This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json) Hash identifier: Ndh5qFcprhxAZSM43qaaciJ0Gi3ZC2GjuXMGOh2YoO8= Subject key identifier: 83:EE:EC:54:31:8D:34:C0:4E:FA:F5:C7:8B:01:87:11:E8:0D:E7:CE Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Certificate serial: 0C7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft Manifest number: 0C74 Signing time: Sat 20 Dec 2025 18:09:14 +0000 Manifest this update: Sat 20 Dec 2025 18:09:14 +0000 Manifest next update: Sat 27 Dec 2025 18:09:14 +0000 Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: jQjo/W3cPzhKhVrFTx0vBtEvNIZigaaJGd3pkVdZO9Y=) 2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: DL4w0jdh6arH3ZaUufUuEs12A9UV6IxUUOEelp+erPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3196 (0xc7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Validity Not Before: Dec 20 18:09:14 2025 GMT Not After : Dec 27 18:09:14 2025 GMT Subject: CN=6946e64a-1d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:56:5d:05:29:c8:73:59:db:f0:d3:14:16: 29:69:e7:31:11:5e:4f:f1:d8:6e:52:ed:f9:48:8d: da:f2:f4:18:dc:81:38:7a:66:d2:76:10:be:e2:27: ed:b9:6e:c5:2c:28:b3:29:fc:63:3e:ec:24:50:b3: c2:94:56:6f:65:84:d4:2f:5b:59:5d:ab:ed:c0:c7: fe:87:ea:13:d5:44:4d:78:60:31:1e:7b:f4:41:8b: d0:20:df:9e:30:13:df:71:d6:da:a9:a3:ea:3c:78: f2:de:0b:86:e4:b5:25:d1:1d:9a:d2:21:be:71:f6: 4c:74:2a:38:87:d8:fa:e5:8b:19:03:73:42:d6:d8: 01:ac:c8:14:64:3f:37:34:d6:dd:d0:04:b8:99:2b: 78:a1:c1:bd:2e:04:fa:bc:74:a6:9e:ab:63:55:80: 17:59:38:47:a9:2f:ca:c4:b8:ac:52:6f:f4:bd:68: 44:c4:a7:e3:c6:e3:de:26:24:2b:eb:6d:92:56:20: 03:e4:76:37:4b:5f:e7:3f:98:f7:04:d0:4c:f5:2f: 2d:a6:c0:13:a0:2b:12:b9:13:52:77:d7:fc:e1:26: ca:1a:ab:5f:e3:8a:e8:63:75:ef:db:35:50:8a:e6: bf:24:ea:2d:31:3e:c5:f1:c9:ed:e8:39:72:4d:d3: 3c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EE:EC:54:31:8D:34:C0:4E:FA:F5:C7:8B:01:87:11:E8:0D:E7:CE X509v3 Authority Key Identifier: keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:e7:ce:bc:f4:ea:95:d8:85:e8:ed:28:0b:91:99:22:73:32: ce:24:68:9b:b0:dd:b6:eb:68:d4:46:e6:86:f8:d7:bb:d0:c6: 01:81:50:18:be:71:65:ac:56:c6:77:66:2f:2b:3c:2b:91:19: fc:e2:bc:d3:f9:a4:64:e4:75:53:ab:d0:5c:72:96:c3:e5:97: a4:fc:9c:28:9e:de:21:45:4e:35:8d:41:b5:93:0c:01:59:6e: a4:50:6f:e1:8f:c4:71:c6:8a:b7:35:61:b4:ad:ef:fc:29:69: 70:bf:ae:5b:2b:de:f6:d2:6b:0f:5c:d1:e2:f4:b3:cf:3a:52: 31:66:37:11:ce:f9:54:87:de:9e:bc:df:6e:91:cd:8e:40:07: b8:92:3d:5e:e6:22:41:7a:09:c8:2a:b1:bf:92:9c:69:de:b1: f4:c9:8d:20:3d:bd:c7:68:77:5e:9f:83:39:d2:03:f3:03:9d: 58:28:58:79:a8:a5:94:ba:a4:23:cc:f7:90:db:0a:73:ec:fa: e1:09:e9:39:01:34:e8:9a:45:f7:d7:f4:00:6f:57:e9:4f:7b: ff:af:28:21:31:b3:ff:2b:6a:03:c3:99:74:a9:0c:a0:c6:0a: eb:fd:d7:47:e2:49:7c:aa:bb:b8:2f:4a:5a:8b:f0:20:aa:b9: 2c:06:b2:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0OTYxMTAvBgNVBAUTKDJGN0ExQzFERDI3RUE3ODE1OENFMjFBOTREQkJGQjkw NzJGQjE3MzQwHhcNMjUxMjIwMTgwOTE0WhcNMjUxMjI3MTgwOTE0WjAYMRYwFAYD VQQDDA02OTQ2ZTY0YS0xZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFpWXQUpyHNZ2/DTFBYpaecxEV5P8dhuUu35SI3a8vQY3IE4embSdhC+4ift uW7FLCizKfxjPuwkULPClFZvZYTUL1tZXavtwMf+h+oT1URNeGAxHnv0QYvQIN+e MBPfcdbaqaPqPHjy3guG5LUl0R2a0iG+cfZMdCo4h9j65YsZA3NC1tgBrMgUZD83 NNbd0AS4mSt4ocG9LgT6vHSmnqtjVYAXWThHqS/KxLisUm/0vWhExKfjxuPeJiQr 622SViAD5HY3S1/nP5j3BNBM9S8tpsAToCsSuRNSd9f84SbKGqtf44roY3Xv2zVQ iua/JOotMT7F8cnt6DlyTdM8PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPu7FQx jTTATvr1x4sBhxHoDefOMB8GA1UdIwQYMBaAFC96HB3SfqeBWM4hqU27+5By+xc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzQ5Ni8yMzQxQTU2NjBG NkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0Rll6aUdwVGJ2N2tITDdG elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzb2NIZEotcDRGWXppR3BUYnY3a0hMN0Z6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzQ5Ni8yMzQxQTU2NjBGNkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0 Rll6aUdwVGJ2N2tITDdGelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA58689OqV2IXo7SgLkZkiczLOJGibsN2262jURuaG+Ne70MYBgVAY vnFlrFbGd2YvKzwrkRn84rzT+aRk5HVTq9BccpbD5Zek/Jwont4hRU41jUG1kwwB WW6kUG/hj8Rxxoq3NWG0re/8KWlwv65bK9720msPXNHi9LPPOlIxZjcRzvlUh96e vN9ukc2OQAe4kj1e5iJBegnIKrG/kpxp3rH0yY0gPb3HaHden4M50gPzA51YKFh5 qKWUuqQjzPeQ2wpz7PrhCek5ATTomkX31/QAb1fpT3v/ryghMbP/K2oDw5l0qQyg xgrr/ddH4kl8qru4L0pai/AgqrksBrJD -----END CERTIFICATE-----Generated at Mon Dec 22 14:30:56 2025 by rpki-client