This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft File: lqeZovSzCLIlIrzkXjGNanAmKSs.mft (raw, json) Hash identifier: D4gcijnj2LN9GtgKa+2emuNPzhyFh6Hxm9QCtN6FJ38= Subject key identifier: 48:F9:13:AF:CE:FD:17:B1:19:DB:FE:72:7A:D0:C9:23:7D:A4:DD:8F Authority key identifier: 96:A7:99:A2:F4:B3:08:B2:25:22:BC:E4:5E:31:8D:6A:70:26:29:2B Certificate issuer: /CN=A911BA4B/serialNumber=96A799A2F4B308B22522BCE45E318D6A7026292B Certificate serial: 11F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft Manifest number: 11E5 Signing time: Thu 04 Dec 2025 16:48:37 +0000 Manifest this update: Thu 04 Dec 2025 16:48:36 +0000 Manifest next update: Thu 11 Dec 2025 16:48:36 +0000 Files and hashes: 1: lqeZovSzCLIlIrzkXjGNanAmKSs.crl (hash: JMCZihJB4cVV/d4lxVvUF+hrnxMINieNuf+ekzGDrjU=) 2: 318BC266FEA911E8BF138B59C4F9AE02.roa (hash: yyuOkKMjkxOCaqRu1AYzdE+AAsdFHVWrA4FcabEJaF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.crl rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4595 (0x11f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BA4B, serialNumber=96A799A2F4B308B22522BCE45E318D6A7026292B Validity Not Before: Dec 4 16:48:36 2025 GMT Not After : Dec 11 16:48:36 2025 GMT Subject: CN=6931bb64-81af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ed:15:ff:9b:c7:a4:d7:40:db:d3:9d:ba:4c: 92:3b:24:bf:a5:38:01:16:8b:6e:61:eb:c9:41:83: 05:b5:97:4c:fe:c8:51:66:cc:63:fe:8d:f1:fa:a3: 30:cc:1e:bb:7d:06:6c:e6:cb:40:88:91:78:be:9a: 2d:90:6d:56:da:35:db:ba:fe:a2:77:a0:15:ad:17: ac:f9:46:63:4c:58:b3:cc:6b:85:76:db:b1:69:be: 72:cb:cf:96:3e:65:5c:16:e6:49:84:8d:dd:3b:45: f5:0e:06:a7:1c:af:cf:96:ed:10:68:a0:6d:bb:cb: 4e:f1:32:f4:84:76:6b:0e:5c:de:bc:72:36:ac:5c: 5c:9e:f6:16:de:15:55:13:b3:58:25:1b:80:9a:13: 0a:e3:6f:c0:bd:0a:33:42:de:5d:93:3d:60:49:e5: 33:e1:ee:d3:fa:0c:75:e3:89:66:27:a0:b7:9e:d8: b2:9e:c5:8d:8d:60:32:cb:53:4a:ca:3b:3f:7a:66: 8a:5b:7d:94:22:a8:dd:e7:57:d4:00:dd:17:3c:16: 5f:f4:48:81:8b:0a:b5:b5:5b:ab:3c:39:0a:d1:18: dc:77:6c:84:9e:1c:e4:20:cf:8f:62:6e:33:46:b9: d4:1e:a8:d7:18:04:4a:6e:61:77:67:2c:5e:eb:22: ca:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F9:13:AF:CE:FD:17:B1:19:DB:FE:72:7A:D0:C9:23:7D:A4:DD:8F X509v3 Authority Key Identifier: keyid:96:A7:99:A2:F4:B3:08:B2:25:22:BC:E4:5E:31:8D:6A:70:26:29:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:ad:18:f7:36:df:d6:1d:e5:12:a2:49:db:ae:0f:80:51:90: