This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft File: L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft (raw, json) Hash identifier: Ns1I5IGPG5OoRJg8kKEVkGps7LhMO2LH09yhlI59B8o= Subject key identifier: 9F:E1:7B:9C:2C:3F:31:F7:B8:C1:65:EC:B3:6C:15:D6:CE:82:90:E7 Authority key identifier: 2F:6B:CB:5C:5E:BF:73:67:36:65:68:44:B1:16:C4:8D:A5:51:12:59 Certificate issuer: /CN=A918049D/serialNumber=2F6BCB5C5EBF736736656844B116C48DA5511259 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft Manifest number: 15 Signing time: Wed 03 Dec 2025 06:02:45 +0000 Manifest this update: Wed 03 Dec 2025 06:02:45 +0000 Manifest next update: Wed 10 Dec 2025 06:02:45 +0000 Files and hashes: 1: L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl (hash: QqHLlevge8T4OoF4WP6axSZWPcK+/wdemS2Cz3U6/50=) 2: 541D17D2B2C811F092F27081C4F9AE02.roa (hash: Bo/+kZ5KOHNuiEOOVJQGjVbjfu7e6AaHxR3mGm0eu6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918049D, serialNumber=2F6BCB5C5EBF736736656844B116C48DA5511259 Validity Not Before: Dec 3 06:02:45 2025 GMT Not After : Dec 10 06:02:45 2025 GMT Subject: CN=692fd285-53c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:48:78:a3:38:38:2f:81:26:f7:19:01:94:bd: 3e:f2:a3:71:ef:65:b1:b0:6d:b0:89:17:b3:1c:65: 3e:a6:09:86:94:e6:35:35:49:1a:80:b6:57:a2:0a: b5:d8:dd:85:f6:81:a8:09:7e:2a:25:03:07:26:0c: 02:77:b1:02:0f:1c:d0:77:e1:2b:72:21:69:4f:d4: 82:46:72:89:4e:25:ae:9f:d1:1c:20:d2:75:53:08: 8f:2d:82:7a:82:ea:b3:ea:e3:34:24:1d:b7:c9:42: 1a:4d:5d:aa:30:c2:68:97:19:3c:bd:25:4a:91:05: 09:8f:e9:fb:14:71:a1:0a:e8:60:20:89:93:24:ff: 83:32:3b:57:d4:5a:59:eb:f2:54:2d:27:8b:f0:06: 68:67:3b:c1:5e:de:08:31:bb:d5:19:de:0c:30:00: 98:e1:a0:e5:7c:54:4e:11:6d:69:5e:c0:50:2a:95: 23:68:a4:6b:26:38:ca:9e:ed:22:20:b3:75:d9:7c: 1c:59:56:ac:18:95:00:91:d0:b7:5d:9c:6f:0a:e8: 6e:b6:19:6d:75:6c:77:e2:5a:43:0f:73:99:ec:1d: 89:24:cb:98:cb:f0:79:2f:8a:b3:40:dd:79:29:4d: 70:94:2e:32:88:95:0f:95:b3:a3:c9:9d:7e:33:00: dd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E1:7B:9C:2C:3F:31:F7:B8:C1:65:EC:B3:6C:15:D6:CE:82:90:E7 X509v3 Authority Key Identifier: keyid:2F:6B:CB:5C:5E:BF:73:67:36:65:68:44:B1:16:C4:8D:A5:51:12:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:a7:78:13:62:0f:d2:97:05:1e:50:f8:17:1a:60:b8:66:0e: