This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json) Hash identifier: T8F//an753vSK4b/dEM0+AnQsxWvNbvW0Nzy4TwNkMk= Subject key identifier: A9:5A:50:C3:7A:8C:56:F6:96:9F:36:39:85:7A:E4:6F:96:CE:DB:89 Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft Manifest number: 95 Signing time: Fri 05 Dec 2025 04:37:34 +0000 Manifest this update: Fri 05 Dec 2025 04:37:33 +0000 Manifest next update: Fri 12 Dec 2025 04:37:33 +0000 Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: XqKqz/R2VyaCDfodsSJIURRcP2cDhpvMyd9+aJvwS8I=) 2: C8171E8EC04D11F081466417C4F9AE02.roa (hash: qD7E81+F84ybq65PJCoOoGx/3Rj26xGdP+iJxj/kXys=) 3: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: zube208I7nc1pgqe/rLjskVR+S+L8lpyAr5nz7YaDzA=) 4: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: ZSY+wrBOCpSTseL5HGKwx+yRvdWTT0pPkpRE5m5XW20=) 5: D87376860A1511F09D97420DC4F9AE02.roa (hash: DBHtGCQQDfMpiwGGsmk/EkvovYeutKnxcD7IbMh0Lsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:37:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Validity Not Before: Dec 5 04:37:33 2025 GMT Not After : Dec 12 04:37:33 2025 GMT Subject: CN=6932618d-8729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:55:fb:81:95:e7:7d:89:9c:3c:f3:45:66: 62:d0:e7:5d:01:09:00:bb:f9:70:12:ea:7d:9a:1c: 5b:b9:e8:50:b2:6c:35:2c:d6:0b:14:42:5b:25:f4: bf:a9:c5:cb:23:53:db:d8:61:39:ba:ca:08:24:bd: 36:e4:33:b2:e3:6a:da:14:1a:8e:e1:8f:ea:45:37: a2:c1:60:d7:03:ae:70:98:10:e4:60:50:2a:b5:db: c1:43:7a:72:2b:92:fb:71:cf:8d:5e:f2:b4:d5:7e: 9e:0b:40:ef:c6:db:7c:01:70:e5:c3:8b:9b:cd:24: 16:dd:9e:45:2a:0e:a6:c1:ba:91:97:a1:12:19:45: 3f:7a:7e:92:6e:ae:bb:de:7b:a8:5f:49:67:1e:9d: 8a:95:ed:ed:c0:d2:0b:93:2a:59:76:df:5e:06:05: de:67:d4:1d:e8:a6:ea:b9:5c:12:57:fa:0d:27:2e: 99:26:3c:85:70:de:42:1b:02:0e:e8:1c:b5:fa:f3: 51:f4:ca:4f:fa:98:c5:35:a0:3f:53:f7:14:a0:37: 6b:57:46:73:b6:be:f0:19:cb:f4:92:e0:ee:13:66: 74:7e:52:d5:15:34:36:37:3e:99:55:0d:bf:7f:a1: d9:dc:3b:ee:6b:1c:5b:7a:fa:76:15:50:76:aa:aa: 47:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5A:50:C3:7A:8C:56:F6:96:9F:36:39:85:7A:E4:6F:96:CE:DB:89 X509v3 Authority Key Identifier: keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:8d:5c:28:a8:7b:ca:e5:fc:42:24:ee:49:0d:cb:ee:14:34: 7d:ad:5b:b2:4d:6e:f9:ad:8b:59:7d:df:3a:4b:8f:d8:16:9a: 5a:4a:16:22:9b:1c:49:14:a8:d3:e0:a5:cd:b7:f4:94:e4:ef: 7c:9b:a5:f9:8e:4c:e1:78:a0:a3:94:ed:15:eb:1e:97:ba:46: fd:f9:4b:ea:cf:93:60:5b:a0:0c:05:0f:b0:7d:3e:bc:3f:58: 22:b8:e8:a9:4a:ad:e4:b8:b4:98:8b:2b:3a:e2:af:f3:6c:2c: d0:5f:58:79:ce:24:0e:93:54:79:ff:2f:b0:2a:bc:8d:2a:f0: b5:ee:da:5a:f7:95:a0:08:c5:8e:14:55:6c:bf:4c:93:30:6a: 37:9d:47:f5:12:d6:24:66:43:9c:d2:08:4b:49:02:a6:b6:8d: 1d:11:a6:7a:3d:06:17:32:b6:67:88:b1:56:33:81:5a:fd:5f: 1f:40:0c:00:4e:f6:93:6b:20:f1:fb:46:68:67:71:a3:55:cb: c3:02:42:e5:43:48:2e:22:fb:1d:7f:29:4e:12:e5:62:2a:26: 69:8b:c0:39:0c:3b:66:75:e7:cf:f1:08:65:b4:5b:9d:bf:47: 6c:b1:29:7f:b9:6e:c8:9a:5a:91:86:b6:da:a9:3e:71:5e:22: 6f:73:22:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTExMTAvBgNVBAUTKDNEMUZDQjcyNTVDNTI1MDNFMTBBRTU4NEIxMTg5QTE1 Q0Y1NjA3NEUwHhcNMjUxMjA1MDQzNzMzWhcNMjUxMjEyMDQzNzMzWjAYMRYwFAYD VQQDEw02OTMyNjE4ZC04NzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXxV+4GV532JnDzzRWZi0OddAQkAu/lwEup9mhxbuehQsmw1LNYLFEJbJfS/ qcXLI1Pb2GE5usoIJL025DOy42raFBqO4Y/qRTeiwWDXA65wmBDkYFAqtdvBQ3py K5L7cc+NXvK01X6eC0Dvxtt8AXDlw4ubzSQW3Z5FKg6mwbqRl6ESGUU/en6Sbq67 3nuoX0lnHp2Kle3twNILkypZdt9eBgXeZ9Qd6KbquVwSV/oNJy6ZJjyFcN5CGwIO 6By1+vNR9MpP+pjFNaA/U/cUoDdrV0Zztr7wGcv0kuDuE2Z0flLVFTQ2Nz6ZVQ2/ f6HZ3Dvuaxxbevp2FVB2qqpHEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlaUMN6 jFb2lp82OYV65G+WztuJMB8GA1UdIwQYMBaAFD0fy3JVxSUD4QrlhLEYmhXPVgdO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFMS9DNDU2MTAyRTA5 RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9QUl9MY2xYRkpRUGhDdVdFc1JpYUZjOVdC MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSX0xjbFhGSlFQaEN1V0VzUmlhRmM5V0IwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFMS9DNDU2MTAyRTA5RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9QUl9MY2xYRkpR UGhDdVdFc1JpYUZjOVdCMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApjVwoqHvK5fxCJO5JDcvuFDR9rVuyTW75rYtZfd86S4/YFppaShYi mxxJFKjT4KXNt/SU5O98m6X5jkzheKCjlO0V6x6Xukb9+Uvqz5NgW6AMBQ+wfT68 P1giuOipSq3kuLSYiys64q/zbCzQX1h5ziQOk1R5/y+wKryNKvC17tpa95WgCMWO FFVsv0yTMGo3nUf1EtYkZkOc0ghLSQKmto0dEaZ6PQYXMrZniLFWM4Fa/V8fQAwA TvaTayDx+0ZoZ3GjVcvDAkLlQ0guIvsdfylOEuViKiZpi8A5DDtmdefP8QhltFud v0dssSl/uW7ImlqRhrbaqT5xXiJvcyJD -----END CERTIFICATE-----Generated at Sat Dec 6 16:00:42 2025 by rpki-client