This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json) Hash identifier: dGzK7QVW0rBQ60bXjdiLt4TInN8S51nTxC+HdvedRgA= Subject key identifier: A2:9A:10:8A:87:83:98:89:1D:00:53:BE:7B:C4:0B:81:F0:35:45:C4 Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Certificate serial: 0CCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft Manifest number: 0CB3 Signing time: Thu 04 Dec 2025 17:50:47 +0000 Manifest this update: Thu 04 Dec 2025 17:50:46 +0000 Manifest next update: Thu 11 Dec 2025 17:50:46 +0000 Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: nBDQJTCfNEuspjvKdL6hz5CnDpgjYJnJEuHHxveyDsM=) 2: FB170730324211EFA9B5F949C4F9AE02.roa (hash: yYm1dMIQ816DxBHWaOlKO9yBaX3TNCa5zS93/rSk5Bg=) 3: B430443A324211EFB14FB614C4F9AE02.roa (hash: mSmKdhP1dOumHc/59nE808KhJQxB4mVR7KUP5N0koRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3277 (0xccd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Validity Not Before: Dec 4 17:50:46 2025 GMT Not After : Dec 11 17:50:46 2025 GMT Subject: CN=6931c9f6-a72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:39:1e:62:65:65:b6:dc:6e:f4:e5:52:e0:de: 28:ce:29:0c:2e:fe:b1:a5:b9:8c:52:b5:96:ef:97: f9:68:42:f1:3c:0b:d7:11:5c:eb:f9:3d:a6:c9:00: b9:55:54:ca:30:4e:77:d7:b7:7a:40:61:3e:07:5b: 4c:a1:47:6e:73:2a:8b:67:2e:19:f8:f3:e6:1a:70: 9c:7a:9c:8f:eb:55:1b:48:ab:9c:10:6c:0c:df:de: dc:e7:ca:dd:e6:1e:84:38:4c:8f:da:4a:c5:5d:a8: 78:32:e3:d6:72:fa:01:c9:da:74:18:29:29:96:dc: 9a:bd:87:84:74:81:94:c0:c6:3e:2b:73:7c:9e:23: cd:32:88:36:fb:f5:2e:2b:7a:be:75:f6:1e:23:f7: 94:a4:dd:95:4c:57:2f:0f:e9:23:48:ca:ab:51:3e: fc:70:af:07:0b:5e:9b:ea:53:d1:11:7d:da:ac:9b: db:ed:9b:d4:f0:da:d6:37:d2:73:20:38:03:5e:f9: 75:6e:be:59:ee:9b:6e:f6:7e:b7:b9:35:ed:61:93: 12:7a:d0:72:59:0b:82:08:c2:14:d1:dc:7c:da:28: db:6c:28:35:81:4f:a1:9e:99:11:4e:c9:0c:cf:fd: e0:b8:a6:e2:76:aa:ab:84:4b:2f:2f:f0:a2:18:68: 1f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9A:10:8A:87:83:98:89:1D:00:53:BE:7B:C4:0B:81:F0:35:45:C4 X509v3 Authority Key Identifier: keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:54:fd:7a:22:72:e3:e3:de:7d:81:4d:c7:02:9c:38:c7:2b: e9:20:a4:6b:78:f7:b2:67:be:d5:45:56:bd:cd:df:3b:5a:15: 7a:31:e4:28:f9:4b:8b:2c:8c:49:1b:40:5b:1d:05:a8:4c:66: d7:c0:ce:ad:1a:8f:38:fd:96:4f:a2:f3:bd:f3:3d:55:47:c7: 8a:79:50:55:15:b2:ba:cd:39:c6:1d:f0:42:73:06:39:77:8a: 35:4d:61:0a:9e:e7:1f:ee:cc:31:80:94:75:36:13:35:4a:fe: d3:12:eb:88:65:f9:da:f6:ee:89:a4:28:7f:9c:b2:1d:52:4b: e2:10:29:ff:fa:04:2b:5c:aa:f0:0a:9e:8e:3f:d8:87:c4:d6: 36:dc:8e:87:2d:e1:81:cf:ac:61:5f:87:a7:30:19:ca:71:4c: f6:67:1c:c8:3f:bb:da:39:bc:34:8f:c2:88:00:b2:39:45:c5: ed:a3:6b:51:c3:95:58:fb:35:18:e4:1c:5a:22:82:40:ae:07: a0:4c:7c:4b:d1:3b:95:68:1f:5a:b7:80:83:27:2e:36:1e:07: e4:f1:95:a1:83:b2:22:36:16:d5:b2:03:bb:7b:2a:19:9f:27: c8:5e:ec:b0:8f:98:05:cb:e7:cc:cf:b5:d1:cc:2c:ad:5d:58: 5c:7a:df:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE QjczNDc1MzEwHhcNMjUxMjA0MTc1MDQ2WhcNMjUxMjExMTc1MDQ2WjAYMRYwFAYD VQQDEw02OTMxYzlmNi1hNzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzkeYmVlttxu9OVS4N4ozikMLv6xpbmMUrWW75f5aELxPAvXEVzr+T2myQC5 VVTKME5317d6QGE+B1tMoUducyqLZy4Z+PPmGnCcepyP61UbSKucEGwM397c58rd 5h6EOEyP2krFXah4MuPWcvoBydp0GCkpltyavYeEdIGUwMY+K3N8niPNMog2+/Uu K3q+dfYeI/eUpN2VTFcvD+kjSMqrUT78cK8HC16b6lPREX3arJvb7ZvU8NrWN9Jz IDgDXvl1br5Z7ptu9n63uTXtYZMSetByWQuCCMIU0dx82ijbbCg1gU+hnpkRTskM z/3guKbidqqrhEsvL/CiGGgfDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKaEIqH g5iJHQBTvnvEC4HwNUXEMB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2 RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTMwOC9DNzdGN0ExMjA2RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4 TFpFRUtBaThyZnpiYzBkVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcVP16InLj4959gU3HApw4xyvpIKRrePeyZ77VRVa9zd87WhV6MeQo +UuLLIxJG0BbHQWoTGbXwM6tGo84/ZZPovO98z1VR8eKeVBVFbK6zTnGHfBCcwY5 d4o1TWEKnucf7swxgJR1NhM1Sv7TEuuIZfna9u6JpCh/nLIdUkviECn/+gQrXKrw Cp6OP9iHxNY23I6HLeGBz6xhX4enMBnKcUz2ZxzIP7vaObw0j8KIALI5RcXto2tR w5VY+zUY5BxaIoJArgegTHxL0TuVaB9at4CDJy42Hgfk8ZWhg7IiNhbVsgO7eyoZ nyfIXuywj5gFy+fMz7XRzCytXVhcet9S -----END CERTIFICATE-----Generated at Sat Dec 6 17:43:43 2025 by rpki-client