This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft File: mLI8urGE2rGtANEAC4IMmyGkM-w.mft (raw, json) Hash identifier: X3nM62U7wnD6xArQzpZroAcqljjHWUE1YauJkYQGwH8= Subject key identifier: DF:96:50:FF:77:D5:D7:29:DD:4A:C2:1F:FA:11:FE:74:AD:5E:E9:04 Authority key identifier: 98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC Certificate issuer: /CN=A9182FBC/serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC Certificate serial: 1224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft Manifest number: 1205 Signing time: Tue 30 Dec 2025 16:54:47 +0000 Manifest this update: Tue 30 Dec 2025 16:54:47 +0000 Manifest next update: Tue 06 Jan 2026 16:54:47 +0000 Files and hashes: 1: mLI8urGE2rGtANEAC4IMmyGkM-w.crl (hash: 8tZRPOo6dNIoPoQjoVUgWpq+oj+qHlEmng7pWtm35I0=) 2: 37BC67B4B18711EC9F9FA058C4F9AE02.roa (hash: au9xZxCZeREaDcJouTlLj1rRcc2mSPei8Jd1icPw/ew=) 3: 38F5C602B18711EC9F9FA058C4F9AE02.roa (hash: 864v72yIGP6+fcV9ihOEtR0vSNI9KCZAgVkE2lkVzYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 16:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4644 (0x1224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FBC, serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC Validity Not Before: Dec 30 16:54:47 2025 GMT Not After : Jan 6 16:54:47 2026 GMT Subject: CN=695403d7-0ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:84:7e:83:83:2c:4b:26:d6:5e:a8:ee:a5:23: 0c:49:c9:c4:a9:05:ab:c0:0f:c4:18:a0:46:eb:ac: 45:e5:4f:5c:cf:5e:a1:97:18:67:45:37:e3:c8:f6: 2f:91:a3:39:25:06:a4:62:fa:6f:8c:00:57:61:f7: a2:65:d8:e4:11:36:48:7f:0c:d4:2d:d1:39:aa:e5: 7c:52:2e:75:27:d2:27:66:69:a7:94:62:0b:7f:c8: 34:65:b8:4c:72:eb:f8:63:0b:8f:c4:20:bd:c7:51: 47:14:0b:a1:02:b0:09:93:6a:5f:c4:61:d8:6b:27: 32:1c:39:22:66:ad:9e:3c:6b:bd:16:7d:1f:1d:a4: 70:01:3f:0d:b6:ea:5a:f6:9c:c7:8b:52:89:f2:90: 00:da:ec:39:2f:cd:93:a6:cf:ee:0d:24:3c:e0:7a: 52:0b:63:5e:28:79:e8:1d:20:01:03:42:91:e6:9d: 18:a4:24:dd:23:f9:82:f9:af:fe:45:2c:40:fc:34: c2:b1:96:6c:ed:b9:fc:05:73:37:6d:87:0d:4b:b4: 9f:71:19:73:4d:e2:f6:0d:db:60:c6:e5:dc:61:97: f9:c1:5d:5a:87:a8:4e:25:e0:43:fb:df:bd:5b:40: a1:b5:90:b4:06:9e:ac:cd:6d:b3:2d:26:dc:cd:03: 14:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:96:50:FF:77:D5:D7:29:DD:4A:C2:1F:FA:11:FE:74:AD:5E:E9:04 X509v3 Authority Key Identifier: