This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json) Hash identifier: 9FqXmIH8JVQtnDfAqFF3nz/TIYs1Fn4W/aRJ6b5GqyU= Subject key identifier: A5:B0:99:F6:0E:B2:1D:2E:9E:0B:15:8E:82:A2:2F:AE:85:EE:6A:76 Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft Manifest number: 01A3 Signing time: Fri 19 Dec 2025 02:29:19 +0000 Manifest this update: Fri 19 Dec 2025 02:29:19 +0000 Manifest next update: Fri 26 Dec 2025 02:29:19 +0000 Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: ZRUimLFQ0vkLLH0I+z2qmTsNIpIQAiaYAkA/hDUQGSs=) 2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: PHAPD39R0/+5V+WCmlH3xcXfFFqLnGp5Euy8i5sqtnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91374BB, serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Validity Not Before: Dec 19 02:29:19 2025 GMT Not After : Dec 26 02:29:19 2025 GMT Subject: CN=6944b87f-9de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:14:b2:85:14:86:8f:05:4b:33:4d:86:e6:0e: 3e:cb:39:34:30:69:6f:54:aa:7e:ec:98:54:7d:60: 24:23:a2:b8:87:0c:8a:59:ec:42:cc:09:cc:4a:a3: fa:03:a3:a0:d1:9f:cf:67:35:c5:d8:5d:fd:05:cd: 69:79:63:80:cc:17:48:de:8f:04:f7:22:06:f1:09: 1c:31:fd:41:20:2c:32:71:43:3e:98:86:23:ae:60: bd:ef:b1:37:47:f3:ed:4f:5f:0a:63:45:ae:dc:2d: 73:f4:65:79:6c:3a:ae:8d:3e:c8:69:a6:f2:25:33: 70:42:bc:8f:dd:d4:c5:68:91:6a:fe:d5:74:29:a5: 1e:37:ea:07:1d:24:57:cb:e9:24:28:8e:6e:09:e2: 5e:7b:e9:4f:a0:13:7c:46:c4:d9:4f:1f:4c:b6:2c: 0f:d1:1e:65:bf:fb:f2:41:55:fe:3c:1e:33:f2:a5: 58:3d:b3:7b:4e:cf:d7:53:1e:99:8d:1a:f3:8f:cd: 83:5a:cf:0a:4f:f0:7b:dd:93:02:a2:aa:c6:85:4b: d5:fc:72:78:52:72:33:02:a7:f8:86:16:1e:09:1b: c5:2c:ce:24:65:dc:1b:0f:1a:3a:c0:42:5f:88:78: b3:a0:ca:1c:a8:51:15:d8:bb:f7:4b:17:89:03:de: 31:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B0:99:F6:0E:B2:1D:2E:9E:0B:15:8E:82:A2:2F:AE:85:EE:6A:76 X509v3 Authority Key Identifier: keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:4b:9c:be:0d:8a:ca:ab:d1:d5:45:2b:3b:30:e1:21:f8:ea: 59:03:35:63:1f:a7:c6:cb:bc:bf:fc:33:e7:5c:7e:c6:f4:46: 05:ed:87:db:a0:9c:11:16:c4:30:80:d7:0f:96:f7:ce:c9:60: 16:60:d7:75:d1:60:20:a1:00:80:32:f5:c3:66:0f:e5:c0:60: 63:dd:dd:a6:04:ba:88:cb:d8:bc:16:bd:00:7b:e9:f3:c5:8e: 4d:e9:02:b1:77:68:a8:9d:dd:70:9a:ad:01:0b:eb:b6:cc:d9: 0d:47:49:7d:cf:c8:c9:f4:26:74:e3:45:64:62:a8:e1:8a:bc: 18:1d:da:40:32:87:dd:62:13:dd:e3:51:09:ee:64:99:0c:a9: 13:50:c7:45:f6:a0:94:5f:4e:73:63:98:f0:3d:fb:1c:d7:00: a3:77:94:b6:54:13:0d:cd:dc:0e:a9:e2:eb:b5:e5:19:01:18: f4:3e:29:46:9f:7e:9e:4c:15:5e:8c:c3:f1:9d:40:d6:42:96: 63:48:40:9b:2e:11:e3:62:ec:f3:ea:90:3b:08:95:29:8d:31: ea:59:03:33:08:35:98:3f:44:6e:da:ce:f5:e7:24:27:cf:bf: ec:fb:a4:72:0b:c7:a7:5b:d1:46:17:22:9a:52:2a:77:e6:10: a9:59:bb:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc0QkIxMTAvBgNVBAUTKEIzMTJDMjJGM0QwQjk3QkFBRjMyNzNFNUM2NkI4RjE0 MDIwM0UyRjkwHhcNMjUxMjE5MDIyOTE5WhcNMjUxMjI2MDIyOTE5WjAYMRYwFAYD VQQDDA02OTQ0Yjg3Zi05ZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxSyhRSGjwVLM02G5g4+yzk0MGlvVKp+7JhUfWAkI6K4hwyKWexCzAnMSqP6 A6Og0Z/PZzXF2F39Bc1peWOAzBdI3o8E9yIG8QkcMf1BICwycUM+mIYjrmC977E3 R/PtT18KY0Wu3C1z9GV5bDqujT7IaabyJTNwQryP3dTFaJFq/tV0KaUeN+oHHSRX y+kkKI5uCeJee+lPoBN8RsTZTx9MtiwP0R5lv/vyQVX+PB4z8qVYPbN7Ts/XUx6Z jRrzj82DWs8KT/B73ZMCoqrGhUvV/HJ4UnIzAqf4hhYeCRvFLM4kZdwbDxo6wEJf iHizoMocqFEV2Lv3SxeJA94xYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWwmfYO sh0ungsVjoKiL66F7mp2MB8GA1UdIwQYMBaAFLMSwi89C5e6rzJz5cZrjxQCA+L5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzRCQi82NDg1NDJDODVC NkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3cXZNblBseG11UEZBSUQ0 dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4TENMejBMbDdxdk1uUGx4bXVQRkFJRDR2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzRCQi82NDg1NDJDODVCNkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3 cXZNblBseG11UEZBSUQ0dmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWS5y+DYrKq9HVRSs7MOEh+OpZAzVjH6fGy7y//DPnXH7G9EYF7Yfb oJwRFsQwgNcPlvfOyWAWYNd10WAgoQCAMvXDZg/lwGBj3d2mBLqIy9i8Fr0Ae+nz xY5N6QKxd2iond1wmq0BC+u2zNkNR0l9z8jJ9CZ040VkYqjhirwYHdpAMofdYhPd 41EJ7mSZDKkTUMdF9qCUX05zY5jwPfsc1wCjd5S2VBMNzdwOqeLrteUZARj0PilG n36eTBVejMPxnUDWQpZjSECbLhHjYuzz6pA7CJUpjTHqWQMzCDWYP0Ru2s715yQn z7/s+6RyC8enW9FGFyKaUip35hCpWbvp -----END CERTIFICATE-----Generated at Fri Dec 19 23:57:59 2025 by rpki-client