This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft File: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json) Hash identifier: mNcxbktMn1qTnBwCKEVhtDv+Iyfz1l7z3wqsB0ZRhu4= Subject key identifier: EE:3D:6C:C3:6E:34:17:AE:C9:9A:53:46:BF:E6:53:80:7B:F7:56:C9 Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39 Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939 Certificate serial: 4854 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer Subject info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft Manifest number: 4849 Signing time: Sun 21 Dec 2025 02:50:25 +0000 Manifest this update: Sun 21 Dec 2025 02:50:24 +0000 Manifest next update: Sun 28 Dec 2025 02:50:24 +0000 Files and hashes: 1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: 5Wcut+96deKgogTR6CTN9oHu73W8l8UldjA1MPGy4kU=) 2: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (hash: NRcDr6REbVzbTiHoNzZyK4YoKwtLqg9UeS+C5SRci4o=) 3: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: fxyUaruAjaaco/fzq2Q5nRs7XM9NtVdLWIcLFflk+gY=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18516 (0x4854) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939 Validity Not Before: Dec 21 02:50:24 2025 GMT Not After : Dec 28 02:50:24 2025 GMT Subject: CN=69476071-a4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e7:0f:04:38:31:f4:2f:ef:fc:4c:7c:5e:62: 41:b5:05:01:ba:5e:53:ce:59:6d:40:4d:49:c3:17: 6c:d9:d2:f8:87:c2:f3:7b:eb:0e:7d:1d:26:74:f4: b4:fb:ea:8f:8f:7c:fa:4d:de:02:b0:63:12:bd:ee: 1a:7a:0b:db:f7:c4:a8:2d:ab:10:75:bb:d1:68:54: fd:9e:f2:4e:a8:0c:42:19:66:4d:30:ed:a3:17:f8: 6e:51:54:17:de:ae:b3:ad:3a:c0:6d:a4:d1:69:97: 9a:de:61:0e:b7:4b:7c:72:a0:9e:69:d2:53:f0:31: 06:00:ee:b8:86:65:76:66:d5:4f:2a:6c:a0:a2:dc: 33:d2:55:6a:85:08:af:79:34:c2:a3:9e:7f:79:93: e6:a4:11:61:38:09:52:4d:21:96:9a:06:48:45:2b: cc:69:3f:b6:f0:64:4a:a5:65:ed:1b:be:62:ce:27: 15:74:23:60:e5:4c:1f:00:2c:1d:2f:9a:75:6e:fb: b3:c4:f4:23:eb:48:f5:97:c4:23:0e:69:a2:55:5f: bb:cb:ba:e7:03:b1:a5:33:3f:f9:22:62:43:9f:0d: 34:33:d9:cd:cc:b5:fc:0f:0c:bc:a6:05:12:b8:46: 11:01:58:91:f5:7c:df:02:09:3d:3d:11:77:20:a4: 7c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3D:6C:C3:6E:34:17:AE:C9:9A:53:46:BF:E6:53:80:7B:F7:56:C9 X509v3 Authority Key Identifier: keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:ff:78:f2:6d:c7:2c:a9:d5:78:ce:5c:40:0a:e5:40:68:16: 43:63:e2:3e:90:38:e8:03:10:2f:10:a8:5a:a4:9d:1e:5c:9a: 37:c4:6c:63:33:43:1b:2e:2f:12:38:82:cc:f8:5c:29:06:b7: 27:7c:d4:a3:f0:ba:43:c3:74:35:2b:9d:d8:9a:4d:8d:30:c6: f0:55:ef:55:49:48:fb:54:99:a5:88:6a:9e:41:77:7b:fb:84: cd:84:08:b4:ba:fa:f3:50:c3:d0:5e:8b:af:dc:58:00:23:78: b4:8c:68:e9:b2:59:23:d6:7f:86:de:02:94:cd:99:8d:96:57: ef:c0:ed:ae:7b:52:ed:4c:69:f6:2c:9e:62:b1:61:a8:85:06: 1c:2d:84:c2:35:c8:9a:89:c0:2d:c0:69:21:c5:73:86:f5:f2: c8:b8:d7:c4:34:45:b9:01:8d:7c:d2:47:3e:fe:02:7a:1d:d5: b8:b1:d7:50:1e:45:e5:9b:c9:6b:d1:04:6b:55:d1:9b:c6:d4: 7d:8a:8d:16:59:28:0e:02:08:05:ca:80:81:15:57:2a:08:e0: e2:09:3a:97:23:76:e5:75:0c:4d:a5:d7:11:d6:f7:bb:b5:f7: 5d:d0:bb:de:d4:81:bc:aa:dd:d5:e5:4d:72:6f:a3:c9:46:f6: a0:3a:37:63 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICSFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDk2QTg1RUY0QjhDQUY1RDRDMzVBMTU3RjRFMTI1RUU0 OTRCQUY5MzkwHhcNMjUxMjIxMDI1MDI0WhcNMjUxMjI4MDI1MDI0WjAYMRYwFAYD VQQDDA02OTQ3NjA3MS1hNGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwecPBDgx9C/v/Ex8XmJBtQUBul5TzlltQE1Jwxds2dL4h8Lze+sOfR0mdPS0 ++qPj3z6Td4CsGMSve4aegvb98SoLasQdbvRaFT9nvJOqAxCGWZNMO2jF/huUVQX 3q6zrTrAbaTRaZea3mEOt0t8cqCeadJT8DEGAO64hmV2ZtVPKmygotwz0lVqhQiv eTTCo55/eZPmpBFhOAlSTSGWmgZIRSvMaT+28GRKpWXtG75izicVdCNg5UwfACwd L5p1bvuzxPQj60j1l8QjDmmiVV+7y7rnA7GlMz/5ImJDnw00M9nNzLX8Dwy8pgUS uEYRAViR9XzfAgk9PRF3IKR8rQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFO49bMNu NBeuyZpTRr/mU4B791bJMB8GA1UdIwQYMBaAFJaoXvS4yvXUw1oVf04SXuSUuvk5 MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvbHFoZTlMaks5ZFREV2hWX1RoSmU1SlM2LVRrLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9scWhlOUxqSzlk VERXaFZfVGhKZTVKUzYtVGsuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjCBtQYIKwYBBQUHAQsEgagwgaUwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNEExQkVBNjFENjYxMUUyQjJDRDhCN0M3MkZE MUZGMi9scWhlOUxqSzlkVERXaFZfVGhKZTVKUzYtVGsubWZ0MDMGCCsGAQUFBzAN hidodHRwczovL3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCg/3jybccsqdV4zlxACuVAaBZDY+I+kDjo AxAvEKhapJ0eXJo3xGxjM0MbLi8SOILM+FwpBrcnfNSj8LpDw3Q1K53Ymk2NMMbw Ve9VSUj7VJmliGqeQXd7+4TNhAi0uvrzUMPQXouv3FgAI3i0jGjpslkj1n+G3gKU zZmNllfvwO2ue1LtTGn2LJ5isWGohQYcLYTCNciaicAtwGkhxXOG9fLIuNfENEW5 AY180kc+/gJ6HdW4sddQHkXlm8lr0QRrVdGbxtR9io0WWSgOAggFyoCBFVcqCODi CTqXI3bldQxNpdcR1ve7tfdd0Lve1IG8qt3V5U1yb6PJRvagOjdj -----END CERTIFICATE-----Generated at Sun Dec 21 04:42:47 2025 by rpki-client