This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft File: lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft (raw, json) Hash identifier: AE0Wr0Nsn5rzZNf/6SG0MVL4j9zp/fxf0bXQrLFFCEA= Subject key identifier: 23:D0:FC:BF:72:70:2C:0A:D1:C5:A1:C4:FC:03:E4:2A:2F:50:AF:89 Authority key identifier: 95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47 Certificate issuer: /CN=A919546B/serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47 Certificate serial: 06C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft Manifest number: 06BC Signing time: Sat 20 Dec 2025 21:34:42 +0000 Manifest this update: Sat 20 Dec 2025 21:34:42 +0000 Manifest next update: Sat 27 Dec 2025 21:34:42 +0000 Files and hashes: 1: lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl (hash: KkVP9ONK42kEnKOWqo2km/Pw/OlRcwHTdtl76KwMfJk=) 2: 652993B4884F11EBB2A8337FC4F9AE02.roa (hash: Xrevk4k6Cchylp30Kd2GrTW0U2Yau9k0gu1MIRCl1Z0=) 3: 270CD9841A7111F09FFEDF3BC4F9AE02.roa (hash: nNWr6J3AcReiPHvNk6340B1sT6j8vw6YrQdSHa29JIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1731 (0x6c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919546B, serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47 Validity Not Before: Dec 20 21:34:42 2025 GMT Not After : Dec 27 21:34:42 2025 GMT Subject: CN=69471672-9c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:07:90:64:b4:2a:e6:82:9b:22:c9:79:42: 00:f4:e6:13:e7:c2:b0:eb:e3:94:8e:ee:b8:f8:83: 48:50:f3:97:f1:e8:47:b1:8b:cc:85:47:aa:23:a7: fe:a6:82:50:a2:6e:7c:8a:3c:c6:a0:c1:c7:39:e7: df:59:ae:09:f0:7c:c4:5c:e8:c3:c2:9a:f3:d9:84: 88:f1:76:7e:63:79:5b:18:1d:0e:08:ad:dc:3e:f3: c9:5b:79:8c:e7:25:5b:36:03:93:c9:89:d2:ce:76: c8:0a:b8:e4:ae:c9:35:21:09:23:8a:0e:28:57:20: b1:be:9d:d8:5b:39:60:93:02:45:73:16:2c:86:55: f5:ed:80:fa:84:14:59:b8:e7:2e:62:b9:b3:24:79: b7:57:c8:d9:d4:c6:7c:ae:ca:8b:78:99:8b:3a:51: 13:92:2d:08:29:f7:40:91:04:c3:be:20:a5:33:34: 96:fe:67:d8:78:ed:b4:6d:6f:de:86:0d:51:6a:36: 32:86:3f:99:9a:4f:12:ba:50:d6:90:0a:1c:1b:1a: e8:8d:46:21:26:e8:09:2e:b6:b8:41:4c:8c:36:27: 66:85:58:e8:9a:6a:02:6d:66:8f:23:69:2b:08:7e: 69:61:1e:01:f8:40:ce:f6:78:ba:dc:c2:a9:b8:ca: c6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D0:FC:BF:72:70:2C:0A:D1:C5:A1:C4:FC:03:E4:2A:2F:50:AF:89 X509v3 Authority Key Identifier: keyid:95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:3b:7b:f4:be:f7:61:3f:ba:aa:cd:2f:74:d6:75:da:63:40: 