This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft File: LOCE4B2sa01jSTjXbOraWWNVvVM.mft (raw, json) Hash identifier: HoxuWVwOT7PSEmSMq+aQdMUhCfAZiLmT196EhCR96aw= Subject key identifier: C9:78:ED:01:44:32:E1:DD:DC:13:D0:A4:16:EA:89:27:AB:20:05:39 Authority key identifier: 2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53 Certificate issuer: /CN=A915EA8F/serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53 Certificate serial: 02A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft Manifest number: 029D Signing time: Thu 04 Dec 2025 23:52:24 +0000 Manifest this update: Thu 04 Dec 2025 23:52:23 +0000 Manifest next update: Thu 11 Dec 2025 23:52:23 +0000 Files and hashes: 1: LOCE4B2sa01jSTjXbOraWWNVvVM.crl (hash: H6MXJodGyh2PPaxE0XWYxczI4oAq0zvnYRJ/VZIj5DE=) 2: 028640A8242B11ED9547B486C4F9AE02.roa (hash: dsbPmjXp/oYWvfHXOZsMcI3WqL8KWucAeTqSoUbpKas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 673 (0x2a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA8F, serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53 Validity Not Before: Dec 4 23:52:23 2025 GMT Not After : Dec 11 23:52:23 2025 GMT Subject: CN=69321eb7-6253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:4a:a9:cd:4a:d0:77:47:87:f6:98:69:9e: 0b:06:f2:ee:86:72:0f:79:2b:33:c7:8d:94:f8:8d: a7:43:ef:ce:e0:93:ca:81:a6:d9:9c:5e:02:14:27: c8:bc:68:b3:9e:25:06:5a:7e:b5:b5:31:a9:88:8d: 0a:9a:19:37:f1:f5:3d:51:72:e5:ca:2d:02:ff:09: 57:58:5e:30:a1:64:43:e5:13:0c:5a:c8:84:2a:30: 4c:31:e7:fb:a5:f1:a8:3c:98:21:06:95:48:49:33: f7:6d:3a:78:a6:95:02:06:2a:2e:bf:e1:ed:46:ce: e7:d1:53:fd:cc:79:99:ca:3c:60:e4:98:bd:c8:89: 61:da:db:71:34:94:e5:1c:24:ca:ae:ff:a0:cc:e2: d8:f8:bc:c2:1b:fa:d3:8f:b4:00:e5:2e:d4:f0:6e: 40:70:9a:ee:94:a8:bd:b6:f3:cd:75:6b:4a:76:d8: dd:b0:98:72:f3:9a:75:d0:04:6f:dd:df:f9:81:66: 69:4c:5b:fc:8b:90:b1:50:df:23:8f:11:e0:66:71: 57:2b:f4:63:41:2a:ea:7f:30:09:83:6d:2a:2b:bd: 47:b8:c0:0e:6e:53:85:14:98:8c:de:ae:35:66:ce: 23:6f:af:95:b8:6e:f7:bb:ea:b1:d1:c2:df:b7:0b: ab:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:78:ED:01:44:32:E1:DD:DC:13:D0:A4:16:EA:89:27:AB:20:05:39 X509v3 Authority Key Identifier: keyid:2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:11:5e:b6:43:90:4b:52:62:cc:33:ff:db:0a:ac:f4:45:07: ba:3e:48:d6:e4:ac:7b:00:8f:fc:26:7d:b6:55:5a:a5:c4:c9: c2:8a:a6:af:e5:54:d7:44:1a:02:e2:0c:d4:ec:2b:eb:53:cb: 50:87:4b:b3:76:db:90:ff:82:69:06:fb:5a:c3:67:07:64:d0: 06:97:d7:71:7b:89:12:1a:5b:b1:59:14:bd:d8:23:f0:8d:e0: 62:32:64:60:23:fd:d8:33:3b:6c:f6:c5:de:71:e8:65:16:5e: ab:3a:55:16:00:7e:a8:44:9a:16:37:d8:4d:bf:27:3c:eb:4f: e6:9e:28:3d:ce:c0:ae:98:d3:b8:73:cd:59:39:f9:a2:dc:04: 1d:a0:a1:20:78:c1:2e:f8:36:b7:34:eb:cf:80:3f:12:bc:fa: 29:45:85:33:b6:47:5b:2a:2a:ae:2e:c0:03:19:bc:ce:0c:00: 78:ba:2d:21:3d:79:df:37:95:22:c5:10:62:01:43:c0:5f:dc: 7e:ec:8b:51:c6:39:10:36:e9:89:d9:9a:3d:ca:96:13:83:7f: d5:09:f2:b6:62:67:22:8c:ec:ef:f5:3a:1e:e6:ee:47:d5:8a: 91:e2:7a:86:b6:8d:bd:4b:5d:fe:36:a0:af:33:4e:4a:da:2d: d3:98:09:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBOEYxMTAvBgNVBAUTKDJDRTA4NEUwMURBQzZCNEQ2MzQ5MzhENzZDRUFEQTU5 NjM1NUJENTMwHhcNMjUxMjA0MjM1MjIzWhcNMjUxMjExMjM1MjIzWjAYMRYwFAYD VQQDEw02OTMyMWViNy02MjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthxKqc1K0HdHh/aYaZ4LBvLuhnIPeSszx42U+I2nQ+/O4JPKgabZnF4CFCfI vGizniUGWn61tTGpiI0Kmhk38fU9UXLlyi0C/wlXWF4woWRD5RMMWsiEKjBMMef7 pfGoPJghBpVISTP3bTp4ppUCBiouv+HtRs7n0VP9zHmZyjxg5Ji9yIlh2ttxNJTl HCTKrv+gzOLY+LzCG/rTj7QA5S7U8G5AcJrulKi9tvPNdWtKdtjdsJhy85p10ARv 3d/5gWZpTFv8i5CxUN8jjxHgZnFXK/RjQSrqfzAJg20qK71HuMAOblOFFJiM3q41 Zs4jb6+VuG73u+qx0cLftwur8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMl47QFE MuHd3BPQpBbqiSerIAU5MB8GA1UdIwQYMBaAFCzghOAdrGtNY0k412zq2lljVb1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE4Ri9FM0EzNUJCNDI0 MjgxMUVEOEZEMjRDODZDNEY5QUUwMi9MT0NFNEIyc2EwMWpTVGpYYk9yYVdXTlZ2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xPQ0U0QjJzYTAxalNUalhiT3JhV1dOVnZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUE4Ri9FM0EzNUJCNDI0MjgxMUVEOEZEMjRDODZDNEY5QUUwMi9MT0NFNEIyc2Ew MWpTVGpYYk9yYVdXTlZ2Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoEV62Q5BLUmLMM//bCqz0RQe6PkjW5Kx7AI/8Jn22VVqlxMnCiqav 5VTXRBoC4gzU7CvrU8tQh0uzdtuQ/4JpBvtaw2cHZNAGl9dxe4kSGluxWRS92CPw jeBiMmRgI/3YMzts9sXecehlFl6rOlUWAH6oRJoWN9hNvyc860/mnig9zsCumNO4 c81ZOfmi3AQdoKEgeMEu+Da3NOvPgD8SvPopRYUztkdbKiquLsADGbzODAB4ui0h PXnfN5UixRBiAUPAX9x+7ItRxjkQNumJ2Zo9ypYTg3/VCfK2YmcijOzv9Toe5u5H 1YqR4nqGto29S13+NqCvM05K2i3TmAmq -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:19 2025 by rpki-client