This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft File: loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft (raw, json) Hash identifier: WGj3fmApyJOPFlxUi74re51LQ6KPT/YJ8D2AD4bo8UE= Subject key identifier: A1:7F:48:A1:71:0D:C2:E1:CD:54:DD:7A:90:49:6A:3F:3E:2D:1B:EF Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 Certificate issuer: /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Certificate serial: 05C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft Manifest number: 05A9 Signing time: Thu 18 Dec 2025 22:33:05 +0000 Manifest this update: Thu 18 Dec 2025 22:33:05 +0000 Manifest next update: Thu 25 Dec 2025 22:33:05 +0000 Files and hashes: 1: loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl (hash: KoaLGE7Ge0/KVqahssO+wNPj/xBJZwRKT33gSHrlmUg=) 2: D3D36BE0271011ECA0D7D95AC4F9AE02.roa (hash: ToNYuKjsmNUrDjM3EopYow2kRZNQw6nwL7h9Ilwq2wI=) 3: AF0A3F14178911EC876F5F50C4F9AE02.roa (hash: KRiDfnMy2+pwD3zrIBOiDvY7T9O/jHD6MSYbIKfk0AY=) 4: F1C7A044D91E11EFAD3C7613C4F9AE02.roa (hash: cMsOBL01lB8MhNIvPe7EZWZhW2/NqYoBIP9IcsqTKSI=) 5: AE8BB766178911EC876F5F50C4F9AE02.roa (hash: 9Xivq6s93mksbhu2p/H/z3gtS9/XmhNf3IMjTVy5pWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1476 (0x5c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Validity Not Before: Dec 18 22:33:05 2025 GMT Not After : Dec 25 22:33:05 2025 GMT Subject: CN=69448121-28c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c2:31:4f:61:23:d2:80:35:b2:b1:7e:67:07: 65:e8:11:d1:18:ea:58:a4:2c:fb:7c:56:2a:2b:35: c3:55:36:b8:08:cd:85:0f:0b:09:7a:b9:4f:53:67: 45:f1:9c:b2:75:e3:2a:6a:bb:e3:73:a7:62:b0:92: 33:d0:be:ac:76:a0:6c:8e:3d:06:61:e0:94:0b:d9: 3f:e1:15:28:20:d8:58:0e:f9:d9:18:06:2e:22:50: e1:a9:6c:0b:4b:d0:3e:39:0d:0a:d2:bb:a4:dc:56: d8:5e:b6:f5:2d:de:dc:a0:c7:90:d1:d3:10:8d:c6: f1:74:66:40:e9:67:2e:6f:47:28:1d:78:05:53:9e: 71:4f:6e:b9:03:d6:81:72:8c:c0:71:e9:5c:98:08: ef:bd:cd:dd:80:7f:e2:7f:a0:0c:5f:2d:52:8c:3d: aa:1a:85:c5:f4:c7:d2:f8:f8:6c:45:56:d8:21:dc: 0b:7f:6a:8a:57:16:82:63:7d:eb:35:ba:3d:b8:c1: 13:98:71:d3:ee:bd:4a:b2:0a:f8:da:a4:1a:a3:f3: a3:50:a7:09:91:58:20:00:e6:b1:35:4d:ff:e9:1b: f7:60:e3:b7:67:9c:10:57:ec:a9:d5:a0:89:f2:32: b0:53:84:d7:76:c2:83:8c:c9:2f:dc:2c:1b:d1:44: 92:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7F:48:A1:71:0D:C2:E1:CD:54:DD:7A:90:49:6A:3F:3E:2D:1B:EF X509v3 Authority Key Identifier: keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:d7:24:50:2a:41:cc:a0:c2:b8:3c:40:50:3c:08:70:c1:be: 38:b1:0d:b1:a5:b3:21:a1:b9:db:96:d3:c7:ca:7d:5e:3d:86: 59:fa:f9:9b:54:f5:c2:70:58:d2:c5:f0:fa:87:af:50:1d:5a: 1a:06:dd:b7:e6:bb:e0:13:9d:86:dc:b7:70:2a:60:d9:02:3a: fa:75:a5:ec:5b:fe:ee:cb:a2:7f:3f:9e:23:d7:6b:50:9e:8a: 43:b3:69:43:f9:0b:08:57:49:b3:5c:22:44:13:43:b9:5d:29: 7d:d7:6e:6f:bd:cf:77:d4:a6:c6:76:fa:aa:24:d8:33:51:ef: ff:ee:00:27:c3:f5:81:e0:fc:b0:66:82:f1:98:9e:20:ed:eb: 78:0c:dc:01:12:b0:61:48:60:c2:f4:76:77:29:d5:89:fc:ee: a4:46:55:7f:46:ae:4b:56:e9:cc:36:ba:93:bc:ab:0c:a8:e2: 35:8d:5f:b8:25:4f:7e:3a:39:fd:0d:36:7a:00:20:1a:88:6e: 27:ec:4b:e8:9d:1b:a8:5c:44:c7:35:d4:5f:22:8a:77:54:d9: 5e:1e:11:48:10:30:34:81:04:ac:6c:ab:b3:be:fc:7d:9b:0e: b5:73:2c:9a:d6:14:c4:5b:52:09:c6:d1:a2:7c:b6:05:21:b0: d2:75:43:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE0QjExMTAvBgNVBAUTKDk2ODJDMkFCRTI1MzIzNTgwNzc2QjFEMEUyNzVEMkZE MkQ2OTdFQjYwHhcNMjUxMjE4MjIzMzA1WhcNMjUxMjI1MjIzMzA1WjAYMRYwFAYD VQQDDA02OTQ0ODEyMS0yOGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MIxT2Ej0oA1srF+Zwdl6BHRGOpYpCz7fFYqKzXDVTa4CM2FDwsJerlPU2dF 8ZyydeMqarvjc6disJIz0L6sdqBsjj0GYeCUC9k/4RUoINhYDvnZGAYuIlDhqWwL S9A+OQ0K0ruk3FbYXrb1Ld7coMeQ0dMQjcbxdGZA6Wcub0coHXgFU55xT265A9aB cozAcelcmAjvvc3dgH/if6AMXy1SjD2qGoXF9MfS+PhsRVbYIdwLf2qKVxaCY33r Nbo9uMETmHHT7r1Ksgr42qQao/OjUKcJkVggAOaxNU3/6Rv3YOO3Z5wQV+yp1aCJ 8jKwU4TXdsKDjMkv3Cwb0USSSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKF/SKFx DcLhzVTdepBJaj8+LRvvMB8GA1UdIwQYMBaAFJaCwqviUyNYB3ax0OJ10v0taX62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS83QTg4NjRBQ0ZC RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkxZ0hkckhRNG5YU19TMXBm clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xvTENxLUpUSTFnSGRySFE0blhTX1MxcGZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTRCMS83QTg4NjRBQ0ZCRTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkx Z0hkckhRNG5YU19TMXBmclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp1yRQKkHMoMK4PEBQPAhwwb44sQ2xpbMhobnbltPHyn1ePYZZ+vmb VPXCcFjSxfD6h69QHVoaBt235rvgE52G3LdwKmDZAjr6daXsW/7uy6J/P54j12tQ nopDs2lD+QsIV0mzXCJEE0O5XSl9125vvc931KbGdvqqJNgzUe//7gAnw/WB4Pyw ZoLxmJ4g7et4DNwBErBhSGDC9HZ3KdWJ/O6kRlV/Rq5LVunMNrqTvKsMqOI1jV+4 JU9+Ojn9DTZ6ACAaiG4n7EvonRuoXETHNdRfIop3VNleHhFIEDA0gQSsbKuzvvx9 mw61cyya1hTEW1IJxtGifLYFIbDSdUMc -----END CERTIFICATE-----Generated at Sat Dec 20 02:07:12 2025 by rpki-client