This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft File: L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json) Hash identifier: ZZWiZDAIQOQkeLaOW6Tm8mwDEp65JXOV5+g7rAU/7ps= Subject key identifier: B5:61:2A:28:47:22:80:A8:90:B7:22:8D:E6:B5:A2:6D:E2:6C:F2:EB Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft Manifest number: 01C8 Signing time: Sun 21 Dec 2025 02:12:34 +0000 Manifest this update: Sun 21 Dec 2025 02:12:33 +0000 Manifest next update: Sun 28 Dec 2025 02:12:33 +0000 Files and hashes: 1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: 9EcmZz7zG+KMyWvAwkSW3LYrKKKXCCGqqRousjXw3rA=) 2: 9E0E36BC687011EFB37CF04DC4F9AE02.roa (hash: EprsArqX10tciUDnJyTtwLBO1znf5648IY94YSIb7dw=) 3: C4CA725C687011EFA523204EC4F9AE02.roa (hash: sLQoRFbBh4I+Q9+Kwgifp5lKDCoMhLma6zjy4BIW7WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Validity Not Before: Dec 21 02:12:33 2025 GMT Not After : Dec 28 02:12:33 2025 GMT Subject: CN=69475792-ce87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ae:37:00:e8:cc:3b:b3:e9:a3:8c:7f:28:2d: af:cb:0f:50:a1:4c:c7:53:af:24:b0:53:85:df:fe: 06:66:4f:ae:84:aa:12:09:f5:4b:70:f4:1c:f8:24: c6:2a:8c:a0:b9:47:39:95:07:08:c6:c3:bd:83:65: 5c:6a:ed:19:32:04:d0:f2:ed:2f:a7:73:47:0d:ea: e2:61:84:b1:42:3f:f5:af:eb:f7:b1:7a:11:ae:96: f4:22:dd:9f:82:d6:e8:aa:14:8a:e2:3c:b1:13:5f: ff:44:16:ce:92:ea:7c:69:27:eb:e8:62:b5:8f:7c: 8c:7a:23:fa:c8:be:15:67:93:3c:a8:e3:d1:65:7e: b7:af:da:07:b8:ae:f5:72:a0:8d:f9:fb:7c:10:0c: 37:2f:c2:d8:20:20:1b:c5:a9:75:ca:d1:8e:81:1d: 48:38:00:a7:4e:88:87:48:cc:7b:bd:94:3f:57:24: ad:3a:ff:f1:d9:40:e9:41:22:b0:3a:47:84:0e:83: ad:97:2f:b9:6c:1c:bf:7a:4c:b2:9d:76:d1:55:a5: b9:30:57:62:86:7b:c0:21:e3:6c:7c:ad:73:2f:12: 62:58:b0:cd:5a:da:a0:64:e6:c9:99:f6:58:4a:42: 70:bb:16:51:a1:4a:7d:1a:cf:18:18:a6:e4:68:78: 7a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:61:2A:28:47:22:80:A8:90:B7:22:8D:E6:B5:A2:6D:E2:6C:F2:EB X509v3 Authority Key Identifier: keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:3a:7f:3b:0d:31:38:5a:e8:28:df:32:1c:14:0c:25:7a:c5: 1d:84:f6:99:b7:2f:cb:a0:1c:64:3e:0c:a1:e1:da:9b:00:f1: 50:96:1a:3f:df:4c:71:c3:53:37:c1:a0:61:b1:17:43:80:7a: 87:12:d7:37:87:1f:da:b8:33:1f:9b:2b:a8:69:3c:55:64:b0: 5f:c0:ae:a5:1a:f9:f6:e8:bc:45:a6:ce:f7:78:f4:03:69:ac: c5:28:39:a8:36:b5:58:21:5b:9e:8a:2d:03:d1:d3:af:ed:d7: 04:78:16:b6:93:9c:c9:0c:8b:8d:d2:19:22:ee:21:d3:f6:5c: ef:4b:3d:f4:73:56:41:f2:1e:de:5e:bd:90:d0:f9:74:a3:2c: 17:b2:42:2e:a2:d4:a7:bb:be:d4:33:84:96:09:0b:8e:65:a8: a4:ab:d0:ac:c8:b9:6c:e8:88:52:c9:e5:e4:7b:c8:93:53:dd: f0:c0:d7:cc:6e:b3:2a:67:cc:f7:e2:9e:4b:8e:47:ab:ef:6f: 10:5c:78:97:30:72:21:82:cf:a0:47:c4:a0:20:8b:3d:b6:84: 0e:03:8b:90:42:a5:2e:40:dc:63:47:68:2e:c9:b0:36:5e:d2: be:43:ab:6d:df:7c:b7:9a:a3:e9:cc:f8:47:66:2a:f1:48:cf: 02:dd:e9:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx OTcxODAwNkYwHhcNMjUxMjIxMDIxMjMzWhcNMjUxMjI4MDIxMjMzWjAYMRYwFAYD VQQDDA02OTQ3NTc5Mi1jZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArq43AOjMO7Ppo4x/KC2vyw9QoUzHU68ksFOF3/4GZk+uhKoSCfVLcPQc+CTG KoyguUc5lQcIxsO9g2Vcau0ZMgTQ8u0vp3NHDeriYYSxQj/1r+v3sXoRrpb0It2f gtboqhSK4jyxE1//RBbOkup8aSfr6GK1j3yMeiP6yL4VZ5M8qOPRZX63r9oHuK71 cqCN+ft8EAw3L8LYICAbxal1ytGOgR1IOACnToiHSMx7vZQ/VyStOv/x2UDpQSKw OkeEDoOtly+5bBy/ekyynXbRVaW5MFdihnvAIeNsfK1zLxJiWLDNWtqgZObJmfZY SkJwuxZRoUp9Gs8YGKbkaHh6GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVhKihH IoCokLcijea1om3ibPLrMB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxW NC1MRm5WMmZqdWtaY1lBRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDOn87DTE4Wugo3zIcFAwlesUdhPaZty/LoBxkPgyh4dqbAPFQlho/ 30xxw1M3waBhsRdDgHqHEtc3hx/auDMfmyuoaTxVZLBfwK6lGvn26LxFps73ePQD aazFKDmoNrVYIVueii0D0dOv7dcEeBa2k5zJDIuN0hki7iHT9lzvSz30c1ZB8h7e Xr2Q0Pl0oywXskIuotSnu77UM4SWCQuOZaikq9CsyLls6IhSyeXke8iTU93wwNfM brMqZ8z34p5Ljker728QXHiXMHIhgs+gR8SgIIs9toQOA4uQQqUuQNxjR2guybA2 XtK+Q6tt33y3mqPpzPhHZirxSM8C3ekC -----END CERTIFICATE-----Generated at Sun Dec 21 06:09:17 2025 by rpki-client