This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json) Hash identifier: AaOKLCEINGh5Nu+TrXdc+2M9DlnT7B0p5SWmiPBwHSg= Subject key identifier: 8E:48:DA:EE:C0:B0:D9:5B:EC:C4:8A:F5:1F:84:39:12:DD:00:F6:95 Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Certificate serial: 0869 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft Manifest number: 085D Signing time: Thu 18 Dec 2025 20:12:43 +0000 Manifest this update: Thu 18 Dec 2025 20:12:42 +0000 Manifest next update: Thu 25 Dec 2025 20:12:42 +0000 Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: YOTlOQjztmP9+xmfBmQtxHvpmzIqWqPiLUVo/I5CaAU=) 2: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: hdHi4xqpMBX0AQynSt0UCqWOxzfycEn8kuSXfk/h1Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2153 (0x869) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Validity Not Before: Dec 18 20:12:42 2025 GMT Not After : Dec 25 20:12:42 2025 GMT Subject: CN=6944603b-d19d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e2:72:d7:a5:37:96:13:4c:ef:a0:25:53:2a: 61:bb:f1:04:cd:c0:04:39:71:b5:3b:d9:21:07:2d: ae:69:14:fa:99:21:ab:98:7c:65:64:cf:7c:f7:d4: b9:27:26:97:65:73:d6:e5:95:7f:c1:a1:c4:b3:57: 66:d1:46:75:b5:ea:04:e7:60:50:e9:14:db:a9:ea: 2d:f8:9a:09:61:19:24:8e:9b:59:da:15:d8:cc:dd: 42:b9:3d:3b:a0:bb:e4:50:0d:1d:7e:95:5f:db:92: 86:2c:a3:17:c4:1e:45:67:dd:38:88:0c:10:38:f9: ed:7e:1b:2c:a0:aa:ad:18:e6:de:3e:e4:e6:a2:40: f7:76:5e:11:e9:de:22:72:43:3d:b5:ef:96:4e:74: c3:39:81:71:10:e5:a0:56:13:ee:f5:7f:db:47:11: 50:29:df:27:3f:a7:4f:ea:dc:99:ca:4e:90:d9:a8: 21:cc:eb:79:04:8f:3a:38:7e:00:60:fe:35:45:88: df:d3:e7:e7:57:c3:41:5b:a0:03:cb:28:3f:f0:9e: 1f:e1:dc:45:3b:75:1a:01:96:0a:26:68:b3:88:23: 2a:ec:64:47:66:f2:3b:39:33:b6:7c:15:d7:03:44: c9:8a:51:cc:fd:48:65:c5:34:90:5e:ed:91:3f:d9: 01:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:48:DA:EE:C0:B0:D9:5B:EC:C4:8A:F5:1F:84:39:12:DD:00:F6:95 X509v3 Authority Key Identifier: keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b7:4b:0e:86:b7:63:d9:88:c2:db:dd:d4:e9:c1:41:cd:6f: cc:c8:90:10:a3:b9:37:bd:52:19:a9:aa:0b:d2:aa:9f:7f:24: d2:f5:f9:f1:02:ae:bc:ac:8f:e9:ae:03:cb:ff:22:a0:de:07: e6:43:65:28:44:a0:2b:2b:4c:f6:ee:7b:c5:a5:20:c1:a5:21: 7d:f9:31:55:e0:4b:d5:c1:f5:d8:4b:4c:3e:e0:7b:56:d1:84: d9:78:10:f2:02:56:ad:65:ae:b6:e9:6b:0e:03:96:8d:e3:0a: be:e8:e7:76:6e:44:1d:16:4f:c0:91:64:1f:f0:a4:7b:75:cc: d8:b2:7e:e9:7c:1b:91:a0:87:06:a5:e7:66:52:1a:ca:68:0c: db:f3:c3:87:d5:b4:bb:64:13:df:31:d5:b1:d4:f0:fd:9e:6f: 4f:c5:b7:80:ea:56:5f:ec:46:6d:bb:9a:87:cb:81:50:59:65: b1:3c:d7:6e:06:b0:d7:62:31:ca:41:0e:34:70:e5:84:b3:3c: f5:c0:31:21:b4:74:a6:f5:45:0e:37:62:66:83:27:ce:74:93: 9c:16:36:ec:09:64:4a:fc:b9:f5:c1:1f:55:e3:c0:4a:46:ab: cd:e1:c3:94:f5:57:63:a8:8e:f3:10:be:dd:1b:bb:b7:92:b9: 83:f7:89:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFRTkxMTAvBgNVBAUTKDJGN0FFQkRDNzAxNzlENzE2OTRGQzY5OUQ1RjNFNDBF NTg0QUIzNjkwHhcNMjUxMjE4MjAxMjQyWhcNMjUxMjI1MjAxMjQyWjAYMRYwFAYD VQQDDA02OTQ0NjAzYi1kMTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOJy16U3lhNM76AlUyphu/EEzcAEOXG1O9khBy2uaRT6mSGrmHxlZM9899S5 JyaXZXPW5ZV/waHEs1dm0UZ1teoE52BQ6RTbqeot+JoJYRkkjptZ2hXYzN1CuT07 oLvkUA0dfpVf25KGLKMXxB5FZ904iAwQOPntfhssoKqtGObePuTmokD3dl4R6d4i ckM9te+WTnTDOYFxEOWgVhPu9X/bRxFQKd8nP6dP6tyZyk6Q2aghzOt5BI86OH4A YP41RYjf0+fnV8NBW6ADyyg/8J4f4dxFO3UaAZYKJmiziCMq7GRHZvI7OTO2fBXX A0TJilHM/UhlxTSQXu2RP9kBcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5I2u7A sNlb7MSK9R+EORLdAPaVMB8GA1UdIwQYMBaAFC9669xwF51xaU/GmdXz5A5YSrNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkVFOS8zMjQ4NDFGNEU2 RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5YRnBUOGFaMWZQa0RsaEtz MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzcnIzSEFYblhGcFQ4YVoxZlBrRGxoS3Myay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkVFOS8zMjQ4NDFGNEU2RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5Y RnBUOGFaMWZQa0RsaEtzMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAct0sOhrdj2YjC293U6cFBzW/MyJAQo7k3vVIZqaoL0qqffyTS9fnx Aq68rI/prgPL/yKg3gfmQ2UoRKArK0z27nvFpSDBpSF9+TFV4EvVwfXYS0w+4HtW 0YTZeBDyAlatZa626WsOA5aN4wq+6Od2bkQdFk/AkWQf8KR7dczYsn7pfBuRoIcG pedmUhrKaAzb88OH1bS7ZBPfMdWx1PD9nm9PxbeA6lZf7EZtu5qHy4FQWWWxPNdu BrDXYjHKQQ40cOWEszz1wDEhtHSm9UUON2JmgyfOdJOcFjbsCWRK/Ln1wR9V48BK RqvN4cOU9VdjqI7zEL7dG7u3krmD94kL -----END CERTIFICATE-----Generated at Fri Dec 19 19:13:57 2025 by rpki-client