This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft File: L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft (raw, json) Hash identifier: GgtIFto2hd8lojSTr/vqF9v5ERm9+uRL1Oi2qT2I42M= Subject key identifier: F8:95:D4:F8:EB:C0:51:7B:72:A1:2A:A4:A0:A7:8C:A3:A7:20:45:D0 Authority key identifier: 2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 Certificate issuer: /CN=A9152D1E/serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Certificate serial: 044F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft Manifest number: 044D Signing time: Mon 22 Dec 2025 23:14:48 +0000 Manifest this update: Mon 22 Dec 2025 23:14:48 +0000 Manifest next update: Mon 29 Dec 2025 23:14:48 +0000 Files and hashes: 1: L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl (hash: cMI/13TGi1PK0lkNNWKqa9fITwfPzEnsbeDa2a80iI0=) 2: 74D78D2AB28F11EFB915BB1BC4F9AE02.roa (hash: RBXkfOsNfCkPwqzSfm7Z1YZlXHjwWFawgr5+RKn+Spg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1103 (0x44f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D1E, serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Validity Not Before: Dec 22 23:14:48 2025 GMT Not After : Dec 29 23:14:48 2025 GMT Subject: CN=6949d0e8-9876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1c:cc:44:be:e8:a8:8a:70:6e:44:c8:84:5e: 96:dc:65:fa:b6:ec:31:da:4b:01:70:04:28:b0:6e: 03:49:6d:04:75:2f:6d:50:7a:d0:1d:22:d4:49:2c: a0:f1:84:49:8c:20:0a:c9:99:75:a4:14:06:09:bd: 8e:f2:14:b2:56:fe:60:55:63:2a:4d:09:df:e7:5a: 58:ef:46:0e:24:5d:3f:f9:37:63:35:76:99:9c:62: 39:ca:b3:02:87:0c:04:93:f7:8b:a7:21:38:98:ee: 3d:67:1a:06:70:ff:e7:92:56:f3:0a:bf:b2:08:32: 0a:e4:f6:ba:75:85:32:83:13:92:bd:d1:0c:39:39: d0:22:28:d8:c9:b0:f7:3e:df:22:01:fd:e9:c3:de: 1f:ba:93:55:ea:b8:70:19:74:80:8f:1b:6c:47:20: 9a:43:36:f1:f9:07:34:41:df:70:3f:47:f0:f7:63: c5:3d:c5:27:55:6a:b8:37:ac:51:34:82:da:c3:f1: 7c:18:e9:c8:ba:54:13:f7:d2:bf:e3:ee:17:03:ee: 2d:82:96:5a:1d:7b:67:f7:fa:81:da:29:f5:6a:6b: 0a:02:07:93:55:90:71:43:31:8e:c0:2f:24:38:09: ae:31:da:e8:63:bb:54:ff:3c:05:fd:99:23:e5:59: d7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:95:D4:F8:EB:C0:51:7B:72:A1:2A:A4:A0:A7:8C:A3:A7:20:45:D0 X509v3 Authority Key Identifier: keyid:2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:e8:1b:7b:a1:13:38:19:4e:3f:46:58:c0:95:3c:a9:69:be: 4e:7c:8f:f3:bb:34:24:92:11:ec:ea:74:03:09:c4:19:47:86: 3a:d3:0e:75:89:58:41:83:e4:6c:9e:98:9f:c0:98:03:55:03: 43:30:53:a7:8d:1c:d3:37:a5:87:1b:1a:e3:20:21:6f:03:6e: 2c:0d:73:c1:54:cf:ac:36:ac:8e:39:93:51:3b:3e:bf:5e:95: 2e:34:d5:61:6a:2a:a4:f6:5b:1f:96:de:43:0e:f0:0b:5e:fe: 43:9c:1f:c5:ca:4c:23:52:f4:9a:84:08:c0:18:05:0b:2f:5a: 31:1a:b9:28:a3:07:2e:60:48:23:cf:1f:94:4a:0e:54:de:d8: 41:12:d6:11:7c:a8:81:ab:98:4e:c7:39:15:ee:5a:3f:bc:04: 0c:67:03:ee:70:9a:5b:1f:4f:5f:37:ef:68:29:2d:65:4a:fe: a0:a1:9a:23:c8:3e:30:f5:76:b4:06:4c:02:0a:bc:59:8c:91: 20:af:ed:ab:f9:94:58:72:fa:e4:bf:08:ed:70:9d:42:d6:c4: e8:64:40:2f:bb:5f:ef:78:66:c1:da:63:df:b3:df:4a:0a:7c: 5b:e3:18:a9:f4:32:07:30:87:8e:25:13:70:75:1d:fc:1d:e5: ed:35:8e:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMUUxMTAvBgNVBAUTKDJGQzQ2MDE5RUU1MkQxRTkxQkIxRDFEOEUxN0U5OThB NzE1QjcyNDQwHhcNMjUxMjIyMjMxNDQ4WhcNMjUxMjI5MjMxNDQ4WjAYMRYwFAYD VQQDDA02OTQ5ZDBlOC05ODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkhzMRL7oqIpwbkTIhF6W3GX6tuwx2ksBcAQosG4DSW0EdS9tUHrQHSLUSSyg 8YRJjCAKyZl1pBQGCb2O8hSyVv5gVWMqTQnf51pY70YOJF0/+TdjNXaZnGI5yrMC hwwEk/eLpyE4mO49ZxoGcP/nklbzCr+yCDIK5Pa6dYUygxOSvdEMOTnQIijYybD3 Pt8iAf3pw94fupNV6rhwGXSAjxtsRyCaQzbx+Qc0Qd9wP0fw92PFPcUnVWq4N6xR NILaw/F8GOnIulQT99K/4+4XA+4tgpZaHXtn9/qB2in1amsKAgeTVZBxQzGOwC8k OAmuMdroY7tU/zwF/Zkj5VnXFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPiV1Pjr wFF7cqEqpKCnjKOnIEXQMB8GA1UdIwQYMBaAFC/EYBnuUtHpG7HR2OF+mYpxW3JE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQxRS9DN0MwQzFEQTdE NjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBla2JzZEhZNFg2WmluRmJj a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UmdHZTVTMGVrYnNkSFk0WDZaaW5GYmNrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQxRS9DN0MwQzFEQTdENjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBl a2JzZEhZNFg2WmluRmJja1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB46Bt7oRM4GU4/RljAlTypab5OfI/zuzQkkhHs6nQDCcQZR4Y60w51 iVhBg+RsnpifwJgDVQNDMFOnjRzTN6WHGxrjICFvA24sDXPBVM+sNqyOOZNROz6/ XpUuNNVhaiqk9lsflt5DDvALXv5DnB/FykwjUvSahAjAGAULL1oxGrkoowcuYEgj zx+USg5U3thBEtYRfKiBq5hOxzkV7lo/vAQMZwPucJpbH09fN+9oKS1lSv6goZoj yD4w9Xa0BkwCCrxZjJEgr+2r+ZRYcvrkvwjtcJ1C1sToZEAvu1/veGbB2mPfs99K Cnxb4xip9DIHMIeOJRNwdR38HeXtNY59 -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:08 2025 by rpki-client