This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft File: L2rfQq_RZAgOox4PO4M4vtbaHlk.mft (raw, json) Hash identifier: 8S2Su1xNsvg1Qn+NEEL3M896F48MuuXKYX9Hl7xj1Ac= Subject key identifier: 1E:08:88:A3:E5:32:0C:79:F0:85:DD:33:97:65:8B:58:DB:58:AC:F0 Authority key identifier: 2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 Certificate issuer: /CN=A91E7164/serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Certificate serial: 0A0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft Manifest number: 0A04 Signing time: Mon 22 Dec 2025 19:15:24 +0000 Manifest this update: Mon 22 Dec 2025 19:15:23 +0000 Manifest next update: Mon 29 Dec 2025 19:15:23 +0000 Files and hashes: 1: L2rfQq_RZAgOox4PO4M4vtbaHlk.crl (hash: eWZ5kh4IrMps9BGFj99kd29x3LXq5qJV8LSvJzO8byc=) 2: F3173EDC898C11EA97286262C4F9AE02.roa (hash: BtxRntrFd2gslQewNiqZhW9mWCF+vgLPC26me/9r2bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2571 (0xa0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7164, serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Validity Not Before: Dec 22 19:15:23 2025 GMT Not After : Dec 29 19:15:23 2025 GMT Subject: CN=694998cc-848d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b1:06:d2:f5:17:23:6e:8b:3a:03:56:ed:50: 27:12:37:16:b5:77:75:86:20:f8:ba:f6:af:2f:1b: fa:89:1d:9e:da:ff:93:b2:5f:55:25:01:30:52:a7: b7:b3:13:24:7d:64:41:bd:bc:d7:50:4c:8d:05:27: 2e:07:2e:21:5f:6c:e6:7d:ce:e3:68:6b:76:55:30: 19:fb:2f:5b:c0:dc:e2:ff:b7:ef:b4:b6:61:3c:23: ba:81:70:9c:bc:ff:b5:40:61:79:2d:cb:4e:52:73: 7d:97:c6:b3:e2:07:6b:ae:50:f1:15:a3:0c:43:33: 69:2d:2b:bf:6a:a2:da:1f:4c:a1:71:cf:42:da:0f: 4d:03:49:f2:8e:68:83:55:1a:d0:88:33:c0:44:aa: 66:f6:a5:b7:a1:f2:c5:eb:d7:f9:36:1a:b9:d3:e3: f7:d0:1c:86:fd:a3:85:86:bb:b2:b6:3c:f9:f5:26: 6d:d7:58:b2:cb:93:25:b7:9a:9f:7e:a3:d0:52:cc: da:1f:90:26:5a:2a:3f:03:50:98:56:4f:19:cd:e0: 7b:69:70:94:6f:e8:a6:c0:91:26:bb:1f:f8:ae:76: 9f:e9:33:5a:c3:38:d6:39:28:6d:e6:4d:db:96:27: 7f:b9:fd:33:8b:40:4e:2d:cf:2a:41:99:b7:19:8f: 7b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:08:88:A3:E5:32:0C:79:F0:85:DD:33:97:65:8B:58:DB:58:AC:F0 X509v3 Authority Key Identifier: keyid:2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:99:42:57:46:94:12:1b:53:66:d0:a7:2d:9b:0a:bf:cb:85: c8:3d:78:d5:14:d3:37:87:25:0c:76:fa:d9:f0:24:98:51:1e: d1:cc:be:04:87:78:01:8c:3e:ef:e2:3b:73:b9:31:63:27:64: 50:5c:eb:e1:55:4f:11:81:a1:c2:84:a7:74:fd:93:d4:14:74: f9:1f:4f:9f:d8:0a:f4:91:7d:44:4b:dd:54:d4:c1:f9:19:8e: 54:eb:c0:6b:f3:df:45:3c:12:35:e2:8a:01:1e:0a:cb:5e:25: 5a:2d:93:ae:9d:ae:9e:16:86:9c:35:68:e6:b5:c0:fb:fb:06: b4:65:97:08:e9:13:20:86:88:85:ef:ee:d8:6f:ff:45:58:2f: 75:7d:8e:fd:e3:ab:05:57:27:b6:8f:24:7a:aa:e9:df:77:77: 98:ee:7d:8c:bc:ea:9f:82:fa:88:7b:f2:79:2c:c5:84:7a:d4: d7:09:b7:58:5a:6b:0d:9a:af:9f:d8:5b:39:3a:92:d6:c4:ca: de:fe:73:5e:ed:e2:21:9b:74:19:59:2b:79:18:1e:e4:cf:fb: b0:aa:0c:33:d3:42:c5:c6:db:d7:53:18:5f:bf:91:48:23:8c: d5:13:ad:7d:6e:ea:6d:cb:9b:99:58:08:51:82:2b:4c:48:25: 7a:01:9d:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxNjQxMTAvBgNVBAUTKDJGNkFERjQyQUZEMTY0MDgwRUEzMUUwRjNCODMzOEJF RDZEQTFFNTkwHhcNMjUxMjIyMTkxNTIzWhcNMjUxMjI5MTkxNTIzWjAYMRYwFAYD VQQDDA02OTQ5OThjYy04NDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrEG0vUXI26LOgNW7VAnEjcWtXd1hiD4uvavLxv6iR2e2v+Tsl9VJQEwUqe3 sxMkfWRBvbzXUEyNBScuBy4hX2zmfc7jaGt2VTAZ+y9bwNzi/7fvtLZhPCO6gXCc vP+1QGF5LctOUnN9l8az4gdrrlDxFaMMQzNpLSu/aqLaH0yhcc9C2g9NA0nyjmiD VRrQiDPARKpm9qW3ofLF69f5Nhq50+P30ByG/aOFhruytjz59SZt11iyy5Mlt5qf fqPQUszaH5AmWio/A1CYVk8ZzeB7aXCUb+imwJEmux/4rnaf6TNawzjWOSht5k3b lid/uf0zi0BOLc8qQZm3GY97UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4IiKPl Mgx58IXdM5dli1jbWKzwMB8GA1UdIwQYMBaAFC9q30Kv0WQIDqMeDzuDOL7W2h5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzE2NC8yMjhBQkY3NDg5 OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpBZ09veDRQTzRNNHZ0YmFI bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wycmZRcV9SWkFnT294NFBPNE00dnRiYUhsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzE2NC8yMjhBQkY3NDg5OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpB Z09veDRQTzRNNHZ0YmFIbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrmUJXRpQSG1Nm0Kctmwq/y4XIPXjVFNM3hyUMdvrZ8CSYUR7RzL4E h3gBjD7v4jtzuTFjJ2RQXOvhVU8RgaHChKd0/ZPUFHT5H0+f2Ar0kX1ES91U1MH5 GY5U68Br899FPBI14ooBHgrLXiVaLZOuna6eFoacNWjmtcD7+wa0ZZcI6RMghoiF 7+7Yb/9FWC91fY7946sFVye2jyR6qunfd3eY7n2MvOqfgvqIe/J5LMWEetTXCbdY WmsNmq+f2Fs5OpLWxMre/nNe7eIhm3QZWSt5GB7kz/uwqgwz00LFxtvXUxhfv5FI I4zVE619bupty5uZWAhRgitMSCV6AZ2I -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:45 2025 by rpki-client