This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft File: l0tKVlSG4EjQwXaY1yJ2cM88mac.mft (raw, json) Hash identifier: XfolHCqEbf38CCCzG5eBEJY/KttMq07XGDHtI2ZIwSc= Subject key identifier: 1A:B4:D6:10:33:ED:A1:7D:CF:F9:55:23:3B:44:71:00:0A:82:88:C8 Authority key identifier: 97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7 Certificate issuer: /CN=A916069A/serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft Manifest number: D3 Signing time: Tue 23 Dec 2025 04:37:30 +0000 Manifest this update: Tue 23 Dec 2025 04:37:29 +0000 Manifest next update: Tue 30 Dec 2025 04:37:29 +0000 Files and hashes: 1: l0tKVlSG4EjQwXaY1yJ2cM88mac.crl (hash: ewszgG4zfKpNByQG2H88ZWaX4XPvwg41XPAe7N69v00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916069A, serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7 Validity Not Before: Dec 23 04:37:29 2025 GMT Not After : Dec 30 04:37:29 2025 GMT Subject: CN=694a1c8a-673e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6f:20:6b:1b:d9:dc:3f:60:2d:21:5c:d3:75: ec:47:77:d1:96:c5:73:87:91:a3:38:25:b2:ef:00: 63:7e:23:2c:c1:d6:ee:39:f5:5b:90:92:02:13:cb: da:5c:65:22:eb:fe:e6:f5:c1:2d:83:7b:79:5b:8a: b5:cd:bf:af:ae:ed:4b:d3:58:f7:bd:a2:7e:c5:06: 1c:31:5c:95:59:f6:c0:27:8d:40:70:1f:69:7d:2c: fe:5e:ba:c5:9b:49:75:b0:32:5c:f9:e9:58:4e:91: d9:b1:d2:de:99:07:21:3b:07:49:8f:bf:eb:32:44: 61:44:2f:80:11:d9:f4:9b:14:4d:e2:de:38:5b:46: 13:22:48:55:61:84:0d:a4:bc:a1:7f:12:9b:8c:1f: 45:74:a7:d9:a2:a8:66:0f:aa:fc:d3:9c:79:c1:14: 58:7f:e4:f5:46:9b:b3:2c:c5:03:d0:fb:fd:f4:d9: 23:0a:6a:63:c6:07:9a:23:19:b0:48:17:eb:be:ef: 64:94:52:44:32:c6:7e:5e:7e:0e:3c:1b:90:0b:f4: 81:14:d2:58:01:85:b6:7c:f4:51:09:7c:fc:ae:f2: f7:17:23:df:d0:58:05:f0:d7:88:c1:d2:2d:cc:61: fd:84:19:48:df:1e:7f:a6:73:fd:0e:ba:36:70:ff: 96:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B4:D6:10:33:ED:A1:7D:CF:F9:55:23:3B:44:71:00:0A:82:88:C8 X509v3 Authority Key Identifier: keyid:97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:dc:fd:85:10:e2:00:a8:52:f9:b4:87:c1:15:1e:7d:31:01: e3:0a:62:16:98:6b:11:32:ab:60:0c:ba:63:16:06:99:52:38: be:b2:b2:57:f5:9b:8d:9d:41:74:73:f0:c1:fe:71:40:29:0e: 92:36:d6:09:18:2b:bd:f4:b1:6c:e3:71:a7:2b:c3:7b:76:29: 14:b1:01:7e:33:be:22:2e:98:2e:1e:de:03:89:10:4c:24:6b: cb:36:6d:3a:85:54:06:b2:34:07:73:52:d4:cc:7e:4d:65:bd: 0b:37:42:cc:45:90:70:9c:74:0f:a4:25:d0:bf:d2:3e:24:81: 55:6e:5c:c4:0a:75:55:08:f4:ba:66:06:0a:27:48:84:ce:b4: d2:c0:dd:6d:54:b6:85:65:2c:ef:c4:e0:57:49:e6:fc:58:83: 87:71:44:2c:73:db:5f:b6:32:af:2e:ec:44:58:7c:c1:c0:c2: 06:9a:0c:c1:62:5f:ab:dd:6b:bc:b2:4b:8f:78:86:7e:fc:27: cd:88:8d:45:a2:42:01:9a:8d:b9:f1:78:15:dc:86:0c:b9:e2: 14:3b:b3:27:6c:a3:d0:44:a0:a6:d2:ed:57:c2:a5:ff:cb:0f: 75:74:9e:ce:78:4d:b2:36:f7:e0:78:d3:d5:f7:38:3c:7c:15: 25:17:ff:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2OUExMTAvBgNVBAUTKDk3NEI0QTU2NTQ4NkUwNDhEMEMxNzY5OEQ3MjI3Njcw Q0YzQzk5QTcwHhcNMjUxMjIzMDQzNzI5WhcNMjUxMjMwMDQzNzI5WjAYMRYwFAYD VQQDDA02OTRhMWM4YS02NzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkm8gaxvZ3D9gLSFc03XsR3fRlsVzh5GjOCWy7wBjfiMswdbuOfVbkJICE8va XGUi6/7m9cEtg3t5W4q1zb+vru1L01j3vaJ+xQYcMVyVWfbAJ41AcB9pfSz+XrrF m0l1sDJc+elYTpHZsdLemQchOwdJj7/rMkRhRC+AEdn0mxRN4t44W0YTIkhVYYQN pLyhfxKbjB9FdKfZoqhmD6r805x5wRRYf+T1RpuzLMUD0Pv99NkjCmpjxgeaIxmw SBfrvu9klFJEMsZ+Xn4OPBuQC/SBFNJYAYW2fPRRCXz8rvL3FyPf0FgF8NeIwdIt zGH9hBlI3x5/pnP9Dro2cP+WgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBq01hAz 7aF9z/lVIztEcQAKgojIMB8GA1UdIwQYMBaAFJdLSlZUhuBI0MF2mNcidnDPPJmn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDY5QS8zNkQ1RDYyQzlC RjAxMUVGODFDOTAyNjdDNEY5QUUwMi9sMHRLVmxTRzRFalF3WGFZMXlKMmNNODht YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wwdEtWbFNHNEVqUXdYYVkxeUoyY004OG1hYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDY5QS8zNkQ1RDYyQzlCRjAxMUVGODFDOTAyNjdDNEY5QUUwMi9sMHRLVmxTRzRF alF3WGFZMXlKMmNNODhtYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF3P2FEOIAqFL5tIfBFR59MQHjCmIWmGsRMqtgDLpjFgaZUji+srJX 9ZuNnUF0c/DB/nFAKQ6SNtYJGCu99LFs43GnK8N7dikUsQF+M74iLpguHt4DiRBM JGvLNm06hVQGsjQHc1LUzH5NZb0LN0LMRZBwnHQPpCXQv9I+JIFVblzECnVVCPS6 ZgYKJ0iEzrTSwN1tVLaFZSzvxOBXSeb8WIOHcUQsc9tftjKvLuxEWHzBwMIGmgzB Yl+r3Wu8skuPeIZ+/CfNiI1FokIBmo258XgV3IYMueIUO7MnbKPQRKCm0u1XwqX/ yw91dJ7OeE2yNvfgeNPV9zg8fBUlF//8 -----END CERTIFICATE-----Generated at Wed Dec 24 21:23:59 2025 by rpki-client