This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json) Hash identifier: iB4+MnewyGkPlfXWDcAgcw48J1KFHe41/t3HcoR75YI= Subject key identifier: 9A:E3:84:3C:0F:2E:34:05:EC:3E:F9:93:E2:B0:E5:88:3D:0B:E4:24 Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Certificate serial: 0945 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft Manifest number: 093C Signing time: Sat 06 Dec 2025 19:24:13 +0000 Manifest this update: Sat 06 Dec 2025 19:24:12 +0000 Manifest next update: Sat 13 Dec 2025 19:24:12 +0000 Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: FyJkUVWFt7lFVCbTzPHJt011lYaXaI1dxp0wdelWYc8=) 2: 518ED8E0B10511EAA4771B5BC4F9AE02.roa (hash: 4NqH+CTlAXcxsKUUu0JoB2lmVEYgLTqKdl4anKNbgT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2373 (0x945) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Validity Not Before: Dec 6 19:24:12 2025 GMT Not After : Dec 13 19:24:12 2025 GMT Subject: CN=693482dc-61a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:33:95:9f:19:fe:22:1d:0d:c4:c7:c4:b6:dd: e0:cc:89:6c:1a:6a:17:0d:bd:a4:48:aa:e5:82:c6: 8a:6e:b8:a8:d8:f9:59:9d:98:41:aa:9d:19:ac:93: 1a:83:1c:66:04:a2:59:8f:44:bc:48:3c:26:3e:b1: 83:18:98:c8:ec:5c:19:eb:23:41:89:ce:f1:1e:b2: a7:12:da:40:82:10:70:b4:ec:d3:83:85:79:63:92: 1b:25:18:7a:7a:e6:bf:13:60:24:b4:73:ee:28:78: 98:de:c2:3c:7b:b4:b4:71:36:16:8e:52:85:7a:73: bb:3b:6c:16:d3:2f:c2:1e:36:e9:d0:d3:8c:ef:61: 8b:ce:ee:29:88:36:ae:a8:f4:57:15:6c:16:4c:32: 58:fc:de:e3:f1:f3:77:9a:49:1f:94:79:b8:ed:81: 77:d8:a2:b5:90:bd:73:e2:86:28:2f:a4:bf:11:cf: 97:53:95:29:7a:f5:e1:7f:19:02:68:64:45:2c:49: e8:79:6e:99:3e:d6:71:82:31:c9:f3:79:a5:3f:fe: 8e:3a:4a:8c:f2:b6:77:ee:ae:2f:f2:e9:56:f1:23: f0:7d:90:67:cb:3e:7f:b8:55:4e:e4:b7:3f:32:aa: da:b8:07:b4:d9:a2:39:91:7b:05:a6:76:c7:00:66: 07:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E3:84:3C:0F:2E:34:05:EC:3E:F9:93:E2:B0:E5:88:3D:0B:E4:24 X509v3 Authority Key Identifier: keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:f4:b1:f4:0e:12:53:e1:2a:db:1a:a4:4d:7d:fb:df:35:ac: 00:7f:86:d2:e7:63:9e:bc:d7:25:c6:dd:fc:a5:03:c2:ba:a9: 97:8d:db:bb:68:fa:98:45:58:f5:2c:63:07:7f:72:64:d5:db: 83:32:d6:9f:6b:de:f3:6f:5e:be:66:7b:86:d2:d5:07:c6:82: 1c:af:20:30:da:6d:5b:8e:f8:14:6c:42:86:89:a5:e8:ab:58: 59:a9:7f:f2:2b:b9:5f:54:2f:af:1a:71:0e:d0:56:ae:02:4e: 84:8c:57:db:93:5e:42:05:e4:52:22:54:7e:9e:8c:29:a7:30: b1:87:cb:7e:d5:b0:63:ab:77:ac:4e:78:e2:07:dc:89:2f:55: d3:58:ce:7a:31:f5:1a:b6:4d:36:aa:72:46:ec:7c:52:e4:1c: 2b:d6:e3:9b:aa:5f:0b:88:f9:3b:7d:bb:4b:8b:c4:61:1f:78: 0e:36:3a:e3:f5:da:21:bc:4e:74:98:94:80:10:e2:c0:3b:3a: a7:df:26:d4:e8:08:9f:f6:f3:9e:20:c1:18:58:ea:0c:93:86: a8:d8:71:97:41:f7:bd:dc:91:4e:e4:33:f1:3a:8c:c1:cb:ae: b0:08:04:90:d4:24:a5:3c:53:a5:af:c7:13:ed:45:6a:5c:23: 7b:b5:19:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG REZEODYwNTcwHhcNMjUxMjA2MTkyNDEyWhcNMjUxMjEzMTkyNDEyWjAYMRYwFAYD VQQDEw02OTM0ODJkYy02MWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zOVnxn+Ih0NxMfEtt3gzIlsGmoXDb2kSKrlgsaKbrio2PlZnZhBqp0ZrJMa gxxmBKJZj0S8SDwmPrGDGJjI7FwZ6yNBic7xHrKnEtpAghBwtOzTg4V5Y5IbJRh6 eua/E2AktHPuKHiY3sI8e7S0cTYWjlKFenO7O2wW0y/CHjbp0NOM72GLzu4piDau qPRXFWwWTDJY/N7j8fN3mkkflHm47YF32KK1kL1z4oYoL6S/Ec+XU5UpevXhfxkC aGRFLEnoeW6ZPtZxgjHJ83mlP/6OOkqM8rZ37q4v8ulW8SPwfZBnyz5/uFVO5Lc/ MqrauAe02aI5kXsFpnbHAGYHcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrjhDwP LjQF7D75k+Kw5Yg9C+QkMB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNDNC8zRUU2NEMxQUIxMDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhN VWw3RUxwN0IydVQ5X1lZRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ9LH0DhJT4SrbGqRNffvfNawAf4bS52OevNclxt38pQPCuqmXjdu7 aPqYRVj1LGMHf3Jk1duDMtafa97zb16+ZnuG0tUHxoIcryAw2m1bjvgUbEKGiaXo q1hZqX/yK7lfVC+vGnEO0FauAk6EjFfbk15CBeRSIlR+nowppzCxh8t+1bBjq3es TnjiB9yJL1XTWM56MfUatk02qnJG7HxS5Bwr1uObql8LiPk7fbtLi8RhH3gONjrj 9dohvE50mJSAEOLAOzqn3ybU6Aif9vOeIMEYWOoMk4ao2HGXQfe93JFO5DPxOozB y66wCASQ1CSlPFOlr8cT7UVqXCN7tRkV -----END CERTIFICATE-----Generated at Sun Dec 7 12:43:15 2025 by rpki-client