This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft File: lI_4don6lJEW9ffIAOsdcB5l43s.mft (raw, json) Hash identifier: l9trBpccQkYVLW4I7hgWPcELwmxuG0xx+Ch1vmtU/8I= Subject key identifier: 89:54:EE:C1:C1:FF:BF:F1:47:8B:9C:C3:EB:FE:C4:D8:E0:56:93:53 Authority key identifier: 94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B Certificate issuer: /CN=A9148EFA/serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B Certificate serial: 0BD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft Manifest number: 0BD0 Signing time: Thu 18 Dec 2025 18:35:41 +0000 Manifest this update: Thu 18 Dec 2025 18:35:40 +0000 Manifest next update: Thu 25 Dec 2025 18:35:40 +0000 Files and hashes: 1: lI_4don6lJEW9ffIAOsdcB5l43s.crl (hash: zpp/SrtRq4NEFVxxHE71o/QDQGdI/2cGel1E4nBCKII=) 2: 160F265C827311EDA56A8F30C4F9AE02.roa (hash: DFFj/9slvAH+PEbWNXT9e7xoWXrU79TcIDoX6Iil9eI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3032 (0xbd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148EFA, serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B Validity Not Before: Dec 18 18:35:40 2025 GMT Not After : Dec 25 18:35:40 2025 GMT Subject: CN=6944497d-a2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:48:03:e4:b9:96:87:96:cf:69:d4:a4:a9:6c: 4c:f1:b3:47:62:4b:29:96:bc:42:1f:6a:35:42:a9: 81:c3:44:ab:df:18:05:45:58:39:a4:51:43:ff:3d: 07:24:0b:94:81:7c:71:2e:2e:6c:be:8f:1d:d1:ac: d6:72:0d:8b:85:b0:e9:90:ac:06:ae:0b:cf:18:cd: ce:2c:3b:2e:08:01:99:b4:f5:d5:ba:65:60:0a:dc: 1c:3d:65:89:b7:40:7b:fa:8a:77:eb:b2:1f:8e:05: 14:4f:64:23:2c:91:f4:76:cd:1a:4e:77:43:d0:95: 23:7d:a4:74:8e:45:01:06:17:ee:34:d3:af:8e:81: 7b:2a:05:a0:ac:5c:94:fc:3c:83:3f:f7:47:57:4d: 6f:56:9e:dc:08:db:5c:a2:d4:cb:bc:53:90:3b:8a: 3a:9d:1b:76:f0:3d:df:56:ef:0c:be:90:17:bb:5e: c4:a8:17:06:26:10:d6:4f:b3:b9:2a:2f:c9:af:0c: 97:ba:cb:7b:64:aa:2d:b9:f6:d4:14:c6:82:aa:bd: b7:79:bf:f0:94:0f:bb:fd:b4:76:cb:95:2d:a3:a6: c3:54:af:46:90:8c:66:87:71:c6:ac:28:5a:96:ef: 4d:0e:8c:fc:7b:6a:73:b6:fd:a0:f0:7e:90:54:64: bd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:54:EE:C1:C1:FF:BF:F1:47:8B:9C:C3:EB:FE:C4:D8:E0:56:93:53 X509v3 Authority Key Identifier: keyid:94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c4:22:a7:44:2f:d2:b0:56:93:48:22:7a:a0:1b:18:6e:fc: b5:27:a0:c5:a6:95:09:ad:3f:a4:d2:0f:d3:a4:64:99:63:e6: 4d:96:4b:f6:49:69:79:fc:0c:17:40:3b:b3:c6:c8:2d:e9:b3: 8c:9a:11:b2:b3:e9:e2:5c:a1:53:ed:28:8c:db:5b:0e:70:eb: 3e:0a:f8:c0:a5:3e:71:f1:ee:9f:97:fd:b8:7b:f7:80:7f:a4: c4:26:76:f4:f9:29:4e:d0:85:1a:dd:a3:6c:76:0a:ff:2e:20: 98:5c:42:fc:ae:ee:df:fe:d4:4e:4d:ea:e5:d7:62:c1:1d:f5: 05:7e:4f:c3:d0:4d:db:3c:b7:27:db:cf:f3:9f:56:a5:69:ec: 0b:8b:8a:fd:00:88:af:14:ec:46:aa:2d:7f:92:34:66:16:4a: 29:86:12:b8:63:d4:20:91:3c:de:30:34:f6:55:36:ba:fd:00: 12:7b:e3:79:e3:7e:04:33:ef:3c:dd:9b:a6:5b:af:2c:3b:05: 2d:88:ec:08:e6:23:56:65:b2:be:ba:25:2a:15:17:ce:d6:2d: ee:0e:e5:87:21:60:79:22:2c:9f:86:20:f7:cf:fd:5a:b4:f6: 71:c1:84:cf:a0:0f:26:da:27:1a:24:31:5c:cd:20:72:94:e5: 66:59:d4:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFRkExMTAvBgNVBAUTKDk0OEZGODc2ODlGQTk0OTExNkY1RjdDODAwRUIxRDcw MUU2NUUzN0IwHhcNMjUxMjE4MTgzNTQwWhcNMjUxMjI1MTgzNTQwWjAYMRYwFAYD VQQDDA02OTQ0NDk3ZC1hMmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0gD5LmWh5bPadSkqWxM8bNHYksplrxCH2o1QqmBw0Sr3xgFRVg5pFFD/z0H JAuUgXxxLi5svo8d0azWcg2LhbDpkKwGrgvPGM3OLDsuCAGZtPXVumVgCtwcPWWJ t0B7+op367IfjgUUT2QjLJH0ds0aTndD0JUjfaR0jkUBBhfuNNOvjoF7KgWgrFyU /DyDP/dHV01vVp7cCNtcotTLvFOQO4o6nRt28D3fVu8MvpAXu17EqBcGJhDWT7O5 Ki/JrwyXust7ZKotufbUFMaCqr23eb/wlA+7/bR2y5Uto6bDVK9GkIxmh3HGrCha lu9NDoz8e2pztv2g8H6QVGS9YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlU7sHB /7/xR4ucw+v+xNjgVpNTMB8GA1UdIwQYMBaAFJSP+HaJ+pSRFvX3yADrHXAeZeN7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEVGQS9FMEM5NTFDRTMw NjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxKRVc5ZmZJQU9zZGNCNWw0 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xJXzRkb242bEpFVzlmZklBT3NkY0I1bDQzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEVGQS9FMEM5NTFDRTMwNjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxK RVc5ZmZJQU9zZGNCNWw0M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+xCKnRC/SsFaTSCJ6oBsYbvy1J6DFppUJrT+k0g/TpGSZY+ZNlkv2 SWl5/AwXQDuzxsgt6bOMmhGys+niXKFT7SiM21sOcOs+CvjApT5x8e6fl/24e/eA f6TEJnb0+SlO0IUa3aNsdgr/LiCYXEL8ru7f/tROTerl12LBHfUFfk/D0E3bPLcn 28/zn1alaewLi4r9AIivFOxGqi1/kjRmFkophhK4Y9QgkTzeMDT2VTa6/QASe+N5 434EM+883ZumW68sOwUtiOwI5iNWZbK+uiUqFRfO1i3uDuWHIWB5IiyfhiD3z/1a tPZxwYTPoA8m2icaJDFczSBylOVmWdRh -----END CERTIFICATE-----Generated at Sat Dec 20 20:12:06 2025 by rpki-client