keyid:98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:51:33:16:72:ef:e9:53:bb:a8:52:18:28:ef:d5:4a:04:4a: 0e:1e:f6:28:b2:80:33:bb:20:7b:f0:86:fd:5a:ab:6d:be:97: fc:e7:7a:5c:dc:71:4b:6e:54:f8:5d:6a:cc:a0:9e:43:45:92: bf:e5:b6:35:42:0d:5e:50:81:7f:64:6f:05:b8:59:31:ed:9a: 50:1c:e9:0f:c2:6c:69:11:e4:bd:00:97:92:e7:4f:57:5e:16: c1:a6:a8:65:e0:47:fb:74:df:53:e6:c3:96:3e:1d:a8:46:3e: 03:bd:77:2e:46:67:22:86:81:a1:22:15:8c:52:10:8e:7b:54: f4:83:38:77:92:f9:d9:43:1f:af:a7:d4:58:3a:d2:ef:91:53: 9d:df:4d:05:dc:aa:98:97:0f:05:a6:22:7c:30:36:b2:9c:91: 45:5a:15:d3:3f:b7:0b:01:2d:2d:da:94:a4:a7:24:a5:2e:2e: 93:33:23:f6:3c:da:cf:6c:10:59:f8:65:ad:8a:9d:8a:c5:f8: 64:4c:af:a1:2c:93:61:39:56:5c:27:98:76:32:1f:0a:82:28: e5:25:51:f7:8f:6b:ec:d7:06:a0:12:fe:55:25:be:e6:8c:f9: 88:86:56:50:8d:0a:40:ec:7b:78:25:74:51:9e:e3:89:bd:2b: c4:f8:60:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGQkMxMTAvBgNVBAUTKDk4QjIzQ0JBQjE4NERBQjFBRDAwRDEwMDBCODIwQzlC MjFBNDMzRUMwHhcNMjUxMjMwMTY1NDQ3WhcNMjYwMTA2MTY1NDQ3WjAYMRYwFAYD VQQDDA02OTU0MDNkNy0wZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoR+g4MsSybWXqjupSMMScnEqQWrwA/EGKBG66xF5U9cz16hlxhnRTfjyPYv kaM5JQakYvpvjABXYfeiZdjkETZIfwzULdE5quV8Ui51J9InZmmnlGILf8g0ZbhM cuv4YwuPxCC9x1FHFAuhArAJk2pfxGHYaycyHDkiZq2ePGu9Fn0fHaRwAT8Ntupa 9pzHi1KJ8pAA2uw5L82Tps/uDSQ84HpSC2NeKHnoHSABA0KR5p0YpCTdI/mC+a/+ RSxA/DTCsZZs7bn8BXM3bYcNS7SfcRlzTeL2DdtgxuXcYZf5wV1ah6hOJeBD+9+9 W0ChtZC0Bp6szW2zLSbczQMUswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+WUP93 1dcp3UrCH/oR/nStXukEMB8GA1UdIwQYMBaAFJiyPLqxhNqxrQDRAAuCDJshpDPs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZCQy9BMzM1QjI1OEZD RTQxMUU4OTBGQzFFMzdDNEY5QUUwMi9tTEk4dXJHRTJyR3RBTkVBQzRJTW15R2tN LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21MSTh1ckdFMnJHdEFORUFDNElNbXlHa00tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkZCQy9BMzM1QjI1OEZDRTQxMUU4OTBGQzFFMzdDNEY5QUUwMi9tTEk4dXJHRTJy R3RBTkVBQzRJTW15R2tNLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKUTMWcu/pU7uoUhgo79VKBEoOHvYosoAzuyB78Ib9Wqttvpf853pc 3HFLblT4XWrMoJ5DRZK/5bY1Qg1eUIF/ZG8FuFkx7ZpQHOkPwmxpEeS9AJeS509X XhbBpqhl4Ef7dN9T5sOWPh2oRj4DvXcuRmcihoGhIhWMUhCOe1T0gzh3kvnZQx+v p9RYOtLvkVOd300F3KqYlw8FpiJ8MDaynJFFWhXTP7cLAS0t2pSkpySlLi6TMyP2 PNrPbBBZ+GWtip2KxfhkTK+hLJNhOVZcJ5h2Mh8KgijlJVH3j2vs1wagEv5VJb7m jPmIhlZQjQpA7Ht4JXRRnuOJvSvE+GDr -----END CERTIFICATE-----Generated at Wed Dec 31 11:55:20 2025 by rpki-client