This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft File: lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft (raw, json) Hash identifier: xPJAGU9vlEyiBszZW9Y2NpNyTiy6SEqQcHDc+pm35JE= Subject key identifier: 74:23:0F:F5:AB:2D:FC:45:67:32:8A:26:E0:37:86:3C:3B:68:3C:47 Authority key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 Certificate issuer: /CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Certificate serial: 0251 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft Manifest number: 023F Signing time: Fri 19 Dec 2025 01:10:14 +0000 Manifest this update: Fri 19 Dec 2025 01:10:14 +0000 Manifest next update: Fri 26 Dec 2025 01:10:14 +0000 Files and hashes: 1: lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl (hash: 9Vrz5B5FpGBvnOUr3FpGKUjAS0UeQIOjCzIBfz1ko0Q=) 2: 5420A28C7F5211ED8A16EF81C4F9AE02.roa (hash: vbYFC6gCyDs/e9kJtd3p8hTC7XpM+OZ2Y3//6IjJkSs=) 3: 912586FA7F4F11ED96FDE369C4F9AE02.roa (hash: 6JE0CpuqzhytoSjJ6WQfnw2PyEDyCfuYvVBRaPTy/O0=) 4: 0DCBAC3863C111EE9A8AA77AC4F9AE02.roa (hash: +1v8a+kd3vrNlmA49WuinXFLbTN3K9vA54mVSEDCwVI=) 5: 9ADB02A27F4E11EDB22F3582C4F9AE02.roa (hash: q5K3slMKgP++7PtYpHOExE35HrkE08dbRFYVLUwTZjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 593 (0x251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3E3F, serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Validity Not Before: Dec 19 01:10:14 2025 GMT Not After : Dec 26 01:10:14 2025 GMT Subject: CN=6944a5f6-c81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fd:87:33:4d:cc:73:39:f0:a0:1a:fe:39:72: 89:71:6e:d2:6c:cb:8b:fc:70:ba:ff:77:94:1f:f5: 60:b4:1f:6f:2e:ab:94:42:33:28:58:0d:45:87:1c: 51:45:e4:59:5b:8b:18:70:3c:78:1e:ea:48:3d:54: 7a:45:3d:1c:4d:4e:e0:64:e3:e4:0f:4d:da:b0:b7: 3c:1e:1a:55:ee:17:02:b8:b8:32:a7:a7:27:5f:ab: c9:3b:9e:2e:b2:fe:f1:40:95:f6:85:37:93:3c:65: cc:68:f4:d4:0e:86:21:e4:f9:d4:4e:68:03:77:6d: 9b:54:0a:28:f2:7d:66:ab:da:c8:e3:b6:8c:a4:a3: 32:42:a5:28:9a:78:76:a2:f7:94:ad:4c:ad:84:ad: ca:5a:2c:65:e8:aa:c8:90:be:97:7f:16:dc:21:47: f0:52:d3:66:95:20:e6:88:2c:ba:00:00:7e:35:bd: 2f:1b:6d:e9:3f:41:0e:54:4c:db:dd:46:e5:f7:d5: ad:4d:b2:1c:28:74:77:cb:b1:ac:7c:50:a9:82:5a: bc:91:ee:19:05:5d:59:b1:c6:e6:6f:29:ee:d1:22: f7:d9:24:45:60:f4:33:45:bd:f6:e9:31:ad:86:58: 2e:65:ab:2f:71:42:e1:65:40:06:87:32:42:ff:2f: 75:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:23:0F:F5:AB:2D:FC:45:67:32:8A:26:E0:37:86:3C:3B:68:3C:47 X509v3 Authority Key Identifier: