This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json) Hash identifier: q6AW8E2NW9+kjSp0iKtOyxROiXPxYT7sCFrIQS1PvN0= Subject key identifier: 46:AB:DB:AA:1B:ED:E1:92:F6:F4:CF:5B:81:76:D1:0F:F4:47:AE:1B Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft Manifest number: A2 Signing time: Mon 29 Dec 2025 05:36:34 +0000 Manifest this update: Mon 29 Dec 2025 05:36:34 +0000 Manifest next update: Mon 05 Jan 2026 05:36:34 +0000 Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: KM4EHCNtnHiaxLkMVJhHZCW+1Wlsk4rfgEPYbe3D0t0=) 2: C8171E8EC04D11F081466417C4F9AE02.roa (hash: qD7E81+F84ybq65PJCoOoGx/3Rj26xGdP+iJxj/kXys=) 3: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: zube208I7nc1pgqe/rLjskVR+S+L8lpyAr5nz7YaDzA=) 4: D87376860A1511F09D97420DC4F9AE02.roa (hash: DBHtGCQQDfMpiwGGsmk/EkvovYeutKnxcD7IbMh0Lsw=) 5: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: ZSY+wrBOCpSTseL5HGKwx+yRvdWTT0pPkpRE5m5XW20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 05:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Validity Not Before: Dec 29 05:36:34 2025 GMT Not After : Jan 5 05:36:34 2026 GMT Subject: CN=69521362-2860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4e:9b:19:a1:a7:19:2d:42:f5:34:de:96:61: 55:56:c2:6a:5b:c8:83:97:b3:1a:52:62:d8:bb:d0: 9e:10:17:37:c6:7b:dc:0e:81:44:67:a3:a9:22:a8: b4:fb:37:b0:22:c4:0d:8f:08:d8:5a:82:61:bf:71: ab:46:38:c2:63:7d:3a:9b:37:b4:3f:10:b4:89:da: cc:51:7f:51:bc:dc:40:70:71:f0:39:24:72:3a:cd: b4:b6:6b:e3:b9:47:c0:a5:73:77:c1:17:dc:1d:4b: fb:f2:43:a6:8d:25:31:5b:88:bb:e9:6d:46:65:92: ce:41:1a:88:a0:b0:51:08:9a:33:4f:d4:e0:c8:65: 45:74:0b:94:c9:d2:f4:2b:47:af:b8:3f:e5:33:bf: 58:0b:60:8c:70:07:06:c0:af:eb:c0:b6:11:86:03: 84:34:21:8c:6b:0f:5d:80:50:86:c8:61:80:b0:aa: e4:c4:d3:68:8d:05:00:90:0e:94:f0:02:81:95:e9: c9:2e:21:ed:f6:53:81:f3:74:e7:41:f0:11:7f:87: 84:45:1c:ed:08:59:79:08:c1:95:54:7d:45:11:95: e4:eb:1d:9d:f6:f8:cc:e8:7a:12:a6:66:7d:fa:1d: 57:d6:d9:1c:f5:65:e9:0e:29:aa:14:a2:27:6b:4b: b7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AB:DB:AA:1B:ED:E1:92:F6:F4:CF:5B:81:76:D1:0F:F4:47:AE:1B X509v3 Authority Key Identifier: keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:6a:80:97:7a:85:5a:00:6e:be:10:58:23:67:ad:18:f6:01: 8a:c2:6e:af:0d:00:63:ce:80:b2:37:f8:77:66:47:9e:9c:80: a4:4b:6d:6f:5b:a7:86:1f:71:34:6d:46:7d:34:aa:29:1b:e2: 13:b6:05:c4:66:79:17:fb:f1:5c:5a:8b:e5:19:da:28:24:8b: d4:cb:2e:3f:b5:a4:b0:92:d9:c7:57:12:4c:6b:56:29:fd:91: 88:8c:0a:04:7b:cc:2d:09:55:36:7a:0b:8d:33:19:8a:54:b0: 16:49:85:0b:4a:45:a5:1b:7c:16:4b:e7:0b:01:d9:bd:77:2d: 67:36:26:d7:de:70:a7:ad:2c:8a:ae:48:9a:8e:33:3b:02:80: e0:8a:0b:0f:78:5a:8b:91:c9:c3:be:b6:67:29:2a:ae:94:35: 6a:a9:f6:85:ea:5d:96:7f:1d:b5:51:c5:59:28:ee:bc:0d:78: 83:66:fe:db:ea:9c:0e:ef:ed:9e:3b:48:d8:1f:9b:23:46:a4: a8:ef:7f:4a:d0:bb:f5:6f:81:a4:c4:43:89:f5:e5:26:17:15: 3a:0b:dc:d8:3e:46:27:21:86:44:58:14:54:13:36:b0:2d:23: 19:53:7b:3a:d4:78:98:89:ab:82:88:62:07:38:38:4c:48:82: 07:0f:8b:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTExMTAvBgNVBAUTKDNEMUZDQjcyNTVDNTI1MDNFMTBBRTU4NEIxMTg5QTE1 Q0Y1NjA3NEUwHhcNMjUxMjI5MDUzNjM0WhcNMjYwMTA1MDUzNjM0WjAYMRYwFAYD VQQDDA02OTUyMTM2Mi0yODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3k6bGaGnGS1C9TTelmFVVsJqW8iDl7MaUmLYu9CeEBc3xnvcDoFEZ6OpIqi0 +zewIsQNjwjYWoJhv3GrRjjCY306mze0PxC0idrMUX9RvNxAcHHwOSRyOs20tmvj uUfApXN3wRfcHUv78kOmjSUxW4i76W1GZZLOQRqIoLBRCJozT9TgyGVFdAuUydL0 K0evuD/lM79YC2CMcAcGwK/rwLYRhgOENCGMaw9dgFCGyGGAsKrkxNNojQUAkA6U 8AKBlenJLiHt9lOB83TnQfARf4eERRztCFl5CMGVVH1FEZXk6x2d9vjM6HoSpmZ9 +h1X1tkc9WXpDimqFKIna0u3PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEar26ob 7eGS9vTPW4F20Q/0R64bMB8GA1UdIwQYMBaAFD0fy3JVxSUD4QrlhLEYmhXPVgdO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFMS9DNDU2MTAyRTA5 RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9QUl9MY2xYRkpRUGhDdVdFc1JpYUZjOVdC MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSX0xjbFhGSlFQaEN1V0VzUmlhRmM5V0IwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFMS9DNDU2MTAyRTA5RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9QUl9MY2xYRkpR UGhDdVdFc1JpYUZjOVdCMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQaoCXeoVaAG6+EFgjZ60Y9gGKwm6vDQBjzoCyN/h3ZkeenICkS21v W6eGH3E0bUZ9NKopG+ITtgXEZnkX+/FcWovlGdooJIvUyy4/taSwktnHVxJMa1Yp /ZGIjAoEe8wtCVU2eguNMxmKVLAWSYULSkWlG3wWS+cLAdm9dy1nNibX3nCnrSyK rkiajjM7AoDgigsPeFqLkcnDvrZnKSqulDVqqfaF6l2Wfx21UcVZKO68DXiDZv7b 6pwO7+2eO0jYH5sjRqSo739K0Lv1b4GkxEOJ9eUmFxU6C9zYPkYnIYZEWBRUEzaw LSMZU3s61HiYiauCiGIHODhMSIIHD4so -----END CERTIFICATE-----Generated at Wed Dec 31 00:08:27 2025 by rpki-client