This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft File: l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json) Hash identifier: BavcajAs6Z1C4JiTE/19zvK4cBTmKwmHM3Bl7GG1xXM= Subject key identifier: 11:91:C5:05:4B:E1:72:25:28:71:5B:D8:9E:9D:0C:09:72:B5:77:1B Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Certificate serial: 0BAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft Manifest number: 0B9B Signing time: Thu 18 Dec 2025 18:41:20 +0000 Manifest this update: Thu 18 Dec 2025 18:41:19 +0000 Manifest next update: Thu 25 Dec 2025 18:41:19 +0000 Files and hashes: 1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: 6bGUTTiXjdOyTipAsQ31D1SQB0Rm26Qg9qM088iTvFU=) 2: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: DQ4zjVC/izJ/mpi1KCeEh40z0Ktl3VHP629G9xZ43Is=) 3: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: orMTuhNCmn5/4lVWP0hvNJHm2iToMZFaKY4Tk1oMp1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2990 (0xbae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Validity Not Before: Dec 18 18:41:19 2025 GMT Not After : Dec 25 18:41:19 2025 GMT Subject: CN=69444ad0-942d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b0:df:29:53:8f:28:ed:6e:cb:95:94:0b:4b: 75:82:f3:9f:47:96:9c:85:7b:c0:05:56:5c:45:1d: 82:82:4b:d2:44:8c:5a:0b:e6:e5:31:b8:c0:95:80: c4:ae:a7:a7:80:73:e2:1c:fe:92:47:ed:0f:60:f6: 64:5c:83:e0:49:6f:94:10:6b:97:0c:a7:9c:01:d2: f1:75:ab:da:b3:2c:e7:8f:17:ee:06:91:7c:8a:0f: f2:5a:0d:08:bf:4f:87:90:6a:e6:65:50:a6:68:6b: 83:93:ec:9b:ef:06:9c:04:b6:2d:6d:b1:df:3e:b4: 71:70:26:c0:95:6b:d6:85:ef:1d:c8:34:73:60:77: 1b:96:01:8e:d5:b0:66:32:d7:60:58:0e:b4:db:f4: 94:08:cb:db:8d:06:6a:c5:80:25:1e:54:4a:d1:60: fb:ae:d3:e7:d6:07:64:10:c0:07:92:2e:d3:56:10: ec:16:d4:91:c2:16:9a:03:45:3e:50:cc:6e:28:a0: e6:e8:63:08:e0:f9:cf:15:47:48:0b:90:7d:7e:73: 1c:be:a4:7b:66:55:36:6c:a1:f6:b8:be:29:92:8c: 91:c3:b7:29:9f:26:2b:01:30:3b:92:42:c0:89:2b: d8:06:57:8b:3e:48:87:58:05:a7:72:5d:05:8f:18: bd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:91:C5:05:4B:E1:72:25:28:71:5B:D8:9E:9D:0C:09:72:B5:77:1B X509v3 Authority Key Identifier: keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d0:ae:9c:a9:60:8d:21:75:a8:6d:2d:bc:55:3d:7e:c4:b6: 92:1a:5d:09:91:d3:c5:04:cb:6a:49:70:3d:f5:54:ea:a3:de: 01:95:de:c1:fd:b6:c4:cd:98:69:cd:1f:bf:91:6c:7a:c4:48: ed:32:9c:52:af:62:18:a8:95:c2:8c:49:d6:c5:7a:6d:d3:86: 27:8c:48:73:49:6a:d7:c1:b2:7c:ed:14:35:a6:58:8a:4c:30: 10:2d:9d:c7:96:d5:c5:d8:20:d2:ed:d8:e4:b2:eb:c6:21:19: 12:dd:a8:b2:2a:16:14:79:88:76:9b:9b:d1:c9:67:bd:6d:d0: ed:2d:23:0b:d2:5d:f8:34:fe:d4:e7:98:50:0e:b4:72:35:07: b2:83:0f:7c:78:7f:09:34:81:8f:ec:56:34:94:2a:15:79:4d: b1:33:c8:ca:57:ce:9b:19:71:b0:08:24:53:bb:70:fa:d4:64: 65:ba:fa:77:df:d7:48:39:b2:0c:03:71:4a:b2:20:29:51:7b: 98:aa:b5:b0:d0:3c:5b:58:72:b8:1e:7a:41:1c:41:e7:05:c3: 3e:b0:7c:d6:6a:02:51:22:ac:d7:45:3b:75:46:3b:df:fa:78: 0b:63:a5:8e:36:a9:7d:ba:79:b7:9d:3d:69:77:c2:d7:70:4a: 05:05:4e:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3 RDEwMkVBQ0EwHhcNMjUxMjE4MTg0MTE5WhcNMjUxMjI1MTg0MTE5WjAYMRYwFAYD VQQDDA02OTQ0NGFkMC05NDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLDfKVOPKO1uy5WUC0t1gvOfR5achXvABVZcRR2CgkvSRIxaC+blMbjAlYDE rqengHPiHP6SR+0PYPZkXIPgSW+UEGuXDKecAdLxdavasyznjxfuBpF8ig/yWg0I v0+HkGrmZVCmaGuDk+yb7wacBLYtbbHfPrRxcCbAlWvWhe8dyDRzYHcblgGO1bBm MtdgWA602/SUCMvbjQZqxYAlHlRK0WD7rtPn1gdkEMAHki7TVhDsFtSRwhaaA0U+ UMxuKKDm6GMI4PnPFUdIC5B9fnMcvqR7ZlU2bKH2uL4pkoyRw7cpnyYrATA7kkLA iSvYBleLPkiHWAWncl0Fjxi9HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGRxQVL 4XIlKHFb2J6dDAlytXcbMB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTVFQS83QzYwQjlGNjNCNkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0 QlBsQktQX0Y2TXQ5RUM2c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK0K6cqWCNIXWobS28VT1+xLaSGl0JkdPFBMtqSXA99VTqo94Bld7B /bbEzZhpzR+/kWx6xEjtMpxSr2IYqJXCjEnWxXpt04YnjEhzSWrXwbJ87RQ1pliK TDAQLZ3HltXF2CDS7djksuvGIRkS3aiyKhYUeYh2m5vRyWe9bdDtLSML0l34NP7U 55hQDrRyNQeygw98eH8JNIGP7FY0lCoVeU2xM8jKV86bGXGwCCRTu3D61GRluvp3 39dIObIMA3FKsiApUXuYqrWw0DxbWHK4HnpBHEHnBcM+sHzWagJRIqzXRTt1Rjvf +ngLY6WONql9unm3nT1pd8LXcEoFBU6o -----END CERTIFICATE-----Generated at Fri Dec 19 19:23:17 2025 by rpki-client