This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft File: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json) Hash identifier: YrOitElUOOcx6c/7D3JM1uHROqvhS7Oimxb8S4Pcmmk= Subject key identifier: 8F:F8:14:9B:D6:DF:A5:81:BA:79:81:92:88:44:28:6F:34:0D:7B:31 Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Certificate serial: 0CAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft Manifest number: 0C9A Signing time: Sat 20 Dec 2025 18:03:28 +0000 Manifest this update: Sat 20 Dec 2025 18:03:27 +0000 Manifest next update: Sat 27 Dec 2025 18:03:27 +0000 Files and hashes: 1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: 4ZeR3nTjVQiVR2swXYX6r9lsv9tFa6UjL5sVoexCzE8=) 2: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: UK4U60eiGuCuztGWWVANU0DD3PkFQsjwpFntP06fM3U=) 3: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: KRpOoM5OBYozHGqs3tAj+O3jIxT+88DuqXNJ+j9YBFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3244 (0xcac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Validity Not Before: Dec 20 18:03:27 2025 GMT Not After : Dec 27 18:03:27 2025 GMT Subject: CN=6946e4f0-c1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c3:3f:1d:01:cb:53:4b:85:d6:3b:f7:39:f1: ce:00:4e:b5:2f:a9:18:e5:a1:8e:37:e1:0a:a8:5d: 05:60:2d:c7:53:a1:ac:79:c2:e3:42:b9:80:9f:96: e2:14:f0:ad:3f:99:7e:89:eb:ee:01:6e:b5:87:1c: 8c:93:72:67:46:84:38:ac:a9:c3:fb:6c:88:01:82: 34:42:41:1e:54:dc:2e:28:44:94:75:10:c7:36:7b: 13:40:f7:3b:07:f5:37:cb:40:5a:e6:65:bc:52:2c: 62:1a:8a:87:86:c7:4f:c4:28:5c:ae:a0:df:45:53: cb:5c:b4:47:8e:9e:24:e8:69:2e:d1:39:28:fe:4c: 36:f4:90:d1:87:7e:38:74:51:01:a1:a3:4a:79:91: 39:52:7e:7c:33:2d:63:14:79:f2:c1:9f:79:d4:11: 9b:1e:39:60:e0:fd:cd:36:01:c9:57:4a:f3:e2:19: 20:ce:54:f6:80:3b:1b:da:67:01:7b:c0:29:16:a1: 93:d9:02:1d:b3:29:66:13:9a:37:7f:e0:70:63:6c: a7:33:10:72:34:9a:6e:88:d2:e1:42:5e:ec:00:7e: 24:c9:58:6f:e3:d5:da:f0:b8:08:cd:18:ef:2a:8e: 32:e3:b3:51:bc:fc:d6:07:0e:90:45:87:4b:84:3d: 15:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F8:14:9B:D6:DF:A5:81:BA:79:81:92:88:44:28:6F:34:0D:7B:31 X509v3 Authority Key Identifier: keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:84:09:d4:d5:64:53:15:4a:c9:dc:1c:7c:7c:a9:24:42:e4: d9:96:ae:69:5f:0e:89:fb:37:27:31:2b:27:cd:40:ea:c6:08: 86:df:eb:3d:8a:07:8a:57:0f:55:5d:af:c3:5f:59:63:95:c4: ae:3a:3a:3e:3f:9d:87:a5:dc:f4:32:b4:88:3c:14:b3:41:3f: 62:c5:3e:94:98:0c:62:9f:8a:80:93:b0:50:eb:0c:37:e0:7c: ea:b1:e4:71:49:20:98:3c:f4:8e:09:2e:4d:0e:b9:8d:fa:f1: 32:8d:ec:1f:1b:5c:f4:6b:37:9e:fd:68:7d:eb:fb:f2:9a:34: a1:de:0c:36:cb:bc:08:78:0e:ed:a2:2a:a0:2c:15:6b:f8:ad: 92:77:56:b8:5d:d7:49:d7:95:9d:76:ad:33:32:fc:c5:88:4d: 46:ff:50:04:3b:42:59:ac:0c:7f:fd:9c:f2:76:40:cb:7c:31: 06:fc:3a:85:34:85:58:42:24:52:58:0e:80:95:fb:ec:61:20: e6:44:f6:2e:11:c5:ec:e3:bb:e2:3f:99:d7:d0:d5:da:ac:b2: 40:7f:db:28:18:f4:f3:8e:12:3f:a5:27:c2:a2:e2:3d:66:c6: 83:a4:23:f7:b5:90:f6:74:b2:b8:ab:e6:d2:42:73:16:5d:9e: 3a:33:6d:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDOTIxMTAvBgNVBAUTKDk0NUQwOTdGMjI2M0QxNEMzNkI3QjY1QzJEQzBDMjVG OUVFNzcxOTIwHhcNMjUxMjIwMTgwMzI3WhcNMjUxMjI3MTgwMzI3WjAYMRYwFAYD VQQDDA02OTQ2ZTRmMC1jMWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocM/HQHLU0uF1jv3OfHOAE61L6kY5aGON+EKqF0FYC3HU6GsecLjQrmAn5bi FPCtP5l+ievuAW61hxyMk3JnRoQ4rKnD+2yIAYI0QkEeVNwuKESUdRDHNnsTQPc7 B/U3y0Ba5mW8UixiGoqHhsdPxChcrqDfRVPLXLRHjp4k6Gku0Tko/kw29JDRh344 dFEBoaNKeZE5Un58My1jFHnywZ951BGbHjlg4P3NNgHJV0rz4hkgzlT2gDsb2mcB e8ApFqGT2QIdsylmE5o3f+BwY2ynMxByNJpuiNLhQl7sAH4kyVhv49Xa8LgIzRjv Ko4y47NRvPzWBw6QRYdLhD0VfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/4FJvW 36WBunmBkohEKG80DXsxMB8GA1UdIwQYMBaAFJRdCX8iY9FMNre2XC3Awl+e53GS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM5Mi8wRjREN0I0NjA5 RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBVdzJ0N1pjTGNEQ1g1N25j WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGMEpmeUpqMFV3MnQ3WmNMY0RDWDU3bmNaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM5Mi8wRjREN0I0NjA5RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBV dzJ0N1pjTGNEQ1g1N25jWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDhAnU1WRTFUrJ3Bx8fKkkQuTZlq5pXw6J+zcnMSsnzUDqxgiG3+s9 igeKVw9VXa/DX1ljlcSuOjo+P52Hpdz0MrSIPBSzQT9ixT6UmAxin4qAk7BQ6ww3 4HzqseRxSSCYPPSOCS5NDrmN+vEyjewfG1z0azee/Wh96/vymjSh3gw2y7wIeA7t oiqgLBVr+K2Sd1a4XddJ15Wddq0zMvzFiE1G/1AEO0JZrAx//ZzydkDLfDEG/DqF NIVYQiRSWA6AlfvsYSDmRPYuEcXs47viP5nX0NXarLJAf9soGPTzjhI/pSfCouI9 ZsaDpCP3tZD2dLK4q+bSQnMWXZ46M22N -----END CERTIFICATE-----Generated at Sun Dec 21 14:41:05 2025 by rpki-client