This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft File: 0l-HlucNZw6YbGwkdz5rd4w2BXc.mft (raw, json) Hash identifier: jfMqbsi1HQBoDxDE9ochlRpwTN9Gygo3mh1m6EYnUWI= Subject key identifier: 79:C3:BC:CC:59:B6:0E:66:24:E0:C0:A9:91:B8:BF:08:AC:E4:E4:24 Authority key identifier: D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77 Certificate issuer: /CN=A914FD01/serialNumber=D25F8796E70D670E986C6C24773E6B778C360577 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft Manifest number: 3A Signing time: Sun 07 Dec 2025 05:31:22 +0000 Manifest this update: Sun 07 Dec 2025 05:31:22 +0000 Manifest next update: Sun 14 Dec 2025 05:31:22 +0000 Files and hashes: 1: 0l-HlucNZw6YbGwkdz5rd4w2BXc.crl (hash: Vs3tBFLIENu3qzl8RUjzCVPUTIkQIYAjBSdcgc/HkwY=) 2: 442749147D6311F0BC413466C4F9AE02.roa (hash: U/qMD7uylhtZUr24KZzqo+D5k35qqAvh49xpiigrEd0=) 3: 44AA60D87D6311F0BC413466C4F9AE02.roa (hash: E4IkE6FRMTE0lAhudQztXcTO2n4pZjttFwQTGBoNBn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:31:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FD01, serialNumber=D25F8796E70D670E986C6C24773E6B778C360577 Validity Not Before: Dec 7 05:31:22 2025 GMT Not After : Dec 14 05:31:22 2025 GMT Subject: CN=6935112a-e411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f3:23:d0:30:27:94:2d:7a:22:89:14:20:3d: 23:92:fe:30:23:91:b5:1f:fc:42:53:c4:6c:cd:2b: 47:94:f6:bd:a5:66:f0:33:9c:41:1f:11:4f:ac:2d: bc:d9:15:e7:ae:08:13:de:5f:2b:ef:70:28:47:6a: 6e:97:76:dd:e5:07:ea:04:b4:5c:a4:4c:97:7f:ce: 99:29:9b:bc:4f:3b:fb:09:21:bd:88:29:de:ad:95: ba:b0:79:90:60:dd:99:05:49:81:8e:c3:2b:37:89: c7:ac:e9:2a:97:c7:80:57:99:c7:d4:bd:88:0f:76: 65:5c:5e:51:9a:74:be:e4:44:38:84:45:c9:82:01: c5:12:90:5a:70:0a:20:67:8c:3a:86:3f:1a:cb:4d: f5:01:5b:b5:2f:6e:5a:48:0e:88:e1:71:da:6e:83: af:cf:b4:b1:f7:12:bf:19:59:81:b7:38:1f:31:06: 9f:19:39:68:60:52:a4:52:29:f5:f6:50:58:ac:6b: 78:56:15:2e:8f:67:84:92:6e:7b:a4:89:39:58:84: d5:b1:99:c2:79:23:da:f7:da:e8:58:83:0f:bf:57: a2:79:cb:61:70:4e:68:88:86:f8:dd:2a:86:de:42: 8f:f5:c3:47:5b:5a:30:3c:f2:38:80:5d:b4:96:6b: 17:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C3:BC:CC:59:B6:0E:66:24:E0:C0:A9:91:B8:BF:08:AC:E4:E4:24 X509v3 Authority Key Identifier: keyid:D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b5:f0:e1:8f:37:2f:11:46:2d:9e:65:d4:dd:8c:b2:68:aa: