This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft File: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json) Hash identifier: FYROKeYAJn/FqHBVe4OANWd1Vy6zPR7mO92dXx3GLbA= Subject key identifier: 89:B9:24:64:DD:04:53:91:59:08:A3:1B:4F:A8:3B:1D:AB:85:81:39 Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F Certificate issuer: /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F Certificate serial: 0DE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft Manifest number: 0DDB Signing time: Sat 20 Dec 2025 17:33:14 +0000 Manifest this update: Sat 20 Dec 2025 17:33:14 +0000 Manifest next update: Sat 27 Dec 2025 17:33:14 +0000 Files and hashes: 1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: k3BgfnZLDQFAxo7Hv+aeeJ14WHbH88/HWVoR5Bs2+kI=) 2: 5E6CE2C631AE11F0A9F09E0AC4F9AE02.roa (hash: r12gsCo6iUFC5f/jSOBGicDzV0QxP8G0HCiUT+DfDFw=) 3: 3D8179B431AE11F0A7D0076FC4F9AE02.roa (hash: XfxZHGEC6L2I7lf4RHsiD8/699vyTVMdYrB6wZFXmUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3560 (0xde8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B361, serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F Validity Not Before: Dec 20 17:33:14 2025 GMT Not After : Dec 27 17:33:14 2025 GMT Subject: CN=6946ddda-d7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a7:30:cf:46:6b:95:a0:f5:da:8b:d5:a2:41: a0:66:63:2e:b7:a3:9a:4b:20:35:6d:95:1d:c7:4c: 61:d8:88:3c:4c:ff:ff:94:13:b3:dd:c6:d4:f7:94: e7:41:b7:5b:a6:96:cb:0a:34:f3:da:21:b1:aa:be: 9f:50:9c:08:cb:2e:7b:a8:79:83:fd:3d:bf:66:ff: 41:6d:24:d2:58:83:8d:4e:1b:6c:dd:97:2d:71:0c: 46:a3:35:08:26:f6:5c:cc:69:77:f1:4e:2a:f4:07: 31:d9:f7:04:7b:d3:eb:8b:a4:9b:29:67:73:be:96: 32:28:09:c1:55:9b:c7:93:2d:0e:31:fa:bc:50:78: 60:13:13:38:a9:28:ab:05:a3:6b:da:20:66:d9:e8: 1b:7b:f1:29:dd:f8:92:fe:be:e2:34:cc:5a:d8:15: 03:5e:08:69:66:9c:09:15:2b:29:94:56:ef:d8:2a: 9b:e8:f0:ea:c7:d5:0f:fe:09:0c:1c:e1:f0:bd:9c: cc:01:76:ec:04:3a:4a:73:d3:07:f1:49:b3:69:64: da:6e:f2:a3:ef:81:e4:23:9f:bc:38:14:21:18:bc: f5:fd:b3:b1:a2:8e:40:30:5d:c0:65:48:1c:2a:6e: 0f:d2:d2:48:38:68:ee:b2:fe:40:70:18:2d:c7:d1: 26:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B9:24:64:DD:04:53:91:59:08:A3:1B:4F:A8:3B:1D:AB:85:81:39 X509v3 Authority Key Identifier: keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:7f:f1:a3:ab:7b:06:05:19:a1:3e:82:2d:80:74:2c:26:b1: ed:25:b6:75:41:a8:48:c5:ee:72:c2:54:c1:03:17:3b:41:15: e6:54:8e:45:29:d5:96:1e:19:ce:4c:26:61:91:ce:f7:a3:49: 02:29:f3:50:c5:db:27:c4:77:d5:b4:8b:96:86:d5:68:ab:ae: 31:ee:c1:b8:fc:d0:66:10:45:95:a3:51:4d:8e:ad:d6:0f:7c: 84:9b:e3:b5:e7:60:e7:c8:de:e7:a4:c3:fc:4e:b9:c3:70:bc: 21:94:9d:b6:1a:48:35:4e:c8:07:f6:e9:81:cc:cf:55:fe:45: b2:bd:b1:33:1e:d1:dd:78:77:79:cf:83:4c:70:6b:61:fe:7a: 40:1c:01:d6:d0:f4:2d:df:2c:6e:95:3c:6b:4c:97:f8:86:cb: cc:af:44:13:bf:7d:0e:ee:7e:42:65:ff:e8:74:06:34:1c:3b: 10:41:5e:c8:a6:ec:53:63:52:73:0f:59:d3:4a:88:61:76:6b: 36:56:8e:0b:de:dd:13:21:d7:69:94:d2:21:8e:f6:5f:de:f4: d7:08:ad:74:ce:9b:7c:de:23:49:3c:17:71:65:3d:00:0c:03: d2:70:cd:56:70:45:5b:ae:8a:e6:4d:e6:20:82:72:45:17:36: 47:ca:c2:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIzNjExMTAvBgNVBAUTKEUwQjlBMkU5OTM5RDU1OEYxOEJFNjIxNzVDOTVENzY4 RDI0NUQzMUYwHhcNMjUxMjIwMTczMzE0WhcNMjUxMjI3MTczMzE0WjAYMRYwFAYD VQQDDA02OTQ2ZGRkYS1kN2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmqcwz0ZrlaD12ovVokGgZmMut6OaSyA1bZUdx0xh2Ig8TP//lBOz3cbU95Tn QbdbppbLCjTz2iGxqr6fUJwIyy57qHmD/T2/Zv9BbSTSWIONThts3ZctcQxGozUI JvZczGl38U4q9Acx2fcEe9Pri6SbKWdzvpYyKAnBVZvHky0OMfq8UHhgExM4qSir BaNr2iBm2egbe/Ep3fiS/r7iNMxa2BUDXghpZpwJFSsplFbv2Cqb6PDqx9UP/gkM HOHwvZzMAXbsBDpKc9MH8UmzaWTabvKj74HkI5+8OBQhGLz1/bOxoo5AMF3AZUgc Km4P0tJIOGjusv5AcBgtx9EmBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIm5JGTd BFORWQijG0+oOx2rhYE5MB8GA1UdIwQYMBaAFOC5oumTnVWPGL5iF1yV12jSRdMf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjM2MS83QzhEODAwQUNB MzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZOFl2bUlYWEpYWGFOSkYw eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMbWk2Wk9kVlk4WXZtSVhYSlhYYU5KRjB4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjM2MS83QzhEODAwQUNBMzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZ OFl2bUlYWEpYWGFOSkYweDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuf/Gjq3sGBRmhPoItgHQsJrHtJbZ1QahIxe5ywlTBAxc7QRXmVI5F KdWWHhnOTCZhkc73o0kCKfNQxdsnxHfVtIuWhtVoq64x7sG4/NBmEEWVo1FNjq3W D3yEm+O152DnyN7npMP8TrnDcLwhlJ22Gkg1TsgH9umBzM9V/kWyvbEzHtHdeHd5 z4NMcGth/npAHAHW0PQt3yxulTxrTJf4hsvMr0QTv30O7n5CZf/odAY0HDsQQV7I puxTY1JzD1nTSohhdms2Vo4L3t0TIddplNIhjvZf3vTXCK10zpt83iNJPBdxZT0A DAPScM1WcEVbrormTeYggnJFFzZHysL7 -----END CERTIFICATE-----Generated at Mon Dec 22 05:38:51 2025 by rpki-client