This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft File: l_PsEBRVjghHCgOpR4yE8j5FADo.mft (raw, json) Hash identifier: eCKSHEa1LTM/3yCbvxbVcyLKv6ys7FvO+0KQ7kmZBVA= Subject key identifier: 4E:7A:21:A3:1C:CB:0C:85:A6:83:89:C5:6E:4F:13:95:7F:5B:F6:13 Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A Certificate issuer: /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Certificate serial: 01FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft Manifest number: 01EC Signing time: Tue 23 Dec 2025 01:46:06 +0000 Manifest this update: Tue 23 Dec 2025 01:46:06 +0000 Manifest next update: Tue 30 Dec 2025 01:46:06 +0000 Files and hashes: 1: l_PsEBRVjghHCgOpR4yE8j5FADo.crl (hash: nn0MI31OvtwONSRE7uJ/jJfaXKDaxfWqNpZCM+u1qNI=) 2: B7D34CC444ED11EE8D931624C4F9AE02.roa (hash: ROkkzatt5V9Pz+AtU25/WOuwZ/bxAOBTVtr/gp1mTRQ=) 3: D78EA2DE44ED11EEA6685324C4F9AE02.roa (hash: gvjJNiO9vqYIhsYjJBaQQlt1G1Z/kYCgfliXikgsWHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E92, serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Validity Not Before: Dec 23 01:46:06 2025 GMT Not After : Dec 30 01:46:06 2025 GMT Subject: CN=6949f45e-0e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:39:42:dc:6d:95:bb:f8:77:a0:5a:54:ba: eb:5a:fa:e7:64:7c:84:a7:dc:56:68:2c:cd:ad:0c: ea:db:41:38:99:96:db:9e:1a:dd:5b:3e:2c:92:f7: f8:8c:3b:3a:1e:0c:32:7d:ce:c5:c3:af:c8:d8:3e: e2:13:eb:ea:ac:97:db:60:9e:b1:8d:df:dd:03:2d: 5c:ac:e1:16:c0:9a:c7:bd:87:f2:7a:52:5c:25:de: 03:25:5a:42:b1:8a:81:d2:83:d4:9c:98:40:f7:d3: fb:e5:3e:f0:fa:57:07:b8:17:21:8d:fb:bc:57:51: 1b:38:c6:df:55:e8:8d:4e:b8:ad:2a:74:a4:ff:0c: 45:f0:cd:c1:54:11:77:28:dd:e9:23:7f:9e:8a:e8: 37:e3:86:1b:a7:73:0d:f8:4a:e2:75:aa:38:9c:53: 05:a8:fe:22:9f:1e:0f:2f:08:6f:d4:8d:4f:25:e7: 28:f7:0d:e2:d2:ff:e1:28:ae:24:ba:09:9c:d7:29: 9b:9f:7b:03:43:41:99:d7:8d:e7:ec:56:f7:ef:27: ac:2b:35:cc:55:cd:87:f5:d9:fc:13:0a:df:01:e8: 4b:50:d5:19:50:a7:a5:e2:32:f3:2e:c1:63:97:c0: 17:06:ea:86:36:ab:97:05:09:95:40:9c:1e:fc:6c: 7b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7A:21:A3:1C:CB:0C:85:A6:83:89:C5:6E:4F:13:95:7F:5B:F6:13 X509v3 Authority Key Identifier: keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d0:37:de:a5:4b:de:87:64:82:cd:20:2a:11:05:63:1d:d0: e0:2d:22:bb:3f:23:48:81:3a:fa:19:1f:24:f5:48:a7:ba:7b: e2:74:45:78:d0:ed:28:d9:42:2b:1d:e0:03:59:b6:e5:27:cb: 30:a3:8e:d7:f0:62:e3:8f:a4:5b:1f:11:87:62:48:0f:2a:f5: 21:ae:a5:5e:5f:50:fa:93:f7:fa:73:7b:b5:65:7b:56:d7:ca: cc:b9:f9:7a:6b:da:fa:cf:47:73:2f:09:17:a8:d2:2f:52:b5: d4:32:81:a6:b4:ba:d5:0a:1d:17:1b:d0:c2:81:12:53:a3:a5: b3:79:87:44:99:f4:63:d2:0d:cd:18:3b:f7:09:08:6a:35:40: b8:83:e3:5a:0a:9d:36:d0:29:1e:15:ee:5b:a7:d0:e5:fd:21: 1b:ca:d1:55:43:20:84:82:16:c3:4e:d2:84:6e:de:78:40:eb: 94:20:ff:da:ad:6e:32:a9:75:77:ba:b0:02:4c:56:6f:03:f1: 13:f1:22:38:06:e3:93:0f:2f:db:b2:62:3d:d1:4d:50:a9:8f: d9:23:06:20:d9:c4:8a:ef:6c:26:aa:51:18:45:a3:01:15:05: 80:95:af:20:8d:66:cb:5c:b2:9a:3f:7c:35:03:ae:55:78:ea: da:f3:e7:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFOTIxMTAvBgNVBAUTKDk3RjNFQzEwMTQ1NThFMDg0NzBBMDNBOTQ3OEM4NEYy M0U0NTAwM0EwHhcNMjUxMjIzMDE0NjA2WhcNMjUxMjMwMDE0NjA2WjAYMRYwFAYD VQQDDA02OTQ5ZjQ1ZS0wZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvL05Qtxtlbv4d6BaVLrrWvrnZHyEp9xWaCzNrQzq20E4mZbbnhrdWz4skvf4 jDs6Hgwyfc7Fw6/I2D7iE+vqrJfbYJ6xjd/dAy1crOEWwJrHvYfyelJcJd4DJVpC sYqB0oPUnJhA99P75T7w+lcHuBchjfu8V1EbOMbfVeiNTritKnSk/wxF8M3BVBF3 KN3pI3+eiug344Ybp3MN+Eridao4nFMFqP4inx4PLwhv1I1PJeco9w3i0v/hKK4k ugmc1ymbn3sDQ0GZ143n7Fb37yesKzXMVc2H9dn8EwrfAehLUNUZUKel4jLzLsFj l8AXBuqGNquXBQmVQJwe/Gx7aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE56IaMc ywyFpoOJxW5PE5V/W/YTMB8GA1UdIwQYMBaAFJfz7BAUVY4IRwoDqUeMhPI+RQA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkU5Mi8xODg1QTZEMjA2 Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpnaEhDZ09wUjR5RThqNUZB RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfUHNFQlJWamdoSENnT3BSNHlFOGo1RkFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkU5Mi8xODg1QTZEMjA2Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpn aEhDZ09wUjR5RThqNUZBRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO0DfepUveh2SCzSAqEQVjHdDgLSK7PyNIgTr6GR8k9UinunvidEV4 0O0o2UIrHeADWbblJ8swo47X8GLjj6RbHxGHYkgPKvUhrqVeX1D6k/f6c3u1ZXtW 18rMufl6a9r6z0dzLwkXqNIvUrXUMoGmtLrVCh0XG9DCgRJTo6WzeYdEmfRj0g3N GDv3CQhqNUC4g+NaCp020CkeFe5bp9Dl/SEbytFVQyCEghbDTtKEbt54QOuUIP/a rW4yqXV3urACTFZvA/ET8SI4BuOTDy/bsmI90U1QqY/ZIwYg2cSK72wmqlEYRaMB FQWAla8gjWbLXLKaP3w1A65VeOra8+e9 -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:34 2025 by rpki-client