4d:55:b6:fe:ef:bf:f0:9a:d6:6d:de:ab:70:0a:dd:4c:bb:1a: 3a:f1:ec:9e:73:2b:06:4c:6e:52:6e:fd:d5:bd:2a:7a:20:d8: 3b:4c:ed:cf:70:50:29:1d:49:b0:99:49:c1:2a:16:13:1d:48: 89:05:3b:5e:cd:95:ec:e8:63:ef:34:5a:c1:6c:87:49:6d:ee: 42:d9:ed:94:dd:7b:a6:f8:8a:2e:a3:91:a0:97:6b:c7:84:18: 55:23:ee:e3:1b:da:4c:89:45:09:35:e5:8f:91:19:06:7c:41: e7:63:50:2b:70:e8:6f:9e:0d:be:bd:b9:e9:37:1d:b5:59:9d: 24:ca:3f:86:5e:c6:9d:fe:22:b9:ba:8c:6a:00:d6:13:e1:09: 99:d6:1e:02:71:3b:25:07:2d:6d:1b:0f:a2:77:77:13:32:39: ec:24:f7:28:74:9e:12:47:27:0f:3d:6b:1c:d9:33:8b:7b:96: af:61:18:af:62:dc:b7:87:94:79:fb:68:03:1a:a9:94:be:c8: 04:b9:b7:54:7c:36:ea:f5:2d:96:f1:45:5f:a3:75:3e:de:00: 5a:64:2b:48:e0:af:40:c6:ee:e4:4c:74:aa:fb:73:79:db:c8: 1d:70:00:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0NkIxMTAvBgNVBAUTKDk1OTUxRUNGQzkxRDBGNTVBRDhFRDhBRkJGRTYzQ0I0 MTYxOUZDNDcwHhcNMjUxMjIwMjEzNDQyWhcNMjUxMjI3MjEzNDQyWjAYMRYwFAYD VQQDDA02OTQ3MTY3Mi05YzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuwHkGS0KuaCmyLJeUIA9OYT58Kw6+OUju64+INIUPOX8ehHsYvMhUeqI6f+ poJQom58ijzGoMHHOeffWa4J8HzEXOjDwprz2YSI8XZ+Y3lbGB0OCK3cPvPJW3mM 5yVbNgOTyYnSznbICrjkrsk1IQkjig4oVyCxvp3YWzlgkwJFcxYshlX17YD6hBRZ uOcuYrmzJHm3V8jZ1MZ8rsqLeJmLOlETki0IKfdAkQTDviClMzSW/mfYeO20bW/e hg1RajYyhj+Zmk8SulDWkAocGxrojUYhJugJLra4QUyMNidmhVjommoCbWaPI2kr CH5pYR4B+EDO9ni63MKpuMrGYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPQ/L9y cCwK0cWhxPwD5CovUK+JMB8GA1UdIwQYMBaAFJWVHs/JHQ9VrY7Yr7/mPLQWGfxH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTQ2Qi9FNUFFNDQwQTg4 NEQxMUVCOTg1RUUzN0RDNEY5QUUwMi9sWlVlejhrZEQxV3RqdGl2di1ZOHRCWVpf RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xaVWV6OGtkRDFXdGp0aXZ2LVk4dEJZWl9FYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTQ2Qi9FNUFFNDQwQTg4NEQxMUVCOTg1RUUzN0RDNEY5QUUwMi9sWlVlejhrZEQx V3RqdGl2di1ZOHRCWVpfRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWO3v0vvdhP7qqzS901nXaY0BNVbb+77/wmtZt3qtwCt1Muxo68eye cysGTG5Sbv3VvSp6INg7TO3PcFApHUmwmUnBKhYTHUiJBTtezZXs6GPvNFrBbIdJ be5C2e2U3Xum+Iouo5Ggl2vHhBhVI+7jG9pMiUUJNeWPkRkGfEHnY1ArcOhvng2+ vbnpNx21WZ0kyj+GXsad/iK5uoxqANYT4QmZ1h4CcTslBy1tGw+id3cTMjnsJPco dJ4SRycPPWsc2TOLe5avYRivYty3h5R5+2gDGqmUvsgEubdUfDbq9S2W8UVfo3U+ 3gBaZCtI4K9Axu7kTHSq+3N528gdcACD -----END CERTIFICATE-----Generated at Mon Dec 22 11:19:09 2025 by rpki-client