This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json) Hash identifier: zdr3JgRzFRrPD8VIXx19NEo9CX4abhE58i+MYsH/owg= Subject key identifier: AB:48:E7:B6:D2:B1:40:DB:23:74:FD:86:DD:BB:F0:78:3E:EB:09:7F Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft Manifest number: 01A5 Signing time: Tue 23 Dec 2025 02:17:49 +0000 Manifest this update: Tue 23 Dec 2025 02:17:48 +0000 Manifest next update: Tue 30 Dec 2025 02:17:48 +0000 Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: tnp22ghxQvOEF4X3fbN50di4zwBrk/IPN2kN4Ouqzrg=) 2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: PHAPD39R0/+5V+WCmlH3xcXfFFqLnGp5Euy8i5sqtnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91374BB, serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Validity Not Before: Dec 23 02:17:48 2025 GMT Not After : Dec 30 02:17:48 2025 GMT Subject: CN=6949fbcd-9bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d2:f0:8d:da:e3:e6:a9:c5:f6:15:70:af:f7: f5:47:10:59:fc:d0:aa:47:ba:24:09:f4:e6:84:64: 1a:ec:f1:cf:1a:45:35:0f:50:66:7f:10:f2:34:40: c7:6d:03:f3:f1:d0:d4:f0:27:e1:3a:3e:04:f8:60: b1:03:65:96:78:7d:3e:57:87:7e:39:42:74:41:94: 00:20:bd:a3:69:ea:1d:30:4e:41:f1:69:24:bb:4e: e8:97:fd:5a:3e:11:18:c1:ab:db:82:30:c2:2b:70: 3e:de:4e:40:fb:d7:0b:30:d6:de:01:ff:a0:01:01: 2b:b6:15:b0:42:15:e6:bd:4d:31:9c:23:42:db:53: c6:0c:e6:93:7c:fc:de:b5:18:4e:a3:01:da:54:8e: f4:35:91:37:75:ed:6a:7e:1e:d6:7f:2a:56:6f:ef: 5f:42:32:8c:47:52:56:03:5e:b4:c8:0a:de:eb:a3: dc:cc:40:a8:29:51:ab:88:44:99:0d:dd:d2:3c:0a: a0:16:86:19:23:c8:f5:62:9b:54:85:91:65:9c:9f: ee:ea:a4:10:fa:ad:f3:93:3d:ca:3d:2e:6f:51:7c: 9d:25:9e:34:67:e2:10:5b:23:fa:3f:63:cf:7c:ff: 89:58:bb:1e:eb:53:1f:5e:07:6a:2f:1d:a0:46:91: 23:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:48:E7:B6:D2:B1:40:DB:23:74:FD:86:DD:BB:F0:78:3E:EB:09:7F X509v3 Authority Key Identifier: keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:b8:af:c0:8d:d8:29:89:bf:41:1e:92:b5:d0:56:f3:89:fc: e7:95:51:ef:7a:3c:39:02:10:e8:58:67:e4:47:bd:76:49:ed: 60:76:8a:64:b2:fa:9f:2f:00:f1:64:10:50:de:8c:e9:63:75: e1:a4:46:1f:bf:27:f3:be:1b:ee:48:8c:ff:c6:82:bf:ae:0d: cd:dc:05:fa:3c:dc:f3:2a:2b:37:ce:c8:7a:a0:32:34:8f:3f: 4a:d9:c4:b5:df:ff:9b:ae:93:3c:cc:4f:6a:55:4e:37:38:f0: b6:5e:1b:71:64:90:e5:d1:16:a4:3b:56:8d:24:89:77:41:a5: dd:a4:ba:ea:92:05:57:66:ed:77:6e:bb:67:b9:94:fc:b7:ce: 17:67:ea:38:91:c0:ad:76:57:96:80:1c:10:17:f7:7d:5a:5a: 4a:83:bd:39:ce:cb:55:28:db:5b:c3:cc:f6:98:a1:77:6a:a2: b9:2e:90:15:0a:a4:66:dd:66:40:d5:51:f2:94:08:c1:08:75: 7b:3d:69:6e:55:ef:92:3e:1c:99:8f:0b:0f:01:ba:7a:72:79: 1b:56:47:77:88:b6:39:68:26:e0:3d:45:10:1f:35:eb:31:80: 1b:06:bb:98:18:3e:46:9a:84:86:b7:a4:ad:1a:08:ba:0d:5a: ea:6b:d4:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc0QkIxMTAvBgNVBAUTKEIzMTJDMjJGM0QwQjk3QkFBRjMyNzNFNUM2NkI4RjE0 MDIwM0UyRjkwHhcNMjUxMjIzMDIxNzQ4WhcNMjUxMjMwMDIxNzQ4WjAYMRYwFAYD VQQDDA02OTQ5ZmJjZC05YmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdLwjdrj5qnF9hVwr/f1RxBZ/NCqR7okCfTmhGQa7PHPGkU1D1BmfxDyNEDH bQPz8dDU8CfhOj4E+GCxA2WWeH0+V4d+OUJ0QZQAIL2jaeodME5B8Wkku07ol/1a PhEYwavbgjDCK3A+3k5A+9cLMNbeAf+gAQErthWwQhXmvU0xnCNC21PGDOaTfPze tRhOowHaVI70NZE3de1qfh7WfypWb+9fQjKMR1JWA160yAre66PczECoKVGriESZ Dd3SPAqgFoYZI8j1YptUhZFlnJ/u6qQQ+q3zkz3KPS5vUXydJZ40Z+IQWyP6P2PP fP+JWLse61MfXgdqLx2gRpEj7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtI57bS sUDbI3T9ht278Hg+6wl/MB8GA1UdIwQYMBaAFLMSwi89C5e6rzJz5cZrjxQCA+L5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzRCQi82NDg1NDJDODVC NkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3cXZNblBseG11UEZBSUQ0 dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4TENMejBMbDdxdk1uUGx4bXVQRkFJRDR2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzRCQi82NDg1NDJDODVCNkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3 cXZNblBseG11UEZBSUQ0dmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFuK/Ajdgpib9BHpK10FbzifznlVHvejw5AhDoWGfkR712Se1gdopk svqfLwDxZBBQ3ozpY3XhpEYfvyfzvhvuSIz/xoK/rg3N3AX6PNzzKis3zsh6oDI0 jz9K2cS13/+brpM8zE9qVU43OPC2XhtxZJDl0RakO1aNJIl3QaXdpLrqkgVXZu13 brtnuZT8t84XZ+o4kcCtdleWgBwQF/d9WlpKg705zstVKNtbw8z2mKF3aqK5LpAV CqRm3WZA1VHylAjBCHV7PWluVe+SPhyZjwsPAbp6cnkbVkd3iLY5aCbgPUUQHzXr MYAbBruYGD5GmoSGt6StGgi6DVrqa9Sc -----END CERTIFICATE-----Generated at Wed Dec 24 19:32:24 2025 by rpki-client