This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft File: l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json) Hash identifier: tJaYQtHREEdIGktAY1hPuaEOQ4MW7qUgUzBMtv6H1VQ= Subject key identifier: 73:90:54:66:CB:39:A3:16:D0:DB:A9:60:C8:30:7F:D8:52:DE:37:E6 Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Certificate serial: 0BA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft Manifest number: 0B95 Signing time: Sat 06 Dec 2025 18:18:50 +0000 Manifest this update: Sat 06 Dec 2025 18:18:50 +0000 Manifest next update: Sat 13 Dec 2025 18:18:50 +0000 Files and hashes: 1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: SEe0MqGt9PvpDM7JQyTyjuGyosGOIgEw8bPkKR5KqVI=) 2: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: orMTuhNCmn5/4lVWP0hvNJHm2iToMZFaKY4Tk1oMp1M=) 3: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: DQ4zjVC/izJ/mpi1KCeEh40z0Ktl3VHP629G9xZ43Is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2984 (0xba8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Validity Not Before: Dec 6 18:18:50 2025 GMT Not After : Dec 13 18:18:50 2025 GMT Subject: CN=6934738a-ffd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4c:aa:c1:0f:8e:fa:50:16:0b:fd:9e:81:f0: 87:f9:1a:66:10:13:0b:02:15:91:34:40:7e:d4:d3: 81:05:f1:82:18:5d:b8:c4:a4:a2:9c:db:80:a7:dd: 68:51:18:10:8f:a4:ae:2b:85:bb:45:1a:a8:9f:88: 60:f4:87:a3:4f:80:ef:8d:27:23:bf:7e:2b:10:2e: 93:84:5b:4a:91:b8:50:8d:70:48:27:7a:5b:68:b8: 85:f2:e2:a7:27:14:c3:e1:f0:81:74:13:7d:ff:68: 5e:e9:17:c6:a3:44:9d:6c:55:08:2e:d0:53:67:cc: 21:4c:e6:c5:90:bb:2d:93:fe:58:3e:e9:e6:57:17: 92:01:2a:6b:8c:14:1e:e5:38:11:02:65:be:4a:24: 31:bc:76:c3:f8:ed:63:cd:2d:1e:67:a7:00:13:ec: 1e:47:e5:fa:78:e5:e7:c6:ec:56:91:da:74:91:4c: 6d:dd:bf:36:d0:f0:01:e4:b3:6a:da:94:ae:fa:d3: 70:e7:2c:6c:78:6c:a6:19:ac:2d:ff:3d:76:cb:33: 1e:41:3a:d8:ec:f8:52:4b:e1:56:c0:ba:9c:28:74: ce:ca:42:b0:9a:cd:55:56:8f:8c:c6:82:c4:91:c6: d3:7a:94:05:8c:4c:9b:f3:75:56:0b:46:a8:4c:87: 5a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:90:54:66:CB:39:A3:16:D0:DB:A9:60:C8:30:7F:D8:52:DE:37:E6 X509v3 Authority Key Identifier: keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:1f:6e:b1:fa:68:b1:aa:03:9f:fd:ab:41:33:c1:a1:b5:b9: ed:24:82:11:78:8f:ba:85:a9:d6:5a:c2:4f:b6:77:76:39:ba: 69:e3:d6:ad:61:69:19:4b:35:2c:db:89:dc:8d:49:2a:b4:1d: fb:0f:65:c3:2b:32:d8:9a:d0:1e:64:89:e1:96:48:0f:60:67: cd:e4:3f:4d:22:20:6a:66:11:f5:bc:90:b7:e3:02:f5:4a:85: 35:85:cf:17:5a:f4:b1:22:56:1d:cb:6e:6a:55:6a:5b:f7:b4: be:b9:2f:8f:19:04:f7:54:8f:41:1a:cf:ed:51:80:09:87:29: b1:8e:f9:98:75:df:d2:06:a5:e6:21:e3:2f:f6:1c:2e:32:e3: 44:52:46:85:6b:24:8e:c0:29:e4:a8:4f:29:f5:c6:df:d7:10: 99:24:e5:20:02:c0:51:87:22:68:80:e5:29:32:d6:29:a0:fc: 53:8a:a9:5d:fd:be:45:e1:26:96:69:35:80:5f:aa:8c:4d:24: 62:a2:ce:b5:65:f8:e3:09:15:4c:d4:e4:23:f4:7d:e0:1b:88: 46:3a:7e:58:68:e4:4f:dd:b9:05:fe:a8:0f:a3:c2:71:c0:f8: 6f:64:d3:7d:a2:48:47:a0:20:ee:e4:b5:6c:34:a9:24:56:db: cd:e6:cc:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3 RDEwMkVBQ0EwHhcNMjUxMjA2MTgxODUwWhcNMjUxMjEzMTgxODUwWjAYMRYwFAYD VQQDEw02OTM0NzM4YS1mZmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UyqwQ+O+lAWC/2egfCH+RpmEBMLAhWRNEB+1NOBBfGCGF24xKSinNuAp91o URgQj6SuK4W7RRqon4hg9IejT4DvjScjv34rEC6ThFtKkbhQjXBIJ3pbaLiF8uKn JxTD4fCBdBN9/2he6RfGo0SdbFUILtBTZ8whTObFkLstk/5YPunmVxeSASprjBQe 5TgRAmW+SiQxvHbD+O1jzS0eZ6cAE+weR+X6eOXnxuxWkdp0kUxt3b820PAB5LNq 2pSu+tNw5yxseGymGawt/z12yzMeQTrY7PhSS+FWwLqcKHTOykKwms1VVo+MxoLE kcbTepQFjEyb83VWC0aoTIdavQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOQVGbL OaMW0NupYMgwf9hS3jfmMB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTVFQS83QzYwQjlGNjNCNkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0 QlBsQktQX0Y2TXQ5RUM2c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGH26x+mixqgOf/atBM8GhtbntJIIReI+6hanWWsJPtnd2Obpp49at YWkZSzUs24ncjUkqtB37D2XDKzLYmtAeZInhlkgPYGfN5D9NIiBqZhH1vJC34wL1 SoU1hc8XWvSxIlYdy25qVWpb97S+uS+PGQT3VI9BGs/tUYAJhymxjvmYdd/SBqXm IeMv9hwuMuNEUkaFaySOwCnkqE8p9cbf1xCZJOUgAsBRhyJogOUpMtYpoPxTiqld /b5F4SaWaTWAX6qMTSRios61ZfjjCRVM1OQj9H3gG4hGOn5YaORP3bkF/qgPo8Jx wPhvZNN9okhHoCDu5LVsNKkkVtvN5syB -----END CERTIFICATE-----Generated at Sun Dec 7 08:13:30 2025 by rpki-client