This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json) Hash identifier: 96s0KB4uMS+OC79XzQUhjpMy2voP5mrJol5LAmhWDLA= Subject key identifier: 18:78:B9:37:43:BE:FB:4B:F7:67:35:F5:FF:9C:4A:5D:28:31:ED:5F Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 0252 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft Manifest number: 0231 Signing time: Fri 05 Dec 2025 00:23:15 +0000 Manifest this update: Fri 05 Dec 2025 00:23:14 +0000 Manifest next update: Fri 12 Dec 2025 00:23:14 +0000 Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: DV8VWYykrs1q53SqMkLsaWjPeSCoRqGL1H3Fsp1KiKk=) 2: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: ieGx5NwyYQJ4P+cWYrdmLdfua1T4xQkG1QlYm44YGuI=) 3: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: l7RVqMwsQP+9xoPqxUjrdLeHKAHmKPEPtw0sLICnu70=) 4: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: hpbgzGpeyu8RgvOZ/gDqbosdneW/3yUsLvzIbPJJbgI=) 5: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: U1JZUMbZcbonZCdC7TOrqHH67lPPcra0baMZ+HxHTq0=) 6: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: yq9F1kGLoVyjrkyUECiqJ2bBsjfNg/O48zntGXKXjfA=) 7: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: 7GFXCtaT3I6JbgFcVp9k1/EsFIeLns+26mNrxLbyEic=) 8: C3481400917811ED904ACF83C4F9AE02.roa (hash: AsDGm3VcGz1RYmwwFN/U13xvQEyWavpIqYrnGKd5AJQ=) 9: 18498E84AA4911F0909AC335C4F9AE02.roa (hash: NJcFMzzhVnORdTmRL0FyfpGdYHwoBdJ6pEPPAOVism8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: Dec 5 00:23:14 2025 GMT Not After : Dec 12 00:23:14 2025 GMT Subject: CN=693225f2-1205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:29:ce:3e:c3:da:e2:08:38:6a:8c:d3:37:6a: 59:4a:15:89:72:4f:6a:dd:70:a5:00:8e:b2:1d:16: 3a:a2:a5:8f:d1:18:91:29:ee:fa:8d:f3:27:42:71: f1:e1:be:02:11:1b:9b:79:2a:8f:6c:19:b1:17:5f: a0:44:eb:31:c4:88:8f:e0:71:3e:9b:c8:a3:ae:cc: 64:e8:c9:9d:01:c9:1e:10:8b:97:41:6d:86:63:ec: 70:5d:83:20:2c:83:15:86:6f:b0:2f:be:65:83:0e: ce:77:ec:01:bb:f7:0a:85:54:c0:8d:3e:0e:78:bb: 02:f6:39:98:00:4f:17:99:d2:5e:a6:38:a7:cf:0d: e6:57:1f:31:55:de:23:ab:4b:ae:26:20:94:a0:fc: 4f:94:ea:5e:66:f8:a5:67:ba:bb:69:85:82:ed:58: b2:f5:b1:5a:3a:ce:f7:99:40:f7:c1:8a:f0:ae:0d: 3d:5a:ce:0a:eb:9a:72:44:1b:26:74:26:f9:a1:86: b2:1a:f9:3e:b5:59:37:23:b9:97:83:ee:1f:e4:9f: 04:71:b7:11:85:ac:9f:da:5b:71:da:bf:6e:ef:47: cd:45:19:6b:30:9b:a8:14:8e:26:0a:97:10:87:f2: ee:d8:b0:08:5d:bb:0f:40:5a:11:b1:b5:1c:d1:ca: d8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:78:B9:37:43:BE:FB:4B:F7:67:35:F5:FF:9C:4A:5D:28:31:ED:5F X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:b8:26:23:92:65:6e:68:c9:5d:e5:cf:1f:62:6c:22:9d:5a: 46:c2:c3:74:03:a4:ee:14:2f:9b:d1:f6:07:03:a7:4d:9f:52: cc:0e:c3:ad:e9:dc:46:91:a4:c2:15:51:29:05:ae:1a:62:1a: 5f:5e:ba:58:4d:a9:b7:fc:0b:5e:06:bc:db:71:ab:6b:64:f8: b7:bb:6b:0f:52:0a:cc:56:1a:e4:f5:a1:25:ae:a0:86:b8:8a: 3a:ad:ca:0c:3a:5b:fa:28:8b:7f:25:3a:54:1f:fe:c2:8a:73: f5:f6:c9:4e:76:1a:e2:51:f8:27:10:76:d9:b6:f6:fa:a0:ea: 07:4b:01:06:59:f2:d9:c9:c8:5a:32:b5:50:bc:03:6b:66:3c: 65:1a:2e:a7:a5:bc:fc:01:22:37:4e:0e:f5:34:3e:24:a3:e1: e9:32:2e:d7:3e:53:1d:03:99:07:01:66:a3:32:4c:ec:39:f1: ed:e1:93:e9:d8:14:79:75:32:1b:18:00:f0:d6:df:20:47:06: 51:1e:2d:24:b0:73:62:6e:bf:54:d5:5e:98:52:d1:7a:21:62: 54:fa:00:29:55:49:ea:83:e8:ee:68:4b:eb:2c:bd:f4:75:c6: f9:6c:4d:e4:c1:a3:d4:7b:54:42:ed:71:34:7a:42:87:ef:2f: 4f:e5:27:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjUxMjA1MDAyMzE0WhcNMjUxMjEyMDAyMzE0WjAYMRYwFAYD VQQDEw02OTMyMjVmMi0xMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0inOPsPa4gg4aozTN2pZShWJck9q3XClAI6yHRY6oqWP0RiRKe76jfMnQnHx 4b4CERubeSqPbBmxF1+gROsxxIiP4HE+m8ijrsxk6MmdAckeEIuXQW2GY+xwXYMg LIMVhm+wL75lgw7Od+wBu/cKhVTAjT4OeLsC9jmYAE8XmdJepjinzw3mVx8xVd4j q0uuJiCUoPxPlOpeZvilZ7q7aYWC7Viy9bFaOs73mUD3wYrwrg09Ws4K65pyRBsm dCb5oYayGvk+tVk3I7mXg+4f5J8EcbcRhayf2ltx2r9u70fNRRlrMJuoFI4mCpcQ h/Lu2LAIXbsPQFoRsbUc0crYDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBh4uTdD vvtL92c19f+cSl0oMe1fMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTlCNi83OTE4Q0IwQzdGRjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhx Q1l5Vmk1Wk1NdHl4aTRBMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADuCYjkmVuaMld5c8fYmwinVpGwsN0A6TuFC+b0fYHA6dNn1LMDsOt 6dxGkaTCFVEpBa4aYhpfXrpYTam3/AteBrzbcatrZPi3u2sPUgrMVhrk9aElrqCG uIo6rcoMOlv6KIt/JTpUH/7CinP19slOdhriUfgnEHbZtvb6oOoHSwEGWfLZycha MrVQvANrZjxlGi6npbz8ASI3Tg71ND4ko+HpMi7XPlMdA5kHAWajMkzsOfHt4ZPp 2BR5dTIbGADw1t8gRwZRHi0ksHNibr9U1V6YUtF6IWJU+gApVUnqg+juaEvrLL30 dcb5bE3kwaPUe1RC7XE0ekKH7y9P5Sda -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:21 2025 by rpki-client