This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft File: lFOfgqNeshWO18Ni1boVQz5-0uE.mft (raw, json) Hash identifier: frPpV9A4imnQWqjSCReo5vjWTT0vAYekJis87n//MaU= Subject key identifier: FA:90:94:CD:75:55:21:A8:02:88:B7:0A:DD:30:E7:85:73:7C:52:44 Authority key identifier: 94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1 Certificate issuer: /CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft Manifest number: DB Signing time: Wed 03 Dec 2025 04:03:08 +0000 Manifest this update: Wed 03 Dec 2025 04:03:07 +0000 Manifest next update: Wed 10 Dec 2025 04:03:07 +0000 Files and hashes: 1: lFOfgqNeshWO18Ni1boVQz5-0uE.crl (hash: 7z6CMXP9q80em/Nvl1ox7dkr8lLri9rG43STg/bGwQ4=) 2: 5C8A37FEBB0D11F0B828E842C4F9AE02.roa (hash: bAE1nN8/ltYESFoWRjpvSwAksmNLvoi9WWAZ51mQmjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 04:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE, serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1 Validity Not Before: Dec 3 04:03:07 2025 GMT Not After : Dec 10 04:03:07 2025 GMT Subject: CN=692fb67b-09f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b0:9a:40:2e:a3:b7:de:68:91:f3:78:91:7f: bf:84:95:e3:0b:9f:78:51:13:7b:cf:62:f1:84:5c: d3:ef:a5:3b:fe:b4:ac:6a:cd:78:17:3f:8f:bf:99: fa:0c:92:19:ab:b9:30:a8:4e:84:db:98:66:61:2f: e3:b3:40:ad:99:31:89:12:34:f4:3c:10:4f:30:96: 74:f1:e3:1d:1e:e5:e6:12:18:7a:d1:20:d5:35:79: dd:ff:91:85:da:74:d5:21:35:e4:b4:7d:3f:1f:c7: b8:8c:39:b1:61:33:89:7e:7d:ff:9b:9d:51:19:86: ca:51:88:89:5a:03:3b:72:08:ae:23:0e:fb:7c:c3: fd:c1:a7:2b:02:53:b9:10:c3:ed:30:1d:bb:d1:3a: 5d:43:da:46:8e:6d:62:ea:de:8b:67:f3:99:27:a8: 3f:fb:8d:39:c9:7f:2e:33:fc:6c:f7:ea:4a:b4:a4: 32:0b:7d:76:2b:e1:03:4b:c6:02:3b:8f:bc:08:a0: 7a:e0:aa:fe:45:ad:d5:0e:fd:30:50:9e:ca:2a:03: 47:bc:dc:94:77:29:92:6e:ff:24:8a:a1:cb:38:5c: f2:0c:81:0a:b8:84:12:18:4a:dd:0f:0d:fb:31:2a: e5:2c:0b:ed:42:50:28:d1:8f:3e:fc:58:94:ac:cb: 96:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:90:94:CD:75:55:21:A8:02:88:B7:0A:DD:30:E7:85:73:7C:52:44 X509v3 Authority Key Identifier: keyid:94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:ce:39:4f:52:3b:5b:ca:6d:60:18:9b:07:b7:ac:a2:34:60: a3:b2:37:62:d0:5d:b3:8f:71:a4:8f:ba:c6:b2:c1:ef:dd:79: 42:c8:fd:3b:09:d5:d6:eb:07:bd:46:8b:e4:f3:be:24:24:47: b3:10:d7:50:77:ed:3d:ee:c3:7c:0b:b4:e0:f7:f1:55:c3:64: c8:6f:64:f1:ee:2e:e9:83:0a:54:25:a4:f6:3e:ef:ff:5d:f9: 47:df:37:4e:68:ad:c4:64:0e:8e:81:d7:17:56:fb:9d:fe:3a: bf:10:b1:9c:1b:0c:ed:96:44:9b:60:77:c3:bd:24:9b:b6:76: 2a:99:57:69:40:21:8d:22:f6:ed:11:ad:09:e4:46:5e:5a:03: 86:df:87:b7:51:20:5b:45:46:18:a8:aa:e4:d7:a1:bc:fb:18: 98:ea:d4:21:92:d4:9b:f8:df:70:d7:ed:de:49:6a:9c:de:f1: 8e:39:51:a0:fa:2f:be:4f:b3:f2:5c:2c:64:9f:00:77:6e:0b: 00:08:9a:8d:8d:8f:a0:1b:0e:1b:8f:02:7e:3f:49:8c:a7:f7: d2:42:bf:d4:1a:19:c7:9c:ab:71:2d:db:24:d0:bd:d1:34:92: 22:a3:a0:35:3f:00:b3:ab:65:07:d9:8e:36:1d:64:a4:b5:0c: 59:d7:8d:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlFQUUxMTAvBgNVBAUTKDk0NTM5RjgyQTM1RUIyMTU4RUQ3QzM2MkQ1QkExNTQz M0U3RUQyRTEwHhcNMjUxMjAzMDQwMzA3WhcNMjUxMjEwMDQwMzA3WjAYMRYwFAYD VQQDEw02OTJmYjY3Yi0wOWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrCaQC6jt95okfN4kX+/hJXjC594URN7z2LxhFzT76U7/rSsas14Fz+Pv5n6 DJIZq7kwqE6E25hmYS/js0CtmTGJEjT0PBBPMJZ08eMdHuXmEhh60SDVNXnd/5GF 2nTVITXktH0/H8e4jDmxYTOJfn3/m51RGYbKUYiJWgM7cgiuIw77fMP9wacrAlO5 EMPtMB270TpdQ9pGjm1i6t6LZ/OZJ6g/+405yX8uM/xs9+pKtKQyC312K+EDS8YC O4+8CKB64Kr+Ra3VDv0wUJ7KKgNHvNyUdymSbv8kiqHLOFzyDIEKuIQSGErdDw37 MSrlLAvtQlAo0Y8+/FiUrMuWIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqQlM11 VSGoAoi3Ct0w54VzfFJEMB8GA1UdIwQYMBaAFJRTn4KjXrIVjtfDYtW6FUM+ftLh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVBRS9BNDlDRERCODhE MEUxMUVGQThGRTkzNzFDNEY5QUUwMi9sRk9mZ3FOZXNoV08xOE5pMWJvVlF6NS0w dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xGT2ZncU5lc2hXTzE4TmkxYm9WUXo1LTB1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUVBRS9BNDlDRERCODhEMEUxMUVGQThGRTkzNzFDNEY5QUUwMi9sRk9mZ3FOZXNo V08xOE5pMWJvVlF6NS0wdUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQzjlPUjtbym1gGJsHt6yiNGCjsjdi0F2zj3Gkj7rGssHv3XlCyP07 CdXW6we9Rovk874kJEezENdQd+097sN8C7Tg9/FVw2TIb2Tx7i7pgwpUJaT2Pu// XflH3zdOaK3EZA6OgdcXVvud/jq/ELGcGwztlkSbYHfDvSSbtnYqmVdpQCGNIvbt Ea0J5EZeWgOG34e3USBbRUYYqKrk16G8+xiY6tQhktSb+N9w1+3eSWqc3vGOOVGg +i++T7PyXCxknwB3bgsACJqNjY+gGw4bjwJ+P0mMp/fSQr/UGhnHnKtxLdsk0L3R NJIio6A1PwCzq2UH2Y42HWSktQxZ140p -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:21 2025 by rpki-client