This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft File: lC8l1zULID6onvLRzBULBbF7K4c.mft (raw, json) Hash identifier: zdwmcatxZt3AD18p702n9OdaDJ6u7hHXyKMfD+pG1Rs= Subject key identifier: 7F:F8:26:30:36:B8:89:90:3D:66:9B:CB:98:DF:6D:35:10:13:1F:2C Authority key identifier: 94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 Certificate issuer: /CN=A912FB1D/serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Certificate serial: 350E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft Manifest number: 34F8 Signing time: Thu 04 Dec 2025 15:07:23 +0000 Manifest this update: Thu 04 Dec 2025 15:07:22 +0000 Manifest next update: Thu 11 Dec 2025 15:07:22 +0000 Files and hashes: 1: lC8l1zULID6onvLRzBULBbF7K4c.crl (hash: G/Owe9flS2b7po1X3ELU0xIJX0M3oywgEENwI4CgWQY=) 2: C098D762675111E9A0C4BB36C4F9AE02.roa (hash: Q+UMsPeyfxUm55P4fMvGVYmfZGcp4BR3EDI4z+jAzdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13582 (0x350e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FB1D, serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Validity Not Before: Dec 4 15:07:22 2025 GMT Not After : Dec 11 15:07:22 2025 GMT Subject: CN=6931a3ab-166b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:67:71:ff:89:5a:f8:cd:44:92:57:c0:a7:3e: 91:6b:3e:79:76:9a:2f:1f:cc:24:67:3a:e9:97:b9: 9a:74:f3:b0:4f:22:eb:8a:1a:dd:0d:7f:e6:68:80: 28:e8:ef:f5:c7:4b:65:bb:8d:9e:eb:83:88:bf:cf: 8a:2f:08:d8:cd:4a:89:ff:91:69:d3:82:78:a5:fc: de:7d:29:40:4e:83:df:4e:81:f7:b8:26:80:ae:75: 51:8b:b8:66:24:20:61:d5:3f:d5:5b:1b:36:38:c2: 0c:a3:04:f7:5d:a6:62:eb:04:97:54:33:1d:93:0a: ff:30:c8:56:be:cb:6c:67:b4:24:d5:fe:6e:bc:5e: 2f:b8:bd:a1:8d:93:90:8a:86:4b:2f:35:96:70:13: 67:11:ae:8b:3d:25:b0:ab:e5:5a:33:83:f3:3b:98: b2:3c:23:64:91:b5:de:67:01:4a:80:23:0d:76:68: 74:71:5f:17:8b:c0:bb:24:be:c9:55:7b:44:9a:de: c3:8f:3e:22:71:08:66:84:37:49:8e:07:4b:0f:ec: 70:23:4f:e9:96:d2:f5:49:6f:d5:3b:81:4d:7c:99: 90:9e:fb:ea:2c:52:7e:bb:8b:6d:b4:33:0b:df:26: 50:03:41:9e:1c:05:af:cd:9b:ad:6a:3d:e3:d4:f4: 4b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F8:26:30:36:B8:89:90:3D:66:9B:CB:98:DF:6D:35:10:13:1F:2C X509v3 Authority Key Identifier: keyid:94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:b5:ea:c5:db:a1:4b:8e:e1:98:13:fd:9e:b7:18:56:6e:98: 0b:80:8c:1c:ba:98:d4:77:0f:36:bb:7f:8e:20:9a:03:24:19: ad:8a:8d:0d:92:15:50:af:5e:36:cd:80:c1:ff:a9:a2:88:26: 5e:79:8f:d5:bd:90:d9:18:9c:2f:bf:fb:4e:8b:c0:c3:92:69: d5:ef:14:c9:fa:4b:68:c8:b4:ee:f0:06:43:8e:8e:eb:37:a6: 0a:4d:2d:06:1f:55:80:13:7e:d2:42:2a:6e:a2:84:8e:a1:e4: f0:93:22:1e:64:06:d4:2a:0a:61:6b:54:c0:c1:f3:09:7c:71: 13:78:ee:71:38:2a:9a:bb:2e:50:13:ee:87:f3:7d:91:3d:8f: d2:5e:9b:09:6b:a6:27:d5:97:c6:84:6e:6e:06:16:39:95:b7: 8b:37:fc:37:1b:8b:f9:9f:12:2f:bb:ca:c9:49:ef:70:40:11: b2:3e:e1:30:00:cd:df:80:bf:77:9b:ad:a2:34:cc:2f:86:2b: 01:f4:fe:16:c6:1e:aa:f7:8e:46:74:6f:ec:3b:e1:8d:5c:db: 67:56:71:88:e3:4e:0d:11:c9:fa:c9:b7:ef:e4:42:92:29:f2: c3:37:8a:33:d1:6a:df:21:32:5d:3a:58:f4:ec:00:31:8f:03: 4e:54:e8:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCMUQxMTAvBgNVBAUTKDk0MkYyNUQ3MzUwQjIwM0VBODlFRjJEMUNDMTUwQjA1 QjE3QjJCODcwHhcNMjUxMjA0MTUwNzIyWhcNMjUxMjExMTUwNzIyWjAYMRYwFAYD VQQDEw02OTMxYTNhYi0xNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Gdx/4la+M1EklfApz6Raz55dpovH8wkZzrpl7madPOwTyLrihrdDX/maIAo 6O/1x0tlu42e64OIv8+KLwjYzUqJ/5Fp04J4pfzefSlAToPfToH3uCaArnVRi7hm JCBh1T/VWxs2OMIMowT3XaZi6wSXVDMdkwr/MMhWvstsZ7Qk1f5uvF4vuL2hjZOQ ioZLLzWWcBNnEa6LPSWwq+VaM4PzO5iyPCNkkbXeZwFKgCMNdmh0cV8Xi8C7JL7J VXtEmt7Djz4icQhmhDdJjgdLD+xwI0/pltL1SW/VO4FNfJmQnvvqLFJ+u4tttDML 3yZQA0GeHAWvzZutaj3j1PRLvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/4JjA2 uImQPWaby5jfbTUQEx8sMB8GA1UdIwQYMBaAFJQvJdc1CyA+qJ7y0cwVCwWxeyuH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkIxRC9DNjg0Q0E5QzFE QUIxMUUyQTIxRTM1QUEwOEIwMkNEMi9sQzhsMXpVTElENm9udkxSekJVTEJiRjdL NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDOGwxelVMSUQ2b252TFJ6QlVMQmJGN0s0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkIxRC9DNjg0Q0E5QzFEQUIxMUUyQTIxRTM1QUEwOEIwMkNEMi9sQzhsMXpVTElE Nm9udkxSekJVTEJiRjdLNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlterF26FLjuGYE/2etxhWbpgLgIwcupjUdw82u3+OIJoDJBmtio0N khVQr142zYDB/6miiCZeeY/VvZDZGJwvv/tOi8DDkmnV7xTJ+ktoyLTu8AZDjo7r N6YKTS0GH1WAE37SQipuooSOoeTwkyIeZAbUKgpha1TAwfMJfHETeO5xOCqauy5Q E+6H832RPY/SXpsJa6Yn1ZfGhG5uBhY5lbeLN/w3G4v5nxIvu8rJSe9wQBGyPuEw AM3fgL93m62iNMwvhisB9P4Wxh6q945GdG/sO+GNXNtnVnGI404NEcn6ybfv5EKS KfLDN4oz0WrfITJdOlj07AAxjwNOVOho -----END CERTIFICATE-----Generated at Sat Dec 6 14:31:31 2025 by rpki-client