This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: Q+Jd/frlvoyYulQZbFIrwDuzWc9d8CaX5PWpL6BBJCc= Subject key identifier: 16:DF:B5:17:2B:E8:E0:03:45:49:C1:EF:D9:F7:32:3C:22:D3:8D:17 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 033E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 0316 Signing time: Wed 17 Dec 2025 00:37:05 +0000 Manifest this update: Wed 17 Dec 2025 00:37:05 +0000 Manifest next update: Wed 24 Dec 2025 00:37:05 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: 8YxS5Pr8P8EaD1UxtZMwmgG9/1JT07UjdtVgt9dovf4=) 2: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: EXZKaPGUwtsDkK02FHOfFve03nhQLXnXoDpLr6aZfVk=) 3: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: 1228kG65FpzFsgF5OYDLN0KZ5wJbY2X2RckkI0NfZ9U=) 4: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: D4Hg/JdRTfX/l8c7oXgoLhl4NGoM7URqBmQ0qnzy3No=) 5: 880B53F493C611F093DD4E26C4F9AE02.roa (hash: kI7hR0gi82H4tGr9L9+N926LnNI7bRFFE0ZznH05Fqo=) 6: 88E1581E93C611F093DD4E26C4F9AE02.roa (hash: 3ZU7uxKO/t/DcPW4C30weX2MJ8vKNau0nNzc4ySxziM=) 7: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: 7d7gP27b9zch7ZSnAleqYPL3fKv267/ReH6uWVU9VP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 830 (0x33e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Dec 17 00:37:05 2025 GMT Not After : Dec 24 00:37:05 2025 GMT Subject: CN=6941fb31-a23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:26:a0:af:58:b5:7d:91:74:08:06:89:a7:0d: 62:77:84:05:f2:c3:71:74:13:df:8c:b6:74:30:c5: 31:d7:1b:01:0e:1a:f7:5f:02:5e:98:bf:bf:a1:21: 76:6d:2a:0c:0c:6e:8b:c5:55:d5:a1:e2:e3:e4:57: 1f:b8:be:e8:79:c3:18:f1:8e:ea:76:43:8d:31:99: 89:5e:b6:18:66:c3:e8:94:00:04:9d:f5:f5:86:54: 07:47:10:ef:de:a0:bc:20:c3:1f:93:6a:8a:41:9a: c5:71:85:e9:94:2d:1e:33:0c:62:66:9c:a9:e0:ae: ef:0e:90:fb:0c:20:2f:75:a1:4c:7e:c9:8c:fb:3a: d4:4b:17:35:19:bd:38:83:ba:c4:7c:87:bf:b8:21: eb:80:f6:34:12:61:2b:c5:ff:2d:10:0d:12:ee:ce: cf:ed:13:6a:70:f6:6c:3e:d9:bc:06:05:61:54:9d: e4:90:07:2f:14:0c:e0:28:a4:08:fa:af:bf:b7:a1: 35:85:22:8a:d1:fa:57:c4:e7:d7:3e:e1:45:0c:dd: 5a:1a:29:4b:48:d6:8b:32:74:33:a5:ca:a9:af:b4: bf:0c:28:2d:6a:db:35:79:1b:43:25:a4:83:e2:f6: 0f:d6:f1:31:c8:44:a4:5a:5b:6b:94:0b:67:0c:f0: 86:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DF:B5:17:2B:E8:E0:03:45:49:C1:EF:D9:F7:32:3C:22:D3:8D:17 X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:eb:cb:a7:29:51:04:e6:80:f3:9b:4d:b9:10:ad:93:a5:d0: d0:64:53:a9:79:c2:1d:6d:98:cc:6d:7a:76:4a:09:bf:93:e4: 62:ca:1c:b5:7d:29:ed:06:32:27:4e:0f:4a:c0:55:17:64:7f: 87:72:c3:d8:e7:99:a2:b9:98:af:93:eb:d7:35:bb:33:0a:15: dc:1d:da:af:e5:cd:c6:1c:63:3e:02:1d:40:06:9a:e5:49:2d: 63:88:fb:1b:ff:d3:93:94:c3:a1:03:fd:1f:b6:78:71:f2:ef: 2b:98:c9:f0:48:62:24:8b:73:61:9b:ed:7e:5c:fc:79:a3:4a: 89:be:51:3b:e9:ac:50:e8:fe:c0:90:30:a0:a2:59:72:cb:09: d8:bb:f9:bc:7a:71:8f:f8:df:1c:f6:66:cd:a3:60:a6:66:a9: 10:21:56:50:af:b4:64:28:11:fe:7c:d5:49:79:bb:c8:c6:62: 2c:e8:e0:b1:49:07:78:aa:90:c6:f4:10:de:de:6c:95:49:e3: 1b:f8:77:ad:5f:77:7c:80:5d:2b:8e:90:c8:ac:9a:79:cf:8b: a7:78:8e:3d:5f:73:fd:94:20:32:1f:da:36:b4:36:d1:f8:70: b0:a9:ac:f6:a0:73:53:c6:0f:19:96:0a:0a:e1:4f:cf:2d:10: 94:f2:06:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjUxMjE3MDAzNzA1WhcNMjUxMjI0MDAzNzA1WjAYMRYwFAYD VQQDDA02OTQxZmIzMS1hMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyagr1i1fZF0CAaJpw1id4QF8sNxdBPfjLZ0MMUx1xsBDhr3XwJemL+/oSF2 bSoMDG6LxVXVoeLj5FcfuL7oecMY8Y7qdkONMZmJXrYYZsPolAAEnfX1hlQHRxDv 3qC8IMMfk2qKQZrFcYXplC0eMwxiZpyp4K7vDpD7DCAvdaFMfsmM+zrUSxc1Gb04 g7rEfIe/uCHrgPY0EmErxf8tEA0S7s7P7RNqcPZsPtm8BgVhVJ3kkAcvFAzgKKQI +q+/t6E1hSKK0fpXxOfXPuFFDN1aGilLSNaLMnQzpcqpr7S/DCgtats1eRtDJaSD 4vYP1vExyESkWltrlAtnDPCGpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbftRcr 6OADRUnB79n3Mjwi040XMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc68unKVEE5oDzm025EK2TpdDQZFOpecIdbZjMbXp2Sgm/k+Riyhy1 fSntBjInTg9KwFUXZH+HcsPY55miuZivk+vXNbszChXcHdqv5c3GHGM+Ah1ABprl SS1jiPsb/9OTlMOhA/0ftnhx8u8rmMnwSGIki3Nhm+1+XPx5o0qJvlE76axQ6P7A kDCgollyywnYu/m8enGP+N8c9mbNo2CmZqkQIVZQr7RkKBH+fNVJebvIxmIs6OCx SQd4qpDG9BDe3myVSeMb+HetX3d8gF0rjpDIrJp5z4uneI49X3P9lCAyH9o2tDbR +HCwqaz2oHNTxg8ZlgoK4U/PLRCU8gYi -----END CERTIFICATE-----Generated at Thu Dec 18 20:07:44 2025 by rpki-client