a2:be:91:a8:91:dc:e5:8b:2d:a1:5c:02:a2:ee:9b:71:91:f0: 27:f9:ac:0d:c4:0f:b7:52:95:85:08:86:67:91:07:0a:ed:98: 54:f0:28:4d:26:aa:83:e8:29:7b:9a:d4:26:96:8e:f5:2c:c8: 76:d8:95:9f:bd:96:12:e1:fc:a0:34:7b:e9:d6:24:74:6b:a9: 81:c9:ab:5c:83:16:4d:1f:1c:21:c8:0b:52:30:79:cd:18:91: 37:3f:7e:28:4f:6d:0d:7e:95:d0:1e:89:d1:28:0c:3a:5b:99: f1:ed:e5:cd:84:2c:1c:37:b0:c9:a7:5f:62:50:e0:41:a9:16: ff:cd:83:9c:d7:d9:71:bc:30:7a:ec:6e:79:e1:f5:30:47:cd: 8c:63:2d:47:12:e3:cb:4d:88:23:f7:88:54:6c:0f:ab:3d:01: 73:f9:0a:de:12:39:90:29:ba:1f:69:b7:67:0d:40:0c:96:6d: 6e:45:2a:3d:ab:da:84:ff:5f:ab:72:4e:5d:87:94:dc:4d:5f: 3b:c7:0a:60:12:29:24:16:d1:2c:70:a8:0c:e4:3d:23:c1:be: 1b:7b:a3:db:32:48:ba:cf:70:13:e0:76:2d:12:d0:74:fc:1e: 97:37:0c:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDQ5RDExMC8GA1UEBRMoMkY2QkNCNUM1RUJGNzM2NzM2NjU2ODQ0QjExNkM0OERB NTUxMTI1OTAeFw0yNTEyMDMwNjAyNDVaFw0yNTEyMTAwNjAyNDVaMBgxFjAUBgNV BAMTDTY5MmZkMjg1LTUzYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxSHijODgvgSb3GQGUvT7yo3HvZbGwbbCJF7McZT6mCYaU5jU1SRqAtleiCrXY 3YX2gagJfiolAwcmDAJ3sQIPHNB34StyIWlP1IJGcolOJa6f0Rwg0nVTCI8tgnqC 6rPq4zQkHbfJQhpNXaowwmiXGTy9JUqRBQmP6fsUcaEK6GAgiZMk/4MyO1fUWlnr 8lQtJ4vwBmhnO8Fe3ggxu9UZ3gwwAJjhoOV8VE4RbWlewFAqlSNopGsmOMqe7SIg s3XZfBxZVqwYlQCR0LddnG8K6G62GW11bHfiWkMPc5nsHYkky5jL8HkvirNA3Xkp TXCULjKIlQ+Vs6PJnX4zAN3tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUn+F7nCw/ Mfe4wWXss2wV1s6CkOcwHwYDVR0jBBgwFoAUL2vLXF6/c2c2ZWhEsRbEjaVRElkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwNDlEL0FCNjZFMDkyQjJD NjExRjA5MTM0QkE2REM0RjlBRTAyL0wydkxYRjZfYzJjMlpXaEVzUmJFamFWUkVs ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTDJ2TFhGNl9jMmMyWldoRXNSYkVqYVZSRWxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw NDlEL0FCNjZFMDkyQjJDNjExRjA5MTM0QkE2REM0RjlBRTAyL0wydkxYRjZfYzJj MlpXaEVzUmJFamFWUkVsay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIaneBNiD9KXBR5Q+BcaYLhmDqK+kaiR3OWLLaFcAqLum3GR8Cf5rA3E D7dSlYUIhmeRBwrtmFTwKE0mqoPoKXua1CaWjvUsyHbYlZ+9lhLh/KA0e+nWJHRr qYHJq1yDFk0fHCHIC1Iwec0YkTc/fihPbQ1+ldAeidEoDDpbmfHt5c2ELBw3sMmn X2JQ4EGpFv/Ng5zX2XG8MHrsbnnh9TBHzYxjLUcS48tNiCP3iFRsD6s9AXP5Ct4S OZApuh9pt2cNQAyWbW5FKj2r2oT/X6tyTl2HlNxNXzvHCmASKSQW0SxwqAzkPSPB vht7o9sySLrPcBPgdi0S0HT8Hpc3DBA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:14 2025 by rpki-client