This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft File: l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft (raw, json) Hash identifier: v4aJZa24kyrKLFmETEFhqC9HWEMjP+ZstsY9zwEvmoY= Subject key identifier: ED:1C:5D:8E:E9:DE:82:3D:02:F4:F1:5D:90:68:79:08:01:98:CE:7C Authority key identifier: 97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6 Certificate issuer: /CN=A91D46B0/serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6 Certificate serial: 0816 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft Manifest number: 0809 Signing time: Mon 22 Dec 2025 20:21:22 +0000 Manifest this update: Mon 22 Dec 2025 20:21:22 +0000 Manifest next update: Mon 29 Dec 2025 20:21:22 +0000 Files and hashes: 1: l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl (hash: pTdS/zBDhXDp+OIgc6pv+nhlGM2J+BtJ8Xdefeqae6g=) 2: 63B4DD1ADA2311EB8A4EC13BC4F9AE02.roa (hash: PTG7v7H/L/iB1kTQek05PTVpPv3OUl73Y3q6ui+6etU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2070 (0x816) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D46B0, serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6 Validity Not Before: Dec 22 20:21:22 2025 GMT Not After : Dec 29 20:21:22 2025 GMT Subject: CN=6949a842-716b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:25:e7:7a:47:09:29:d0:49:bf:12:8f:60:3f: b1:bb:19:9e:9d:c3:ea:ac:fe:cc:70:cc:0a:07:f0: 13:62:5b:64:c7:c4:23:e2:c4:6e:99:65:26:e7:f7: 7c:cb:44:61:2c:11:98:29:1f:37:75:e2:99:52:b4: 4b:48:81:4e:dc:49:a9:f6:37:46:6e:1c:51:48:3a: 12:1b:87:c5:ca:31:61:d8:16:65:ab:e1:d3:0d:2f: 69:8e:73:97:0c:79:1c:4a:35:7b:7e:85:78:28:4c: dd:05:7d:c9:6a:a0:da:60:db:a3:ae:54:82:47:41: 92:a1:90:d3:82:1d:a4:ec:f2:61:2c:5f:c9:70:d4: 43:8c:7a:cf:f2:5f:76:ce:a0:e8:07:36:e5:8c:dc: c8:f8:12:41:1a:24:72:86:9b:30:fc:d2:bf:95:9e: 0a:b0:95:66:5d:59:32:9e:9b:62:27:6e:2a:be:e2: 6f:62:8b:34:3c:58:bb:51:6c:a9:0c:f7:5e:2a:a4: 92:c7:60:aa:40:1c:f6:d5:65:78:cf:8b:c4:62:2f: 83:48:c6:6e:cf:75:2d:7d:de:34:81:7b:2e:a7:fb: 0d:f7:45:dc:51:90:95:33:e8:fb:a5:49:62:dc:b0: b8:4c:52:f3:3a:82:2e:ff:7f:30:81:cc:12:00:2a: 0c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1C:5D:8E:E9:DE:82:3D:02:F4:F1:5D:90:68:79:08:01:98:CE:7C X509v3 Authority Key Identifier: keyid:97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:95:2c:16:1d:d7:52:5c:1d:8a:41:03:24:f2:f2:21:54:20: 2e:a4:d9:f2:eb:77:62:d1:fc:ee:53:d8:28:31:bf:e5:70:b0: ff:b1:3e:45:8c:b4:a1:30:ea:cd:d2:10:1f:ed:dc:b6:a5:24: c6:dc:d0:67:b4:19:10:4d:a6:8c:a5:f1:76:3b:21:57:27:49: 05:48:63:4d:9e:76:ad:8a:61:26:bc:90:63:49:6a:07:8a:2b: 20:60:f9:42:3a:1e:6c:84:7a:3f:86:66:90:46:ad:ee:8b:8f: 27:50:c1:14:f6:fb:39:0e:58:11:5a:19:86:84:d9:10:5c:c1: 67:af:18:04:12:0b:08:5e:dc:1c:f8:aa:4f:8d:e0:4f:29:d1: a4:d5:da:2e:fc:a2:4f:b0:78:7f:69:32:2a:27:0f:a8:e2:63: 70:78:ad:ff:98:25:fb:2b:d9:03:59:02:2d:52:92:a2:09:27: d1:6a:9d:10:4a:36:4e:63:ba:05:e9:c7:44:e1:91:e8:da:b4: 71:4f:45:0d:0a:51:26:31:0f:ff:f4:fb:0d:3d:56:c1:ad:ce: d8:8f:0b:87:02:34:39:9f:b7:d1:4b:0f:5e:4f:6b:a7:ec:17: 41:2f:e6:d4:e4:0e:8e:bf:3a:3a:22:df:13:ce:16:0f:0e:7d: 2f:b1:8c:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2QjAxMTAvBgNVBAUTKDk3NjFGRjVGM0Y4NDE2QkUwMUUyM0ZDNzA1ODQ3REZB OTQ0ODREQjYwHhcNMjUxMjIyMjAyMTIyWhcNMjUxMjI5MjAyMTIyWjAYMRYwFAYD VQQDDA02OTQ5YTg0Mi03MTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyXnekcJKdBJvxKPYD+xuxmencPqrP7McMwKB/ATYltkx8Qj4sRumWUm5/d8 y0RhLBGYKR83deKZUrRLSIFO3Emp9jdGbhxRSDoSG4fFyjFh2BZlq+HTDS9pjnOX DHkcSjV7foV4KEzdBX3JaqDaYNujrlSCR0GSoZDTgh2k7PJhLF/JcNRDjHrP8l92 zqDoBzbljNzI+BJBGiRyhpsw/NK/lZ4KsJVmXVkynptiJ24qvuJvYos0PFi7UWyp DPdeKqSSx2CqQBz21WV4z4vEYi+DSMZuz3Utfd40gXsup/sN90XcUZCVM+j7pUli 3LC4TFLzOoIu/38wgcwSACoMLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0cXY7p 3oI9AvTxXZBoeQgBmM58MB8GA1UdIwQYMBaAFJdh/18/hBa+AeI/xwWEffqUSE22 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDZCMC9FNTA5MDJCNjA3 OUIxMUVCOEExRjI3MzJDNEY5QUUwMi9sMkhfWHotRUZyNEI0al9IQllSOS1wUklU YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wySF9Yei1FRnI0QjRqX0hCWVI5LXBSSVRiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDZCMC9FNTA5MDJCNjA3OUIxMUVCOEExRjI3MzJDNEY5QUUwMi9sMkhfWHotRUZy NEI0al9IQllSOS1wUklUYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUlSwWHddSXB2KQQMk8vIhVCAupNny63di0fzuU9goMb/lcLD/sT5F jLShMOrN0hAf7dy2pSTG3NBntBkQTaaMpfF2OyFXJ0kFSGNNnnatimEmvJBjSWoH iisgYPlCOh5shHo/hmaQRq3ui48nUMEU9vs5DlgRWhmGhNkQXMFnrxgEEgsIXtwc +KpPjeBPKdGk1dou/KJPsHh/aTIqJw+o4mNweK3/mCX7K9kDWQItUpKiCSfRap0Q SjZOY7oF6cdE4ZHo2rRxT0UNClEmMQ//9PsNPVbBrc7YjwuHAjQ5n7fRSw9eT2un 7BdBL+bU5A6Ovzo6It8TzhYPDn0vsYxd -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:52 2025 by rpki-client