This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft File: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json) Hash identifier: mWsxsK6+0+v/Y9vyDVwCK2CZoDjvrfkkH/pTEdFTgHE= Subject key identifier: 84:29:CB:1E:B6:E1:74:8C:8A:CB:F5:A6:AC:CF:07:EB:0F:F2:E1:72 Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F Certificate issuer: /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F Certificate serial: 0DE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft Manifest number: 0DDA Signing time: Thu 18 Dec 2025 17:39:54 +0000 Manifest this update: Thu 18 Dec 2025 17:39:54 +0000 Manifest next update: Thu 25 Dec 2025 17:39:54 +0000 Files and hashes: 1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: b84GPvaJuU8wiBtcM0XL7welSetijmErDg/XQ3ulfWw=) 2: 3D8179B431AE11F0A7D0076FC4F9AE02.roa (hash: XfxZHGEC6L2I7lf4RHsiD8/699vyTVMdYrB6wZFXmUY=) 3: 5E6CE2C631AE11F0A9F09E0AC4F9AE02.roa (hash: r12gsCo6iUFC5f/jSOBGicDzV0QxP8G0HCiUT+DfDFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3559 (0xde7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B361, serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F Validity Not Before: Dec 18 17:39:54 2025 GMT Not After : Dec 25 17:39:54 2025 GMT Subject: CN=69443c6a-a19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b9:4f:e1:c9:2c:67:c7:1e:77:5f:93:8a:6d: 7b:65:58:20:2c:f5:f6:d9:42:3d:5b:df:46:74:27: 20:1a:f7:5f:90:d1:dd:08:e3:f3:44:d9:41:48:0e: f9:24:0b:72:12:0f:07:1d:bc:14:ea:10:f5:92:2b: 50:dd:7b:9f:d9:f5:ec:26:52:3c:0e:86:da:5b:df: 60:3b:d9:b1:0d:d2:2f:de:f4:ec:66:69:81:c1:02: ef:1b:a5:96:41:3f:2f:5b:c7:2c:82:18:de:06:9d: e0:29:83:88:21:8c:a8:3d:48:2c:d8:80:e6:d0:98: d1:ce:a9:71:b2:74:98:cb:0e:30:c6:3c:35:22:de: 1a:d1:6f:94:f2:9b:10:da:cc:77:11:24:ca:b9:a4: 87:3f:8e:c5:b1:e5:18:93:51:04:e5:7d:f4:7d:f6: fa:23:85:19:17:bc:14:61:d4:53:72:02:4a:1c:7a: 75:57:c0:21:bf:4a:0c:44:06:ec:4b:0f:3f:02:ce: 1e:2e:7b:92:57:80:0e:b9:aa:09:88:12:58:72:60: ec:73:3b:30:ee:5d:b5:fa:27:ce:e2:0a:52:49:3d: 23:7b:f9:9f:20:3c:e4:8a:34:93:eb:ee:b9:a9:7c: 47:de:37:fa:b2:de:a5:9a:0c:2f:54:03:f5:44:69: f0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:29:CB:1E:B6:E1:74:8C:8A:CB:F5:A6:AC:CF:07:EB:0F:F2:E1:72 X509v3 Authority Key Identifier: keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:3f:ad:b2:28:d8:cc:17:cd:6d:11:d2:37:69:01:3e:61:28: 02:c5:ce:74:11:a0:57:97:8c:54:0f:91:89:51:04:58:9c:ac: ca:c4:93:31:af:0d:2c:7e:5d:74:c3:71:89:89:ae:54:c6:d8: 03:2a:13:68:7a:6a:54:6f:aa:f2:2a:b2:16:c5:df:c8:7f:06: 35:1e:76:6b:83:3b:4c:62:a9:19:5b:22:cb:11:ff:1a:1a:69: 9f:00:ea:dc:c3:13:0f:1b:68:ee:6c:6d:1d:a6:38:14:7d:e0: 1a:60:19:73:75:01:ab:71:7f:11:a2:bc:91:fa:4f:7f:ba:fb: a6:77:8b:52:d8:42:32:fb:f3:3a:e9:ef:09:bd:25:de:f1:3a: e3:64:46:8b:f3:9e:54:02:ab:1c:3d:bc:50:47:7a:f4:50:b7: 74:81:c8:ab:c4:94:29:56:48:ec:28:16:63:6d:1c:17:82:56: ba:0d:c1:d2:db:25:ce:4b:f2:e4:ee:03:73:f0:6b:3a:5c:58: 39:09:f0:a1:77:7c:de:50:71:83:97:b3:93:6e:95:ba:a0:9a: a4:41:b7:52:d7:6c:8f:c9:98:38:70:ee:f3:09:9e:6b:ae:c5: e2:66:1e:39:75:0d:66:f6:22:11:0a:34:cd:c4:29:c5:7c:38: 94:80:48:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIzNjExMTAvBgNVBAUTKEUwQjlBMkU5OTM5RDU1OEYxOEJFNjIxNzVDOTVENzY4 RDI0NUQzMUYwHhcNMjUxMjE4MTczOTU0WhcNMjUxMjI1MTczOTU0WjAYMRYwFAYD VQQDDA02OTQ0M2M2YS1hMTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA67lP4cksZ8ced1+Tim17ZVggLPX22UI9W99GdCcgGvdfkNHdCOPzRNlBSA75 JAtyEg8HHbwU6hD1kitQ3Xuf2fXsJlI8DobaW99gO9mxDdIv3vTsZmmBwQLvG6WW QT8vW8csghjeBp3gKYOIIYyoPUgs2IDm0JjRzqlxsnSYyw4wxjw1It4a0W+U8psQ 2sx3ESTKuaSHP47FseUYk1EE5X30ffb6I4UZF7wUYdRTcgJKHHp1V8Ahv0oMRAbs Sw8/As4eLnuSV4AOuaoJiBJYcmDsczsw7l21+ifO4gpSST0je/mfIDzkijST6+65 qXxH3jf6st6lmgwvVAP1RGnwTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQpyx62 4XSMisv1pqzPB+sP8uFyMB8GA1UdIwQYMBaAFOC5oumTnVWPGL5iF1yV12jSRdMf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjM2MS83QzhEODAwQUNB MzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZOFl2bUlYWEpYWGFOSkYw eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMbWk2Wk9kVlk4WXZtSVhYSlhYYU5KRjB4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjM2MS83QzhEODAwQUNBMzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZ OFl2bUlYWEpYWGFOSkYweDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApP62yKNjMF81tEdI3aQE+YSgCxc50EaBXl4xUD5GJUQRYnKzKxJMx rw0sfl10w3GJia5UxtgDKhNoempUb6ryKrIWxd/IfwY1HnZrgztMYqkZWyLLEf8a GmmfAOrcwxMPG2jubG0dpjgUfeAaYBlzdQGrcX8RoryR+k9/uvumd4tS2EIy+/M6 6e8JvSXe8TrjZEaL855UAqscPbxQR3r0ULd0gcirxJQpVkjsKBZjbRwXgla6DcHS 2yXOS/Lk7gNz8Gs6XFg5CfChd3zeUHGDl7OTbpW6oJqkQbdS12yPyZg4cO7zCZ5r rsXiZh45dQ1m9iIRCjTNxCnFfDiUgEg5 -----END CERTIFICATE-----Generated at Fri Dec 19 21:13:45 2025 by rpki-client