This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft File: LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft (raw, json) Hash identifier: qoVgLE5JKdZWqomaVI6HyRu5StMJ6EUoubcgtSDpmtY= Subject key identifier: 4D:A0:EC:0E:A8:93:7A:DC:7C:68:6D:58:5A:02:19:6C:64:74:87:73 Authority key identifier: 2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54 Certificate issuer: /CN=A916CDDF/serialNumber=2E5079BE856A5A6637856C937154245D987FA754 Certificate serial: 0C6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft Manifest number: 149C Signing time: Mon 22 Dec 2025 18:07:27 +0000 Manifest this update: Mon 22 Dec 2025 18:07:27 +0000 Manifest next update: Mon 29 Dec 2025 18:07:27 +0000 Files and hashes: 1: LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl (hash: w29WYcnH8eeXOHPhg43jhdOvNW1zFu0kL85IwCUTSGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3181 (0xc6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=2E5079BE856A5A6637856C937154245D987FA754 Validity Not Before: Dec 22 18:07:27 2025 GMT Not After : Dec 29 18:07:27 2025 GMT Subject: CN=694988df-dd8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:59:10:0a:67:21:60:a7:30:29:a4:b5:d8:80: 99:17:96:58:9e:f5:53:ab:0f:8f:ca:04:6d:1e:2f: 1d:fc:da:10:49:cc:32:f4:6e:3d:53:6e:a1:a1:1f: 56:38:19:83:d3:95:5b:89:f9:f7:5e:5c:0c:23:f3: bd:95:ae:58:c4:c1:33:b7:fb:74:d6:5a:82:6b:38: e3:fe:3f:11:2f:95:fc:fb:d9:ee:16:38:43:27:8a: b2:d8:df:31:11:fe:29:07:f8:79:20:ee:8a:d7:1a: 39:63:a7:67:7f:48:ad:54:4d:0f:55:0d:01:95:88: 00:2d:75:b2:ff:83:5b:ab:e1:3f:2a:15:55:01:ac: d9:d7:d8:a3:72:be:94:72:e3:fe:51:93:50:4c:62: c3:66:32:23:3e:03:35:e1:f8:df:ba:8a:7c:89:cd: 8e:f0:91:0b:bd:dc:e7:00:0e:49:6a:0d:b1:26:f6: e2:2f:73:ac:a4:76:89:ee:87:17:8d:83:0b:b2:94: 8c:73:99:97:f1:11:b0:b4:ef:fe:93:65:d9:d8:01: f5:11:d4:82:78:97:75:8a:17:f0:c6:ca:91:2b:98: 7b:ae:67:ce:79:4f:99:e4:2d:fb:59:3a:d5:6d:6c: 5c:84:5a:0f:b1:b9:77:c6:52:0b:40:da:e2:cb:22: ca:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A0:EC:0E:A8:93:7A:DC:7C:68:6D:58:5A:02:19:6C:64:74:87:73 X509v3 Authority Key Identifier: keyid:2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:20:23:9e:df:bb:79:10:3d:38:07:07:98:fa:79:a2:fb:42: 06:76:b4:5e:a0:3d:da:f2:62:27:3c:ee:99:61:2f:07:a7:fc: 95:70:ff:88:d7:be:b5:f3:94:dd:90:f1:cb:6f:e5:cc:bb:8e: 2b:78:dc:6b:98:52:63:b2:a5:90:a2:c7:62:0b:6b:35:ad:38: 9b:92:a1:b9:78:d8:6c:46:d3:eb:c1:0d:86:de:b7:58:3d:44: 2b:04:85:2e:55:01:10:c6:63:71:23:43:a8:06:5c:fb:26:ca: 7e:e1:45:f4:71:69:3b:c0:fb:95:70:a5:58:25:2c:1a:be:2c: 59:73:92:00:1d:f7:4d:6c:52:7b:18:7a:09:2c:68:27:ae:6b: a1:df:11:f0:57:13:25:d1:bc:2d:79:0a:bd:23:cf:30:ea:51: 55:75:91:51:3c:8f:4b:17:2c:b7:26:d0:9c:89:cf:00:f2:d0: 5b:aa:6f:d8:74:87:88:08:fe:7f:3a:f4:f0:21:1f:c7:1b:82: c3:3b:e3:54:66:e9:cc:85:e9:ef:14:db:f9:ab:10:8d:b2:e1: a4:82:22:b9:e2:5d:c0:00:d1:3f:52:30:b6:aa:ec:72:4b:7f: dd:b8:b5:5f:f5:2f:7c:4d:8a:1a:41:48:28:0f:51:63:af:7f: cc:21:e7:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDJFNTA3OUJFODU2QTVBNjYzNzg1NkM5MzcxNTQyNDVE OTg3RkE3NTQwHhcNMjUxMjIyMTgwNzI3WhcNMjUxMjI5MTgwNzI3WjAYMRYwFAYD VQQDDA02OTQ5ODhkZi1kZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFkQCmchYKcwKaS12ICZF5ZYnvVTqw+PygRtHi8d/NoQScwy9G49U26hoR9W OBmD05Vbifn3XlwMI/O9la5YxMEzt/t01lqCazjj/j8RL5X8+9nuFjhDJ4qy2N8x Ef4pB/h5IO6K1xo5Y6dnf0itVE0PVQ0BlYgALXWy/4Nbq+E/KhVVAazZ19ijcr6U cuP+UZNQTGLDZjIjPgM14fjfuop8ic2O8JELvdznAA5Jag2xJvbiL3OspHaJ7ocX jYMLspSMc5mX8RGwtO/+k2XZ2AH1EdSCeJd1ihfwxsqRK5h7rmfOeU+Z5C37WTrV bWxchFoPsbl3xlILQNriyyLKuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2g7A6o k3rcfGhtWFoCGWxkdIdzMB8GA1UdIwQYMBaAFC5Qeb6FalpmN4Vsk3FUJF2Yf6dU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdtWTNoV3lUY1ZRa1haaF9w MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsQjV2b1ZxV21ZM2hXeVRjVlFrWFpoX3AxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdt WTNoV3lUY1ZRa1haaF9wMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzICOe37t5ED04BweY+nmi+0IGdrReoD3a8mInPO6ZYS8Hp/yVcP+I 176185TdkPHLb+XMu44reNxrmFJjsqWQosdiC2s1rTibkqG5eNhsRtPrwQ2G3rdY PUQrBIUuVQEQxmNxI0OoBlz7Jsp+4UX0cWk7wPuVcKVYJSwavixZc5IAHfdNbFJ7 GHoJLGgnrmuh3xHwVxMl0bwteQq9I88w6lFVdZFRPI9LFyy3JtCcic8A8tBbqm/Y dIeICP5/OvTwIR/HG4LDO+NUZunMhenvFNv5qxCNsuGkgiK54l3AANE/UjC2quxy S3/duLVf9S98TYoaQUgoD1Fjr3/MIeee -----END CERTIFICATE-----Generated at Wed Dec 24 10:37:45 2025 by rpki-client