This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft File: RLx47eY9W2Ire6wDs0mWsv5C4yc.mft (raw, json) Hash identifier: tLSuHqvYVdcXj4F6abmQz8UJ/Ex9uuDcLrKChmoXCO4= Subject key identifier: 70:E6:1F:C1:44:7E:B8:A9:C0:8D:06:36:12:FD:DC:2B:35:64:D5:55 Authority key identifier: 44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27 Certificate issuer: /CN=A913B7C7/serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft Manifest number: D2 Signing time: Sun 21 Dec 2025 04:50:19 +0000 Manifest this update: Sun 21 Dec 2025 04:50:19 +0000 Manifest next update: Sun 28 Dec 2025 04:50:19 +0000 Files and hashes: 1: RLx47eY9W2Ire6wDs0mWsv5C4yc.crl (hash: t+EtRKvkuIQKwPKfeEZxov8u4kHcJn5rbrvAf261zCQ=) 2: 0A18EF4A9D9C11EFBAF0D76AC4F9AE02.roa (hash: 5WrzMYaUrL3FPrZPq0ysO7bbUxzHeHkTODk3iwC0/rs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7, serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327 Validity Not Before: Dec 21 04:50:19 2025 GMT Not After : Dec 28 04:50:19 2025 GMT Subject: CN=69477c8b-212f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:98:65:81:27:59:65:2a:a4:0d:09:92:74:50: 07:fd:2d:09:9f:bb:8c:54:b0:8e:4d:ab:41:9d:39: 8b:32:ac:0a:cb:b4:76:56:de:2d:e9:c4:04:95:0a: 55:18:b2:24:c0:dc:cf:6d:5d:b3:47:f2:90:3c:31: 61:49:8b:43:8a:08:98:7e:1d:ed:75:0e:e2:54:74: bd:63:b9:85:4a:0c:ee:a1:3a:f7:04:e5:79:a2:95: 6d:8d:b0:ac:c4:76:97:5f:e4:47:f9:d3:f1:5b:b9: 89:64:7e:58:73:71:71:4c:5f:d9:c7:59:c6:31:b5: f2:4a:a1:cb:72:9e:a6:e8:e8:15:23:b3:7b:4a:86: ac:5e:98:95:33:df:ae:b2:f5:0d:ca:20:09:f5:4d: bf:ea:d8:88:bd:27:e7:5d:4b:ab:d6:f7:fd:5c:1f: 82:03:8d:c9:dc:0c:1b:16:a7:dc:ec:95:73:05:29: 12:0e:d0:4c:ee:e9:82:13:a8:c4:a7:c2:e6:24:ed: b6:29:0d:21:ce:de:04:e6:d7:75:22:93:c4:3e:fb: 5b:d4:09:60:cd:4f:a4:3f:b6:c8:bb:92:59:86:1c: a8:a1:18:c4:d1:03:82:4a:4d:ea:3b:d2:3c:3d:19: de:66:5f:37:8a:e1:46:41:50:17:e7:64:9e:f4:8e: b4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E6:1F:C1:44:7E:B8:A9:C0:8D:06:36:12:FD:DC:2B:35:64:D5:55 X509v3 Authority Key Identifier: keyid:44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:52:7f:23:a0:4d:ce:87:73:e0:76:c2:5d:22:6d:b0:26:ef: 97:4a:c5:bb:82:c5:5f:87:55:fe:f8:2f:94:ca:f5:66:c1:4e: e5:48:9a:c9:bb:a7:4a:42:53:47:0f:c2:e8:2a:68:2a:d8:1a: 05:8e:9b:aa:34:8d:15:70:6d:18:49:62:60:aa:43:75:52:ef: 5f:78:11:4f:53:63:ff:4a:92:9b:32:13:dc:95:d2:5b:23:90: c3:20:9a:3e:cd:df:01:80:b2:af:45:5c:d3:11:20:7b:a4:65: a2:cb:40:38:74:30:6d:45:2a:3d:f6:96:c0:0a:80:3a:4b:1d: 28:57:d4:c5:47:01:bc:8c:09:2b:6d:5f:ec:dc:b0:1a:94:ec: 17:72:78:e2:d4:0e:4b:9b:41:ea:e3:b8:47:a0:d5:ab:96:cf: cf:b3:cd:cd:b0:84:0c:7b:f8:f7:4c:16:ef:c4:1c:27:bf:50: 87:3b:6a:73:31:36:54:65:59:9f:8f:3e:11:eb:d5:0b:c8:11: 25:ff:72:8a:92:46:bb:33:b9:c9:51:f0:ae:80:73:c9:80:85: 74:6a:7d:2a:06:6c:30:88:b2:cd:b1:90:a6:39:a1:76:8d:50: f3:e0:54:c7:53:a5:ed:de:8c:60:18:ac:92:e3:fc:de:f7:35: 3a:89:96:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QzcxMTAvBgNVBAUTKDQ0QkM3OEVERTYzRDVCNjIyQjdCQUMwM0IzNDk5NkIy RkU0MkUzMjcwHhcNMjUxMjIxMDQ1MDE5WhcNMjUxMjI4MDQ1MDE5WjAYMRYwFAYD VQQDDA02OTQ3N2M4Yi0yMTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZhlgSdZZSqkDQmSdFAH/S0Jn7uMVLCOTatBnTmLMqwKy7R2Vt4t6cQElQpV GLIkwNzPbV2zR/KQPDFhSYtDigiYfh3tdQ7iVHS9Y7mFSgzuoTr3BOV5opVtjbCs xHaXX+RH+dPxW7mJZH5Yc3FxTF/Zx1nGMbXySqHLcp6m6OgVI7N7SoasXpiVM9+u svUNyiAJ9U2/6tiIvSfnXUur1vf9XB+CA43J3AwbFqfc7JVzBSkSDtBM7umCE6jE p8LmJO22KQ0hzt4E5td1IpPEPvtb1AlgzU+kP7bIu5JZhhyooRjE0QOCSk3qO9I8 PRneZl83iuFGQVAX52Se9I60oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDmH8FE fripwI0GNhL93Cs1ZNVVMB8GA1UdIwQYMBaAFES8eO3mPVtiK3usA7NJlrL+QuMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdDNy9BMjQ1MTE0NjlE OUIxMUVGODYwNTA0NjlDNEY5QUUwMi9STHg0N2VZOVcySXJlNndEczBtV3N2NUM0 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JMeDQ3ZVk5VzJJcmU2d0RzMG1Xc3Y1QzR5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdDNy9BMjQ1MTE0NjlEOUIxMUVGODYwNTA0NjlDNEY5QUUwMi9STHg0N2VZOVcy SXJlNndEczBtV3N2NUM0eWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnUn8joE3Oh3PgdsJdIm2wJu+XSsW7gsVfh1X++C+UyvVmwU7lSJrJ u6dKQlNHD8LoKmgq2BoFjpuqNI0VcG0YSWJgqkN1Uu9feBFPU2P/SpKbMhPcldJb I5DDIJo+zd8BgLKvRVzTESB7pGWiy0A4dDBtRSo99pbACoA6Sx0oV9TFRwG8jAkr bV/s3LAalOwXcnji1A5Lm0Hq47hHoNWrls/Ps83NsIQMe/j3TBbvxBwnv1CHO2pz MTZUZVmfjz4R69ULyBEl/3KKkka7M7nJUfCugHPJgIV0an0qBmwwiLLNsZCmOaF2 jVDz4FTHU6Xt3oxgGKyS4/ze9zU6iZZq -----END CERTIFICATE-----Generated at Mon Dec 22 05:20:29 2025 by rpki-client