:9c:14:fa:c8:9f:ee:45:f5:67:9d:d5:ba: 6f:19:1b:59:ad:87:47:4b:2e:42:2f:38:8f:5a:71: 8e:b7:2a:50:aa:81:ee:5b:d9:4d:ed:56:5e:7c:b6: ec:4c:73:75:d0:92:4f:aa:c1:80:5e:2d:1f:ea:2a: f5:c4:4f:61:8b:03:b1:3b:c5:21:2c:99:bd:8a:dd: b7:aa:5d:1c:94:a2:ab:9e:f0:b2:6e:1f:00:e4:5e: 55:c4:68:ea:70:89:db:c9:7d:a4:df:d6:a9:ec:17: f9:38:93:81:95:57:9d:c8:43:e1:b1:85:df:4f:56: ef:ae:b6:31:32:26:8e:26:82:a1:86:a0:29:e7:97: 86:05:a5:17:1c:39:0d:fe:d6:c6:25:fb:38:e3:86: 70:83:89:97:42:5f:11:e0:ae:d8:35:d7:14:b2:5a: 35:a0:88:31:57:01:d4:2b:f1:8d:cf:fb:19:d5:5c: be:90:26:89:fd:8e:65:29:38:7a:7b:e9:13:d9:15: 40:a3:46:1f:7b:90:c7:f8:b4:ff:b5:45:c8:5a:63: 4a:80:5e:4c:d2:74:94:1f:00:c7:ba:fb:19:f0:e6: 2c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F8:B0:7C:74:EC:6F:8D:2B:5A:28:60:F3:44:2D:33:C4:22:F5:0F X509v3 Authority Key Identifier: keyid:2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:4b:24:3e:f1:62:47:bb:b7:08:cc:b8:04:33:30:81:b8:ac: 46:e4:a4:01:fe:68:f6:a3:44:81:d6:92:76:52:cc:fe:4d:3f: 77:15:62:af:d5:c4:84:9a:29:29:16:3c:ea:a1:de:f8:3f:d9: 45:e1:51:79:54:9b:b3:dc:76:1d:8b:7d:8a:27:92:48:2a:b0: 98:1e:b1:b8:08:36:64:9c:35:c3:8b:89:7b:b5:34:b1:51:d9: db:8d:99:3e:a4:32:21:cb:f5:b6:0d:c5:44:b1:b8:69:be:a8: b5:4c:15:01:3b:9c:37:45:ac:e8:6b:c6:31:96:a1:0a:e8:d7: fb:4f:43:5d:27:e1:96:60:a8:d6:c0:f8:da:28:59:f9:87:a0: 65:3f:57:95:d3:44:ab:e1:1a:ed:63:b2:57:1c:90:75:78:e1: 64:7a:4c:43:e8:fa:36:10:89:16:85:3a:fe:fd:bf:69:63:15: 7a:ed:33:41:41:b6:c2:98:7b:72:f2:e0:db:b8:21:da:9f:49: 29:cc:ea:28:81:ae:7f:5a:37:a6:87:e7:64:26:f0:d4:28:f1: d1:9e:d7:ec:f9:24:f9:5b:a1:19:10:64:97:d8:e2:48:74:67: c5:35:c1:43:91:f4:a5:fa:e2:eb:38:30:1a:d1:de:90:b4:bf: b6:9c:12:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ4QzMxMTAvBgNVBAUTKDJDNDUwMjM5NEZEOUNDNEQ4NzdBNjUzOTczNTBBNDk1 MzA2MTM2QzEwHhcNMjUxMjIyMjE1ODM2WhcNMjUxMjI5MjE1ODM2WjAYMRYwFAYD VQQDDA02OTQ5YmYwYy05NjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqAhZT1vX+dA4xwFuON6ugTTT6b4MomEvEzyy4sAnRqcFPrIn+5F9Wed1bpv GRtZrYdHSy5CLziPWnGOtypQqoHuW9lN7VZefLbsTHN10JJPqsGAXi0f6ir1xE9h iwOxO8UhLJm9it23ql0clKKrnvCybh8A5F5VxGjqcInbyX2k39ap7Bf5OJOBlVed yEPhsYXfT1bvrrYxMiaOJoKhhqAp55eGBaUXHDkN/tbGJfs444Zwg4mXQl8R4K7Y NdcUslo1oIgxVwHUK/GNz/sZ1Vy+kCaJ/Y5lKTh6e+kT2RVAo0Yfe5DH+LT/tUXI WmNKgF5M0nSUHwDHuvsZ8OYs5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPP4sHx0 7G+NK1ooYPNELTPEIvUPMB8GA1UdIwQYMBaAFCxFAjlP2cxNh3plOXNQpJUwYTbB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDhDMy9ENzQxNEQ1NEM3 MjIxMUVCQTQ3MTRGNDBDNEY5QUUwMi9MRVVDT1VfWnpFMkhlbVU1YzFDa2xUQmhO c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFVUNPVV9aekUySGVtVTVjMUNrbFRCaE5zRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDhDMy9ENzQxNEQ1NEM3MjIxMUVCQTQ3MTRGNDBDNEY5QUUwMi9MRVVDT1VfWnpF MkhlbVU1YzFDa2xUQmhOc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrSyQ+8WJHu7cIzLgEMzCBuKxG5KQB/mj2o0SB1pJ2Usz+TT93FWKv 1cSEmikpFjzqod74P9lF4VF5VJuz3HYdi32KJ5JIKrCYHrG4CDZknDXDi4l7tTSx UdnbjZk+pDIhy/W2DcVEsbhpvqi1TBUBO5w3Razoa8YxlqEK6Nf7T0NdJ+GWYKjW wPjaKFn5h6BlP1eV00Sr4RrtY7JXHJB1eOFkekxD6Po2EIkWhTr+/b9pYxV67TNB QbbCmHty8uDbuCHan0kpzOooga5/Wjemh+dkJvDUKPHRntfs+ST5W6EZEGSX2OJI dGfFNcFDkfSl+uLrODAa0d6QtL+2nBIN -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:20 2025 by rpki-client