This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft File: lRKEJmSsUb9nhVvG5PRr41UaTaM.mft (raw, json) Hash identifier: gRaenU+uJSQNqypaxrBdTSiC0cW2KRQufdJTqlBsYNI= Subject key identifier: 70:9C:7C:CD:93:2D:FE:89:07:DF:56:D9:5A:92:D8:A1:BC:1B:E8:9C Authority key identifier: 95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 Certificate issuer: /CN=A916B7B2/serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Certificate serial: 0324 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft Manifest number: 031B Signing time: Sat 27 Dec 2025 00:08:27 +0000 Manifest this update: Sat 27 Dec 2025 00:08:26 +0000 Manifest next update: Sat 03 Jan 2026 00:08:26 +0000 Files and hashes: 1: lRKEJmSsUb9nhVvG5PRr41UaTaM.crl (hash: eFhQ4r1Yhzd4BW7v6wwa7diTfWXkBLmZkUCN0EIGgO0=) 2: 2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa (hash: Gkpwn3+qaXPLAggtUnFxSv/8MK3BM4swBT14YB5sClw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 00:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 804 (0x324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B7B2, serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Validity Not Before: Dec 27 00:08:26 2025 GMT Not After : Jan 3 00:08:26 2026 GMT Subject: CN=694f237b-4036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:73:c5:d8:3f:af:7c:6e:f9:b5:fb:9c:64:a9: d4:dd:4e:44:dc:08:94:d3:27:40:ab:b7:95:3f:0a: 8d:10:92:45:af:36:7e:ae:e9:df:3b:23:5d:65:22: 2f:41:32:f7:ff:34:7d:af:2a:0c:9d:e3:52:99:ef: 11:5b:3d:55:a8:ca:45:b3:99:6a:ae:4d:0e:46:b6: b3:c5:80:c7:dc:38:af:04:ea:64:e6:b0:89:79:af: f6:c6:ff:d5:7b:07:c4:c9:84:ee:03:78:17:1d:2c: 21:f8:25:ec:92:b0:2c:18:5a:38:c2:ad:e5:45:ee: 43:30:ef:3e:56:32:f0:49:48:3d:7a:cc:2e:1e:f9: 0e:cf:dd:11:a8:5d:f2:cd:7b:19:90:30:71:7e:06: 1f:53:60:92:08:cc:ba:05:56:de:1e:66:f5:64:b5: ea:61:6d:fc:30:e1:4e:c4:87:a2:33:37:9c:2a:4b: 43:cf:4e:fd:e9:c0:71:53:1a:42:2e:32:c0:ad:bd: 42:f7:f1:ba:6a:2e:3d:07:68:4c:fe:49:4c:c4:16: da:7a:d7:25:e1:7b:62:c2:2b:7f:0d:45:a5:4c:44: 03:d5:03:a9:9c:c9:27:e7:80:53:0f:7f:bf:ef:50: c8:88:c1:78:64:14:d9:54:98:23:a4:9a:26:89:45: db:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9C:7C:CD:93:2D:FE:89:07:DF:56:D9:5A:92:D8:A1:BC:1B:E8:9C X509v3 Authority Key Identifier: keyid:95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:8b:56:93:40:04:21:2e:78:2e:d0:88:2b:de:0d:5f:dc:b1: 87:a5:f1:97:cb:38:d9:f3:3e:73:41:50:e9:48:e4:b1:5e:26: 49:cc:c4:1c:37:1a:f1:ce:79:77:23:82:e6:3f:dc:ae:f8:a8: da:6a:87:92:a7:21:25:bf:02:6d:a6:69:85:de:ed:e6:ed:0e: 81:c8:f7:fb:13:53:87:7d:bb:07:90:e7:be:10:55:9a:94:d2: 3a:d5:85:9e:ab:48:3f:65:23:10:74:f5:ab:33:5a:ee:f5:7c: d8:48:44:4b:09:74:5d:6f:5d:b8:1b:2d:35:27:a7:86:df:b6: 42:40:3d:b4:89:45:7c:c2:23:87:10:58:21:82:43:a1:94:4a: 71:95:65:d0:20:22:c2:3c:45:ae:cc:29:a2:bd:36:25:7b:ad: 78:0e:83:e0:14:dc:ac:c5:5d:90:44:33:a6:2e:fb:51:b9:ed: 26:92:c0:31:08:50:9b:b9:2e:2a:18:c2:aa:da:c0:3a:0a:b1: ef:ba:43:89:d8:b0:32:ae:98:b5:2d:49:64:96:05:3c:b6:e4: c0:1a:24:50:bb:57:cc:4b:42:b7:9a:a9:5e:71:d7:cb:2f:5c: ab:06:fb:88:d4:b4:30:67:f1:fc:58:23:24:c0:63:55:f5:bf: 6b:92:56:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI3QjIxMTAvBgNVBAUTKDk1MTI4NDI2NjRBQzUxQkY2Nzg1NUJDNkU0RjQ2QkUz NTUxQTREQTMwHhcNMjUxMjI3MDAwODI2WhcNMjYwMTAzMDAwODI2WjAYMRYwFAYD VQQDDA02OTRmMjM3Yi00MDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnnPF2D+vfG75tfucZKnU3U5E3AiU0ydAq7eVPwqNEJJFrzZ+runfOyNdZSIv QTL3/zR9ryoMneNSme8RWz1VqMpFs5lqrk0ORrazxYDH3DivBOpk5rCJea/2xv/V ewfEyYTuA3gXHSwh+CXskrAsGFo4wq3lRe5DMO8+VjLwSUg9eswuHvkOz90RqF3y zXsZkDBxfgYfU2CSCMy6BVbeHmb1ZLXqYW38MOFOxIeiMzecKktDz0796cBxUxpC LjLArb1C9/G6ai49B2hM/klMxBbaetcl4Xtiwit/DUWlTEQD1QOpnMkn54BTD3+/ 71DIiMF4ZBTZVJgjpJomiUXb8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCcfM2T Lf6JB99W2VqS2KG8G+icMB8GA1UdIwQYMBaAFJUShCZkrFG/Z4VbxuT0a+NVGk2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjdCMi8wRTYzMjE5NEZC N0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1ViOW5oVnZHNVBScjQxVWFU YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSS0VKbVNzVWI5bmhWdkc1UFJyNDFVYVRhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjdCMi8wRTYzMjE5NEZCN0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1Vi OW5oVnZHNVBScjQxVWFUYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3i1aTQAQhLngu0Igr3g1f3LGHpfGXyzjZ8z5zQVDpSOSxXiZJzMQc Nxrxznl3I4LmP9yu+KjaaoeSpyElvwJtpmmF3u3m7Q6ByPf7E1OHfbsHkOe+EFWa lNI61YWeq0g/ZSMQdPWrM1ru9XzYSERLCXRdb124Gy01J6eG37ZCQD20iUV8wiOH EFghgkOhlEpxlWXQICLCPEWuzCmivTYle614DoPgFNysxV2QRDOmLvtRue0mksAx CFCbuS4qGMKq2sA6CrHvukOJ2LAyrpi1LUlklgU8tuTAGiRQu1fMS0K3mqlecdfL L1yrBvuI1LQwZ/H8WCMkwGNV9b9rklbb -----END CERTIFICATE-----Generated at Sun Dec 28 23:24:17 2025 by rpki-client