This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft File: LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft (raw, json) Hash identifier: i7WYEoBFEiHD3+Q+H2hjX/apQPp0LFxSW6Zdo/jQTu8= Subject key identifier: FC:1E:D8:57:2A:DA:E4:72:EA:F4:E1:75:A9:2F:94:8A:52:44:47:6C Authority key identifier: 2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54 Certificate issuer: /CN=A916CDDF/serialNumber=2E5079BE856A5A6637856C937154245D987FA754 Certificate serial: 0C64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft Manifest number: 1485 Signing time: Thu 04 Dec 2025 17:59:29 +0000 Manifest this update: Thu 04 Dec 2025 17:59:28 +0000 Manifest next update: Thu 11 Dec 2025 17:59:28 +0000 Files and hashes: 1: LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl (hash: DhRYkQIj08dZwVFUZLpKJOCXjYD3VYpPaSVqThkE3E8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3172 (0xc64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=2E5079BE856A5A6637856C937154245D987FA754 Validity Not Before: Dec 4 17:59:28 2025 GMT Not After : Dec 11 17:59:28 2025 GMT Subject: CN=6931cc01-e8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:d8:2d:1e:d3:f4:f2:18:b1:85:31:98:56: 3e:5b:f8:23:07:1e:0f:b8:bd:96:20:29:da:dd:f2: bb:d2:9a:6b:ed:0d:85:8c:e3:d7:ad:10:97:29:65: 58:b9:ad:49:3b:20:02:95:29:28:a5:9d:11:e7:04: 9e:7b:58:d5:d0:e6:3f:26:f4:2b:bb:b8:9e:b8:c4: ad:10:c2:20:e6:ef:54:df:c6:c4:60:8a:07:98:24: 32:a6:fc:e4:77:87:68:62:b1:a6:d1:15:3d:bc:ed: cc:37:f9:90:0c:e8:b8:6d:71:c7:51:12:f0:e1:7d: 7e:6f:75:6a:17:67:a4:95:85:b3:61:0b:49:26:b8: 37:dd:58:1c:86:e5:c0:08:a5:53:b6:f9:3d:09:1a: 5e:54:f6:8d:4b:02:9b:5c:e6:c4:2b:b9:d9:14:62: fa:98:76:c5:5a:1d:34:28:8e:ff:6d:e4:14:0c:3f: e0:10:ec:9b:2c:a2:df:87:40:ec:75:3b:41:4a:e8: 65:3d:ae:cc:a5:d0:ca:5f:49:2b:8d:47:5d:90:3d: ce:a9:8d:09:be:94:ff:b7:5b:cb:5f:a1:f5:87:dd: 78:7a:61:73:59:aa:f6:9c:87:a0:83:0e:76:82:e2: e8:d1:b4:42:91:c5:90:4f:fa:f7:31:e5:a4:ab:d5: 04:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1E:D8:57:2A:DA:E4:72:EA:F4:E1:75:A9:2F:94:8A:52:44:47:6C X509v3 Authority Key Identifier: keyid:2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:1c:32:cf:6b:b5:4d:ea:36:44:e6:d5:70:9d:23:c3:06:bf: 5d:c9:38:67:54:f1:08:70:46:af:42:bc:1d:35:4a:e1:e1:40: a9:ef:94:62:7d:8e:c3:14:39:e4:be:99:ec:be:7e:9f:0b:df: a6:13:a7:13:73:f6:64:82:95:91:63:a7:db:45:bd:c5:69:50: 9a:ca:43:f2:70:a6:c4:5c:b6:d7:34:20:2d:4a:05:70:a1:f0: ef:4c:57:8a:79:56:37:3b:ab:fc:58:d6:d0:2f:a9:75:e6:0c: c8:8b:58:53:c3:1d:79:b6:04:a4:9d:25:f9:55:ca:40:8a:21: af:f6:30:b2:d6:8c:43:75:c5:03:8e:7c:b6:1a:fc:e1:92:f3: 77:65:b3:89:4e:98:bd:94:84:c7:b2:91:7e:1b:f7:c7:79:48: 1e:75:64:74:f4:35:22:83:37:ca:4c:b7:82:0f:7e:05:70:ef: a6:3b:ed:0f:22:63:c5:e5:e0:f8:54:38:c7:5e:af:2f:8f:de: 91:81:5a:0c:63:c8:d1:de:cb:30:f8:ad:24:cf:20:1e:8f:af: ba:2b:db:32:8d:40:e3:f5:34:00:5e:e3:11:31:4a:72:13:96: cb:9f:be:cd:a4:74:21:28:23:7e:ac:96:b7:8a:0c:0f:b2:ec: 5c:c4:d0:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDJFNTA3OUJFODU2QTVBNjYzNzg1NkM5MzcxNTQyNDVE OTg3RkE3NTQwHhcNMjUxMjA0MTc1OTI4WhcNMjUxMjExMTc1OTI4WjAYMRYwFAYD VQQDEw02OTMxY2MwMS1lOGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGnYLR7T9PIYsYUxmFY+W/gjBx4PuL2WICna3fK70ppr7Q2FjOPXrRCXKWVY ua1JOyAClSkopZ0R5wSee1jV0OY/JvQru7ieuMStEMIg5u9U38bEYIoHmCQypvzk d4doYrGm0RU9vO3MN/mQDOi4bXHHURLw4X1+b3VqF2eklYWzYQtJJrg33VgchuXA CKVTtvk9CRpeVPaNSwKbXObEK7nZFGL6mHbFWh00KI7/beQUDD/gEOybLKLfh0Ds dTtBSuhlPa7MpdDKX0krjUddkD3OqY0JvpT/t1vLX6H1h914emFzWar2nIeggw52 guLo0bRCkcWQT/r3MeWkq9UE2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwe2Fcq 2uRy6vThdakvlIpSREdsMB8GA1UdIwQYMBaAFC5Qeb6FalpmN4Vsk3FUJF2Yf6dU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdtWTNoV3lUY1ZRa1haaF9w MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsQjV2b1ZxV21ZM2hXeVRjVlFrWFpoX3AxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdt WTNoV3lUY1ZRa1haaF9wMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSHDLPa7VN6jZE5tVwnSPDBr9dyThnVPEIcEavQrwdNUrh4UCp75Ri fY7DFDnkvpnsvn6fC9+mE6cTc/ZkgpWRY6fbRb3FaVCaykPycKbEXLbXNCAtSgVw ofDvTFeKeVY3O6v8WNbQL6l15gzIi1hTwx15tgSknSX5VcpAiiGv9jCy1oxDdcUD jny2GvzhkvN3ZbOJTpi9lITHspF+G/fHeUgedWR09DUigzfKTLeCD34FcO+mO+0P ImPF5eD4VDjHXq8vj96RgVoMY8jR3ssw+K0kzyAej6+6K9syjUDj9TQAXuMRMUpy E5bLn77NpHQhKCN+rJa3igwPsuxcxNAQ -----END CERTIFICATE-----Generated at Sat Dec 6 13:28:00 2025 by rpki-client