This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json) Hash identifier: AZxg1RrHxyVs/I5VtSjz3+WC8YOD8XS/whTlAgJ6K1w= Subject key identifier: BE:82:2B:D7:DD:35:3C:AC:95:5E:29:DB:F1:78:90:31:9D:D0:47:01 Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft Manifest number: 017E Signing time: Sun 21 Dec 2025 02:56:26 +0000 Manifest this update: Sun 21 Dec 2025 02:56:26 +0000 Manifest next update: Sun 28 Dec 2025 02:56:26 +0000 Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: UWhovMjihHh+zA8dEx8VaHhawpAQdKur4UZRMqsxg4g=) 2: A5F4A536933D11EEA6B4A653C4F9AE02.roa (hash: 6tIF2i7E6pEkUpHmxtY4OrrXsVv0qE0EUaxM0hPMQog=) 3: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: jzviIcT36AX7+vIYnTcKiwwmHcmgLFxJ/UujmC0oCBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: Dec 21 02:56:26 2025 GMT Not After : Dec 28 02:56:26 2025 GMT Subject: CN=694761da-b5bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:87:51:f3:0f:8e:13:f1:2b:a8:76:68:9e:0b: 66:8f:26:f2:61:b2:43:47:b1:17:46:8d:a3:20:71: ce:a8:fe:5c:49:ab:53:7f:db:bf:c6:d4:cf:30:c7: 8f:6c:68:55:7d:3c:42:67:76:58:4d:4a:19:f5:ed: 72:b7:14:26:de:be:73:04:40:63:dc:03:23:dc:5f: 76:01:21:f3:f4:39:79:21:8c:a0:7a:e3:37:0c:c8: bc:7b:33:f3:60:bb:85:7c:8f:9d:bf:57:95:bf:d3: e8:31:af:7e:84:11:cb:93:e3:75:bb:4b:fb:fe:74: b6:3d:31:48:e9:49:87:79:47:4b:a1:93:fa:3a:f6: 4c:3e:80:0c:48:cf:b6:cb:a2:61:d8:ac:c4:62:6a: 2d:ba:d8:54:da:9c:7e:ee:28:ce:b2:f6:8d:55:bd: 82:1f:b5:c4:9a:2a:f6:a9:89:4f:ab:96:ec:af:9a: 7b:9d:1e:36:36:a3:b0:ea:4f:8a:bb:f5:ae:82:72: c1:07:5e:7d:b4:8d:96:58:9f:c5:01:d3:1f:82:82: 94:c7:70:e1:c9:59:13:42:74:90:4f:11:4c:fe:d8: 82:7e:06:55:43:a7:09:d6:f4:49:e1:57:69:f7:76: ce:c2:20:a1:3d:2e:9c:1a:89:8b:46:00:99:70:a9: 36:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:82:2B:D7:DD:35:3C:AC:95:5E:29:DB:F1:78:90:31:9D:D0:47:01 X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ee:87:cb:70:f6:09:97:e3:9a:60:48:d7:00:6a:bc:5f:c3: 79:c6:6b:96:28:c3:62:4c:9f:6c:22:b0:d4:b3:f5:6d:32:d8: 99:74:ee:73:af:a1:55:b0:ff:88:3f:bf:35:8a:fd:6e:0b:9b: 17:95:57:a8:d4:ea:92:c4:77:91:c0:13:3e:d5:b5:06:df:66: be:58:cf:ec:83:e0:f6:9e:93:34:ed:13:df:1f:bb:8a:ab:52: c5:3b:fd:57:85:41:12:ce:1b:b9:16:11:1a:32:98:b8:b0:de: ff:be:06:08:fc:a0:7f:ab:bf:18:dc:e8:5e:a7:7e:e2:ac:83: c0:a4:0c:90:26:b1:63:9d:f2:81:8a:11:40:c5:f0:64:96:fd: 4b:ea:3e:8b:66:f3:46:42:67:17:13:04:be:c8:90:f7:16:95: 7b:47:87:fa:b1:87:b9:94:c0:85:62:ba:e8:e7:35:f0:44:f0: 3c:92:33:33:77:ed:34:5e:79:54:09:f8:5a:29:2c:97:de:38: a0:b2:76:92:b3:6a:9b:90:97:58:3c:16:cf:72:33:36:40:58: 21:65:df:b3:30:c2:d0:9a:1b:ce:e5:f4:1c:d4:31:25:7d:cc: 10:1f:58:87:84:86:b3:e1:75:2d:cf:9a:d6:e4:2b:62:02:37: 62:bd:05:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG NEMzREEyNzAwHhcNMjUxMjIxMDI1NjI2WhcNMjUxMjI4MDI1NjI2WjAYMRYwFAYD VQQDDA02OTQ3NjFkYS1iNWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiodR8w+OE/ErqHZongtmjybyYbJDR7EXRo2jIHHOqP5cSatTf9u/xtTPMMeP bGhVfTxCZ3ZYTUoZ9e1ytxQm3r5zBEBj3AMj3F92ASHz9Dl5IYygeuM3DMi8ezPz YLuFfI+dv1eVv9PoMa9+hBHLk+N1u0v7/nS2PTFI6UmHeUdLoZP6OvZMPoAMSM+2 y6Jh2KzEYmotuthU2px+7ijOsvaNVb2CH7XEmir2qYlPq5bsr5p7nR42NqOw6k+K u/WugnLBB159tI2WWJ/FAdMfgoKUx3DhyVkTQnSQTxFM/tiCfgZVQ6cJ1vRJ4Vdp 93bOwiChPS6cGomLRgCZcKk29wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6CK9fd NTyslV4p2/F4kDGd0EcBMB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyOS80QjNDRUVCNDkzM0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZ ai1oWURuRFIzbEQwdzlvbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH7ofLcPYJl+OaYEjXAGq8X8N5xmuWKMNiTJ9sIrDUs/VtMtiZdO5z r6FVsP+IP781iv1uC5sXlVeo1OqSxHeRwBM+1bUG32a+WM/sg+D2npM07RPfH7uK q1LFO/1XhUESzhu5FhEaMpi4sN7/vgYI/KB/q78Y3Ohep37irIPApAyQJrFjnfKB ihFAxfBklv1L6j6LZvNGQmcXEwS+yJD3FpV7R4f6sYe5lMCFYrro5zXwRPA8kjMz d+00XnlUCfhaKSyX3jigsnaSs2qbkJdYPBbPcjM2QFghZd+zMMLQmhvO5fQc1DEl fcwQH1iHhIaz4XUtz5rW5CtiAjdivQUu -----END CERTIFICATE-----Generated at Mon Dec 22 11:06:18 2025 by rpki-client