This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft File: 0l-HlucNZw6YbGwkdz5rd4w2BXc.mft (raw, json) Hash identifier: +DNWcBSh3mcC2vBSGK1t/ixEqKEZ++BbLe35zfM42gk= Subject key identifier: DB:CD:B7:DD:16:FF:B5:06:69:D4:63:02:80:29:54:A6:2E:4B:50:2F Authority key identifier: D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77 Certificate issuer: /CN=A914FD01/serialNumber=D25F8796E70D670E986C6C24773E6B778C360577 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft Manifest number: 42 Signing time: Tue 23 Dec 2025 06:16:18 +0000 Manifest this update: Tue 23 Dec 2025 06:16:18 +0000 Manifest next update: Tue 30 Dec 2025 06:16:18 +0000 Files and hashes: 1: 0l-HlucNZw6YbGwkdz5rd4w2BXc.crl (hash: oycdGWxqIkCqdVhIlBUmxcTEiUXmx1lWfLokGlzsgHw=) 2: 44AA60D87D6311F0BC413466C4F9AE02.roa (hash: E4IkE6FRMTE0lAhudQztXcTO2n4pZjttFwQTGBoNBn0=) 3: 442749147D6311F0BC413466C4F9AE02.roa (hash: U/qMD7uylhtZUr24KZzqo+D5k35qqAvh49xpiigrEd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FD01, serialNumber=D25F8796E70D670E986C6C24773E6B778C360577 Validity Not Before: Dec 23 06:16:18 2025 GMT Not After : Dec 30 06:16:18 2025 GMT Subject: CN=694a33b2-6cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:46:c8:f9:aa:eb:e0:69:eb:50:30:fd:d6:43: 3d:12:f4:cd:11:bc:9e:ab:d5:9d:e1:51:9f:33:97: 81:59:27:5a:87:f9:05:be:57:e2:ff:63:15:c2:55: f3:83:f9:ca:ba:0b:e1:3b:a4:14:18:9e:d5:2f:7c: 0f:b1:39:6b:0e:00:5d:9d:9e:9e:8e:87:5d:21:d3: 65:cc:94:06:46:bf:ef:fc:b4:4c:1b:cd:bb:a1:5f: 08:73:9b:1f:31:99:71:ce:63:8f:40:c0:0b:1d:ed: b3:34:ec:af:25:64:d8:94:f9:7a:b0:c0:2d:31:72: ad:a6:14:bd:38:d2:0b:49:9e:57:a5:13:5c:74:96: a8:05:e5:9a:d4:c0:9a:af:c8:fd:43:45:d0:05:a4: cc:4f:0c:18:08:4b:8b:76:2d:c5:6a:0f:07:65:ce: 70:53:84:df:59:74:55:0f:ae:74:cd:e4:d2:19:87: 91:4c:6e:99:a3:4d:8e:47:1a:29:bd:13:90:ed:bc: 49:bb:49:b6:ee:91:cf:03:73:fa:95:cd:42:8b:ee: d6:5c:22:7e:1c:a5:4d:33:6f:29:4a:2d:ff:75:7f: 1c:1b:c3:e4:9f:cd:ed:f8:84:cd:38:ec:d7:85:71: be:b1:bf:0c:24:f1:be:bc:a5:0f:fc:9d:15:0d:9d: d9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CD:B7:DD:16:FF:B5:06:69:D4:63:02:80:29:54:A6:2E:4B:50:2F X509v3 Authority Key Identifier: keyid:D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:f8:9f:e2:fd:9d:30:e6:df:64:14:1f:6b:34:57:16:93:9f: 