c7:96:f2:bc:f7:4b:6f:63:b2:d4:72:d0:33:b2:3c:4b:3a:7e: 36:24:1c:8d:76:b0:96:1a:e5:9e:d5:9a:02:f6:f0:52:d6:6f: c6:e0:39:69:fe:0f:68:e5:14:3b:3e:82:0e:69:70:86:ef:4d: 7f:cf:6f:d4:b6:6a:d9:a6:35:f5:62:f6:f7:28:8e:a3:64:1c: 1e:6f:f1:02:98:2b:4a:04:43:49:f6:ad:50:74:1c:c1:5e:d8: c0:1c:b5:8c:c7:bd:ff:be:f9:cf:d3:f7:a7:1e:a5:2d:1e:bc: 80:7a:aa:2c:b5:38:c4:b5:76:ac:94:55:dc:a8:3b:2a:a8:0f: cd:3d:1d:df:7d:ea:55:aa:fd:0f:eb:b9:0e:ea:6e:62:d4:95: c7:20:73:e4:52:63:b9:02:dc:3e:df:86:8a:54:a6:ce:78:65: c2:f2:4c:b9:aa:c6:aa:d2:89:0b:26:1a:61:d9:ea:5b:28:27: e2:98:84:20:9f:56:4d:1b:bc:06:b0:e7:5a:f2:4d:98:d1:15: 3a:82:c9:de:6a:ef:6e:7d:43:d8:58:ea:ca:14:16:7c:ef:64: 2d:c5:11:fd:c2:27:91:c2:88:cb:2f:be:e3:27:52:89:09:f5: ce:33:3b:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RkQwMTExMC8GA1UEBRMoRDI1Rjg3OTZFNzBENjcwRTk4NkM2QzI0NzczRTZCNzc4 QzM2MDU3NzAeFw0yNTEyMDcwNTMxMjJaFw0yNTEyMTQwNTMxMjJaMBgxFjAUBgNV BAMTDTY5MzUxMTJhLWU0MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw8yPQMCeULXoiiRQgPSOS/jAjkbUf/EJTxGzNK0eU9r2lZvAznEEfEU+sLbzZ FeeuCBPeXyvvcChHam6Xdt3lB+oEtFykTJd/zpkpm7xPO/sJIb2IKd6tlbqweZBg 3ZkFSYGOwys3ices6SqXx4BXmcfUvYgPdmVcXlGadL7kRDiERcmCAcUSkFpwCiBn jDqGPxrLTfUBW7UvblpIDojhcdpug6/PtLH3Er8ZWYG3OB8xBp8ZOWhgUqRSKfX2 UFisa3hWFS6PZ4SSbnukiTlYhNWxmcJ5I9r32uhYgw+/V6J5y2FwTmiIhvjdKobe Qo/1w0dbWjA88jiAXbSWaxfVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUecO8zFm2 DmYk4MCpkbi/CKzk5CQwHwYDVR0jBBgwFoAU0l+HlucNZw6YbGwkdz5rd4w2BXcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGRDAxLzM2QTcxRTRFN0Q1 RjExRjA5RUM5QzkzOEM0RjlBRTAyLzBsLUhsdWNOWnc2WWJHd2tkejVyZDR3MkJY Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMGwtSGx1Y05adzZZYkd3a2R6NXJkNHcyQlhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRG RDAxLzM2QTcxRTRFN0Q1RjExRjA5RUM5QzkzOEM0RjlBRTAyLzBsLUhsdWNOWnc2 WWJHd2tkejVyZDR3MkJYYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD+18OGPNy8RRi2eZdTdjLJoqseW8rz3S29jstRy0DOyPEs6fjYkHI12 sJYa5Z7VmgL28FLWb8bgOWn+D2jlFDs+gg5pcIbvTX/Pb9S2atmmNfVi9vcojqNk HB5v8QKYK0oEQ0n2rVB0HMFe2MActYzHvf+++c/T96cepS0evIB6qiy1OMS1dqyU VdyoOyqoD809Hd996lWq/Q/ruQ7qbmLUlccgc+RSY7kC3D7fhopUps54ZcLyTLmq xqrSiQsmGmHZ6lsoJ+KYhCCfVk0bvAaw51ryTZjRFTqCyd5q7259Q9hY6soUFnzv ZC3FEf3CJ5HCiMsvvuMnUokJ9c4zO/0= -----END CERTIFICATE-----Generated at Mon Dec 8 09:12:05 2025 by rpki-client