This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft File: LlwMrqX6-WreoBWKqPtS-jRn4Og.mft (raw, json) Hash identifier: T7Pc256ia6NLReCXbBQQJh11/UmkIqEJTT+mi1kC9E4= Subject key identifier: AE:50:01:06:8C:7D:CE:E0:79:F8:94:F0:8E:2A:AF:25:47:10:F5:8B Authority key identifier: 2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 Certificate issuer: /CN=A918F7E6/serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Certificate serial: 06E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft Manifest number: 06DC Signing time: Mon 22 Dec 2025 21:19:15 +0000 Manifest this update: Mon 22 Dec 2025 21:19:15 +0000 Manifest next update: Mon 29 Dec 2025 21:19:15 +0000 Files and hashes: 1: LlwMrqX6-WreoBWKqPtS-jRn4Og.crl (hash: FrWfQLngzzX+w6dU2JO35xHTs1QeSUAyfoTqPPkX2O4=) 2: D676DC068A7311EEB46D5B0BC4F9AE02.roa (hash: 7sh5158waxEGrYQ9/m768pYUuSViCdWzsmXCpRYvJFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1765 (0x6e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7E6, serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Validity Not Before: Dec 22 21:19:15 2025 GMT Not After : Dec 29 21:19:15 2025 GMT Subject: CN=6949b5d3-03b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9d:35:8d:08:6b:5d:f1:d4:f2:c3:f7:3d:60: 8b:5c:c4:db:2c:d7:e7:30:3e:86:b9:b7:b6:44:8b: 6b:d1:67:e1:f7:5f:66:0c:50:03:b2:70:6e:93:85: 7c:60:a6:9f:ec:34:4f:e1:71:eb:d6:dd:d8:12:e9: 69:3e:b2:ba:65:80:fb:42:2b:c6:9e:c5:70:ba:90: f1:8f:a7:3b:2d:fe:2e:35:b5:90:79:80:3f:2d:3c: c1:6b:96:34:9d:7d:db:24:50:0d:9c:2f:04:42:fb: 63:62:dd:4b:1e:50:ee:66:d0:b2:b7:29:2b:dd:a2: d3:4d:6a:13:b7:98:32:52:d2:7d:56:9a:ac:43:6b: 23:19:32:11:a9:82:bd:77:01:52:ca:49:fb:5c:5a: d0:96:c8:c6:e2:62:e4:6e:50:d3:fd:b8:ce:b0:fd: 00:15:41:52:bf:cd:b8:2f:01:0b:7e:b3:de:63:4a: a5:bf:40:84:dc:3e:f0:90:8b:28:6a:55:96:3d:ae: 75:8e:64:54:f1:cd:f6:24:c8:09:bd:bb:f3:07:aa: 08:ad:c2:ab:99:f0:9c:ee:3c:e9:88:51:48:93:a8: 43:47:4a:d5:f0:bc:38:c0:7c:cf:6d:83:2b:7f:ec: 83:51:30:7d:af:6c:38:33:fc:17:cd:2f:60:da:5c: 0a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:50:01:06:8C:7D:CE:E0:79:F8:94:F0:8E:2A:AF:25:47:10:F5:8B X509v3 Authority Key Identifier: keyid:2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:4a:03:0a:65:a3:5b:6c:a6:fc:7a:29:29:4e:3a:d0:2f:61: c2:37:a5:ea:8e:7f:10:f5:56:3d:ea:d1:21:de:a7:e8:91:97: fd:da:b6:86:0d:81:b3:24:72:48:9f:2c:0d:77:75:ee:75:a2: cd:eb:9f:4c:5f:1a:9f:25:59:28:2e:2c:3e:f3:cb:68:cf:e0: cc:c9:ab:6c:09:4d:cb:54:d9:ff:e9:2f:37:8b:93:ca:be:d1: 42:7b:3b:92:b7:5e:27:8b:c1:4d:62:04:50:9c:5a:1a:1d:38: b3:27:fe:df:20:f0:de:96:1a:7b:93:14:cc:55:3f:8b:f2:dd: 36:92:63:1e:a2:a7:a1:2b:83:d5:1a:65:27:dc:b5:78:3c:a6: ab:9d:f5:da:1a:35:fd:9e:ee:77:9d:ea:97:5b:86:0b:c4:41: 45:c7:a8:3c:59:35:52:21:48:b5:3a:21:9c:cf:ec:3f:87:ce: a7:eb:ca:8e:93:6a:8e:0c:6f:39:01:ad:64:24:98:4e:54:0c: c9:bd:4a:57:df:50:5c:6a:d9:5b:25:5f:ee:d4:58:29:15:50: 7a:42:81:e2:a0:91:cb:0a:22:7f:95:6b:b7:c7:af:f4:b2:aa: a7:19:ef:3a:6b:e1:fd:ce:d0:4f:1a:54:d7:5c:8d:ab:21:93: 5d:78:64:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3RTYxMTAvBgNVBAUTKDJFNUMwQ0FFQTVGQUY5NkFERUEwMTU4QUE4RkI1MkZB MzQ2N0UwRTgwHhcNMjUxMjIyMjExOTE1WhcNMjUxMjI5MjExOTE1WjAYMRYwFAYD VQQDDA02OTQ5YjVkMy0wM2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZ01jQhrXfHU8sP3PWCLXMTbLNfnMD6Gube2RItr0Wfh919mDFADsnBuk4V8 YKaf7DRP4XHr1t3YEulpPrK6ZYD7QivGnsVwupDxj6c7Lf4uNbWQeYA/LTzBa5Y0 nX3bJFANnC8EQvtjYt1LHlDuZtCytykr3aLTTWoTt5gyUtJ9VpqsQ2sjGTIRqYK9 dwFSykn7XFrQlsjG4mLkblDT/bjOsP0AFUFSv824LwELfrPeY0qlv0CE3D7wkIso alWWPa51jmRU8c32JMgJvbvzB6oIrcKrmfCc7jzpiFFIk6hDR0rV8Lw4wHzPbYMr f+yDUTB9r2w4M/wXzS9g2lwKdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5QAQaM fc7gefiU8I4qryVHEPWLMB8GA1UdIwQYMBaAFC5cDK6l+vlq3qAViqj7Uvo0Z+Do MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdFNi8wMUM3MkM4MDdE NzUxMUVCOEQ4RjQ4NkRDNEY5QUUwMi9MbHdNcnFYNi1XcmVvQldLcVB0Uy1qUm40 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsd01ycVg2LVdyZW9CV0txUHRTLWpSbjRPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjdFNi8wMUM3MkM4MDdENzUxMUVCOEQ4RjQ4NkRDNEY5QUUwMi9MbHdNcnFYNi1X cmVvQldLcVB0Uy1qUm40T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1SgMKZaNbbKb8eikpTjrQL2HCN6Xqjn8Q9VY96tEh3qfokZf92raG DYGzJHJInywNd3XudaLN659MXxqfJVkoLiw+88toz+DMyatsCU3LVNn/6S83i5PK vtFCezuSt14ni8FNYgRQnFoaHTizJ/7fIPDelhp7kxTMVT+L8t02kmMeoqehK4PV GmUn3LV4PKarnfXaGjX9nu53neqXW4YLxEFFx6g8WTVSIUi1OiGcz+w/h86n68qO k2qODG85Aa1kJJhOVAzJvUpX31BcatlbJV/u1FgpFVB6QoHioJHLCiJ/lWu3x6/0 sqqnGe86a+H9ztBPGlTXXI2rIZNdeGRL -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:01 2025 by rpki-client