This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft File: rLLFTvC2TcIQCkhqe49ZMkute0k.mft (raw, json) Hash identifier: 22vtQQz/5BRsYmKBa7rSahE2wPYvrAaCZpE0rW+lzBE= Subject key identifier: 13:E5:AB:0A:98:11:1D:6E:F1:44:0C:E4:DA:F1:28:54:B0:9F:D2:C6 Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49 Certificate issuer: /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft Manifest number: 01C7 Signing time: Wed 24 Dec 2025 10:22:22 +0000 Manifest this update: Wed 24 Dec 2025 10:22:22 +0000 Manifest next update: Wed 31 Dec 2025 10:22:22 +0000 Files and hashes: 1: rLLFTvC2TcIQCkhqe49ZMkute0k.crl (hash: 5Fvq78qhzsf8+IHASdJ5Ik0Uv3en8BnlIuA9caE6pa0=) 2: C4D5BB009B5411EFBBEFF384C4F9AE02.roa (hash: QDeaqdoBnFXV+JmRiyCNSIMZmZka/hyC5/9UzKXY3ZA=) 3: B76A1A109B5411EF9756FD79C4F9AE02.roa (hash: wg6PkX5FTKBuzoU2wH2B403iAUUBx7n4KiMD6J5IWOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 10:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185673, serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49 Validity Not Before: Dec 24 10:22:22 2025 GMT Not After : Dec 31 10:22:22 2025 GMT Subject: CN=694bbede-7a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8e:af:57:04:62:bb:47:26:7c:c7:38:4b:0c: 99:cb:32:a2:ca:6b:ba:73:32:08:0a:49:41:cb:82: ec:ce:18:7b:43:68:18:00:c7:d7:f7:65:81:6a:35: 9b:23:1b:59:3e:54:26:b4:25:bd:6a:ff:8a:a3:c4: 68:3f:bd:e6:45:e9:65:72:d6:87:5e:0d:de:c6:e6: 62:08:13:b6:c8:7e:fe:ab:77:76:7e:90:94:c6:94: 03:62:41:8c:b9:f0:0b:36:bf:8e:6f:03:7e:28:62: f8:f9:72:ee:f4:da:73:f2:2a:ab:dc:fa:37:65:eb: e6:95:45:e5:bb:fe:7e:8b:39:8a:84:96:8f:c0:4c: 2c:7d:67:46:a8:8f:28:2f:99:06:93:8a:a6:f9:4f: f2:4e:0a:c4:8b:40:a0:85:8c:1d:49:e0:b7:a6:e8: ab:fd:db:7c:0f:3d:c1:7e:cb:57:d8:64:92:41:06: 8a:41:26:af:19:eb:6b:fc:cd:28:f1:e3:ee:0e:b0: cd:58:e9:68:24:84:66:34:d5:8a:61:6c:cf:07:bd: 8c:f3:fa:b5:16:2e:e0:6c:11:be:18:8d:c0:57:70: dc:8a:10:ba:ed:4a:3c:2f:d0:48:85:94:15:ec:42: a8:92:58:14:8c:b4:c7:4c:99:b1:b6:45:87:4b:7c: ad:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E5:AB:0A:98:11:1D:6E:F1:44:0C:E4:DA:F1:28:54:B0:9F:D2:C6 X509v3 Authority Key Identifier: keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:08:62:6c:0b:e0:f2:3a:08:6c:8e:a5:0e:12:84:75:d8:72: 02:19:9b:b4:8d:74:02:bc:21:b7:1a:41:93:be:69:1f:d8:59: 31:73:0a:b3:b4:d7:aa:ee:70:8a:3f:a4:a3:87:12:e4:95:ee: 9b:30:72:25:87:7e:9e:50:f8:6b:3e:57:43:27:16:86:7d:cf: ac:d4:b5:e9:ba:88:01:99:f7:56:e6:df:2d:c1:fd:f5:8b:93: ea:7d:89:58:0d:07:82:aa:1b:9b:74:b6:cd:16:fc:00:cb:32: e0:35:54:51:52:b0:1a:2e:5b:e0:98:05:d0:08:ba:1e:f8:73: 4a:47:55:ed:d9:39:46:13:c3:ad:2d:d2:b8:32:87:d1:c1:b4: e0:9f:46:03:0c:7c:df:47:d5:df:ba:8f:0c:85:e4:69:6e:34: 13:54:f4:be:79:c8:6c:f5:6e:0f:54:76:ae:c1:1b:0a:f1:4d: 38:c1:a6:1d:88:01:06:5c:e5:2b:6d:2a:26:71:fe:fa:d2:a3: 28:38:ed:36:10:4f:e5:b4:8a:23:2b:b9:0b:15:8e:c6:35:f3: 1d:55:49:96:1b:3b:50:44:f2:8e:ba:51:f5:a0:bb:9a:02:2c: 32:c6:3b:08:cf:68:74:9c:b7:da:d7:1b:21:51:c4:2c:6d:a6: 20:c4:24:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2NzMxMTAvBgNVBAUTKEFDQjJDNTRFRjBCNjREQzIxMDBBNDg2QTdCOEY1OTMy NEJBRDdCNDkwHhcNMjUxMjI0MTAyMjIyWhcNMjUxMjMxMTAyMjIyWjAYMRYwFAYD VQQDDA02OTRiYmVkZS03YTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAro6vVwRiu0cmfMc4SwyZyzKiymu6czIICklBy4Lszhh7Q2gYAMfX92WBajWb IxtZPlQmtCW9av+Ko8RoP73mRellctaHXg3exuZiCBO2yH7+q3d2fpCUxpQDYkGM ufALNr+ObwN+KGL4+XLu9Npz8iqr3Po3ZevmlUXlu/5+izmKhJaPwEwsfWdGqI8o L5kGk4qm+U/yTgrEi0CghYwdSeC3puir/dt8Dz3BfstX2GSSQQaKQSavGetr/M0o 8ePuDrDNWOloJIRmNNWKYWzPB72M8/q1Fi7gbBG+GI3AV3DcihC67Uo8L9BIhZQV 7EKoklgUjLTHTJmxtkWHS3ytewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPlqwqY ER1u8UQM5NrxKFSwn9LGMB8GA1UdIwQYMBaAFKyyxU7wtk3CEApIanuPWTJLrXtJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTY3My84MDNBQ0QyQzMy OTIxMUVFOTg2RjE0MUZDNEY5QUUwMi9yTExGVHZDMlRjSVFDa2hxZTQ5Wk1rdXRl MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JMTEZUdkMyVGNJUUNraHFlNDlaTWt1dGUway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTY3My84MDNBQ0QyQzMyOTIxMUVFOTg2RjE0MUZDNEY5QUUwMi9yTExGVHZDMlRj SVFDa2hxZTQ5Wk1rdXRlMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOCGJsC+DyOghsjqUOEoR12HICGZu0jXQCvCG3GkGTvmkf2Fkxcwqz tNeq7nCKP6SjhxLkle6bMHIlh36eUPhrPldDJxaGfc+s1LXpuogBmfdW5t8twf31 i5PqfYlYDQeCqhubdLbNFvwAyzLgNVRRUrAaLlvgmAXQCLoe+HNKR1Xt2TlGE8Ot LdK4MofRwbTgn0YDDHzfR9Xfuo8MheRpbjQTVPS+echs9W4PVHauwRsK8U04waYd iAEGXOUrbSomcf760qMoOO02EE/ltIojK7kLFY7GNfMdVUmWGztQRPKOulH1oLua AiwyxjsIz2h0nLfa1xshUcQsbaYgxCTR -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:11 2025 by rpki-client