This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft File: l5f3hScG7hxCxopeRQtXL47lCBg.mft (raw, json) Hash identifier: xdM2dH9b7E4vJBLWaNlmEMhdzPJbkHiNTkpZ5FudDbQ= Subject key identifier: CA:2B:2C:D9:70:A9:B4:46:E6:D3:39:95:38:00:BF:5E:0B:84:89:AD Authority key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 Certificate issuer: /CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Certificate serial: 0A75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft Manifest number: 0A6E Signing time: Thu 18 Dec 2025 19:13:42 +0000 Manifest this update: Thu 18 Dec 2025 19:13:42 +0000 Manifest next update: Thu 25 Dec 2025 19:13:42 +0000 Files and hashes: 1: l5f3hScG7hxCxopeRQtXL47lCBg.crl (hash: vybV21GtTsR4WZLwjy2HTLHblcQrAnMo499V3zhcRsk=) 2: 1EDD32B274BE11EA97202132C4F9AE02.roa (hash: v31hx7pnoT1x1labmZhnEXrmOdmMDEQ40w+RQf8muiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2677 (0xa75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149063, serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Validity Not Before: Dec 18 19:13:42 2025 GMT Not After : Dec 25 19:13:42 2025 GMT Subject: CN=69445266-b3a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a7:dd:fa:5d:62:9b:10:89:89:64:e1:5e:eb: 71:50:a4:44:8b:6f:1c:ac:99:e2:d8:21:8a:00:91: ec:6c:e9:12:f0:41:31:f5:cc:10:6a:2a:b0:48:26: 9a:16:15:e6:22:0e:07:1f:f6:87:fc:52:43:ae:28: 4d:44:dc:10:9c:6e:88:46:19:ba:35:b8:0d:f2:74: 69:22:09:7e:ed:b0:63:96:3d:09:4c:08:b2:30:e3: 72:d1:71:79:95:9b:1b:d0:f8:60:6c:b8:0f:fe:0d: f6:93:92:7c:a1:d1:86:34:a8:04:17:b9:e3:3b:dc: 00:b8:52:c4:24:07:cc:99:36:a1:b2:17:2f:df:dd: ed:20:8b:76:ce:6f:a0:90:81:cd:86:c3:d7:02:8e: 53:eb:d5:ae:be:2b:8b:9a:94:37:ec:49:ed:97:06: 03:fd:33:86:35:48:8f:3c:c2:0f:bb:10:37:66:50: c0:34:59:e7:88:16:d3:43:89:9b:40:03:4f:77:90: c5:c1:84:2a:57:e6:ac:2c:2f:ee:07:6e:e4:8f:94: 73:17:e0:bf:65:dc:ce:9e:1b:8a:cc:52:d6:cd:7a: 8c:dd:42:78:a8:25:65:f0:30:33:04:33:98:65:65: 81:6f:64:b7:c8:71:43:0b:c1:f7:9c:2c:3c:61:0a: ed:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2B:2C:D9:70:A9:B4:46:E6:D3:39:95:38:00:BF:5E:0B:84:89:AD X509v3 Authority Key Identifier: keyid:97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:6a:85:b2:c4:5d:86:6f:a0:2f:17:7e:29:8a:f2:e1:92:d0: ec:a1:0a:9e:4c:43:c2:bd:7e:5d:77:cf:cb:b9:f0:85:6e:60: 70:a1:b2:7a:aa:4a:e5:79:2d:71:6c:81:da:1b:25:cc:24:41: 0b:01:21:05:f5:ca:96:fa:44:7e:87:e0:22:4a:f9:ba:68:02: af:d2:78:d1:0e:44:0d:20:82:1b:a6:ee:7c:29:dd:ec:07:e5: d6:ce:89:70:6c:12:38:d5:af:b5:ad:84:1c:57:ec:ec:64:f2: ad:84:b8:94:e7:46:cf:d8:88:20:ab:2e:4c:21:61:4f:a8:bb: d8:53:6c:1f:28:8b:ef:d1:9b:ce:61:ac:c1:9a:59:2d:29:4e: 62:32:dd:44:00:51:66:d8:f5:c9:6f:ed:44:f6:8f:ac:6c:29: 48:f2:d7:c8:a6:ad:e8:93:75:ad:29:39:98:94:c1:2b:58:9f: 68:31:e9:06:5d:55:7f:16:d5:e0:3e:61:51:f3:be:8b:51:92: 41:68:41:aa:bf:96:48:92:e2:03:ca:e1:50:2a:c2:07:9a:57: e4:1f:2a:aa:7c:b2:ad:47:48:e3:d7:3a:f4:d9:80:ff:cb:78: 75:81:78:02:11:2b:70:e4:83:1d:63:1c:9f:27:94:fa:ac:f5: 1c:b5:b1:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwNjMxMTAvBgNVBAUTKDk3OTdGNzg1MjcwNkVFMUM0MkM2OEE1RTQ1MEI1NzJG OEVFNTA4MTgwHhcNMjUxMjE4MTkxMzQyWhcNMjUxMjI1MTkxMzQyWjAYMRYwFAYD VQQDDA02OTQ0NTI2Ni1iM2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6fd+l1imxCJiWThXutxUKREi28crJni2CGKAJHsbOkS8EEx9cwQaiqwSCaa FhXmIg4HH/aH/FJDrihNRNwQnG6IRhm6NbgN8nRpIgl+7bBjlj0JTAiyMONy0XF5 lZsb0PhgbLgP/g32k5J8odGGNKgEF7njO9wAuFLEJAfMmTahshcv393tIIt2zm+g kIHNhsPXAo5T69WuviuLmpQ37EntlwYD/TOGNUiPPMIPuxA3ZlDANFnniBbTQ4mb QANPd5DFwYQqV+asLC/uB27kj5RzF+C/ZdzOnhuKzFLWzXqM3UJ4qCVl8DAzBDOY ZWWBb2S3yHFDC8H3nCw8YQrtVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMorLNlw qbRG5tM5lTgAv14LhImtMB8GA1UdIwQYMBaAFJeX94UnBu4cQsaKXkULVy+O5QgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTA2My82ODg5QURGMjc0 QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdoeEN4b3BlUlF0WEw0N2xD QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w1ZjNoU2NHN2h4Q3hvcGVSUXRYTDQ3bENCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTA2My82ODg5QURGMjc0QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdo eEN4b3BlUlF0WEw0N2xDQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnaoWyxF2Gb6AvF34pivLhktDsoQqeTEPCvX5dd8/LufCFbmBwobJ6 qkrleS1xbIHaGyXMJEELASEF9cqW+kR+h+AiSvm6aAKv0njRDkQNIIIbpu58Kd3s B+XWzolwbBI41a+1rYQcV+zsZPKthLiU50bP2Iggqy5MIWFPqLvYU2wfKIvv0ZvO YazBmlktKU5iMt1EAFFm2PXJb+1E9o+sbClI8tfIpq3ok3WtKTmYlMErWJ9oMekG XVV/FtXgPmFR876LUZJBaEGqv5ZIkuIDyuFQKsIHmlfkHyqqfLKtR0jj1zr02YD/ y3h1gXgCEStw5IMdYxyfJ5T6rPUctbFO -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:58 2025 by rpki-client