This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft File: lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft (raw, json) Hash identifier: f4XRItAGuyo+6Tk6x0aOo7rGbN2J+aUbfkam7/uIOMA= Subject key identifier: 5E:F0:B3:B5:94:87:A0:ED:40:18:3C:60:20:47:72:0D:05:FD:7A:B2 Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD Certificate issuer: /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft Manifest number: CE Signing time: Sun 21 Dec 2025 04:57:20 +0000 Manifest this update: Sun 21 Dec 2025 04:57:19 +0000 Manifest next update: Sun 28 Dec 2025 04:57:19 +0000 Files and hashes: 1: lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl (hash: 7oi2gFoANIPKklHLQKhk3Ju8GzFaW5aMwjlYyCN2oFg=) 2: C5D7AFBA502411F0881DEB19C4F9AE02.roa (hash: enHP38spS/cKfOn42zv8/O5zNl/TksEZwto02A0n87g=) 3: 9C9FACF6502411F093EA9419C4F9AE02.roa (hash: dfWTxzpp9zXo46ZkeMa+zA4D9hQsUMAYfKkDEAfqr00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Validity Not Before: Dec 21 04:57:19 2025 GMT Not After : Dec 28 04:57:19 2025 GMT Subject: CN=69477e30-8235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:30:3c:88:ed:54:3c:fe:99:c5:ab:6f:8d:42: 9e:7f:ad:66:2f:36:c4:67:f4:8f:92:f7:5b:4f:53: c3:c1:01:43:9e:b8:d5:c2:66:a1:e1:58:fe:ca:b8: 8a:ee:16:64:c2:2a:76:ac:3a:19:bc:9b:fa:89:68: 94:e8:84:ba:d8:61:22:c2:ea:0b:89:cd:79:c4:23: 22:fb:14:36:a1:cf:a0:85:8d:2e:a0:f6:19:97:60: 15:90:f7:86:59:0a:25:b9:da:0f:2c:4e:7f:7b:70: 9b:b0:c9:5f:48:0b:11:73:77:d1:6f:5a:7e:fd:09: 22:e8:44:a4:9c:db:9c:9e:13:3f:eb:81:31:05:de: 6d:fc:b5:f4:49:8c:77:be:56:5f:44:12:bd:e4:9f: 6b:4f:6e:9c:e4:ac:91:6d:9d:fd:1f:7b:2a:82:00: ac:89:98:b4:09:29:5f:75:b8:84:2a:39:78:93:be: 7e:59:c3:76:63:29:fc:bf:b9:45:2b:11:4a:9f:ce: d4:bf:69:bf:58:44:bc:25:0c:7a:a3:3e:54:22:ee: e8:aa:8e:bb:9c:98:bb:9e:65:92:ed:ba:bd:10:21: 8b:b1:8c:9b:0b:2a:66:86:c1:ec:1d:6c:3b:71:9e: 73:75:61:41:37:e7:4b:66:dd:4f:10:89:9b:7d:1b: 40:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F0:B3:B5:94:87:A0:ED:40:18:3C:60:20:47:72:0D:05:FD:7A:B2 X509v3 Authority Key Identifier: keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:c2:0c:ae:44:60:d0:ed:41:bc:91:c5:83:67:08:82:b4:78: 2a:d0:35:60:22:b9:08:66:f4:62:5e:47:2a:b0:87:c9:c8:40: d0:5a:47:2e:ca:e1:f8:33:b7:46:51:4c:46:21:32:a9:a4:0f: 11:6f:c2:54:c8:f0:07:cc:67:2f:a1:55:9e:5b:81:6a:b0:dd: a1:63:90:06:c0:c6:5a:22:6d:0b:ac:ab:4a:ce:53:0e:72:37: 5e:0b:1a:f4:97:90:08:60:e1:a8:b0:6f:73:66:b9:d6:75:12: 87:18:58:03:b7:d0:18:fa:86:d9:9e:fb:cf:2b:4a:d4:f2:a7: 32:45:e0:1a:4b:66:e0:22:06:d9:9b:2b:a5:24:4e:cb:be:94: a4:a7:1f:c0:46:41:52:95:e7:07:24:9f:6d:ae:e5:ba:78:c3: 16:2a:8f:af:c5:49:13:35:db:28:28:f4:3e:49:87:eb:cd:3f: e3:6d:22:56:ad:92:e3:a4:59:bc:58:fe:b2:72:94:10:0c:5f: 5b:5f:f2:c4:de:4b:58:1e:ae:61:ff:e6:18:a1:f3:eb:f7:ef: d9:c1:f7:ae:50:fa:64:a1:69:90:26:2d:94:90:95:95:45:89: 37:7f:6d:10:90:b4:b4:43:80:00:65:a9:c8:8a:c1:2c:48:2e: 67:1f:28:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwRkUxMTAvBgNVBAUTKDk2NEQwODcyN0RBRURBQzc0MDM3QUI5QzQzQTUwOEJB REJDRkRBRkQwHhcNMjUxMjIxMDQ1NzE5WhcNMjUxMjI4MDQ1NzE5WjAYMRYwFAYD VQQDDA02OTQ3N2UzMC04MjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjA8iO1UPP6ZxatvjUKef61mLzbEZ/SPkvdbT1PDwQFDnrjVwmah4Vj+yriK 7hZkwip2rDoZvJv6iWiU6IS62GEiwuoLic15xCMi+xQ2oc+ghY0uoPYZl2AVkPeG WQoludoPLE5/e3CbsMlfSAsRc3fRb1p+/Qki6ESknNucnhM/64ExBd5t/LX0SYx3 vlZfRBK95J9rT26c5KyRbZ39H3sqggCsiZi0CSlfdbiEKjl4k75+WcN2Yyn8v7lF KxFKn87Uv2m/WES8JQx6oz5UIu7oqo67nJi7nmWS7bq9ECGLsYybCypmhsHsHWw7 cZ5zdWFBN+dLZt1PEImbfRtARwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7ws7WU h6DtQBg8YCBHcg0F/XqyMB8GA1UdIwQYMBaAFJZNCHJ9rtrHQDernEOlCLrbz9r9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBGRS8yRjJCNkZFMkFC Q0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJzZEFONnVjUTZVSXV0dlAy djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xrMEljbjJ1MnNkQU42dWNRNlVJdXR2UDJ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBGRS8yRjJCNkZFMkFCQ0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJz ZEFONnVjUTZVSXV0dlAydjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiwgyuRGDQ7UG8kcWDZwiCtHgq0DVgIrkIZvRiXkcqsIfJyEDQWkcu yuH4M7dGUUxGITKppA8Rb8JUyPAHzGcvoVWeW4FqsN2hY5AGwMZaIm0LrKtKzlMO cjdeCxr0l5AIYOGosG9zZrnWdRKHGFgDt9AY+obZnvvPK0rU8qcyReAaS2bgIgbZ myulJE7LvpSkpx/ARkFSlecHJJ9truW6eMMWKo+vxUkTNdsoKPQ+SYfrzT/jbSJW rZLjpFm8WP6ycpQQDF9bX/LE3ktYHq5h/+YYofPr9+/ZwfeuUPpkoWmQJi2UkJWV RYk3f20QkLS0Q4AAZanIisEsSC5nHyhe -----END CERTIFICATE-----Generated at Sun Dec 21 16:15:05 2025 by rpki-client