This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json) Hash identifier: 0+EkeTPdxcyj5v39Q9vvZMF/++AmmFtuHB596MkPZeQ= Subject key identifier: BC:A3:44:40:99:2D:2F:BF:81:F0:A3:4B:D2:91:1A:26:29:A4:F2:4F Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Certificate serial: 042C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft Manifest number: 0425 Signing time: Thu 18 Dec 2025 23:40:17 +0000 Manifest this update: Thu 18 Dec 2025 23:40:17 +0000 Manifest next update: Thu 25 Dec 2025 23:40:17 +0000 Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: Jwr7O1sz1tMgEG2uRDHQoEVCFEMgyMWaEiVX4BtoEvc=) 2: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: 41dvwuGONsbAf2NNxcw97I3G8Q6DNf+rajP9T/KIeiw=) 3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: q51gHdBYG+mFAHDh24P09p42ENPRR4e2b1fq2dGY3KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1068 (0x42c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Validity Not Before: Dec 18 23:40:17 2025 GMT Not After : Dec 25 23:40:17 2025 GMT Subject: CN=694490e1-1f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6f:f6:60:cf:62:54:69:db:90:6f:66:c6:59: 8c:3e:e2:39:f9:9c:1f:97:b9:6e:cd:fe:2f:16:ce: 5e:13:95:ee:d9:33:66:97:fb:e1:af:f7:e8:ea:0f: 3f:b1:36:c9:3f:4e:36:3f:a3:16:41:be:76:6e:70: 40:b1:39:8d:d5:3f:66:5e:dc:12:7c:05:44:be:65: 67:a0:12:78:c9:40:2a:e9:6f:c8:4b:bd:96:6b:76: 4e:14:37:f9:92:51:89:a5:58:4e:f1:6f:e6:bb:ba: 4a:39:f9:21:3a:c9:ed:20:b5:ff:b9:b6:0a:9a:96: b4:0b:ab:7f:b7:57:23:8e:8b:da:a2:bd:90:fd:ad: e9:15:7f:65:aa:18:c5:74:51:de:ea:02:b0:f3:02: c8:5f:d0:69:f9:a5:b7:6f:7e:64:e5:00:e5:82:66: c8:48:a8:0b:58:db:e1:49:66:6e:7b:ba:49:49:13: 58:b3:4e:23:32:e7:6b:17:5d:1e:26:64:65:f8:9d: b5:3c:b5:85:e4:1d:30:e0:a5:68:99:45:97:aa:fa: 4b:4e:f7:99:88:66:69:4c:09:bf:be:8f:e4:99:4d: eb:c2:5d:52:10:63:ec:19:cd:38:7f:fc:dc:ac:a2: 84:38:dc:f9:48:10:48:63:1a:2a:a2:c3:ec:35:78: eb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A3:44:40:99:2D:2F:BF:81:F0:A3:4B:D2:91:1A:26:29:A4:F2:4F X509v3 Authority Key Identifier: keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:60:3c:70:e2:e7:bb:5b:58:be:c9:ce:da:a9:bd:5d:91:87: 76:e3:e8:62:fe:59:77:1f:62:80:f0:6d:34:a2:a1:a7:3c:e7: b6:9d:ee:86:b1:53:08:d5:1b:24:6f:dc:9c:65:92:5f:2a:a4: 1d:d1:c5:3b:a8:bd:9d:78:ba:6f:0e:0c:a7:b1:93:0e:43:90: be:18:5a:ee:d2:42:6d:2f:43:68:78:4c:16:28:50:e4:a3:56: f0:d3:70:d5:16:58:8d:25:c9:6f:39:85:b9:31:52:00:2a:1e: 93:da:69:1d:72:82:5d:cc:04:58:6a:5c:44:29:c4:85:53:c6: f2:3d:9c:20:e7:78:0a:4b:79:d4:ac:88:a1:ab:4e:52:3c:4c: d5:5f:58:92:cc:03:26:5f:7c:6b:88:7f:a2:b3:6a:8f:57:9c: 5a:d0:a2:6a:1f:64:78:8d:11:a9:06:af:59:1f:a2:8d:21:03: a9:35:09:c0:40:b0:41:10:96:84:e6:a3:4e:64:3a:b8:0c:87: 04:40:9c:42:7a:06:08:c2:bd:d1:07:a5:8d:a0:58:fc:cb:35: 64:ba:7e:85:f9:00:83:2f:7e:4b:14:fc:f2:3b:1f:73:35:08: 92:79:f7:f0:8c:c2:97:4a:54:b8:e7:7a:89:1a:78:dd:b3:3f: 26:17:13:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD NTM2RkRGOUIwHhcNMjUxMjE4MjM0MDE3WhcNMjUxMjI1MjM0MDE3WjAYMRYwFAYD VQQDDA02OTQ0OTBlMS0xZjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAym/2YM9iVGnbkG9mxlmMPuI5+Zwfl7luzf4vFs5eE5Xu2TNml/vhr/fo6g8/ sTbJP042P6MWQb52bnBAsTmN1T9mXtwSfAVEvmVnoBJ4yUAq6W/IS72Wa3ZOFDf5 klGJpVhO8W/mu7pKOfkhOsntILX/ubYKmpa0C6t/t1cjjovaor2Q/a3pFX9lqhjF dFHe6gKw8wLIX9Bp+aW3b35k5QDlgmbISKgLWNvhSWZue7pJSRNYs04jMudrF10e JmRl+J21PLWF5B0w4KVomUWXqvpLTveZiGZpTAm/vo/kmU3rwl1SEGPsGc04f/zc rKKEONz5SBBIYxoqosPsNXjrmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyjRECZ LS+/gfCjS9KRGiYppPJPMB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbYDxw4ue7W1i+yc7aqb1dkYd24+hi/ll3H2KA8G00oqGnPOe2ne6G sVMI1Rskb9ycZZJfKqQd0cU7qL2deLpvDgynsZMOQ5C+GFru0kJtL0NoeEwWKFDk o1bw03DVFliNJclvOYW5MVIAKh6T2mkdcoJdzARYalxEKcSFU8byPZwg53gKS3nU rIihq05SPEzVX1iSzAMmX3xriH+is2qPV5xa0KJqH2R4jRGpBq9ZH6KNIQOpNQnA QLBBEJaE5qNOZDq4DIcEQJxCegYIwr3RB6WNoFj8yzVkun6F+QCDL35LFPzyOx9z NQiSeffwjMKXSlS453qJGnjdsz8mFxOE -----END CERTIFICATE-----Generated at Fri Dec 19 20:30:50 2025 by rpki-client