This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json) Hash identifier: KShkQzUxgqdD1dXBYbbn33nj27z7jxmAB+2hROdWE5M= Subject key identifier: 8A:F7:73:53:CF:6C:C6:4C:51:A8:E3:DE:71:C1:C6:BD:04:57:A6:C2 Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft Manifest number: 017D Signing time: Fri 19 Dec 2025 02:53:58 +0000 Manifest this update: Fri 19 Dec 2025 02:53:58 +0000 Manifest next update: Fri 26 Dec 2025 02:53:58 +0000 Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: 8Na81rxPnS1rgwUS0nRS2l/+fG1KlPXzM8wE1G+vcQY=) 2: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: jzviIcT36AX7+vIYnTcKiwwmHcmgLFxJ/UujmC0oCBI=) 3: A5F4A536933D11EEA6B4A653C4F9AE02.roa (hash: 6tIF2i7E6pEkUpHmxtY4OrrXsVv0qE0EUaxM0hPMQog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: Dec 19 02:53:58 2025 GMT Not After : Dec 26 02:53:58 2025 GMT Subject: CN=6944be46-4784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:12:0d:76:8a:18:4b:9d:98:21:5e:60:7e:e7: 94:98:cf:70:6b:3c:e4:72:0b:36:68:6b:a6:e0:a0: bb:51:ce:ed:d3:6b:b3:80:95:27:91:40:cc:00:77: f3:3f:c4:03:65:7f:5a:29:c3:ec:bc:19:2c:83:bd: ff:c5:48:84:fa:76:26:27:13:49:af:2d:e8:6c:a8: c1:d4:25:a1:50:7b:04:3c:b8:4d:7d:6f:cb:64:2d: 8b:29:e5:fd:44:e5:d5:7f:4c:83:a1:5a:ff:c7:cc: 94:ab:c5:fd:e2:24:24:6d:22:1c:58:eb:79:11:53: 5c:93:71:ae:bd:01:35:74:39:7c:ac:27:47:d5:2b: 5d:66:06:fc:82:7a:92:8f:54:25:e0:a0:ec:a3:ed: 17:15:86:e9:4c:7e:23:7f:80:18:4d:78:24:40:5b: ae:09:f8:29:51:ad:d1:32:16:ac:11:39:a2:a5:88: c6:3d:58:73:c3:6c:12:10:26:3e:94:64:a3:55:49: 35:b0:ae:a9:6d:87:b9:49:64:37:40:99:a8:ff:7e: 19:b7:0c:61:0d:63:2e:ef:ea:22:c6:2d:b4:d3:f0: 8b:72:04:ab:42:47:33:e9:24:b7:3d:98:e6:3f:c4: c4:ff:78:df:b1:8e:0c:76:3e:6e:92:11:29:f3:75: fb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F7:73:53:CF:6C:C6:4C:51:A8:E3:DE:71:C1:C6:BD:04:57:A6:C2 X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:17:73:ee:88:95:14:e2:52:e3:8c:6a:e2:0a:b2:de:58:2e: 98:6c:ac:7f:fe:21:a3:89:70:f1:92:cc:1f:40:3c:b5:9e:bc: 3a:5d:60:95:f3:c8:a8:c0:71:ee:4d:3c:00:af:5d:a4:55:f1: 4e:9b:fc:2c:8b:58:e4:d9:ca:8d:e7:0d:ff:8e:6a:bd:f4:08: aa:0b:69:89:4e:bb:5a:31:fa:04:b3:10:64:94:78:51:da:7b: b1:af:74:26:ca:71:a7:02:8d:91:4f:1b:e2:73:31:48:73:f6: 4d:ab:ad:5d:fb:05:8b:1f:4d:bf:44:e6:94:3a:ad:05:ba:01: 20:ab:4c:90:21:6a:89:8f:2a:65:ac:11:81:57:53:a4:e6:de: 43:b9:b1:1d:c8:94:c1:69:3c:b0:81:67:e4:06:52:23:e9:d7: 5b:86:f2:88:37:ac:a1:6e:ad:1f:79:d0:d0:d7:7a:1c:e6:a6: 06:b2:90:1b:16:3b:27:b4:23:db:c1:70:62:76:8a:99:a5:15: d8:e9:5f:60:0b:4f:13:98:3d:2d:1d:30:b6:ae:0e:15:85:59: 88:92:45:86:bf:c2:5d:32:b9:fb:88:66:f7:18:19:68:33:c4: 48:63:8e:20:47:9b:c0:96:2a:7a:41:d7:5f:e9:50:9f:c7:f6: 50:b3:84:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG NEMzREEyNzAwHhcNMjUxMjE5MDI1MzU4WhcNMjUxMjI2MDI1MzU4WjAYMRYwFAYD VQQDDA02OTQ0YmU0Ni00Nzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRINdooYS52YIV5gfueUmM9wazzkcgs2aGum4KC7Uc7t02uzgJUnkUDMAHfz P8QDZX9aKcPsvBksg73/xUiE+nYmJxNJry3obKjB1CWhUHsEPLhNfW/LZC2LKeX9 ROXVf0yDoVr/x8yUq8X94iQkbSIcWOt5EVNck3GuvQE1dDl8rCdH1StdZgb8gnqS j1Ql4KDso+0XFYbpTH4jf4AYTXgkQFuuCfgpUa3RMhasETmipYjGPVhzw2wSECY+ lGSjVUk1sK6pbYe5SWQ3QJmo/34ZtwxhDWMu7+oixi200/CLcgSrQkcz6SS3PZjm P8TE/3jfsY4Mdj5ukhEp83X75QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIr3c1PP bMZMUajj3nHBxr0EV6bCMB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyOS80QjNDRUVCNDkzM0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZ ai1oWURuRFIzbEQwdzlvbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArF3PuiJUU4lLjjGriCrLeWC6YbKx//iGjiXDxkswfQDy1nrw6XWCV 88iowHHuTTwAr12kVfFOm/wsi1jk2cqN5w3/jmq99AiqC2mJTrtaMfoEsxBklHhR 2nuxr3QmynGnAo2RTxviczFIc/ZNq61d+wWLH02/ROaUOq0FugEgq0yQIWqJjypl rBGBV1Ok5t5DubEdyJTBaTywgWfkBlIj6ddbhvKIN6yhbq0fedDQ13oc5qYGspAb FjsntCPbwXBidoqZpRXY6V9gC08TmD0tHTC2rg4VhVmIkkWGv8JdMrn7iGb3GBlo M8RIY44gR5vAlip6Qddf6VCfx/ZQs4Tf -----END CERTIFICATE-----Generated at Fri Dec 19 19:05:42 2025 by rpki-client