ef:61:a1:58:3f:04:e9:20:0d:80:41:c9:03:d7:0e:fa:b7:44: 2d:33:54:aa:82:ab:65:62:6e:a4:e7:fc:d5:be:26:7a:08:b4: b3:09:e0:88:f9:e3:b6:11:51:19:9b:90:50:d5:6a:77:55:2a: c9:b9:48:03:f6:93:cd:83:c6:4e:83:45:1a:aa:eb:62:b2:3d: 3c:f0:67:bc:4d:57:f9:e0:d1:14:2e:ec:d7:9a:b2:91:49:21: b6:01:e8:a5:9f:c8:13:63:e5:9c:a5:19:fa:fe:b6:b9:1d:ed: 46:6d:44:85:7b:d8:9c:d5:cf:cb:10:b4:c7:52:a9:e5:81:fe: 9b:05:52:dd:6c:4b:74:21:a3:9a:58:7a:a9:fc:e5:11:16:ff: 20:64:2f:56:b7:f7:bb:56:33:ae:ee:b1:41:dd:86:43:2a:e5: e0:b3:1c:da:d6:2a:fd:2d:a5:8c:80:0f:b4:86:98:04:bb:b3: fc:bb:bd:db:8f:14:17:98:9b:fd:df:c5:75:00:ad:1a:63:99: e9:4a:fb:e7:00:17:a2:d6:fa:d0:78:1f:bc:bf:ac:4d:70:de: c5:e0:36:ad:92:3c:00:22:f6:fb:4e:9c:36:8a:ce:92:16:f2: 03:c4:c4:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJBNEIxMTAvBgNVBAUTKDk2QTc5OUEyRjRCMzA4QjIyNTIyQkNFNDVFMzE4RDZB NzAyNjI5MkIwHhcNMjUxMjA0MTY0ODM2WhcNMjUxMjExMTY0ODM2WjAYMRYwFAYD VQQDEw02OTMxYmI2NC04MWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAze0V/5vHpNdA29OdukySOyS/pTgBFotuYevJQYMFtZdM/shRZsxj/o3x+qMw zB67fQZs5stAiJF4vpotkG1W2jXbuv6id6AVrRes+UZjTFizzGuFdtuxab5yy8+W PmVcFuZJhI3dO0X1DganHK/Plu0QaKBtu8tO8TL0hHZrDlzevHI2rFxcnvYW3hVV E7NYJRuAmhMK42/AvQozQt5dkz1gSeUz4e7T+gx144lmJ6C3ntiynsWNjWAyy1NK yjs/emaKW32UIqjd51fUAN0XPBZf9EiBiwq1tVurPDkK0Rjcd2yEnhzkIM+PYm4z RrnUHqjXGARKbmF3Zyxe6yLKHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEj5E6/O /RexGdv+cnrQySN9pN2PMB8GA1UdIwQYMBaAFJanmaL0swiyJSK85F4xjWpwJikr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkE0Qi9FMzc3RkQ3QUZF QTcxMUU4QTJFNEI0NTdDNEY5QUUwMi9scWVab3ZTekNMSWxJcnprWGpHTmFuQW1L U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xxZVpvdlN6Q0xJbElyemtYakdOYW5BbUtTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkE0Qi9FMzc3RkQ3QUZFQTcxMUU4QTJFNEI0NTdDNEY5QUUwMi9scWVab3ZTekNM SWxJcnprWGpHTmFuQW1LU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmrRj3Nt/WHeUSoknbrg+AUZDvYaFYPwTpIA2AQckD1w76t0QtM1Sq gqtlYm6k5/zVviZ6CLSzCeCI+eO2EVEZm5BQ1Wp3VSrJuUgD9pPNg8ZOg0Uaquti sj088Ge8TVf54NEULuzXmrKRSSG2Aeiln8gTY+WcpRn6/ra5He1GbUSFe9ic1c/L ELTHUqnlgf6bBVLdbEt0IaOaWHqp/OURFv8gZC9Wt/e7VjOu7rFB3YZDKuXgsxza 1ir9LaWMgA+0hpgEu7P8u73bjxQXmJv938V1AK0aY5npSvvnABei1vrQeB+8v6xN cN7F4DatkjwAIvb7Tpw2is6SFvIDxMTI -----END CERTIFICATE-----Generated at Sat Dec 6 12:27:01 2025 by rpki-client