This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft File: 5LMs8qYR9wLf0JE-PqULT9YexXU.mft (raw, json) Hash identifier: qUQ7nrso2S2cGJ3lYrahfoyhIa85R9SBTN/v9YCf2gw= Subject key identifier: BB:8D:E4:8E:A3:34:4A:84:C8:4E:07:C9:1F:85:AD:F0:BF:51:2E:07 Authority key identifier: E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75 Certificate issuer: /CN=A914450B/serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575 Certificate serial: 07E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft Manifest number: 07E2 Signing time: Mon 22 Dec 2025 20:29:53 +0000 Manifest this update: Mon 22 Dec 2025 20:29:52 +0000 Manifest next update: Mon 29 Dec 2025 20:29:52 +0000 Files and hashes: 1: 5LMs8qYR9wLf0JE-PqULT9YexXU.crl (hash: rsfy9yTKdIwSYr07IPFsLkcHKoqdkzHasvg/+q4It+g=) 2: 5B9B8A1213F311EBA7343351C4F9AE02.roa (hash: 2BrCNtIG6V0aTeNF5hAlLJ5D7nd2opyw1DNok89bW0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2024 (0x7e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914450B, serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575 Validity Not Before: Dec 22 20:29:52 2025 GMT Not After : Dec 29 20:29:52 2025 GMT Subject: CN=6949aa40-041a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:14:6f:0b:aa:72:31:2c:36:b3:9e:1d:f7:a9: 3d:3e:92:aa:f8:ca:e6:9b:68:48:42:af:bd:22:f6: ca:a4:a7:02:d7:fd:53:3a:fb:9c:cd:4c:4a:c4:c2: 3b:b4:8a:f9:53:ed:c1:1a:5e:d3:f6:6b:30:53:d8: 17:1f:fb:4f:ca:56:29:61:c9:94:fb:bb:73:59:df: b3:19:0e:61:80:03:d1:a8:3c:0f:4d:3a:61:27:18: 9d:e2:e6:6e:87:15:f4:a7:99:12:02:2b:02:e7:6d: f3:1a:8e:0f:72:0c:0b:a9:e1:8f:75:a2:45:2b:c5: 22:d4:6b:82:f7:23:91:fc:7e:db:27:7e:19:fb:66: 01:19:39:63:20:80:7b:8d:8c:02:b5:08:e8:2a:0d: 2c:59:eb:a9:df:b2:52:a6:71:12:5d:2e:0a:55:c8: 47:df:68:14:10:16:e1:dc:60:7a:e1:6e:2e:1f:06: 0a:e9:cf:aa:3f:05:0d:07:30:6b:99:70:da:13:e7: e4:90:24:a0:c2:6b:6a:02:bb:09:ea:a3:ba:34:cb: e5:f3:ec:46:78:24:45:14:78:95:02:9e:33:19:96: 53:ea:05:e6:5f:24:97:3a:8a:c6:74:d9:d5:95:71: 1a:8c:4a:c3:20:2f:7b:8a:5a:0a:95:f4:e2:0b:76: cc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8D:E4:8E:A3:34:4A:84:C8:4E:07:C9:1F:85:AD:F0:BF:51:2E:07 X509v3 Authority Key Identifier: keyid:E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:71:61:8c:60:db:86:55:18:cf:04:2d:36:e8:2d:73:e0:0a: d1:ab:28:4b:39:1c:fb:83:a0:cc:57:61:34:15:f8:e0:02:a4: 90:d5:fd:38:d3:46:f5:9b:47:ef:59:6e:03:38:96:19:c8:4d: d9:bb:f9:b7:ce:da:04:4b:f0:da:af:8e:e7:13:92:13:31:f3: 33:fb:59:99:53:36:7e:3b:1f:20:f7:0e:a7:55:f2:9c:4e:2d: 7d:4c:44:f2:a4:e1:7d:eb:2d:96:5e:3c:57:84:7b:99:43:94: 66:3a:88:91:74:1c:52:c8:7b:45:bb:44:a6:17:85:96:7c:62: 35:18:1c:75:8e:05:89:11:bb:c5:c4:8a:57:e9:ad:4e:41:88: c2:34:5b:ea:9f:fb:9c:66:0b:06:67:7f:68:f0:8d:a0:51:50: 72:9f:83:22:f6:8d:c1:3a:78:b5:e8:e3:ed:20:3b:bc:f6:6f: 1c:84:22:95:6b:6c:f2:c7:df:7f:2b:72:7a:cf:7c:b8:4f:df: 56:10:12:27:7c:76:46:55:97:01:78:c8:b8:9b:b6:0e:0a:61: c2:85:e4:44:77:e8:e6:ea:e3:29:01:86:4a:be:14:01:41:89: 04:61:e4:8d:80:66:a4:fc:fa:a2:f2:96:21:90:9b:e7:64:ef: 90:ea:53:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1MEIxMTAvBgNVBAUTKEU0QjMyQ0YyQTYxMUY3MDJERkQwOTEzRTNFQTUwQjRG RDYxRUM1NzUwHhcNMjUxMjIyMjAyOTUyWhcNMjUxMjI5MjAyOTUyWjAYMRYwFAYD VQQDDA02OTQ5YWE0MC0wNDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxRvC6pyMSw2s54d96k9PpKq+Mrmm2hIQq+9IvbKpKcC1/1TOvuczUxKxMI7 tIr5U+3BGl7T9mswU9gXH/tPylYpYcmU+7tzWd+zGQ5hgAPRqDwPTTphJxid4uZu hxX0p5kSAisC523zGo4PcgwLqeGPdaJFK8Ui1GuC9yOR/H7bJ34Z+2YBGTljIIB7 jYwCtQjoKg0sWeup37JSpnESXS4KVchH32gUEBbh3GB64W4uHwYK6c+qPwUNBzBr mXDaE+fkkCSgwmtqArsJ6qO6NMvl8+xGeCRFFHiVAp4zGZZT6gXmXySXOorGdNnV lXEajErDIC97iloKlfTiC3bMlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuN5I6j NEqEyE4HyR+FrfC/US4HMB8GA1UdIwQYMBaAFOSzLPKmEfcC39CRPj6lC0/WHsV1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDUwQi9GN0I5RTMwQTEz RjExMUVCQjgxMjM5NTBDNEY5QUUwMi81TE1zOHFZUjl3TGYwSkUtUHFVTFQ5WWV4 WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMTXM4cVlSOXdMZjBKRS1QcVVMVDlZZXhYVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDUwQi9GN0I5RTMwQTEzRjExMUVCQjgxMjM5NTBDNEY5QUUwMi81TE1zOHFZUjl3 TGYwSkUtUHFVTFQ5WWV4WFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjcWGMYNuGVRjPBC026C1z4ArRqyhLORz7g6DMV2E0FfjgAqSQ1f04 00b1m0fvWW4DOJYZyE3Zu/m3ztoES/Dar47nE5ITMfMz+1mZUzZ+Ox8g9w6nVfKc Ti19TETypOF96y2WXjxXhHuZQ5RmOoiRdBxSyHtFu0SmF4WWfGI1GBx1jgWJEbvF xIpX6a1OQYjCNFvqn/ucZgsGZ39o8I2gUVByn4Mi9o3BOni16OPtIDu89m8chCKV a2zyx99/K3J6z3y4T99WEBInfHZGVZcBeMi4m7YOCmHCheREd+jm6uMpAYZKvhQB QYkEYeSNgGak/Pqi8pYhkJvnZO+Q6lPY -----END CERTIFICATE-----Generated at Tue Dec 23 06:46:26 2025 by rpki-client