This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft File: 1c9c-LTYDyITBPNliOOVYERH93o.mft (raw, json) Hash identifier: 5LmVoMTinqTmuTQ/2y0XBDmYHPCpAKLhT6IIrwzmbqw= Subject key identifier: 9A:EE:0E:72:35:DE:62:FE:B5:C1:D0:2C:6A:90:C2:9D:B2:DF:39:81 Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A Certificate issuer: /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A Certificate serial: 0253 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft Manifest number: 024E Signing time: Fri 05 Dec 2025 00:02:38 +0000 Manifest this update: Fri 05 Dec 2025 00:02:37 +0000 Manifest next update: Fri 12 Dec 2025 00:02:37 +0000 Files and hashes: 1: 1c9c-LTYDyITBPNliOOVYERH93o.crl (hash: wyWJug9AgKpHEwQG3yHcDU3ladDdUtsW2eJj+3fmd0U=) 2: A83E51EC45F611EDBA9D6062C4F9AE02.roa (hash: /+DB0DwIdWV5MsoUQNnzsNFXQf9YCNytI0Fy3CklZBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 595 (0x253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A5BB, serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A Validity Not Before: Dec 5 00:02:37 2025 GMT Not After : Dec 12 00:02:37 2025 GMT Subject: CN=6932211e-3721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:c5:26:76:1f:a5:15:4a:47:00:e9:ca:10: 31:7d:5b:35:5c:3b:eb:0a:36:b0:9d:30:86:49:69: ce:ac:5b:bc:9a:dc:0b:7a:67:fc:f9:20:0e:af:f6: c6:77:ad:cc:24:54:88:23:22:c5:9c:e1:1d:b7:d5: e1:34:bb:0d:df:7d:ae:95:ad:5e:51:83:9f:4b:43: ac:f3:6e:9a:8a:f4:cd:ea:4d:23:71:11:53:df:6d: 2d:45:cf:f9:98:5c:0d:bb:4d:64:eb:45:bc:e8:fe: a9:9e:f9:e1:40:7c:9d:ac:5f:f3:e8:83:b1:36:bb: a0:d4:2c:e4:ee:24:99:a2:a0:a0:b6:57:a4:3c:1d: b3:e2:f9:b3:5f:47:18:41:da:c6:55:a2:0a:44:0f: b4:01:dc:8b:09:ca:b3:8c:b6:bb:09:d2:f5:f8:2e: 35:22:e1:7d:29:65:c3:94:57:df:bf:8d:6b:e5:3e: da:7d:d4:b0:4d:9f:32:25:49:49:25:4e:9d:8b:b4: 02:de:16:64:3d:1c:1a:2a:fb:ba:1f:99:e8:f3:4a: 81:af:42:47:f1:69:1b:2f:66:0d:d3:89:68:5b:12: 42:82:fd:92:45:c1:ac:ff:13:1c:7f:5f:54:c6:d3: e3:6e:39:03:82:d0:2d:5e:a7:74:53:31:60:4f:e2: 6b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EE:0E:72:35:DE:62:FE:B5:C1:D0:2C:6A:90:C2:9D:B2:DF:39:81 X509v3 Authority Key Identifier: keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:98:46:b9:e4:d9:2f:7d:36:e0:07:1d:ba:9e:26:7a:63:a0: 99:0e:38:98:19:82:bb:62:76:68:d9:fd:1e:83:ef:19:f7:e5: b4:07:47:34:bd:41:23:c9:a2:6c:08:6d:a3:37:d1:92:5f:8a: c0:06:0d:c4:b9:ad:25:f4:f4:af:71:d4:7d:97:65:5b:a4:d8: 51:d4:53:c1:c3:54:50:2f:e3:7b:9c:10:09:d3:7a:27:9c:49: 47:58:56:d6:f1:1d:0a:ee:2e:c9:59:d8:b2:9c:e6:eb:79:be: 7b:46:48:6a:29:3e:61:9f:86:a2:19:de:2f:73:27:8a:c0:ef: 7e:92:27:45:10:4e:bb:0a:7e:70:98:0a:65:28:2b:b5:52:f9: 1b:ab:ba:4d:ac:ae:0f:67:23:8a:df:a0:9c:c4:f6:f3:6c:f9: d1:68:66:9c:62:45:3e:8e:72:28:86:51:85:b7:3b:11:89:2f: ec:25:20:11:b6:ce:c3:31:f3:0b:c4:af:bb:57:5c:77:02:9e: d9:63:17:6d:4e:30:18:bc:bd:cd:14:d0:6a:48:a0:f7:2f:de: d5:03:19:86:20:ec:98:45:4d:9b:ab:dd:33:d8:3a:fd:8f:f2: c8:3a:d6:50:88:3f:ff:9b:21:6d:fa:1b:c7:fd:a9:bf:3c:52: 1e:6d:d9:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1QkIxMTAvBgNVBAUTKEQ1Q0Y1Q0Y4QjREODBGMjIxMzA0RjM2NTg4RTM5NTYw NDQ0N0Y3N0EwHhcNMjUxMjA1MDAwMjM3WhcNMjUxMjEyMDAwMjM3WjAYMRYwFAYD VQQDEw02OTMyMjExZS0zNzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGvFJnYfpRVKRwDpyhAxfVs1XDvrCjawnTCGSWnOrFu8mtwLemf8+SAOr/bG d63MJFSIIyLFnOEdt9XhNLsN332ula1eUYOfS0Os826aivTN6k0jcRFT320tRc/5 mFwNu01k60W86P6pnvnhQHydrF/z6IOxNrug1Czk7iSZoqCgtlekPB2z4vmzX0cY QdrGVaIKRA+0AdyLCcqzjLa7CdL1+C41IuF9KWXDlFffv41r5T7afdSwTZ8yJUlJ JU6di7QC3hZkPRwaKvu6H5no80qBr0JH8WkbL2YN04loWxJCgv2SRcGs/xMcf19U xtPjbjkDgtAtXqd0UzFgT+JrCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJruDnI1 3mL+tcHQLGqQwp2y3zmBMB8GA1UdIwQYMBaAFNXPXPi02A8iEwTzZYjjlWBER/d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTVCQi83MjNDRDlBQTQ1 RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5SVRCUE5saU9PVllFUkg5 M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjOWMtTFRZRHlJVEJQTmxpT09WWUVSSDkzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTVCQi83MjNDRDlBQTQ1RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5 SVRCUE5saU9PVllFUkg5M28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANmEa55NkvfTbgBx26niZ6Y6CZDjiYGYK7YnZo2f0eg+8Z9+W0B0c0 vUEjyaJsCG2jN9GSX4rABg3Eua0l9PSvcdR9l2VbpNhR1FPBw1RQL+N7nBAJ03on nElHWFbW8R0K7i7JWdiynObreb57RkhqKT5hn4aiGd4vcyeKwO9+kidFEE67Cn5w mAplKCu1Uvkbq7pNrK4PZyOK36CcxPbzbPnRaGacYkU+jnIohlGFtzsRiS/sJSAR ts7DMfMLxK+7V1x3Ap7ZYxdtTjAYvL3NFNBqSKD3L97VAxmGIOyYRU2bq90z2Dr9 j/LIOtZQiD//myFt+hvH/am/PFIebdka -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:06 2025 by rpki-client