This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft File: l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json) Hash identifier: P+peRcCNPPJOR7PDbW5MY2oFTNZezJtKQIogJT0QefU= Subject key identifier: BE:0B:FD:1E:78:2F:ED:B5:C2:44:A3:37:96:6C:E8:9A:DC:40:EF:42 Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 Certificate issuer: /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Certificate serial: 07F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft Manifest number: 07E6 Signing time: Thu 18 Dec 2025 20:41:19 +0000 Manifest this update: Thu 18 Dec 2025 20:41:19 +0000 Manifest next update: Thu 25 Dec 2025 20:41:19 +0000 Files and hashes: 1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: sf98bn2uexglWP0y7Xowo6zn2/hdjOVQ1paBkRiqHRY=) 2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: mzfP7cRrxNz2Kg58jiJEQRZoLcbYz297WZboxMM7e8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2032 (0x7f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126259, serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Validity Not Before: Dec 18 20:41:19 2025 GMT Not After : Dec 25 20:41:19 2025 GMT Subject: CN=694466ef-94b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:31:d7:61:24:30:00:6a:b2:7b:48:a8:20:1f: 2a:23:40:f0:44:f1:0b:7b:66:2e:38:92:89:32:a9: ac:08:3d:8f:97:ba:b0:80:df:7d:88:18:e4:cb:db: 60:d3:1a:65:72:9d:37:8e:c6:f4:d7:7e:f2:43:9e: 3d:91:0d:4e:80:d1:b5:dd:5c:c2:d0:9e:d1:91:06: c7:46:78:3b:b7:c0:c3:6f:f0:6c:2b:4b:50:6b:98: aa:f5:27:36:0a:a4:75:9d:e2:f4:4a:cb:4b:32:13: ca:fd:ee:4b:11:39:7d:a9:a0:e7:06:a1:15:72:ef: 37:14:80:42:f4:aa:1c:2c:83:ed:fb:6b:af:42:27: 4b:ba:cc:02:f5:0e:18:82:9c:57:8b:40:68:80:13: e6:65:e1:3b:14:c0:73:7d:9b:21:04:53:e1:22:16: f7:68:c0:04:cd:de:cd:47:a6:02:34:28:a1:a5:ad: e4:f3:c5:c6:e2:bd:9c:48:57:a6:65:60:c8:62:f0: 8c:e0:42:f7:44:0b:ad:45:6b:49:9a:d0:8e:6f:b7: bb:d3:24:0e:61:88:71:c9:87:1d:0b:a6:9c:f1:21: 69:da:e1:06:19:24:36:f3:ef:56:f5:9f:f4:9f:bb: 1e:8e:fe:dc:d9:39:8d:b2:d5:48:44:19:1b:82:c0: b8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0B:FD:1E:78:2F:ED:B5:C2:44:A3:37:96:6C:E8:9A:DC:40:EF:42 X509v3 Authority Key Identifier: keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b1:68:e2:f8:36:21:d3:f3:fe:88:58:a7:bf:39:7e:37:d2: 62:74:40:ac:3c:67:5c:eb:86:5a:62:74:22:88:80:cc:ec:be: 6b:9f:ab:4d:d8:c9:17:aa:6f:b3:d6:b1:9f:e9:0d:0d:a3:6c: 3a:95:10:3b:94:46:9a:0f:85:60:ce:f1:63:86:ce:17:e4:a8: b7:96:5b:29:b2:51:17:8c:fd:da:43:80:70:6c:a3:47:19:61: 2a:1f:2c:59:d2:85:da:e3:00:fc:ba:77:02:b5:72:ec:dc:c5: 58:76:a0:2a:9b:16:d7:dd:03:7d:05:4b:31:ce:e7:8f:bf:af: 95:74:94:1d:65:5e:58:dc:c3:30:c5:87:ff:d7:c5:4c:21:5a: 66:84:9a:da:e9:46:d0:a5:96:9a:7a:3f:df:18:a3:a2:43:45: 8f:52:3d:30:96:30:bc:52:06:5b:97:44:6f:10:12:e3:67:ed: 95:4a:9b:0a:6c:3b:25:34:2f:b4:39:37:79:78:45:6c:aa:9f: 40:37:d0:05:e0:74:fe:9e:ea:10:40:72:b3:36:65:4e:85:dd: 36:0f:8d:c4:7c:94:0e:b3:a4:28:1b:0b:78:96:eb:61:55:81: 12:d1:68:a2:94:07:18:f8:11:a3:83:a5:cf:4f:c5:2e:83:6d: 89:d7:7d:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyNTkxMTAvBgNVBAUTKDk3NTJERDFBMTVGNUVDNjFEOTc2OTFDQjVFQ0NFQkVD QkQzQTYxMzcwHhcNMjUxMjE4MjA0MTE5WhcNMjUxMjI1MjA0MTE5WjAYMRYwFAYD VQQDDA02OTQ0NjZlZi05NGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9DHXYSQwAGqye0ioIB8qI0DwRPELe2YuOJKJMqmsCD2Pl7qwgN99iBjky9tg 0xplcp03jsb0137yQ549kQ1OgNG13VzC0J7RkQbHRng7t8DDb/BsK0tQa5iq9Sc2 CqR1neL0SstLMhPK/e5LETl9qaDnBqEVcu83FIBC9KocLIPt+2uvQidLuswC9Q4Y gpxXi0BogBPmZeE7FMBzfZshBFPhIhb3aMAEzd7NR6YCNCihpa3k88XG4r2cSFem ZWDIYvCM4EL3RAutRWtJmtCOb7e70yQOYYhxyYcdC6ac8SFp2uEGGSQ28+9W9Z/0 n7sejv7c2TmNstVIRBkbgsC4lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4L/R54 L+21wkSjN5Zs6JrcQO9CMB8GA1UdIwQYMBaAFJdS3RoV9exh2XaRy17M6+y9OmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI1OS82OTEyOEM0QTE1 QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdHSFpkcEhMWHN6cjdMMDZZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxTGRHaFgxN0dIWmRwSExYc3pyN0wwNllUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI1OS82OTEyOEM0QTE1QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdH SFpkcEhMWHN6cjdMMDZZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvsWji+DYh0/P+iFinvzl+N9JidECsPGdc64ZaYnQiiIDM7L5rn6tN 2MkXqm+z1rGf6Q0No2w6lRA7lEaaD4VgzvFjhs4X5Ki3llspslEXjP3aQ4BwbKNH GWEqHyxZ0oXa4wD8uncCtXLs3MVYdqAqmxbX3QN9BUsxzuePv6+VdJQdZV5Y3MMw xYf/18VMIVpmhJra6UbQpZaaej/fGKOiQ0WPUj0wljC8UgZbl0RvEBLjZ+2VSpsK bDslNC+0OTd5eEVsqp9AN9AF4HT+nuoQQHKzNmVOhd02D43EfJQOs6QoGwt4luth VYES0WiilAcY+BGjg6XPT8Uug22J133D -----END CERTIFICATE-----Generated at Fri Dec 19 17:36:37 2025 by rpki-client