This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft File: l0tKVlSG4EjQwXaY1yJ2cM88mac.mft (raw, json) Hash identifier: N579hCoG7AxJcE2UfWfi8WJ9tMX/5xDn8MekJz46160= Subject key identifier: A1:72:03:4F:3F:2B:64:89:1A:E2:E4:E6:E2:A5:4A:39:47:01:39:0F Authority key identifier: 97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7 Certificate issuer: /CN=A916069A/serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft Manifest number: CA Signing time: Fri 05 Dec 2025 03:46:14 +0000 Manifest this update: Fri 05 Dec 2025 03:46:14 +0000 Manifest next update: Fri 12 Dec 2025 03:46:14 +0000 Files and hashes: 1: l0tKVlSG4EjQwXaY1yJ2cM88mac.crl (hash: 5F+YLZonWgYkz802gaX40mh+cwjCH5zqTl+dhzsd5XI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916069A, serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7 Validity Not Before: Dec 5 03:46:14 2025 GMT Not After : Dec 12 03:46:14 2025 GMT Subject: CN=69325586-de57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:2e:a6:ca:27:b4:c4:bf:80:62:4d:64:02: 21:7f:2d:55:fc:aa:15:93:58:8a:03:8e:01:b0:f4: 3e:f0:6b:30:ae:6c:41:fe:85:5b:78:13:be:58:36: 50:bc:7e:fe:a4:0b:e7:0a:24:3f:aa:68:1c:2b:7b: af:ea:ab:b7:73:8c:ed:fa:53:e9:f4:31:df:7f:d3: 1e:03:3b:5d:78:7d:97:47:1b:74:d9:79:99:bc:45: d5:e1:8c:9a:49:ab:ea:9f:ac:65:36:0f:34:86:de: 38:c2:a4:cb:bf:dc:21:98:93:f4:c9:20:f8:ec:80: 05:de:b3:92:ca:4e:f1:7d:d3:f1:9a:ed:f1:a1:0a: 70:43:7c:14:ad:21:f3:fa:d2:51:d6:8d:cd:dc:88: 07:90:88:e6:41:65:b7:62:47:0c:fe:3d:48:f2:ee: 2d:20:ce:65:40:a3:17:72:82:a9:ca:16:07:2c:92: b2:d2:9f:66:23:dc:c8:39:34:45:74:1f:ba:32:fc: ba:6a:ab:0d:f8:ac:43:13:53:fe:38:e8:99:c1:8f: f5:4b:01:2c:26:13:0a:2c:dd:36:b3:df:e7:08:4c: 23:fc:56:59:45:bf:41:62:88:eb:a2:cb:53:e9:66: b3:82:d5:71:f6:88:60:99:be:64:12:f8:03:f5:57: 61:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:72:03:4F:3F:2B:64:89:1A:E2:E4:E6:E2:A5:4A:39:47:01:39:0F X509v3 Authority Key Identifier: keyid:97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:49:18:dc:ca:1e:ff:cf:e3:fb:95:57:50:9c:88:17:dd:f8: 02:aa:fc:c0:4c:50:71:d6:54:a4:25:bd:21:1a:c6:e1:5f:c8: d5:ed:e1:64:89:21:67:e4:9f:a7:a8:63:d8:1b:73:5a:7b:26: 4e:d8:16:e5:31:25:5d:fc:ac:36:ac:6f:af:f6:83:21:4f:86: 3f:fe:85:39:61:d8:21:c1:64:1b:a3:8e:d8:09:b6:87:74:2c: d0:0b:64:c1:13:cc:78:08:55:d1:5c:11:78:9b:68:19:d0:3a: 71:ce:8b:62:4d:4b:86:38:60:cb:80:ec:56:14:2b:eb:04:d4: 0a:c5:37:ba:b6:78:d6:b2:30:d4:f5:62:53:d2:59:87:af:46: 4f:45:d3:ca:62:d2:24:fa:16:ad:fb:82:cd:35:0a:7e:ac:96: bd:20:ad:bd:c2:38:1e:62:81:c6:93:46:fd:8a:f4:49:66:83: 5a:f3:7f:b1:e6:e6:71:03:40:b6:98:41:e7:fb:ac:22:aa:7f: 61:d9:bb:80:40:ae:2b:d4:16:9a:a3:33:7c:dc:d6:b9:c2:95: 9e:d0:19:59:d6:93:69:38:0c:47:ad:95:19:fa:3c:65:04:5b: 67:15:2e:47:e5:6a:87:3e:33:bd:6b:1d:3d:49:3e:db:b3:9f: b6:65:f2:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2OUExMTAvBgNVBAUTKDk3NEI0QTU2NTQ4NkUwNDhEMEMxNzY5OEQ3MjI3Njcw Q0YzQzk5QTcwHhcNMjUxMjA1MDM0NjE0WhcNMjUxMjEyMDM0NjE0WjAYMRYwFAYD VQQDEw02OTMyNTU4Ni1kZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCsupsontMS/gGJNZAIhfy1V/KoVk1iKA44BsPQ+8GswrmxB/oVbeBO+WDZQ vH7+pAvnCiQ/qmgcK3uv6qu3c4zt+lPp9DHff9MeAztdeH2XRxt02XmZvEXV4Yya Savqn6xlNg80ht44wqTLv9whmJP0ySD47IAF3rOSyk7xfdPxmu3xoQpwQ3wUrSHz +tJR1o3N3IgHkIjmQWW3YkcM/j1I8u4tIM5lQKMXcoKpyhYHLJKy0p9mI9zIOTRF dB+6Mvy6aqsN+KxDE1P+OOiZwY/1SwEsJhMKLN02s9/nCEwj/FZZRb9BYojrostT 6WazgtVx9ohgmb5kEvgD9VdhPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFyA08/ K2SJGuLk5uKlSjlHATkPMB8GA1UdIwQYMBaAFJdLSlZUhuBI0MF2mNcidnDPPJmn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDY5QS8zNkQ1RDYyQzlC RjAxMUVGODFDOTAyNjdDNEY5QUUwMi9sMHRLVmxTRzRFalF3WGFZMXlKMmNNODht YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wwdEtWbFNHNEVqUXdYYVkxeUoyY004OG1hYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDY5QS8zNkQ1RDYyQzlCRjAxMUVGODFDOTAyNjdDNEY5QUUwMi9sMHRLVmxTRzRF alF3WGFZMXlKMmNNODhtYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhSRjcyh7/z+P7lVdQnIgX3fgCqvzATFBx1lSkJb0hGsbhX8jV7eFk iSFn5J+nqGPYG3NaeyZO2BblMSVd/Kw2rG+v9oMhT4Y//oU5YdghwWQbo47YCbaH dCzQC2TBE8x4CFXRXBF4m2gZ0DpxzotiTUuGOGDLgOxWFCvrBNQKxTe6tnjWsjDU 9WJT0lmHr0ZPRdPKYtIk+hat+4LNNQp+rJa9IK29wjgeYoHGk0b9ivRJZoNa83+x 5uZxA0C2mEHn+6wiqn9h2buAQK4r1BaaozN83Na5wpWe0BlZ1pNpOAxHrZUZ+jxl BFtnFS5H5WqHPjO9ax09ST7bs5+2ZfIK -----END CERTIFICATE-----Generated at Sun Dec 7 05:19:53 2025 by rpki-client