This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft File: 1l59EGxXG0LrbOL4iHLeery6-7g.mft (raw, json) Hash identifier: MLZBLfVEU1XNFPH50oTFxm0spDYaCG9qhSH4w3dIkl8= Subject key identifier: D4:00:9C:DA:14:4F:D7:99:D8:D1:57:44:84:55:75:A7:0D:14:CA:24 Authority key identifier: D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8 Certificate issuer: /CN=A913C34F/serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8 Certificate serial: 32C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft Manifest number: 32C1 Signing time: Thu 18 Dec 2025 15:22:25 +0000 Manifest this update: Thu 18 Dec 2025 15:22:25 +0000 Manifest next update: Thu 25 Dec 2025 15:22:25 +0000 Files and hashes: 1: 1l59EGxXG0LrbOL4iHLeery6-7g.crl (hash: 55x5oHPV4TeQaGIdo/uyXG0vb2tax09o6co/IJch0fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12993 (0x32c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C34F, serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8 Validity Not Before: Dec 18 15:22:25 2025 GMT Not After : Dec 25 15:22:25 2025 GMT Subject: CN=69441c31-fac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2d:42:b7:fc:dd:6b:82:88:ea:86:4f:90:9b: a0:3d:ab:65:6b:1f:ec:d8:cd:b8:e1:c4:eb:24:6a: 73:72:5e:cf:0c:2e:28:c9:b4:8b:76:4b:a3:22:2a: 17:3d:0a:6f:2a:2c:ba:33:57:9a:b3:6e:e8:80:21: a1:33:1e:ed:98:17:9a:2b:14:f6:5f:88:a3:d9:1d: fa:fe:bb:bc:65:91:f6:40:25:eb:bf:8f:b8:f2:7b: 14:59:f0:3d:2a:64:3b:3a:06:87:79:01:d0:02:91: 23:75:50:4d:bc:25:8a:47:b3:79:40:41:9f:0d:d9: 46:3b:a6:80:86:35:1c:4b:91:d8:c2:b2:d7:49:9d: 2d:c7:dc:e4:bc:14:e4:2a:b2:de:9a:c7:85:85:32: b6:c6:7b:0e:cc:d7:25:03:0c:75:a1:6e:ac:e8:4d: 5f:2b:2c:5b:5c:cf:cf:03:ac:6e:46:d6:a4:03:63: c3:2d:79:2b:f8:b0:26:0b:ab:85:a0:79:58:10:a1: ca:f9:25:ad:49:e8:f7:02:06:60:89:51:90:ae:70: 0d:43:dd:a2:2d:68:d8:13:71:2b:01:05:1a:ba:fb: b1:bf:db:84:36:51:ca:02:49:46:ea:a9:d3:50:ca: 8c:a8:42:97:6e:95:5e:53:09:b0:1a:7a:8f:d1:54: 2a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:00:9C:DA:14:4F:D7:99:D8:D1:57:44:84:55:75:A7:0D:14:CA:24 X509v3 Authority Key Identifier: keyid:D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:04:72:c0:10:99:06:13:d0:8f:8f:5c:9e:4c:44:8d:aa:4a: 33:6d:07:1c:71:fc:88:15:d7:09:3b:bd:d9:00:71:ce:c4:c6: 82:4f:ee:ec:8f:fd:60:e2:a2:bf:0b:33:03:41:ed:24:d6:93: 66:07:9b:7b:c3:34:ce:5a:96:e5:11:60:24:de:b0:85:6f:c0: 08:bc:e2:03:a0:b0:44:d1:06:d6:48:10:c7:30:26:69:3e:92: 18:08:16:31:53:af:c1:b8:a8:99:99:72:a7:db:8e:d5:06:f1: 69:81:56:fd:95:0f:ae:22:fb:86:f3:89:9a:d8:89:d1:6e:34: 8a:b0:6d:22:85:47:e4:38:bf:24:f0:91:d4:e2:b2:9f:85:5d: 98:99:1b:25:3d:a5:15:a7:af:e6:29:dd:4f:4c:3b:f2:6b:9a: fb:a5:51:4c:71:15:98:ab:19:93:a4:7b:89:ca:5e:e8:41:8e: 15:27:92:90:7c:ff:fe:31:c4:2f:25:65:c1:db:c5:f6:5d:91: 3a:c6:d8:74:d9:69:2d:d8:c6:36:56:d8:05:b6:e2:a4:fe:a1: e1:e4:93:4f:20:a3:14:d9:b3:20:03:cc:73:a1:5b:48:78:14: f6:98:83:e4:7a:c8:58:7f:8e:ce:33:75:e8:59:14:26:f7:f0: b2:46:99:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MzNEYxMTAvBgNVBAUTKEQ2NUU3RDEwNkM1NzFCNDJFQjZDRTJGODg4NzJERTdB QkNCQUZCQjgwHhcNMjUxMjE4MTUyMjI1WhcNMjUxMjI1MTUyMjI1WjAYMRYwFAYD VQQDDA02OTQ0MWMzMS1mYWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxS1Ct/zda4KI6oZPkJugPatlax/s2M244cTrJGpzcl7PDC4oybSLdkujIioX PQpvKiy6M1eas27ogCGhMx7tmBeaKxT2X4ij2R36/ru8ZZH2QCXrv4+48nsUWfA9 KmQ7OgaHeQHQApEjdVBNvCWKR7N5QEGfDdlGO6aAhjUcS5HYwrLXSZ0tx9zkvBTk KrLemseFhTK2xnsOzNclAwx1oW6s6E1fKyxbXM/PA6xuRtakA2PDLXkr+LAmC6uF oHlYEKHK+SWtSej3AgZgiVGQrnANQ92iLWjYE3ErAQUauvuxv9uENlHKAklG6qnT UMqMqEKXbpVeUwmwGnqP0VQq2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQAnNoU T9eZ2NFXRIRVdacNFMokMB8GA1UdIwQYMBaAFNZefRBsVxtC62zi+Ihy3nq8uvu4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzM0Ri8zNUZCRjVENDhB MDQxMUUyQjg4MjFEMDkzMjkyQjVFOC8xbDU5RUd4WEcwTHJiT0w0aUhMZWVyeTYt N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFsNTlFR3hYRzBMcmJPTDRpSExlZXJ5Ni03Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzM0Ri8zNUZCRjVENDhBMDQxMUUyQjg4MjFEMDkzMjkyQjVFOC8xbDU5RUd4WEcw THJiT0w0aUhMZWVyeTYtN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6BHLAEJkGE9CPj1yeTESNqkozbQcccfyIFdcJO73ZAHHOxMaCT+7s j/1g4qK/CzMDQe0k1pNmB5t7wzTOWpblEWAk3rCFb8AIvOIDoLBE0QbWSBDHMCZp PpIYCBYxU6/BuKiZmXKn247VBvFpgVb9lQ+uIvuG84ma2InRbjSKsG0ihUfkOL8k 8JHU4rKfhV2YmRslPaUVp6/mKd1PTDvya5r7pVFMcRWYqxmTpHuJyl7oQY4VJ5KQ fP/+McQvJWXB28X2XZE6xth02Wkt2MY2VtgFtuKk/qHh5JNPIKMU2bMgA8xzoVtI eBT2mIPkeshYf47OM3XoWRQm9/CyRplQ -----END CERTIFICATE-----Generated at Fri Dec 19 20:30:13 2025 by rpki-client