keyid:94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:45:db:ee:a5:65:a5:93:98:60:14:7d:98:5e:bd:bb:77:bb: be:9e:48:94:60:b5:ac:a3:46:50:6a:dc:9f:1b:c6:90:61:fb: 91:42:d1:11:eb:19:ad:bd:8f:69:64:38:18:2d:0a:5d:c3:f5: 01:4a:58:60:e9:4c:68:df:ba:1d:83:05:ea:d6:0a:81:fc:fc: ce:de:4e:8e:ff:89:bb:7f:f3:e1:02:0e:df:2f:9b:92:57:8a: c6:90:c8:c5:8d:e0:01:80:8f:26:66:a3:09:67:f1:69:42:ac: 79:48:01:c2:9f:f9:a1:68:1a:c2:c3:87:27:30:e4:5f:1e:be: ae:4d:31:48:de:3e:f3:60:f3:e4:30:c6:27:ba:c2:3c:82:75: 5f:50:fa:b1:2b:76:e1:72:d9:3c:a9:a2:20:10:da:44:35:09: 18:ac:04:6c:a7:fc:40:8b:3e:43:30:16:06:f8:ba:df:97:c6: 10:47:64:c7:52:65:f1:72:69:61:bd:09:d0:46:12:bd:ff:a4: 3e:f1:57:4d:31:24:12:74:06:38:ca:ec:71:cb:b7:8c:bc:a4: 6d:47:8c:33:5f:72:ea:2d:90:c1:47:45:69:8a:13:7d:61:b3: 51:65:3f:f9:12:43:1e:28:06:f1:fd:eb:f4:f6:d7:79:86:bc: 56:4d:07:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNFM0YxMTAvBgNVBAUTKDk0M0QzRTEwQjhCQkUxMzhCNDc3MzQ1NTRCNjkwNTMx MTBENDVCRTMwHhcNMjUxMjE5MDExMDE0WhcNMjUxMjI2MDExMDE0WjAYMRYwFAYD VQQDDA02OTQ0YTVmNi1jODFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArP2HM03McznwoBr+OXKJcW7SbMuL/HC6/3eUH/VgtB9vLquUQjMoWA1FhxxR ReRZW4sYcDx4HupIPVR6RT0cTU7gZOPkD03asLc8HhpV7hcCuLgyp6cnX6vJO54u sv7xQJX2hTeTPGXMaPTUDoYh5PnUTmgDd22bVAoo8n1mq9rI47aMpKMyQqUomnh2 oveUrUythK3KWixl6KrIkL6XfxbcIUfwUtNmlSDmiCy6AAB+Nb0vG23pP0EOVEzb 3Ubl99WtTbIcKHR3y7GsfFCpglq8ke4ZBV1Zscbmbynu0SL32SRFYPQzRb326TGt hlguZasvcULhZUAGhzJC/y91AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQjD/Wr LfxFZzKKJuA3hjw7aDxHMB8GA1UdIwQYMBaAFJQ9PhC4u+E4tHc0VUtpBTEQ1Fvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi8zMDVFQjg3NjdD REIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRUaTBkelJWUzJrRk1SRFVX LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xEMC1FTGk3NFRpMGR6UlZTMmtGTVJEVVctTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0UzRi8zMDVFQjg3NjdDREIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRU aTBkelJWUzJrRk1SRFVXLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHRdvupWWlk5hgFH2YXr27d7u+nkiUYLWso0ZQatyfG8aQYfuRQtER 6xmtvY9pZDgYLQpdw/UBSlhg6Uxo37odgwXq1gqB/PzO3k6O/4m7f/PhAg7fL5uS V4rGkMjFjeABgI8mZqMJZ/FpQqx5SAHCn/mhaBrCw4cnMORfHr6uTTFI3j7zYPPk MMYnusI8gnVfUPqxK3bhctk8qaIgENpENQkYrARsp/xAiz5DMBYG+Lrfl8YQR2TH UmXxcmlhvQnQRhK9/6Q+8VdNMSQSdAY4yuxxy7eMvKRtR4wzX3LqLZDBR0VpihN9 YbNRZT/5EkMeKAbx/ev09td5hrxWTQe/ -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:06 2025 by rpki-client