This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft File: l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json) Hash identifier: gmmj4vamE/gERT79MwTSdLMfcdMNGuSX1IaGlHW/Tjs= Subject key identifier: 33:CC:EE:8C:50:D7:9C:36:81:1D:89:6B:F3:66:13:2E:B8:A0:51:FA Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 Certificate issuer: /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Certificate serial: 07EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft Manifest number: 07E0 Signing time: Sat 06 Dec 2025 20:16:58 +0000 Manifest this update: Sat 06 Dec 2025 20:16:58 +0000 Manifest next update: Sat 13 Dec 2025 20:16:58 +0000 Files and hashes: 1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: 3NUnI1Yg/Ym/QxBF4I73ilxoBKBmBkjs1VOafKJuPwA=) 2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: mzfP7cRrxNz2Kg58jiJEQRZoLcbYz297WZboxMM7e8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2026 (0x7ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126259, serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Validity Not Before: Dec 6 20:16:58 2025 GMT Not After : Dec 13 20:16:58 2025 GMT Subject: CN=69348f3a-78d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:e2:43:90:d2:fc:00:3f:76:e3:48:8c:b6: 69:73:b8:20:84:d3:b3:ca:8c:82:5b:ae:a6:12:f9: 03:3e:a7:e7:2f:d8:81:30:64:71:15:37:bc:fa:d7: e3:64:cb:47:7f:0d:58:c1:ae:b3:e2:34:93:ae:1d: 8e:a5:b1:0c:ab:eb:c1:e9:4b:60:33:88:85:6a:35: c3:34:61:34:3a:e6:62:65:a7:d8:05:19:76:f5:36: 91:ed:5e:b1:9a:be:11:57:92:b4:ba:9f:d1:ad:86: 77:79:32:7c:a2:49:60:13:81:4b:c7:0f:86:0e:2c: 01:0e:e0:15:68:d7:75:9f:ee:44:3a:e6:05:15:f5: 8f:61:d7:65:6a:4f:5a:db:99:2d:49:63:31:37:e1: d6:e4:14:c6:28:fb:99:a9:7a:0b:00:94:41:90:1d: 79:06:7f:04:e2:f4:93:36:cb:b3:f1:f6:a3:9d:33: 59:a6:1c:91:1e:a0:74:52:d4:a7:80:49:20:68:3b: 21:10:0c:a1:d1:66:ca:ff:2b:b1:09:da:4b:be:1e: 80:ea:d7:4f:6a:cb:6b:a8:b9:a9:e0:1b:1a:06:5e: b7:0a:a9:31:89:b0:9a:23:de:2f:8d:51:73:e3:ca: 52:ea:ba:90:56:61:19:8e:09:bd:02:a2:63:b1:17: 4f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CC:EE:8C:50:D7:9C:36:81:1D:89:6B:F3:66:13:2E:B8:A0:51:FA X509v3 Authority Key Identifier: keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1e:37:40:fc:d0:7b:e4:64:e7:86:ce:59:b9:62:95:65:0e: 40:25:1d:e3:73:c7:54:95:6a:88:07:f0:07:ed:0c:30:98:95: 4e:cb:77:21:f6:3e:70:39:bf:c4:01:07:41:fb:2e:da:98:07: d8:09:a8:2e:34:94:46:2b:f5:05:00:05:8f:18:73:d4:b4:21: 94:b6:c4:f5:73:1c:94:ce:38:34:19:06:c4:ba:f1:e3:05:c9: 8d:80:f4:dd:2e:d8:e2:82:46:e8:f7:ec:b2:39:94:d8:7d:96: 14:c3:f0:6c:87:6a:22:38:fa:b3:45:94:1e:e8:2b:cd:da:98: ab:0f:6b:29:3c:70:e5:d8:23:85:d8:12:8c:5c:d4:ec:f3:0e: 29:da:df:2a:a4:d6:d5:ea:1c:5c:23:11:42:f4:c1:fc:28:2f: 43:42:d5:d2:1d:5c:0b:51:4c:53:d9:a2:fb:18:f1:04:83:00: d6:85:2f:ec:72:6c:4f:9d:18:be:f9:91:c1:ed:be:f6:c3:8c: 18:31:fc:ee:df:0b:d9:d8:6b:c3:a5:e3:bf:4a:3e:2b:06:38: 03:f8:57:13:3c:2f:ca:b5:14:1f:77:42:e4:12:46:7c:5e:da: 91:4f:ce:cc:5f:6c:78:a6:ad:ad:09:c4:80:de:bf:6e:7c:7d: 76:8b:96:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyNTkxMTAvBgNVBAUTKDk3NTJERDFBMTVGNUVDNjFEOTc2OTFDQjVFQ0NFQkVD QkQzQTYxMzcwHhcNMjUxMjA2MjAxNjU4WhcNMjUxMjEzMjAxNjU4WjAYMRYwFAYD VQQDEw02OTM0OGYzYS03OGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqv7iQ5DS/AA/duNIjLZpc7gghNOzyoyCW66mEvkDPqfnL9iBMGRxFTe8+tfj ZMtHfw1Ywa6z4jSTrh2OpbEMq+vB6UtgM4iFajXDNGE0OuZiZafYBRl29TaR7V6x mr4RV5K0up/RrYZ3eTJ8oklgE4FLxw+GDiwBDuAVaNd1n+5EOuYFFfWPYddlak9a 25ktSWMxN+HW5BTGKPuZqXoLAJRBkB15Bn8E4vSTNsuz8fajnTNZphyRHqB0UtSn gEkgaDshEAyh0WbK/yuxCdpLvh6A6tdPastrqLmp4BsaBl63CqkxibCaI94vjVFz 48pS6rqQVmEZjgm9AqJjsRdPdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPM7oxQ 15w2gR2Ja/NmEy64oFH6MB8GA1UdIwQYMBaAFJdS3RoV9exh2XaRy17M6+y9OmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI1OS82OTEyOEM0QTE1 QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdHSFpkcEhMWHN6cjdMMDZZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxTGRHaFgxN0dIWmRwSExYc3pyN0wwNllUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI1OS82OTEyOEM0QTE1QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdH SFpkcEhMWHN6cjdMMDZZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdHjdA/NB75GTnhs5ZuWKVZQ5AJR3jc8dUlWqIB/AH7QwwmJVOy3ch 9j5wOb/EAQdB+y7amAfYCaguNJRGK/UFAAWPGHPUtCGUtsT1cxyUzjg0GQbEuvHj BcmNgPTdLtjigkbo9+yyOZTYfZYUw/Bsh2oiOPqzRZQe6CvN2pirD2spPHDl2COF 2BKMXNTs8w4p2t8qpNbV6hxcIxFC9MH8KC9DQtXSHVwLUUxT2aL7GPEEgwDWhS/s cmxPnRi++ZHB7b72w4wYMfzu3wvZ2GvDpeO/Sj4rBjgD+FcTPC/KtRQfd0LkEkZ8 XtqRT87MX2x4pq2tCcSA3r9ufH12i5Zl -----END CERTIFICATE-----Generated at Sat Dec 6 22:58:46 2025 by rpki-client