This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft File: LE5bBUJzo8HuQWpC354jYiY3OWE.mft (raw, json) Hash identifier: 9Xse7yIDVr+Z5GGltGrMJQWQ1h03d4YoHvWaVqXIUi8= Subject key identifier: A3:6B:14:3E:E0:8E:03:A7:0E:D0:4B:36:C7:DA:23:A0:A0:38:ED:45 Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 Certificate issuer: /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Certificate serial: 0888 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft Manifest number: 0878 Signing time: Mon 22 Dec 2025 19:56:12 +0000 Manifest this update: Mon 22 Dec 2025 19:56:11 +0000 Manifest next update: Mon 29 Dec 2025 19:56:11 +0000 Files and hashes: 1: LE5bBUJzo8HuQWpC354jYiY3OWE.crl (hash: DGFac0smoKtgnkK2Mex8DcM3GM2zCXNOp8xeUFpbNEM=) 2: 448119B0DAEA11EA8773CC58C4F9AE02.roa (hash: 4Kz/gb1MnYaV74RbCJyZRYORl5E6fIDMvNU65k0KJvs=) 3: 4583DDACDAEA11EA8773CC58C4F9AE02.roa (hash: IgMQ6bjceMEjNxtoYsUzqIdvcKKluE/pVcpXGCEMr1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2184 (0x888) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CDB, serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Validity Not Before: Dec 22 19:56:11 2025 GMT Not After : Dec 29 19:56:11 2025 GMT Subject: CN=6949a25c-4666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:65:1f:f6:74:73:7d:c7:4c:14:33:98:d9:e6: b1:44:56:77:dc:60:9d:7a:07:3a:4f:c4:67:4d:41: a5:8b:52:a7:2a:d3:92:14:45:d2:dd:73:bd:7a:e8: f8:35:33:2d:11:ab:ea:32:3f:8a:f7:cc:7f:97:17: 0d:e6:60:3f:ec:54:ac:1f:bf:74:3e:ef:63:11:2d: 13:d6:c4:1e:d3:b6:a7:46:b8:ba:8b:2e:c0:ad:ef: c0:4e:d7:7e:d7:7c:b5:d1:19:2c:6a:3f:36:09:5f: 40:a9:5c:d5:6f:c0:34:4b:ff:eb:8e:90:61:9a:4a: 50:5a:d7:eb:77:72:ba:d0:9d:0c:0a:13:51:15:0d: af:80:76:f9:92:7a:23:76:73:f9:78:c7:f6:f8:76: bf:d8:2c:a3:42:91:1d:3d:c8:86:82:1c:81:f5:2d: 9d:cd:0d:00:ea:09:cb:42:63:18:29:fb:69:9c:cf: 90:d5:48:55:06:7d:39:4a:f8:0c:3c:c8:6a:74:a2: d7:19:4c:8d:cb:27:8d:7c:08:15:c1:2b:b3:8a:23: e1:14:da:f7:0c:cd:a5:50:a2:48:03:30:04:36:45: 01:f5:4f:db:00:18:a1:90:4b:85:3c:d1:c9:3e:a8: c5:22:51:cb:07:71:53:8c:dd:bf:ed:68:2c:40:35: 64:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6B:14:3E:E0:8E:03:A7:0E:D0:4B:36:C7:DA:23:A0:A0:38:ED:45 X509v3 Authority Key Identifier: keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:06:fc:49:66:7b:6b:fa:34:14:37:81:93:c9:b6:5b:ac:4e: a3:5e:77:00:d0:98:7b:72:41:64:6a:1c:84:fa:30:5c:f5:97: 4e:98:c8:42:78:5c:36:fb:ab:d4:3c:0b:fa:62:85:4f:3f:cf: 53:f0:28:75:0f:ab:f5:e8:b0:cd:2c:9c:92:0b:0a:74:2f:47: ba:4d:ea:df:c3:fa:11:ea:eb:5c:45:fc:80:3b:7d:c6:3d:db: 9f:3f:04:f0:e2:8c:b1:d7:85:34:e0:8d:e6:bf:bf:82:9d:66: 0d:d5:00:0f:01:df:01:7b:b7:9e:f6:3b:c7:b7:93:34:35:70: 03:05:5d:b8:bf:17:16:52:25:08:95:67:3d:d8:28:8c:67:9e: 52:18:f3:b7:e7:63:e8:85:07:0d:87:2f:27:46:d5:56:20:86: 76:7e:5c:73:a8:cb:7b:72:52:4f:f3:2c:fa:9d:a2:60:7c:fc: 0c:09:16:b8:a4:aa:6b:95:d6:a1:41:34:01:d6:6b:d4:c3:a3: a3:11:d8:b9:39:de:30:7a:03:70:9d:f6:b5:f2:93:4e:6b:5c: 3f:90:bc:07:f7:7d:f0:0e:96:fc:2e:67:a8:95:f9:bc:bd:76: d8:5f:b5:e9:1d:a9:3c:bc:64:ab:3d:53:44:5e:0c:bc:2b:66: 28:1a:c8:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDREIxMTAvBgNVBAUTKDJDNEU1QjA1NDI3M0EzQzFFRTQxNkE0MkRGOUUyMzYy MjYzNzM5NjEwHhcNMjUxMjIyMTk1NjExWhcNMjUxMjI5MTk1NjExWjAYMRYwFAYD VQQDDA02OTQ5YTI1Yy00NjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGUf9nRzfcdMFDOY2eaxRFZ33GCdegc6T8RnTUGli1KnKtOSFEXS3XO9euj4 NTMtEavqMj+K98x/lxcN5mA/7FSsH790Pu9jES0T1sQe07anRri6iy7Are/ATtd+ 13y10Rksaj82CV9AqVzVb8A0S//rjpBhmkpQWtfrd3K60J0MChNRFQ2vgHb5knoj dnP5eMf2+Ha/2CyjQpEdPciGghyB9S2dzQ0A6gnLQmMYKftpnM+Q1UhVBn05SvgM PMhqdKLXGUyNyyeNfAgVwSuziiPhFNr3DM2lUKJIAzAENkUB9U/bABihkEuFPNHJ PqjFIlHLB3FTjN2/7WgsQDVkNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNrFD7g jgOnDtBLNsfaI6CgOO1FMB8GA1UdIwQYMBaAFCxOWwVCc6PB7kFqQt+eI2ImNzlh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENEQi9CREFGNjBFNERB RTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84SHVRV3BDMzU0allpWTNP V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNWJCVUp6bzhIdVFXcEMzNTRqWWlZM09XRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENEQi9CREFGNjBFNERBRTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84 SHVRV3BDMzU0allpWTNPV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGBvxJZntr+jQUN4GTybZbrE6jXncA0Jh7ckFkahyE+jBc9ZdOmMhC eFw2+6vUPAv6YoVPP89T8Ch1D6v16LDNLJySCwp0L0e6Terfw/oR6utcRfyAO33G PdufPwTw4oyx14U04I3mv7+CnWYN1QAPAd8Be7ee9jvHt5M0NXADBV24vxcWUiUI lWc92CiMZ55SGPO352PohQcNhy8nRtVWIIZ2flxzqMt7clJP8yz6naJgfPwMCRa4 pKprldahQTQB1mvUw6OjEdi5Od4wegNwnfa18pNOa1w/kLwH933wDpb8Lmeolfm8 vXbYX7XpHak8vGSrPVNEXgy8K2YoGsgV -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:22 2025 by rpki-client