This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft File: lFmgev60b3mSRf7CNW08usm-2Ig.mft (raw, json) Hash identifier: SwmB5Cj2XkZ+I1kYqAU1AKatoeFK5u95NikOm3QZ+18= Subject key identifier: 60:37:7A:4B:C3:41:BA:B4:39:A1:C7:30:17:38:46:3E:2C:00:9C:6A Authority key identifier: 94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88 Certificate issuer: /CN=A912EE4D/serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft Manifest number: 0186 Signing time: Sun 21 Dec 2025 02:51:56 +0000 Manifest this update: Sun 21 Dec 2025 02:51:56 +0000 Manifest next update: Sun 28 Dec 2025 02:51:56 +0000 Files and hashes: 1: lFmgev60b3mSRf7CNW08usm-2Ig.crl (hash: GQJQ8BQ+xFI46l2f6RqKMGRh+3Coqk6oK2LNwKte7zY=) 2: 81A901FA8A0411EEA251F746C4F9AE02.roa (hash: JHvhSwDOyCbk05zvE3c35/2oeXE8ikJi+kxwUoPeaf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EE4D, serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888 Validity Not Before: Dec 21 02:51:56 2025 GMT Not After : Dec 28 02:51:56 2025 GMT Subject: CN=694760cc-ff3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:40:71:9c:51:48:84:48:e8:ad:e9:56:65:e2: 88:f4:38:26:78:ce:da:8b:5a:55:f1:0d:93:80:e8: dd:f9:af:69:a0:bf:dd:5c:fd:74:5e:f1:9e:e9:a2: da:dd:f1:c2:75:78:67:79:6a:ed:61:de:8f:2f:7d: c5:a0:03:94:97:bf:2c:70:ea:aa:36:ec:e8:c0:4c: 82:e8:b7:83:2b:1c:5b:f4:40:89:ca:df:31:17:99: 48:8a:e4:6c:17:4e:2f:63:c2:ff:a8:f4:e0:9e:05: 8d:70:3f:24:89:80:d6:d2:86:0f:64:bd:ed:eb:30: 9c:0f:56:3d:08:91:58:aa:c9:70:64:5a:65:52:37: 6e:b7:ac:5c:c3:82:35:f6:29:ef:9e:79:f9:08:25: 7c:ad:0c:db:bb:af:98:23:0d:e2:74:0a:88:7f:62: b6:d0:6c:e2:72:72:48:a1:66:41:c9:dd:2b:41:48: 8f:52:e8:d4:66:ff:4a:46:6a:eb:e4:c6:69:04:5d: 2b:65:9b:ca:02:f9:8f:6b:76:aa:46:ff:da:d7:4d: a0:b9:56:34:53:a4:56:65:44:9e:a3:ef:80:50:2b: 64:62:a6:d2:ad:4e:f3:54:37:61:a2:01:58:eb:84: 4e:92:20:ab:39:12:64:27:9f:7c:d3:e4:3b:9d:0b: 01:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:37:7A:4B:C3:41:BA:B4:39:A1:C7:30:17:38:46:3E:2C:00:9C:6A X509v3 Authority Key Identifier: keyid:94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:84:b5:e1:0e:10:ab:b0:9c:07:a8:b9:63:0b:4c:80:b8:64: 5b:d4:7c:e5:7b:e0:a8:b3:60:21:c5:00:f1:a1:97:ee:1c:3e: ed:e0:e1:e8:b7:d4:cc:d1:6c:4c:1c:ab:26:f4:5e:80:56:89: 60:06:c2:3e:fd:c8:7d:01:85:3b:eb:d5:9b:0c:06:21:74:38: b8:8b:ba:42:c8:11:17:ec:04:20:cf:25:00:46:65:ef:6f:e0: 23:63:55:c8:6e:9f:41:02:51:a9:a2:20:d8:b0:3b:26:b1:27: e3:dc:55:b2:38:e4:22:40:0b:56:73:8e:ff:84:85:09:d4:bb: 59:09:c1:d7:6a:79:a0:34:98:73:01:73:7f:2e:34:40:20:7d: 3a:8c:38:99:8d:0f:75:67:c0:f9:9e:c8:db:96:3b:b4:a0:7d: 8f:b9:49:f6:2a:56:21:67:f8:36:eb:81:16:e5:42:62:b7:22: 0a:ff:c7:15:e2:80:e7:7a:3b:0d:f3:49:22:63:eb:6b:35:62: 37:e4:b9:8b:f0:f7:0c:c9:4b:b2:7b:2e:be:c2:5f:f9:77:d5: e8:f0:c0:5e:72:a6:34:b8:f0:e9:1b:c4:7c:35:cd:28:86:8f: cb:90:27:48:42:89:bc:99:e9:59:38:4a:64:2a:19:01:ad:33: 2b:bb:4a:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVFNEQxMTAvBgNVBAUTKDk0NTlBMDdBRkVCNDZGNzk5MjQ1RkVDMjM1NkQzQ0JB QzlCRUQ4ODgwHhcNMjUxMjIxMDI1MTU2WhcNMjUxMjI4MDI1MTU2WjAYMRYwFAYD VQQDDA02OTQ3NjBjYy1mZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlEBxnFFIhEjorelWZeKI9DgmeM7ai1pV8Q2TgOjd+a9poL/dXP10XvGe6aLa 3fHCdXhneWrtYd6PL33FoAOUl78scOqqNuzowEyC6LeDKxxb9ECJyt8xF5lIiuRs F04vY8L/qPTgngWNcD8kiYDW0oYPZL3t6zCcD1Y9CJFYqslwZFplUjdut6xcw4I1 9invnnn5CCV8rQzbu6+YIw3idAqIf2K20GzicnJIoWZByd0rQUiPUujUZv9KRmrr 5MZpBF0rZZvKAvmPa3aqRv/a102guVY0U6RWZUSeo++AUCtkYqbSrU7zVDdhogFY 64ROkiCrORJkJ5980+Q7nQsB5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGA3ekvD Qbq0OaHHMBc4Rj4sAJxqMB8GA1UdIwQYMBaAFJRZoHr+tG95kkX+wjVtPLrJvtiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUU0RC81MjNGREE4MDhB MDIxMUVFQjI4OTAzMkNDNEY5QUUwMi9sRm1nZXY2MGIzbVNSZjdDTlcwOHVzbS0y SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbWdldjYwYjNtU1JmN0NOVzA4dXNtLTJJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUU0RC81MjNGREE4MDhBMDIxMUVFQjI4OTAzMkNDNEY5QUUwMi9sRm1nZXY2MGIz bVNSZjdDTlcwOHVzbS0ySWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCShLXhDhCrsJwHqLljC0yAuGRb1Hzle+Cos2AhxQDxoZfuHD7t4OHo t9TM0WxMHKsm9F6AVolgBsI+/ch9AYU769WbDAYhdDi4i7pCyBEX7AQgzyUARmXv b+AjY1XIbp9BAlGpoiDYsDsmsSfj3FWyOOQiQAtWc47/hIUJ1LtZCcHXanmgNJhz AXN/LjRAIH06jDiZjQ91Z8D5nsjblju0oH2PuUn2KlYhZ/g264EW5UJityIK/8cV 4oDnejsN80kiY+trNWI35LmL8PcMyUuyey6+wl/5d9Xo8MBecqY0uPDpG8R8Nc0o ho/LkCdIQom8melZOEpkKhkBrTMru0qf -----END CERTIFICATE-----Generated at Sun Dec 21 11:23:29 2025 by rpki-client