This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft File: L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json) Hash identifier: PPqI+QnDfhGACdWLns0xJTVvGaW6euOilUvOjmr/eEw= Subject key identifier: 86:38:34:26:BB:24:87:9F:2B:5F:95:A2:89:FC:70:68:69:EE:1E:AA Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft Manifest number: 020C Signing time: Sun 07 Dec 2025 00:51:38 +0000 Manifest this update: Sun 07 Dec 2025 00:51:38 +0000 Manifest next update: Sun 14 Dec 2025 00:51:38 +0000 Files and hashes: 1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: 6UAjKJfmeHTyKqii+Z7klp8QoNHP02UwfVvAbaXG6hc=) 2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: 9PFfWoEAx34K/EBsgtnvK29zGTSC+viKRrz9B+FgvaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE28E, serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Validity Not Before: Dec 7 00:51:38 2025 GMT Not After : Dec 14 00:51:38 2025 GMT Subject: CN=6934cf9a-4a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:73:9f:6c:38:a9:50:70:e5:69:42:7c:0e:e4: a8:3d:9b:5d:fc:9a:7b:9f:0c:a9:ba:0a:9c:44:61: 56:b5:9e:61:62:bc:8a:db:b0:7f:0a:26:a7:4f:bd: 96:1f:6f:d8:46:f4:7a:d1:92:69:12:df:bc:85:71: e3:4f:16:08:0a:17:e5:e2:9a:e2:75:30:0b:f7:68: 3a:05:f0:1a:b4:89:2e:d5:5a:39:6f:df:d6:b6:1e: 69:f7:81:b6:28:b2:7d:e3:8f:22:73:3d:f8:97:b7: 1f:d9:1a:75:44:a4:71:c7:90:ea:93:88:c8:a8:b9: dd:54:e4:76:2a:72:c2:bb:c1:a9:e7:84:1d:c2:62: 95:fa:9f:b8:e3:0a:92:fa:a0:01:d1:ed:9f:78:86: 23:77:d2:58:37:56:d0:96:af:86:24:55:11:c0:48: 4d:2e:29:f8:2f:c6:31:5b:eb:15:1e:02:8c:74:89: f2:a0:5c:25:8c:6e:ad:1a:83:b3:d6:65:af:73:4c: 82:05:42:7a:f9:76:2d:82:d2:ce:52:6d:9d:1d:b3: 06:32:dd:09:49:93:cc:bc:ab:16:47:2a:a9:8d:19: 38:b4:16:d1:31:17:40:6a:9e:03:fc:16:e1:26:fa: df:33:d7:94:d4:e1:db:3d:fd:e9:2a:48:ef:37:58: 1b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:38:34:26:BB:24:87:9F:2B:5F:95:A2:89:FC:70:68:69:EE:1E:AA X509v3 Authority Key Identifier: keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:be:c0:7e:d0:a3:ab:f6:75:99:65:bb:f8:48:3f:06:d5:d6: 21:2a:c5:4a:39:0e:fc:99:8d:31:2a:a0:12:7c:b3:8d:71:5d: 6f:36:86:1d:9c:e6:a8:1b:20:ac:43:c5:56:bc:2d:0e:88:18: fb:2c:df:c1:6b:91:e3:5d:a8:13:24:37:9b:f0:51:87:aa:3f: c5:42:28:e5:5a:53:22:89:53:22:5c:ba:6b:2a:05:61:ac:2b: 4a:a3:23:48:cd:76:0d:05:27:ec:e3:9a:aa:51:7e:c9:9a:94: 33:fd:8d:d3:22:db:22:21:7c:1b:a6:47:2b:8d:f1:18:d2:e2: 92:32:89:ee:86:5a:02:61:80:a4:f7:4a:9e:f3:6c:d9:21:69: 58:21:6f:ca:3b:93:b5:50:ec:6a:92:c9:72:ec:9f:8a:a4:8c: ff:da:3b:27:66:cc:59:fb:29:86:6d:6a:a9:11:1a:59:35:51: 9c:d6:c1:02:e8:a4:ef:d8:92:e8:bc:c9:33:1c:1d:52:84:6b: 63:9c:1e:07:65:c4:33:b0:df:b4:84:f4:09:d9:54:24:52:8d: b1:18:2d:44:20:95:1a:6f:2b:49:e9:ac:a3:51:eb:56:eb:e2: 66:56:fe:a2:12:7e:ea:06:22:93:bf:24:8a:53:2f:ae:42:08: a3:22:ea:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyOEUxMTAvBgNVBAUTKDJGNjEzOEZFMkRCOTRFRjdFMzNFQzA4M0M2ODI1QjJB MzE5N0FDRTYwHhcNMjUxMjA3MDA1MTM4WhcNMjUxMjE0MDA1MTM4WjAYMRYwFAYD VQQDEw02OTM0Y2Y5YS00YTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3OfbDipUHDlaUJ8DuSoPZtd/Jp7nwypugqcRGFWtZ5hYryK27B/CianT72W H2/YRvR60ZJpEt+8hXHjTxYIChfl4pridTAL92g6BfAatIku1Vo5b9/Wth5p94G2 KLJ9448icz34l7cf2Rp1RKRxx5Dqk4jIqLndVOR2KnLCu8Gp54QdwmKV+p+44wqS +qAB0e2feIYjd9JYN1bQlq+GJFURwEhNLin4L8YxW+sVHgKMdInyoFwljG6tGoOz 1mWvc0yCBUJ6+XYtgtLOUm2dHbMGMt0JSZPMvKsWRyqpjRk4tBbRMRdAap4D/Bbh JvrfM9eU1OHbPf3pKkjvN1gb4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIY4NCa7 JIefK1+Voon8cGhp7h6qMB8GA1UdIwQYMBaAFC9hOP4tuU734z7Ag8aCWyoxl6zm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTI4RS9EREVBNzI3NEI3 M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2ZmpQc0NEeG9KYktqR1hy T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wyRTRfaTI1VHZmalBzQ0R4b0piS2pHWHJPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTI4RS9EREVBNzI3NEI3M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2 ZmpQc0NEeG9KYktqR1hyT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7vsB+0KOr9nWZZbv4SD8G1dYhKsVKOQ78mY0xKqASfLONcV1vNoYd nOaoGyCsQ8VWvC0OiBj7LN/Ba5HjXagTJDeb8FGHqj/FQijlWlMiiVMiXLprKgVh rCtKoyNIzXYNBSfs45qqUX7JmpQz/Y3TItsiIXwbpkcrjfEY0uKSMonuhloCYYCk 90qe82zZIWlYIW/KO5O1UOxqksly7J+KpIz/2jsnZsxZ+ymGbWqpERpZNVGc1sEC 6KTv2JLovMkzHB1ShGtjnB4HZcQzsN+0hPQJ2VQkUo2xGC1EIJUabytJ6ayjUetW 6+JmVv6iEn7qBiKTvySKUy+uQgijIupI -----END CERTIFICATE-----Generated at Mon Dec 8 06:57:03 2025 by rpki-client