This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft File: L996avkE3yzUfmXMwMnFzL8jmOU.mft (raw, json) Hash identifier: zyS2mypFuIzBJuJpUQBRbvxkadZc10sVOXThUdUsrq8= Subject key identifier: E1:D5:2C:73:5E:CD:57:78:CF:F1:AF:09:96:DA:94:B5:A2:07:60:23 Authority key identifier: 2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5 Certificate issuer: /CN=A91273D6/serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5 Certificate serial: 0819 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft Manifest number: 0812 Signing time: Wed 31 Dec 2025 20:35:34 +0000 Manifest this update: Wed 31 Dec 2025 20:35:34 +0000 Manifest next update: Wed 07 Jan 2026 20:35:34 +0000 Files and hashes: 1: L996avkE3yzUfmXMwMnFzL8jmOU.crl (hash: oC7kvHNVBnK3Gvq4wEf0POV0+x6DOLcuy9C+bdzxr18=) 2: C1B1AEC6051111EBBA2CAF5CC4F9AE02.roa (hash: Rn+i/x8H2eWzt9fmwTwYfrRk8EJ3dubKBMEnFNfmhUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 20:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2073 (0x819) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273D6, serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5 Validity Not Before: Dec 31 20:35:34 2025 GMT Not After : Jan 7 20:35:34 2026 GMT Subject: CN=69558916-54b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:59:57:5f:f2:16:35:77:15:ca:21:00:64:0f: 9f:d5:2c:34:16:e0:4e:77:12:e2:cd:3f:95:5b:28: 46:f3:9a:9c:d7:4f:68:0b:05:38:2e:b9:b5:11:46: 52:85:74:0c:dd:39:96:88:93:19:3e:33:a1:64:f4: c3:8c:aa:32:7e:d7:f5:e7:7f:74:b1:db:04:cc:01: e0:66:ef:3e:ea:63:10:df:32:f9:08:9b:ac:fd:34: c6:11:6e:76:2f:00:1e:2f:c6:06:b7:b3:49:49:45: 0c:17:f4:03:c1:1e:63:41:21:98:81:0e:14:79:5e: 28:0e:c3:50:b8:31:96:bb:97:5a:29:dc:33:3e:ec: 77:27:0a:99:3f:a5:3b:95:52:51:9f:62:dc:e7:7a: 33:bf:ee:9f:a4:a5:70:76:6f:c8:7f:cc:7f:f6:9a: 7d:a7:f5:e1:74:2b:1b:4d:66:7e:dc:1d:ad:9f:f8: e8:e0:55:0f:55:04:ef:bb:3f:cc:02:13:3b:9c:e0: de:b8:6e:d7:af:1f:c3:08:ba:6d:92:3b:f0:c6:f1: 19:63:d8:9a:f5:f0:68:9a:10:0c:59:b9:68:82:09: a6:11:54:9d:b3:69:92:c4:2c:e9:67:50:37:e2:11: 70:81:4b:8f:71:73:51:35:0e:4b:d7:f7:cf:2c:ff: ed:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D5:2C:73:5E:CD:57:78:CF:F1:AF:09:96:DA:94:B5:A2:07:60:23 X509v3 Authority Key Identifier: keyid:2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:26:9f:3e:71:c4:93:23:4a:3c:28:b1:8d:d3:83:c1:2b:55: b5:32:fa:a7:83:7c:c4:7e:14:b3:89:31:4c:8a:76:fd:98:5d: bc:a6:ba:6e:c7:74:6f:82:1a:03:99:a0:b0:21:fa:b4:44:65: 31:5b:f0:b3:1d:87:30:5c:0b:15:58:d9:68:6f:cf:43:fd:20: a0:cf:58:89:06:95:31:9e:a9:d4:2d:15:95:40:bb:00:f0:c0: 55:67:d7:42:d1:31:22:47:bf:7c:7b:aa:b4:02:14:9c:2c:de: 7b:ca:af:a3:23:81:4b:ce:78:67:91:07:96:54:47:71:5b:89: c8:9a:b2:d9:bb:ea:1f:5a:d3:ad:55:43:fb:d6:73:bc:c7:71: 49:e0:ae:29:24:ba:bb:5e:51:09:15:1c:36:a9:d9:07:b5:09: da:42:67:61:98:ff:d3:93:2f:07:3f:fb:39:aa:04:53:b0:2c: 14:25:6e:d8:bf:2d:cb:c6:1e:2f:23:01:51:57:d0:97:55:d6: 4b:9e:3a:27:a8:5b:60:6e:02:b8:21:9b:42:43:68:84:59:13: 39:a9:43:2d:c2:10:a8:e5:f6:51:40:b2:93:a8:63:20:7f:12: ed:03:44:4d:4f:64:92:04:2d:56:3a:7d:25:a1:e6:78:e4:43: 6f:78:e4:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczRDYxMTAvBgNVBAUTKDJGREY3QTZBRjkwNERGMkNENDdFNjVDQ0MwQzlDNUND QkYyMzk4RTUwHhcNMjUxMjMxMjAzNTM0WhcNMjYwMTA3MjAzNTM0WjAYMRYwFAYD VQQDDA02OTU1ODkxNi01NGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1lXX/IWNXcVyiEAZA+f1Sw0FuBOdxLizT+VWyhG85qc109oCwU4Lrm1EUZS hXQM3TmWiJMZPjOhZPTDjKoyftf15390sdsEzAHgZu8+6mMQ3zL5CJus/TTGEW52 LwAeL8YGt7NJSUUMF/QDwR5jQSGYgQ4UeV4oDsNQuDGWu5daKdwzPux3JwqZP6U7 lVJRn2Lc53ozv+6fpKVwdm/If8x/9pp9p/XhdCsbTWZ+3B2tn/jo4FUPVQTvuz/M AhM7nODeuG7Xrx/DCLptkjvwxvEZY9ia9fBomhAMWbloggmmEVSds2mSxCzpZ1A3 4hFwgUuPcXNRNQ5L1/fPLP/tYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHVLHNe zVd4z/GvCZbalLWiB2AjMB8GA1UdIwQYMBaAFC/femr5BN8s1H5lzMDJxcy/I5jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNENi8xMzlFMTI0NDA1 MTAxMUVCODBFMzE3NUJDNEY5QUUwMi9MOTk2YXZrRTN5elVmbVhNd01uRnpMOGpt T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w5OTZhdmtFM3l6VWZtWE13TW5Gekw4am1PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNENi8xMzlFMTI0NDA1MTAxMUVCODBFMzE3NUJDNEY5QUUwMi9MOTk2YXZrRTN5 elVmbVhNd01uRnpMOGptT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3Jp8+ccSTI0o8KLGN04PBK1W1Mvqng3zEfhSziTFMinb9mF28prpu x3RvghoDmaCwIfq0RGUxW/CzHYcwXAsVWNlob89D/SCgz1iJBpUxnqnULRWVQLsA 8MBVZ9dC0TEiR798e6q0AhScLN57yq+jI4FLznhnkQeWVEdxW4nImrLZu+ofWtOt VUP71nO8x3FJ4K4pJLq7XlEJFRw2qdkHtQnaQmdhmP/Tky8HP/s5qgRTsCwUJW7Y vy3Lxh4vIwFRV9CXVdZLnjonqFtgbgK4IZtCQ2iEWRM5qUMtwhCo5fZRQLKTqGMg fxLtA0RNT2SSBC1WOn0loeZ45ENveOTq -----END CERTIFICATE-----Generated at Thu Jan 1 19:47:44 2026 by rpki-client