This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json) Hash identifier: Si+Y/M8kjNHujkGrb8kJe8EAnbjCmBLDqngYttsKefc= Subject key identifier: B6:60:AB:B9:2F:61:2E:78:25:31:19:94:9A:74:57:B5:B9:2B:29:0B Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Certificate serial: 0952 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft Manifest number: 0949 Signing time: Wed 31 Dec 2025 19:50:36 +0000 Manifest this update: Wed 31 Dec 2025 19:50:36 +0000 Manifest next update: Wed 07 Jan 2026 19:50:36 +0000 Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: FcpWkMOg+y80/DRcFgPMF880HcMmTkD+Psb2jtIdZMs=) 2: 518ED8E0B10511EAA4771B5BC4F9AE02.roa (hash: 4NqH+CTlAXcxsKUUu0JoB2lmVEYgLTqKdl4anKNbgT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 19:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2386 (0x952) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Validity Not Before: Dec 31 19:50:36 2025 GMT Not After : Jan 7 19:50:36 2026 GMT Subject: CN=69557e8c-a8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5d:42:41:0c:2d:e8:ef:f5:d4:db:68:08:5f: c9:7c:34:ac:b6:f4:9c:bc:aa:79:c8:ed:c7:77:40: da:d8:94:f8:07:fd:ad:6b:5f:1a:a6:e9:24:c5:f9: bc:e0:8b:1a:d9:df:8b:cd:66:96:5c:95:f1:7f:26: c6:bf:db:82:50:9d:88:74:1a:ca:3c:1f:84:38:23: b5:da:43:cd:0a:a4:44:6b:58:f2:7b:54:7f:c7:03: 70:41:f3:2d:6d:bd:f4:8b:6b:bf:67:e4:91:2f:a2: ca:05:2a:2e:1d:6c:c4:9f:d3:8b:57:28:42:b5:36: d6:5a:6d:17:f0:a5:37:1c:8c:31:a3:85:f0:ea:f8: 49:30:55:a1:64:f3:37:e8:a9:a5:01:c1:a4:f0:30: ad:49:4a:4d:2f:77:49:9c:c2:aa:95:e8:30:2a:fb: fd:b1:a8:43:8c:8c:6c:01:54:d4:cc:f3:ab:c4:3f: e0:54:3a:68:7e:43:5b:96:a7:38:72:47:54:09:34: f5:eb:9a:82:86:50:0a:4f:d9:be:75:f5:35:66:a0: 12:68:fc:07:9b:0a:aa:01:9c:63:58:c3:3a:38:70: 3b:2e:42:42:00:cb:ed:20:9f:f0:7d:43:92:8f:cb: 85:54:e5:47:8b:67:e0:33:a0:d1:9e:34:71:28:8a: 6e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:60:AB:B9:2F:61:2E:78:25:31:19:94:9A:74:57:B5:B9:2B:29:0B X509v3 Authority Key Identifier: keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:46:61:1b:d3:fd:b5:fc:e9:66:94:1f:87:37:45:69:f6:4d: 7b:c7:76:96:2d:87:2f:d0:b4:06:b1:4b:a5:b4:43:ea:d8:af: 65:ce:92:98:86:52:65:02:d2:86:59:99:7b:cd:ef:4a:f9:18: 3b:d7:92:c3:fa:a4:49:c5:55:f9:21:0c:4e:07:2d:fb:6b:24: 23:45:6b:0f:0c:6b:cc:c4:bb:c3:48:60:cc:8e:cb:77:12:c9: db:93:e9:ab:22:da:0b:eb:e0:66:68:bc:5a:be:c3:01:9a:92: 1f:e5:cf:90:47:29:9c:10:91:bf:ab:be:77:43:16:1d:62:53: 7e:6b:94:bc:f5:c2:a6:bb:52:95:6f:4e:1c:eb:b5:50:b7:d9: 9e:cf:2f:a9:20:45:89:61:ed:94:6f:16:10:c3:24:08:d0:71: d9:02:b8:e5:56:e3:d8:a1:1f:bc:ed:03:aa:db:8c:70:d3:5e: c9:79:e5:2b:85:b9:f7:98:bb:4f:21:a1:dc:79:d6:6d:64:f9: 63:48:14:2f:e6:74:af:28:83:f5:35:7c:53:b4:09:92:82:35: c3:72:ec:dc:40:25:03:88:cf:be:30:f0:bb:94:c1:3b:71:8f: ea:cd:0c:75:f5:89:45:2e:7c:c3:9d:4d:b8:84:a1:24:cd:56: 40:d8:f7:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG REZEODYwNTcwHhcNMjUxMjMxMTk1MDM2WhcNMjYwMTA3MTk1MDM2WjAYMRYwFAYD VQQDDA02OTU1N2U4Yy1hOGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuV1CQQwt6O/11NtoCF/JfDSstvScvKp5yO3Hd0Da2JT4B/2ta18apukkxfm8 4Isa2d+LzWaWXJXxfybGv9uCUJ2IdBrKPB+EOCO12kPNCqREa1jye1R/xwNwQfMt bb30i2u/Z+SRL6LKBSouHWzEn9OLVyhCtTbWWm0X8KU3HIwxo4Xw6vhJMFWhZPM3 6KmlAcGk8DCtSUpNL3dJnMKqlegwKvv9sahDjIxsAVTUzPOrxD/gVDpofkNblqc4 ckdUCTT165qChlAKT9m+dfU1ZqASaPwHmwqqAZxjWMM6OHA7LkJCAMvtIJ/wfUOS j8uFVOVHi2fgM6DRnjRxKIpu8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZgq7kv YS54JTEZlJp0V7W5KykLMB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNDNC8zRUU2NEMxQUIxMDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhN VWw3RUxwN0IydVQ5X1lZRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoRmEb0/21/OlmlB+HN0Vp9k17x3aWLYcv0LQGsUultEPq2K9lzpKY hlJlAtKGWZl7ze9K+Rg715LD+qRJxVX5IQxOBy37ayQjRWsPDGvMxLvDSGDMjst3 Esnbk+mrItoL6+BmaLxavsMBmpIf5c+QRymcEJG/q753QxYdYlN+a5S89cKmu1KV b04c67VQt9mezy+pIEWJYe2UbxYQwyQI0HHZArjlVuPYoR+87QOq24xw017JeeUr hbn3mLtPIaHcedZtZPljSBQv5nSvKIP1NXxTtAmSgjXDcuzcQCUDiM++MPC7lME7 cY/qzQx19YlFLnzDnU24hKEkzVZA2PdO -----END CERTIFICATE-----Generated at Thu Jan 1 12:32:43 2026 by rpki-client