This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json) Hash identifier: QMX5njSXmGUA/3ZE84uVtH7YDUaXlMe1ar8qOA1C6Oo= Subject key identifier: CE:F0:8F:9F:61:AB:25:1C:47:6E:05:62:39:25:B6:C0:68:BB:19:E5 Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Certificate serial: 0C75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft Manifest number: 0C6D Signing time: Sat 06 Dec 2025 17:53:54 +0000 Manifest this update: Sat 06 Dec 2025 17:53:53 +0000 Manifest next update: Sat 13 Dec 2025 17:53:53 +0000 Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: dUReFjf0DOhZIkqvkUQ4pMHE7lNzr85Mbs5AQMas1sI=) 2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: DL4w0jdh6arH3ZaUufUuEs12A9UV6IxUUOEelp+erPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3189 (0xc75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Validity Not Before: Dec 6 17:53:53 2025 GMT Not After : Dec 13 17:53:53 2025 GMT Subject: CN=69346db2-09eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:f9:a2:62:40:17:ed:e9:69:8f:03:d1:31: 0d:c6:cc:f1:09:70:fa:f0:dd:85:dd:ab:c7:9f:20: 58:9f:7e:f9:9d:49:7a:2f:96:21:59:6e:97:5f:e9: b0:73:bf:db:b4:fa:fe:69:9f:0d:0f:f9:12:46:e2: 65:21:91:32:d1:c3:41:b2:cf:95:31:3c:80:37:d8: 23:90:ff:cb:c5:bd:4c:fd:d6:a5:58:19:ff:8b:61: 81:60:1f:d0:f4:de:a2:13:0e:2a:f9:21:67:7e:66: d7:f2:c8:a2:81:bd:c5:b9:62:6b:e5:6a:21:50:fb: af:bc:96:50:a4:66:7e:36:d8:96:12:8c:4d:af:e8: 7c:e0:6e:d7:f8:aa:46:35:9f:4c:82:74:f0:4c:10: 61:f5:fe:74:d8:53:b7:43:c0:13:8d:2d:95:bd:2d: 2d:1b:a6:16:a7:e4:05:66:1c:76:6b:89:76:3c:3e: 46:11:f8:d7:8d:6b:f5:87:6c:ec:57:87:9f:75:ae: 28:49:c3:75:8c:1c:0c:4b:5d:dd:51:b6:43:75:91: 50:45:4c:7a:14:b1:03:70:c1:d2:b9:9f:e5:85:67: 5b:3d:27:f0:b6:4a:7f:40:b3:b9:39:bb:e9:73:be: 2d:8e:2a:53:65:94:f6:60:31:4b:78:c1:7e:af:46: ad:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F0:8F:9F:61:AB:25:1C:47:6E:05:62:39:25:B6:C0:68:BB:19:E5 X509v3 Authority Key Identifier: keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:c9:02:54:05:93:c9:6a:b1:75:07:a1:30:47:ee:4e:e7:6a: 4d:d3:45:b2:58:d9:13:e8:71:63:f4:c6:94:5e:63:e8:3a:b2: 8d:67:34:43:33:71:74:11:72:e2:0a:91:c3:0d:3d:54:c9:9c: a1:49:c8:1b:4e:2c:53:89:b8:7e:4d:ab:fb:aa:f2:f6:00:95: 99:72:60:4c:c6:63:08:d6:7d:c8:b6:a9:23:93:70:57:7a:a1: 15:2e:85:29:47:b8:76:1d:5c:17:d4:87:75:f0:24:ab:fc:65: 09:9b:b1:40:b9:3e:09:75:7f:3f:39:d4:f6:0d:33:ae:39:2e: 87:82:ec:94:e4:81:ea:53:65:68:a3:98:62:dc:fc:e1:00:9f: f4:bd:d0:3c:86:27:08:7b:a7:eb:e8:bd:76:92:03:eb:cd:50: 7b:42:70:ff:45:b0:51:b3:8d:dc:80:16:0d:cb:52:67:ce:27: a5:a6:64:03:5b:b7:38:49:10:6d:21:55:6a:d3:b6:e0:3c:f1: 22:4d:40:01:45:ea:6b:73:b0:8d:73:a7:ce:6f:a4:75:a9:99: 2c:06:ae:75:40:45:9b:98:f8:a5:f6:f8:31:65:23:7f:2c:cb: ac:53:43:58:9d:14:28:31:b9:97:74:9f:dc:4f:79:f4:1d:02: 17:16:94:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0OTYxMTAvBgNVBAUTKDJGN0ExQzFERDI3RUE3ODE1OENFMjFBOTREQkJGQjkw NzJGQjE3MzQwHhcNMjUxMjA2MTc1MzUzWhcNMjUxMjEzMTc1MzUzWjAYMRYwFAYD VQQDEw02OTM0NmRiMi0wOWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdn5omJAF+3paY8D0TENxszxCXD68N2F3avHnyBYn375nUl6L5YhWW6XX+mw c7/btPr+aZ8ND/kSRuJlIZEy0cNBss+VMTyAN9gjkP/Lxb1M/dalWBn/i2GBYB/Q 9N6iEw4q+SFnfmbX8siigb3FuWJr5WohUPuvvJZQpGZ+NtiWEoxNr+h84G7X+KpG NZ9MgnTwTBBh9f502FO3Q8ATjS2VvS0tG6YWp+QFZhx2a4l2PD5GEfjXjWv1h2zs V4efda4oScN1jBwMS13dUbZDdZFQRUx6FLEDcMHSuZ/lhWdbPSfwtkp/QLO5Obvp c74tjipTZZT2YDFLeMF+r0atxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7wj59h qyUcR24FYjkltsBouxnlMB8GA1UdIwQYMBaAFC96HB3SfqeBWM4hqU27+5By+xc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzQ5Ni8yMzQxQTU2NjBG NkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0Rll6aUdwVGJ2N2tITDdG elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzb2NIZEotcDRGWXppR3BUYnY3a0hMN0Z6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzQ5Ni8yMzQxQTU2NjBGNkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0 Rll6aUdwVGJ2N2tITDdGelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIyQJUBZPJarF1B6EwR+5O52pN00WyWNkT6HFj9MaUXmPoOrKNZzRD M3F0EXLiCpHDDT1UyZyhScgbTixTibh+Tav7qvL2AJWZcmBMxmMI1n3Itqkjk3BX eqEVLoUpR7h2HVwX1Id18CSr/GUJm7FAuT4JdX8/OdT2DTOuOS6HguyU5IHqU2Vo o5hi3PzhAJ/0vdA8hicIe6fr6L12kgPrzVB7QnD/RbBRs43cgBYNy1JnzielpmQD W7c4SRBtIVVq07bgPPEiTUABReprc7CNc6fOb6R1qZksBq51QEWbmPil9vgxZSN/ LMusU0NYnRQoMbmXdJ/cT3n0HQIXFpTC -----END CERTIFICATE-----Generated at Sun Dec 7 02:38:14 2025 by rpki-client