This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json) Hash identifier: KoMcJvO4GRqFFbLoT4hJDdRSyYw5MFYrPHAOB+kFNsI= Subject key identifier: AA:5D:36:73:45:3D:1F:6E:2D:A2:AD:72:4F:10:41:8B:90:DD:61:AC Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Certificate serial: 0C7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft Manifest number: 0C75 Signing time: Mon 22 Dec 2025 18:07:07 +0000 Manifest this update: Mon 22 Dec 2025 18:07:06 +0000 Manifest next update: Mon 29 Dec 2025 18:07:06 +0000 Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: rc4AwvcTXR7VnHCZss+p+SlMkJoBEG+t8DAtoBFJsjI=) 2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: DL4w0jdh6arH3ZaUufUuEs12A9UV6IxUUOEelp+erPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3197 (0xc7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Validity Not Before: Dec 22 18:07:06 2025 GMT Not After : Dec 29 18:07:06 2025 GMT Subject: CN=694988ca-957a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ec:bb:3e:7b:df:3f:0d:89:2e:63:80:79:8e: 79:4a:eb:f0:f6:ee:8b:c8:d8:15:c2:98:76:cd:84: 1e:fc:cb:88:fa:7e:0a:73:94:6b:cb:17:8d:64:cb: 6f:58:ea:ef:7c:77:e2:03:09:72:d6:0c:94:22:25: 65:95:c0:3a:98:2a:46:53:04:5b:08:73:5b:01:65: 8e:d6:ad:dc:a2:ed:0f:3f:f2:05:18:99:15:b7:e9: 45:ef:57:f0:c9:96:19:5b:e9:0e:fa:dc:53:46:26: b1:1d:26:8e:18:40:c5:d0:47:13:0d:01:8b:07:2e: 18:c4:43:18:71:a3:d7:23:e6:45:1b:09:54:6a:af: 17:8a:c0:ae:d3:c3:b8:1e:da:a8:67:59:7b:a9:b9: 70:16:f5:8e:5f:b7:11:52:1b:f4:5a:c1:f4:06:bd: 51:2f:aa:ae:07:77:3e:47:ea:cd:45:98:5a:7f:02: dc:b1:72:91:e4:e2:86:d9:05:54:50:8a:10:12:de: 3e:d4:3a:a4:ae:a6:40:b1:b7:0f:b3:1b:f2:e6:0b: d3:50:72:fd:af:0f:10:35:12:74:3d:60:c3:05:9a: e6:f2:16:17:95:34:e9:04:92:c2:bd:a4:a6:cf:84: f0:0b:ee:81:f9:c4:6e:ab:50:45:d9:33:3f:28:a5: 9f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5D:36:73:45:3D:1F:6E:2D:A2:AD:72:4F:10:41:8B:90:DD:61:AC X509v3 Authority Key Identifier: keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:24:f8:da:05:73:a2:06:da:b8:01:80:ad:db:50:07:e4:1e: f1:64:60:49:f7:91:be:eb:d0:df:36:ab:7d:d2:92:d4:17:1c: 34:3d:77:af:c9:ed:07:82:ad:82:a7:45:9a:8c:68:24:8f:a9: c8:87:0e:63:60:23:4b:7c:22:23:ab:8d:3a:59:1f:e0:84:8f: 2b:f1:0e:f1:ae:f0:8c:1a:36:c9:df:8f:c4:87:25:b2:7b:66: ac:98:9d:aa:24:a5:e2:96:17:68:5a:55:9e:34:2d:9a:8e:b8: 96:28:39:69:7c:9a:70:f8:4d:ff:f0:f5:0a:5d:34:79:fb:fa: 55:6d:c1:b1:f0:d2:78:38:8c:26:2b:00:89:b4:fd:14:76:26: b3:08:82:00:f7:da:7a:06:28:9f:ba:ea:d8:2d:d9:53:16:d8: c6:c7:8d:82:fc:7d:30:47:22:69:76:24:f7:f7:30:65:80:4d: ec:e1:92:19:96:5b:3d:bf:a6:ff:4d:e4:6d:27:91:8d:4f:97: 16:35:3e:17:b4:37:5e:76:ad:c4:40:03:d2:13:81:65:15:6e: 5e:e3:85:b1:a8:1b:db:f8:9d:a9:72:ed:60:7d:75:e7:31:bc: 16:9f:58:d4:3d:d0:48:01:19:0c:6d:9c:9d:6f:9d:1e:85:44: ef:27:a6:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0OTYxMTAvBgNVBAUTKDJGN0ExQzFERDI3RUE3ODE1OENFMjFBOTREQkJGQjkw NzJGQjE3MzQwHhcNMjUxMjIyMTgwNzA2WhcNMjUxMjI5MTgwNzA2WjAYMRYwFAYD VQQDDA02OTQ5ODhjYS05NTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruy7PnvfPw2JLmOAeY55Suvw9u6LyNgVwph2zYQe/MuI+n4Kc5RryxeNZMtv WOrvfHfiAwly1gyUIiVllcA6mCpGUwRbCHNbAWWO1q3cou0PP/IFGJkVt+lF71fw yZYZW+kO+txTRiaxHSaOGEDF0EcTDQGLBy4YxEMYcaPXI+ZFGwlUaq8XisCu08O4 HtqoZ1l7qblwFvWOX7cRUhv0WsH0Br1RL6quB3c+R+rNRZhafwLcsXKR5OKG2QVU UIoQEt4+1DqkrqZAsbcPsxvy5gvTUHL9rw8QNRJ0PWDDBZrm8hYXlTTpBJLCvaSm z4TwC+6B+cRuq1BF2TM/KKWf/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpdNnNF PR9uLaKtck8QQYuQ3WGsMB8GA1UdIwQYMBaAFC96HB3SfqeBWM4hqU27+5By+xc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzQ5Ni8yMzQxQTU2NjBG NkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0Rll6aUdwVGJ2N2tITDdG elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzb2NIZEotcDRGWXppR3BUYnY3a0hMN0Z6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzQ5Ni8yMzQxQTU2NjBGNkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0 Rll6aUdwVGJ2N2tITDdGelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKJPjaBXOiBtq4AYCt21AH5B7xZGBJ95G+69DfNqt90pLUFxw0PXev ye0Hgq2Cp0WajGgkj6nIhw5jYCNLfCIjq406WR/ghI8r8Q7xrvCMGjbJ34/EhyWy e2asmJ2qJKXilhdoWlWeNC2ajriWKDlpfJpw+E3/8PUKXTR5+/pVbcGx8NJ4OIwm KwCJtP0UdiazCIIA99p6BiifuurYLdlTFtjGx42C/H0wRyJpdiT39zBlgE3s4ZIZ lls9v6b/TeRtJ5GNT5cWNT4XtDdedq3EQAPSE4FlFW5e44WxqBvb+J2pcu1gfXXn MbwWn1jUPdBIARkMbZydb50ehUTvJ6bu -----END CERTIFICATE-----Generated at Tue Dec 23 20:21:40 2025 by rpki-client