47:4a:ae:a2:1e:3a:8a:22:36:14:bb:95:f9:d6:f2:24:91:19: a2:82:b7:3d:04:3d:59:ef:7e:5c:11:40:4a:67:20:5c:6e:90: 47:35:3a:12:3b:cb:2e:36:f6:2c:32:ea:fe:d5:50:ee:06:32: 44:4e:fa:50:bc:d8:2b:f6:ee:1e:2e:85:d5:40:d5:e1:5c:0a: 01:87:31:bb:8e:21:5b:b8:37:56:35:fe:bb:3b:58:95:ec:7e: 2b:55:2c:ae:cb:54:0c:7f:30:e0:a3:96:ef:9e:58:c9:0c:0a: 28:57:87:a9:c8:d0:5a:d6:b4:ee:dd:c1:48:17:86:c1:e3:5c: 74:7d:38:39:0d:bd:95:94:70:0f:59:08:82:c6:bb:7e:9e:05: 8f:bb:6c:33:41:e8:29:a5:53:1e:7e:62:c0:7e:8c:e7:8e:dd: 04:1c:a0:c0:e8:6a:1e:b6:fe:05:75:c6:d3:ad:9e:0f:b2:f4: b7:a5:29:25:e3:84:d1:6b:c3:e0:57:44:06:c3:18:2b:92:6a: 43:48:4d:97:ff:08:76:3c:c7:ec:4d:e2:8b:b4:3b:ce:cd:53: ef:0b:4c:de:bc:47:98:45:35:1a:94:6d:44:da:66:ab:58:7a: 93:80:e8:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RkQwMTExMC8GA1UEBRMoRDI1Rjg3OTZFNzBENjcwRTk4NkM2QzI0NzczRTZCNzc4 QzM2MDU3NzAeFw0yNTEyMjMwNjE2MThaFw0yNTEyMzAwNjE2MThaMBgxFjAUBgNV BAMMDTY5NGEzM2IyLTZjYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6Rsj5quvgaetQMP3WQz0S9M0RvJ6r1Z3hUZ8zl4FZJ1qH+QW+V+L/YxXCVfOD +cq6C+E7pBQYntUvfA+xOWsOAF2dnp6Oh10h02XMlAZGv+/8tEwbzbuhXwhzmx8x mXHOY49AwAsd7bM07K8lZNiU+XqwwC0xcq2mFL040gtJnlelE1x0lqgF5ZrUwJqv yP1DRdAFpMxPDBgIS4t2LcVqDwdlznBThN9ZdFUPrnTN5NIZh5FMbpmjTY5HGim9 E5DtvEm7Sbbukc8Dc/qVzUKL7tZcIn4cpU0zbylKLf91fxwbw+Sfze34hM047NeF cb6xvwwk8b68pQ/8nRUNndkFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU28233Rb/ tQZp1GMCgClUpi5LUC8wHwYDVR0jBBgwFoAU0l+HlucNZw6YbGwkdz5rd4w2BXcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGRDAxLzM2QTcxRTRFN0Q1 RjExRjA5RUM5QzkzOEM0RjlBRTAyLzBsLUhsdWNOWnc2WWJHd2tkejVyZDR3MkJY Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMGwtSGx1Y05adzZZYkd3a2R6NXJkNHcyQlhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRG RDAxLzM2QTcxRTRFN0Q1RjExRjA5RUM5QzkzOEM0RjlBRTAyLzBsLUhsdWNOWnc2 WWJHd2tkejVyZDR3MkJYYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACn4n+L9nTDm32QUH2s0VxaTn0dKrqIeOooiNhS7lfnW8iSRGaKCtz0E PVnvflwRQEpnIFxukEc1OhI7yy429iwy6v7VUO4GMkRO+lC82Cv27h4uhdVA1eFc CgGHMbuOIVu4N1Y1/rs7WJXsfitVLK7LVAx/MOCjlu+eWMkMCihXh6nI0FrWtO7d wUgXhsHjXHR9ODkNvZWUcA9ZCILGu36eBY+7bDNB6CmlUx5+YsB+jOeO3QQcoMDo ah62/gV1xtOtng+y9LelKSXjhNFrw+BXRAbDGCuSakNITZf/CHY8x+xN4ou0O87N U+8LTN68R5hFNRqUbUTaZqtYepOA6Bs= -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:38 2025 by rpki-client