This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft File: ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json) Hash identifier: Z51k4VdndkT9zPVhIUTaazZ6vT29pkdqTpuad/84CRo= Subject key identifier: 31:77:C7:23:9B:AD:F7:C9:BA:74:33:E1:0A:A7:15:A5:41:27:78:1F Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF Certificate issuer: /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft Manifest number: 01D2 Signing time: Tue 23 Dec 2025 01:52:15 +0000 Manifest this update: Tue 23 Dec 2025 01:52:14 +0000 Manifest next update: Tue 30 Dec 2025 01:52:14 +0000 Files and hashes: 1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: 1DA+zxg9YN1tM1eCkfiiAhd3FVIA7MIm4jttTJL+C0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF Validity Not Before: Dec 23 01:52:14 2025 GMT Not After : Dec 30 01:52:14 2025 GMT Subject: CN=6949f5cf-ee4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9d:ba:41:18:13:e0:4f:60:d0:50:98:f0:9e: 23:ce:50:8a:39:2c:ea:25:b5:e8:0c:f0:ff:50:33: dd:56:46:8e:d2:ef:6b:93:4a:60:c1:bd:cc:b8:16: 76:36:92:af:14:a0:86:9a:ca:40:2a:6a:87:1c:b1: 9a:de:f7:ac:67:b6:d9:38:bd:de:26:8c:70:5c:23: c6:14:7a:61:bb:95:4f:39:01:f3:39:fc:02:9d:64: d4:71:33:11:2b:de:41:8c:5b:53:e7:3c:04:f4:82: 96:0e:2a:39:fd:a8:e5:9d:3b:28:e4:f9:46:26:f5: 9f:4f:1a:6f:c3:b4:9f:f6:75:c1:0f:01:8f:7b:9b: 1f:e2:fc:04:44:62:18:b9:e5:7e:bd:b0:4b:6a:47: 56:56:98:21:42:62:13:b3:cc:a3:49:af:c7:7b:8f: 43:e2:46:b0:8b:86:33:00:3b:30:93:db:80:0a:75: 4f:e8:43:34:1b:46:18:78:2d:a7:00:3b:1e:e1:74: 19:d7:57:c8:ba:f6:a1:87:ef:e7:8d:b6:69:49:29: 02:92:d1:cb:09:16:ab:40:df:83:a2:f0:9d:7c:f7: 50:02:b1:30:cf:c2:90:7d:08:0c:3a:d1:3b:2c:22: a1:9d:a5:64:74:2a:0e:4e:7b:0b:d1:2c:59:2c:8f: fa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:77:C7:23:9B:AD:F7:C9:BA:74:33:E1:0A:A7:15:A5:41:27:78:1F X509v3 Authority Key Identifier: keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f0:5c:0e:76:3c:f7:4b:30:bd:5d:59:e5:4f:38:02:0b:b5: 53:b7:b0:60:ea:0f:6b:5f:65:78:6b:6c:10:8c:f3:15:b6:32: 09:29:b3:2c:97:bb:19:ff:91:25:f9:b6:87:21:e7:b2:fb:dd: 00:6a:a1:79:41:1b:7a:0e:3d:5d:3d:ff:ab:9a:53:1c:b4:81: 73:c0:f6:9d:df:18:89:4f:f5:03:cc:cc:24:bf:1f:7b:58:69: 9c:66:18:6e:16:4d:a7:45:5a:60:94:3b:ac:6a:91:a9:fd:e8: 4a:d2:fc:f2:95:8f:4e:95:77:50:76:d8:57:d8:a9:ac:fe:2c: 4e:2b:ff:55:63:dd:38:27:7b:7f:56:fc:76:35:51:16:24:af: 7a:98:c1:76:2a:01:c8:47:28:81:4f:0e:3a:5d:f9:8d:7f:f5: af:10:64:c9:83:31:3c:00:f5:eb:52:6e:04:90:3a:d3:d9:41: bc:ae:69:bb:41:29:21:34:c0:83:ea:f4:22:c9:1d:6e:a3:dd: 56:84:de:eb:0b:72:84:bf:f1:eb:fd:cc:d4:77:69:4a:3a:8a: c5:99:8f:2f:c5:1e:a4:8d:82:74:5a:cc:10:50:8f:49:b2:d7: b3:50:36:4b:a8:2a:54:72:b0:17:c4:12:d8:7b:3f:fb:4e:aa: 75:9c:a7:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwRjgxMTAvBgNVBAUTKDk2MzNGNjJGRkIyMTg2NzZFQkM5M0YxQzM3Njk2NDlD MEM1RDg0REYwHhcNMjUxMjIzMDE1MjE0WhcNMjUxMjMwMDE1MjE0WjAYMRYwFAYD VQQDDA02OTQ5ZjVjZi1lZTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqp26QRgT4E9g0FCY8J4jzlCKOSzqJbXoDPD/UDPdVkaO0u9rk0pgwb3MuBZ2 NpKvFKCGmspAKmqHHLGa3vesZ7bZOL3eJoxwXCPGFHphu5VPOQHzOfwCnWTUcTMR K95BjFtT5zwE9IKWDio5/ajlnTso5PlGJvWfTxpvw7Sf9nXBDwGPe5sf4vwERGIY ueV+vbBLakdWVpghQmITs8yjSa/He49D4kawi4YzADswk9uACnVP6EM0G0YYeC2n ADse4XQZ11fIuvahh+/njbZpSSkCktHLCRarQN+DovCdfPdQArEwz8KQfQgMOtE7 LCKhnaVkdCoOTnsL0SxZLI/6HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDF3xyOb rffJunQz4QqnFaVBJ3gfMB8GA1UdIwQYMBaAFJYz9i/7IYZ268k/HDdpZJwMXYTf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjBGOC9CMDZGQUUyRTE5 N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhuYnJ5VDhjTjJsa25BeGRo TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xqUDJMX3NoaG5icnlUOGNOMmxrbkF4ZGhOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjBGOC9CMDZGQUUyRTE5N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhu YnJ5VDhjTjJsa25BeGRoTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe8FwOdjz3SzC9XVnlTzgCC7VTt7Bg6g9rX2V4a2wQjPMVtjIJKbMs l7sZ/5El+baHIeey+90AaqF5QRt6Dj1dPf+rmlMctIFzwPad3xiJT/UDzMwkvx97 WGmcZhhuFk2nRVpglDusapGp/ehK0vzylY9OlXdQdthX2Kms/ixOK/9VY904J3t/ Vvx2NVEWJK96mMF2KgHIRyiBTw46XfmNf/WvEGTJgzE8APXrUm4EkDrT2UG8rmm7 QSkhNMCD6vQiyR1uo91WhN7rC3KEv/Hr/czUd2lKOorFmY8vxR6kjYJ0WswQUI9J stezUDZLqCpUcrAXxBLYez/7Tqp1nKf3 -----END CERTIFICATE-----Generated at Wed Dec 24 19:32:18 2025 by rpki-client