This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft File: lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft (raw, json) Hash identifier: +k5l8gf4fqOcQ/di3vUN7bTF9xy00SShhTj1nLwTtMM= Subject key identifier: 90:3C:CD:25:6D:0F:2A:80:66:9C:8E:DD:5A:3B:B2:BA:54:A0:BC:65 Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F Certificate issuer: /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft Manifest number: 013E Signing time: Tue 23 Dec 2025 03:26:14 +0000 Manifest this update: Tue 23 Dec 2025 03:26:13 +0000 Manifest next update: Tue 30 Dec 2025 03:26:13 +0000 Files and hashes: 1: lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl (hash: vf4U+wQ5rUBhbPdHLkQlUZh030hIFt5+Elm2PQJRIfE=) 2: 1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (hash: IP1a/8lP5y1+PqhZxCqrwDfR6kczV/2vje4JuA8lz28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917282D, serialNumber=95228338A85F248230312CF398B24F8119D8232F Validity Not Before: Dec 23 03:26:13 2025 GMT Not After : Dec 30 03:26:13 2025 GMT Subject: CN=694a0bd5-0e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:44:9e:8e:2f:51:ae:00:7d:fa:d6:65:93:25: 8a:cd:65:b8:99:4f:6e:88:6c:e0:0a:d7:2e:1b:6e: 2c:a0:97:0a:35:0f:b2:e6:28:b2:69:e0:90:35:d7: d0:cc:fa:d1:1e:6c:d7:8a:30:cd:7b:b2:35:ed:04: 90:28:8c:6a:06:61:e6:b3:72:e8:e3:1a:33:cd:cc: 40:54:12:2f:db:92:a9:3c:fe:f1:89:20:f4:16:99: 9f:4d:d4:72:c4:89:49:a4:83:d7:9b:fe:12:a0:57: c4:25:2b:9a:be:cc:80:c5:33:39:8c:76:cd:d1:67: 40:bf:60:24:d9:ed:47:5c:14:d4:9d:bc:6e:72:97: 79:03:e6:26:2d:a1:e5:f5:1e:2b:d1:a2:94:af:1f: 68:34:a4:ab:ea:60:25:7b:f6:db:ef:10:b8:2b:b2: 4c:62:b9:7c:c9:7d:a7:21:78:36:4d:87:1b:1c:9a: b1:2f:72:6b:e9:29:c7:16:f0:2c:16:e1:13:1a:58: 29:63:d6:8e:54:dd:93:7d:85:19:34:9a:a2:3b:00: 3f:ff:01:6d:3b:37:ed:aa:d7:b3:d4:85:15:97:a2: e8:a6:b1:38:79:c8:0b:54:c0:02:70:27:64:01:06: 82:87:55:4d:53:ed:d4:60:35:0e:3e:9f:85:a8:2b: 68:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3C:CD:25:6D:0F:2A:80:66:9C:8E:DD:5A:3B:B2:BA:54:A0:BC:65 X509v3 Authority Key Identifier: keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:d5:e4:72:e2:fa:3b:d7:50:f2:e6:3d:51:0a:64:90:31:9b: c3:fb:9b:14:9b:e9:f3:2e:ce:bb:aa:00:a0:a5:5c:5b:2f:98: 3e:c2:1a:6a:ba:3f:d8:96:de:04:2f:79:2b:c2:56:8b:d4:b9: d0:91:df:e5:a0:81:4a:5d:c2:b6:da:8f:15:90:e0:d1:93:0e: 18:f0:c1:6e:66:ce:3d:bf:02:68:df:52:a3:e2:4a:de:e2:c0: cc:75:2c:cd:b9:22:b5:b8:8f:a1:b6:84:30:4c:71:3c:54:a7: f4:8a:c1:11:f0:74:a5:4a:f1:75:83:a1:75:b3:af:fd:31:92: 2e:39:05:66:a2:ab:98:1e:d2:d5:81:41:35:87:c4:fa:e4:c7: 1b:07:fe:43:4b:84:cc:eb:c9:2c:bb:13:8e:03:ee:dc:07:92: cc:40:08:be:76:4e:21:46:55:f2:93:a9:b2:68:48:a7:87:b6: 14:b5:58:0b:bd:b0:58:84:15:c5:20:ca:89:cb:f0:23:b9:c9: 65:08:91:14:33:b9:13:a4:34:a1:d8:90:14:e4:d8:0a:d2:f5: b0:cf:dc:41:ef:74:2e:f2:87:e9:86:e9:70:df:61:0a:3b:4f: a7:54:3c:d0:b7:cb:c8:bd:db:5a:df:2e:83:0b:0a:0f:3f:b5: 89:dd:ef:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4MkQxMTAvBgNVBAUTKDk1MjI4MzM4QTg1RjI0ODIzMDMxMkNGMzk4QjI0Rjgx MTlEODIzMkYwHhcNMjUxMjIzMDMyNjEzWhcNMjUxMjMwMDMyNjEzWjAYMRYwFAYD VQQDDA02OTRhMGJkNS0wZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUSeji9RrgB9+tZlkyWKzWW4mU9uiGzgCtcuG24soJcKNQ+y5iiyaeCQNdfQ zPrRHmzXijDNe7I17QSQKIxqBmHms3Lo4xozzcxAVBIv25KpPP7xiSD0FpmfTdRy xIlJpIPXm/4SoFfEJSuavsyAxTM5jHbN0WdAv2Ak2e1HXBTUnbxucpd5A+YmLaHl 9R4r0aKUrx9oNKSr6mAle/bb7xC4K7JMYrl8yX2nIXg2TYcbHJqxL3Jr6SnHFvAs FuETGlgpY9aOVN2TfYUZNJqiOwA//wFtOzftqtez1IUVl6LoprE4ecgLVMACcCdk AQaCh1VNU+3UYDUOPp+FqCtojwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJA8zSVt DyqAZpyO3Vo7srpUoLxlMB8GA1UdIwQYMBaAFJUigzioXySCMDEs85iyT4EZ2CMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjgyRC8wQUMyMkFDNEY4 QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJSXdNU3p6bUxKUGdSbllJ eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTS0RPS2hmSklJd01TenptTEpQZ1JuWUl5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjgyRC8wQUMyMkFDNEY4QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJ SXdNU3p6bUxKUGdSbllJeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE1eRy4vo711Dy5j1RCmSQMZvD+5sUm+nzLs67qgCgpVxbL5g+whpq uj/Ylt4EL3krwlaL1LnQkd/loIFKXcK22o8VkODRkw4Y8MFuZs49vwJo31Kj4kre 4sDMdSzNuSK1uI+htoQwTHE8VKf0isER8HSlSvF1g6F1s6/9MZIuOQVmoquYHtLV gUE1h8T65McbB/5DS4TM68ksuxOOA+7cB5LMQAi+dk4hRlXyk6myaEinh7YUtVgL vbBYhBXFIMqJy/AjucllCJEUM7kTpDSh2JAU5NgK0vWwz9xB73Qu8ofphulw32EK O0+nVDzQt8vIvdta3y6DCwoPP7WJ3e/Z -----END CERTIFICATE-----Generated at Wed Dec 24 14:13:59 2025 by rpki-client