This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json) Hash identifier: AcDQsR66iMFIdnySsGpXSs/BnadJuItGyJIGmYoAB9A= Subject key identifier: C7:5D:25:74:E0:53:40:37:BF:44:B5:D0:6A:2E:51:76:4F:12:91:43 Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Certificate serial: 0863 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft Manifest number: 0857 Signing time: Sat 06 Dec 2025 19:49:51 +0000 Manifest this update: Sat 06 Dec 2025 19:49:50 +0000 Manifest next update: Sat 13 Dec 2025 19:49:50 +0000 Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: ItswUwGn2da4j2ISgZ6/XzAznGaUP/+nYCB2bRp6ntg=) 2: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: hdHi4xqpMBX0AQynSt0UCqWOxzfycEn8kuSXfk/h1Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2147 (0x863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Validity Not Before: Dec 6 19:49:50 2025 GMT Not After : Dec 13 19:49:50 2025 GMT Subject: CN=693488df-d021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2c:89:c2:84:2a:80:05:e8:5b:ae:56:fc:2c: 9f:31:ef:ed:45:6b:f9:7f:95:60:f0:c9:80:52:83: 7d:04:c8:bf:02:7d:b4:4f:00:c9:e7:14:ef:18:33: 32:83:fd:d1:63:5b:3c:b6:36:db:7c:63:67:0c:c9: 13:aa:6a:44:18:e1:1d:a7:5b:6d:9e:e0:d8:12:2c: 89:e4:80:d8:8b:c7:26:18:bc:3f:00:9c:c6:fb:c4: 10:3f:ca:ce:87:9c:ca:b0:51:fb:ed:4d:34:5b:d2: 5b:9e:ee:4f:b7:d9:36:51:d5:ee:aa:cf:fe:65:49: 07:4f:7e:a6:82:56:18:6f:48:23:a9:4e:95:56:29: c1:9c:11:93:1a:a0:09:e2:97:43:14:49:2c:48:de: 57:dd:0a:7b:1e:e6:ee:f8:68:7a:70:fb:76:a1:82: 09:19:22:65:73:7c:b3:00:dc:98:59:11:b7:9f:fa: 55:2f:a4:40:e0:92:4d:14:dc:63:69:2e:82:fe:a5: 4b:c7:e7:ba:3f:73:0d:52:75:4b:48:10:6a:27:db: 53:76:72:d0:39:ff:c1:b8:3c:92:22:3a:48:9a:92: a1:06:4a:9e:93:6f:c2:02:cc:45:cd:8a:7a:3c:6d: 36:f1:77:0f:35:dd:16:32:5e:d1:f0:f9:2e:a9:0e: bb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5D:25:74:E0:53:40:37:BF:44:B5:D0:6A:2E:51:76:4F:12:91:43 X509v3 Authority Key Identifier: keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:43:e4:6e:54:e9:b9:14:c1:4d:6f:63:c5:25:a4:18:f9:2f: 7d:5a:e5:66:dc:8d:7b:69:9a:0a:ff:a3:b0:18:f8:a9:a8:b3: 6f:dd:6b:a4:52:09:d7:9c:02:a5:eb:3c:0d:67:21:b2:03:25: 61:76:f0:e0:34:9d:53:5b:ec:0c:5e:b9:ef:66:7f:e2:c5:c3: a8:e3:76:44:f4:0a:aa:6c:68:99:5e:4a:eb:b2:b8:31:5e:01: ff:ff:95:35:a4:39:48:67:80:06:e2:88:96:d9:6d:8e:5e:71: 38:0e:d1:8e:d5:07:bb:d8:cb:bb:7e:72:9c:c3:50:da:49:8a: c2:73:ba:e1:56:08:1b:94:01:47:86:90:09:14:47:16:ba:4b: 12:12:65:5f:42:e8:f5:1b:f4:f6:cb:04:01:f9:33:0c:cb:ac: b0:36:b7:34:33:45:4c:f7:75:23:6a:09:ac:e8:43:0d:c8:fe: e5:83:2d:f8:55:03:3a:17:af:fa:eb:b5:cb:c1:87:aa:fd:26: 37:ef:bd:d2:a1:7e:3a:90:3d:a3:75:42:1a:3a:d9:b6:01:f0: fe:5c:6e:0d:e9:5d:46:8f:51:dc:22:24:ee:5c:23:5d:38:42: 15:66:14:75:12:40:69:53:32:a8:e2:bf:74:7f:7a:34:bf:0a: 1c:c6:99:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFRTkxMTAvBgNVBAUTKDJGN0FFQkRDNzAxNzlENzE2OTRGQzY5OUQ1RjNFNDBF NTg0QUIzNjkwHhcNMjUxMjA2MTk0OTUwWhcNMjUxMjEzMTk0OTUwWjAYMRYwFAYD VQQDEw02OTM0ODhkZi1kMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yyJwoQqgAXoW65W/CyfMe/tRWv5f5Vg8MmAUoN9BMi/An20TwDJ5xTvGDMy g/3RY1s8tjbbfGNnDMkTqmpEGOEdp1ttnuDYEiyJ5IDYi8cmGLw/AJzG+8QQP8rO h5zKsFH77U00W9Jbnu5Pt9k2UdXuqs/+ZUkHT36mglYYb0gjqU6VVinBnBGTGqAJ 4pdDFEksSN5X3Qp7Hubu+Gh6cPt2oYIJGSJlc3yzANyYWRG3n/pVL6RA4JJNFNxj aS6C/qVLx+e6P3MNUnVLSBBqJ9tTdnLQOf/BuDySIjpImpKhBkqek2/CAsxFzYp6 PG028XcPNd0WMl7R8PkuqQ672wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMddJXTg U0A3v0S10GouUXZPEpFDMB8GA1UdIwQYMBaAFC9669xwF51xaU/GmdXz5A5YSrNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkVFOS8zMjQ4NDFGNEU2 RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5YRnBUOGFaMWZQa0RsaEtz MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzcnIzSEFYblhGcFQ4YVoxZlBrRGxoS3Myay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkVFOS8zMjQ4NDFGNEU2RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5Y RnBUOGFaMWZQa0RsaEtzMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOQ+RuVOm5FMFNb2PFJaQY+S99WuVm3I17aZoK/6OwGPipqLNv3Wuk UgnXnAKl6zwNZyGyAyVhdvDgNJ1TW+wMXrnvZn/ixcOo43ZE9AqqbGiZXkrrsrgx XgH//5U1pDlIZ4AG4oiW2W2OXnE4DtGO1Qe72Mu7fnKcw1DaSYrCc7rhVggblAFH hpAJFEcWuksSEmVfQuj1G/T2ywQB+TMMy6ywNrc0M0VM93Ujagms6EMNyP7lgy34 VQM6F6/667XLwYeq/SY3773SoX46kD2jdUIaOtm2AfD+XG4N6V1Gj1HcIiTuXCNd OEIVZhR1EkBpUzKo4r90f3o0vwocxpmr -----END CERTIFICATE-----Generated at Mon Dec 8 06:02:18 2025 by rpki-client