This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft File: l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json) Hash identifier: dywHzribM11+2hvZKlpYgw7pCPoOd73/qgrwDmyQIxQ= Subject key identifier: 40:08:B6:D1:87:C3:31:59:04:6A:4E:55:2C:FA:DD:A6:82:AB:13:52 Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Certificate serial: 0CB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft Manifest number: 0CAC Signing time: Mon 22 Dec 2025 17:55:00 +0000 Manifest this update: Mon 22 Dec 2025 17:55:00 +0000 Manifest next update: Mon 29 Dec 2025 17:55:00 +0000 Files and hashes: 1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: dDRrTbi3plc5JrY4FQXvlmwUfirYKQCFYiJCXgfc1+I=) 2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: OUjIlN8Q3EsaPIKbBShyZ2ErWs3i9iaEMQNeWIb8brA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3251 (0xcb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Validity Not Before: Dec 22 17:55:00 2025 GMT Not After : Dec 29 17:55:00 2025 GMT Subject: CN=694985f4-40c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c1:15:cf:42:a2:4c:09:e9:a0:8f:c9:5c:cd: 37:bd:89:f9:aa:6f:61:36:c7:09:63:9a:b1:38:f7: 94:db:90:ee:78:4c:a5:9a:aa:b9:cf:3b:39:14:6e: 91:3b:98:6c:37:d9:ca:f6:43:43:f9:c4:00:b9:9a: 45:d0:35:10:ef:ac:57:d3:70:ae:e7:57:f8:52:0c: d4:0b:66:95:fd:3b:21:3b:13:f0:8f:d6:52:da:1c: 2f:19:f0:a6:8c:71:bd:38:7b:d4:fb:19:25:5b:02: b2:b0:86:28:95:6f:18:2d:e8:d3:de:3f:7c:62:7c: ea:c5:a1:fa:8f:4f:35:65:06:31:54:c2:92:58:2b: 23:dc:e6:e3:36:fe:c5:ad:fb:15:4b:c9:e2:e6:0c: 59:bc:fc:00:ba:2c:bf:8b:01:93:ab:63:c4:24:74: 47:cb:4c:78:cf:ad:8a:16:23:42:27:f2:5b:3c:31: fb:35:f7:df:e5:07:1b:f7:15:28:65:66:c0:e2:63: 9e:92:60:7d:33:4f:da:53:b3:0c:a5:31:7a:0f:09: d6:c0:00:53:be:ac:32:64:bf:56:19:b2:7c:0c:8e: d5:76:cf:f5:95:54:e5:00:e0:76:6c:db:c8:d9:5b: 63:25:d7:cf:ad:b3:70:36:a5:4e:e4:31:d1:06:c6: 0f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:08:B6:D1:87:C3:31:59:04:6A:4E:55:2C:FA:DD:A6:82:AB:13:52 X509v3 Authority Key Identifier: keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:4a:0b:c6:29:59:89:78:6b:a8:22:d6:cc:b8:73:e8:4a:37: e0:0a:33:7e:00:56:f2:4c:af:5a:70:75:6c:85:e7:73:73:35: 06:ed:bb:fe:f4:7d:26:06:c9:75:13:0c:73:1c:8a:e1:e3:2f: 2d:b6:a5:78:de:7e:ab:00:dd:78:ff:d3:a3:bf:e6:49:df:6a: 0b:f2:3a:8a:f0:27:6c:05:7b:06:5d:9c:83:eb:42:71:15:b0: ba:6b:69:e9:e8:79:ea:04:7f:54:fc:cf:45:3a:47:16:d2:ca: f6:9f:42:60:26:bb:52:f2:1d:ba:de:38:7e:3b:bc:37:55:26: 62:5e:40:ce:df:cd:29:05:42:1c:d8:e6:7d:c7:ef:d5:b2:a5: 83:04:03:ba:6b:0d:22:40:a8:05:62:97:d3:f7:37:c8:e5:59: 81:9c:1f:cc:1c:91:41:e4:d3:c1:1b:8b:9b:be:50:7d:b9:94: 08:df:93:28:a4:17:8a:f2:f3:94:c4:09:ee:a9:d0:5f:e4:b1: 5d:57:6a:ac:72:bd:29:75:b5:d4:49:28:df:0d:79:9c:3e:3e: 96:6c:9b:48:cd:c1:51:bf:19:2e:3a:21:09:10:82:99:5f:4e: 6e:a1:17:14:01:c2:86:9f:e6:f8:cc:42:99:7d:b5:69:fc:6e: 6c:74:b7:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1MThBMzQ4NkE0 NjAyQkVENDQwHhcNMjUxMjIyMTc1NTAwWhcNMjUxMjI5MTc1NTAwWjAYMRYwFAYD VQQDDA02OTQ5ODVmNC00MGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8MEVz0KiTAnpoI/JXM03vYn5qm9hNscJY5qxOPeU25DueEylmqq5zzs5FG6R O5hsN9nK9kND+cQAuZpF0DUQ76xX03Cu51f4UgzUC2aV/TshOxPwj9ZS2hwvGfCm jHG9OHvU+xklWwKysIYolW8YLejT3j98YnzqxaH6j081ZQYxVMKSWCsj3ObjNv7F rfsVS8ni5gxZvPwAuiy/iwGTq2PEJHRHy0x4z62KFiNCJ/JbPDH7Nfff5Qcb9xUo ZWbA4mOekmB9M0/aU7MMpTF6DwnWwABTvqwyZL9WGbJ8DI7Vds/1lVTlAOB2bNvI 2VtjJdfPrbNwNqVO5DHRBsYPTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAIttGH wzFZBGpOVSz63aaCqxNSMB8GA1UdIwQYMBaAFJdlXh9FOD+VOK2xUYo0hqRgK+1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQwQi9EQzVGMUFDQTA1 MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1VTRyYkZSaWpTR3BHQXI3 VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wyVmVIMFU0UDVVNHJiRlJpalNHcEdBcjdVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTQwQi9EQzVGMUFDQTA1MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1 VTRyYkZSaWpTR3BHQXI3VVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAySgvGKVmJeGuoItbMuHPoSjfgCjN+AFbyTK9acHVshedzczUG7bv+ 9H0mBsl1EwxzHIrh4y8ttqV43n6rAN14/9Ojv+ZJ32oL8jqK8CdsBXsGXZyD60Jx FbC6a2np6HnqBH9U/M9FOkcW0sr2n0JgJrtS8h263jh+O7w3VSZiXkDO380pBUIc 2OZ9x+/VsqWDBAO6aw0iQKgFYpfT9zfI5VmBnB/MHJFB5NPBG4ubvlB9uZQI35Mo pBeK8vOUxAnuqdBf5LFdV2qscr0pdbXUSSjfDXmcPj6WbJtIzcFRvxkuOiEJEIKZ X05uoRcUAcKGn+b4zEKZfbVp/G5sdLdk -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:42 2025 by rpki-client