This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft File: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json) Hash identifier: gBWFkz1EDZEd8SKuH8w0rpL6adisXm2Xq/nh7EW9/vQ= Subject key identifier: 8E:DE:27:23:5F:14:85:E6:66:4C:29:48:1C:A0:5E:3D:31:8B:50:07 Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft Manifest number: 01A9 Signing time: Fri 05 Dec 2025 01:27:34 +0000 Manifest this update: Fri 05 Dec 2025 01:27:33 +0000 Manifest next update: Fri 12 Dec 2025 01:27:33 +0000 Files and hashes: 1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: Bxp/tIIQiS3fAEqXht4w/YvL+8hIp3G/Op47vpCh/4I=) 2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: 5pLKoX5v/Omt/7dfktvLKHUBbKLWsrZdltrbS963Wno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Validity Not Before: Dec 5 01:27:33 2025 GMT Not After : Dec 12 01:27:33 2025 GMT Subject: CN=69323506-00a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ea:da:3c:88:72:3e:a8:c1:72:09:5e:1e:2a: df:87:47:78:a9:ec:7a:fa:95:ce:34:cc:7e:84:c0: 5f:15:ff:70:b3:6d:fd:7d:2f:96:c9:bb:c8:f8:c3: 96:bd:52:af:49:5c:78:7a:ec:8e:ad:86:9c:ca:3e: 05:99:12:8f:3f:9f:35:6c:4e:20:ed:f9:f6:ef:1f: 5c:b3:5c:c3:ba:c2:8b:e4:99:d2:b6:31:19:7f:e6: 13:e1:3a:6f:a9:4f:fd:b1:6c:49:8f:0c:fe:8d:84: 78:bc:0d:c8:8e:bb:7b:80:01:b7:a7:d6:fd:5a:10: 32:c4:73:d2:f5:0e:39:bb:d2:9c:32:9d:39:8b:d2: 98:53:0d:e1:fa:90:14:9b:27:89:7c:a3:aa:83:3d: 5a:aa:3d:a8:d8:3d:94:8c:8b:00:5c:c3:4c:54:8e: a1:4d:8b:1c:38:26:6a:11:0c:72:52:57:e5:25:f4: 43:79:28:1e:06:4f:5a:28:3a:93:1c:77:ce:41:0f: 9c:68:f8:cf:d5:0c:26:86:51:91:d4:a4:a7:22:d7: f6:92:3c:7a:f7:16:8c:b8:3c:86:77:32:b4:45:e8: 35:58:8d:8b:60:fd:81:c3:1f:fb:29:eb:fc:47:0c: c6:e3:f0:28:e1:f2:cf:b5:aa:c8:ec:bb:d4:c7:06: 3a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DE:27:23:5F:14:85:E6:66:4C:29:48:1C:A0:5E:3D:31:8B:50:07 X509v3 Authority Key Identifier: keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:8e:98:f0:35:53:f0:68:7e:62:65:33:16:e7:c6:75:d0:19: 36:22:f2:61:7a:da:e4:5a:59:b7:e4:7d:b3:62:0b:70:e6:52: cc:77:87:e7:d3:3c:dd:a7:ca:8a:87:a1:65:69:14:21:cd:79: e3:3f:50:3c:70:5a:42:54:ba:cd:6b:35:ed:08:31:f6:d4:6d: cc:42:fd:de:ab:6c:0c:03:c8:7f:64:7d:8f:72:47:1f:f1:42: 54:4d:aa:cc:35:ad:2a:ba:0c:c5:48:bd:cf:0c:c3:d4:64:de: 30:72:f6:7f:49:75:57:58:7b:58:55:3f:b0:fa:be:db:85:bc: 8d:f7:a7:af:03:23:3d:98:4e:22:1f:cb:66:17:53:23:0c:60: 22:38:15:7a:0b:de:b7:5b:35:24:86:94:dd:cd:ea:13:09:2a: cc:c3:ab:d7:8b:19:e6:47:a2:ee:98:26:9c:9b:10:49:7e:4c: 38:13:f3:3a:d6:a8:2c:a0:ae:f1:f1:a3:0e:06:c4:ca:41:57: b2:03:57:05:5e:51:1f:c6:ff:f8:83:0d:8c:2c:54:66:38:9f: 80:6c:e0:e6:42:c9:9c:45:f1:35:60:21:59:47:15:0a:07:b3: 7d:7c:bb:bc:b9:f5:35:80:82:99:9c:1c:f1:4b:b4:a1:77:c9: 8b:b7:37:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyRTExMTAvBgNVBAUTKEQ0QkM3OUE0QjE1MzdGRUIwQUQ5MkVCM0YwQTdDQUYz NDUzQThGNTIwHhcNMjUxMjA1MDEyNzMzWhcNMjUxMjEyMDEyNzMzWjAYMRYwFAYD VQQDEw02OTMyMzUwNi0wMGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+raPIhyPqjBcgleHirfh0d4qex6+pXONMx+hMBfFf9ws239fS+WybvI+MOW vVKvSVx4euyOrYacyj4FmRKPP581bE4g7fn27x9cs1zDusKL5JnStjEZf+YT4Tpv qU/9sWxJjwz+jYR4vA3Ijrt7gAG3p9b9WhAyxHPS9Q45u9KcMp05i9KYUw3h+pAU myeJfKOqgz1aqj2o2D2UjIsAXMNMVI6hTYscOCZqEQxyUlflJfRDeSgeBk9aKDqT HHfOQQ+caPjP1QwmhlGR1KSnItf2kjx69xaMuDyGdzK0Reg1WI2LYP2Bwx/7Kev8 RwzG4/Ao4fLPtarI7LvUxwY6+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7eJyNf FIXmZkwpSBygXj0xi1AHMB8GA1UdIwQYMBaAFNS8eaSxU3/rCtkus/CnyvNFOo9S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzJFMS85MDQ3RUYwNDQ2 OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYtc0syUzZ6OEtmSzgwVTZq MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmoxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzJFMS85MDQ3RUYwNDQ2OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYt c0syUzZ6OEtmSzgwVTZqMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5jpjwNVPwaH5iZTMW58Z10Bk2IvJhetrkWlm35H2zYgtw5lLMd4fn 0zzdp8qKh6FlaRQhzXnjP1A8cFpCVLrNazXtCDH21G3MQv3eq2wMA8h/ZH2Pckcf 8UJUTarMNa0qugzFSL3PDMPUZN4wcvZ/SXVXWHtYVT+w+r7bhbyN96evAyM9mE4i H8tmF1MjDGAiOBV6C963WzUkhpTdzeoTCSrMw6vXixnmR6LumCacmxBJfkw4E/M6 1qgsoK7x8aMOBsTKQVeyA1cFXlEfxv/4gw2MLFRmOJ+AbODmQsmcRfE1YCFZRxUK B7N9fLu8ufU1gIKZnBzxS7Shd8mLtzeF -----END CERTIFICATE-----Generated at Sat Dec 6 22:06:33 2025 by rpki-client