This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft File: lMPujMByTro8sQMk-e24G6yFAyA.mft (raw, json) Hash identifier: Z8gpLoDSSnO8Gq50FRVJGpR1969rlUzx1hkfF6uN9Eo= Subject key identifier: C3:41:63:78:B2:D2:6C:2F:6D:EF:84:2A:22:EB:03:7F:76:46:4D:AF Authority key identifier: 94:C3:EE:8C:C0:72:4E:BA:3C:B1:03:24:F9:ED:B8:1B:AC:85:03:20 Certificate issuer: /CN=A9197DD5/serialNumber=94C3EE8CC0724EBA3CB10324F9EDB81BAC850320 Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft Manifest number: 0181 Signing time: Fri 05 Dec 2025 01:50:23 +0000 Manifest this update: Fri 05 Dec 2025 01:50:23 +0000 Manifest next update: Fri 12 Dec 2025 01:50:23 +0000 Files and hashes: 1: lMPujMByTro8sQMk-e24G6yFAyA.crl (hash: zSF/mKMkzXK2wPo7i1ChwzeVn7KvwTieYVSyoOZ5dgY=) 2: 5E3ADA8C81CF11EE9AB1F360C4F9AE02.roa (hash: e7kJQJGd8ulGzCM84rmdu0H+EUZqUKICTbwDwRB9ofY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.crl rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197DD5, serialNumber=94C3EE8CC0724EBA3CB10324F9EDB81BAC850320 Validity Not Before: Dec 5 01:50:23 2025 GMT Not After : Dec 12 01:50:23 2025 GMT Subject: CN=69323a5f-26b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2e:66:d9:6a:b4:e9:ac:11:77:d5:d1:f6:a7: d0:0f:25:c4:7a:6f:d8:b4:53:28:4a:10:69:00:76: 58:54:1e:56:d6:a7:6d:01:0a:37:41:ac:e9:57:e1: 97:a6:77:04:24:ef:7f:b0:60:96:91:86:f3:6e:c6: f4:9a:4c:5f:ce:a0:62:c7:64:4d:9c:f3:3a:4a:e6: d0:cd:72:6b:b2:d3:cc:a8:50:cb:c8:dd:f8:a1:3b: 38:d0:b6:fd:88:cc:b8:97:c7:8d:38:bf:f3:6b:99: 51:af:fa:0b:da:ec:58:d7:b2:38:a9:8f:6d:b6:8c: 0f:6d:98:ac:ba:d8:5b:24:dd:b5:97:32:66:b1:d4: a7:5c:41:e0:32:85:64:76:3e:97:30:56:10:7b:6a: e4:ae:33:97:0e:04:09:6c:c2:e1:e7:6e:27:33:6c: 9d:df:5d:0a:0e:6b:35:5c:13:43:1e:13:38:d0:f6: e9:7f:a2:66:4b:40:84:41:d3:11:f6:d3:f9:f9:f2: 73:29:88:6d:24:ad:78:69:91:6a:96:63:74:19:ba: cd:fc:d4:29:08:03:89:5a:29:58:e9:ca:ae:b3:72: 10:97:d8:8e:38:dd:d3:98:d8:15:0b:fe:da:dd:40: 62:6f:33:b2:5b:22:9c:75:f9:fb:08:ae:9e:de:4f: 72:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:41:63:78:B2:D2:6C:2F:6D:EF:84:2A:22:EB:03:7F:76:46:4D:AF X509v3 Authority Key Identifier: keyid:94:C3:EE:8C:C0:72:4E:BA:3C:B1:03:24:F9:ED:B8:1B:AC:85:03:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:e3:aa:db:0a:e8:c2:49:f6:7f:83:00:e6:8f:e2:66:f4:d0: 4c:ab:41:9a:dc:6e:43:d7:83:15:af:00:9d:42:70:89:b5:14: 60:7e:66:e7:67:ba:22:fe:71:6e:76:3c:03:c8:14:84:90:86: 7c:91:c4:5e:0e:90:fe:5c:95:b6:f8:09:07:c3:0a:97:2c:d6: 7f:98:15:00:51:94:1e:a4:c8:53:ee:2f:4c:cb:98:8c:ef:3c: 6a:0a:82:52:8d:36:65:71:98:6c:46:8e:4a:35:22:87:3f:4d: 15:60:7a:fd:ec:d3:ed:64:8e:1e:3a:b1:f7:04:4c:6b:ad:78: 14:c4:c8:96:4e:f8:18:a0:2b:67:56:a3:a2:23:b3:11:11:e5: d3:ac:79:fc:73:ec:0e:98:d2:0a:20:d2:f2:19:4b:3b:43:95: a3:03:71:1e:ed:4e:0a:42:68:74:c6:a0:93:98:b5:09:c1:71: 0f:22:32:99:bf:cf:8c:8c:7f:c4:bd:bd:50:fa:93:c2:dc:83: 5d:0c:b9:27:0f:f3:09:17:01:cb:0e:ea:41:5b:00:cf:8f:9a: ed:05:78:f9:3e:36:20:23:f7:dd:e8:c0:4e:89:c1:5e:5d:52: cf:e8:87:c6:e2:84:92:e8:66:62:25:02:d0:9c:41:a3:52:a0: 71:db:7c:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdERDUxMTAvBgNVBAUTKDk0QzNFRThDQzA3MjRFQkEzQ0IxMDMyNEY5RURCODFC QUM4NTAzMjAwHhcNMjUxMjA1MDE1MDIzWhcNMjUxMjEyMDE1MDIzWjAYMRYwFAYD VQQDEw02OTMyM2E1Zi0yNmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwS5m2Wq06awRd9XR9qfQDyXEem/YtFMoShBpAHZYVB5W1qdtAQo3QazpV+GX pncEJO9/sGCWkYbzbsb0mkxfzqBix2RNnPM6SubQzXJrstPMqFDLyN34oTs40Lb9 iMy4l8eNOL/za5lRr/oL2uxY17I4qY9ttowPbZisuthbJN21lzJmsdSnXEHgMoVk dj6XMFYQe2rkrjOXDgQJbMLh524nM2yd310KDms1XBNDHhM40Pbpf6JmS0CEQdMR 9tP5+fJzKYhtJK14aZFqlmN0GbrN/NQpCAOJWilY6cqus3IQl9iOON3TmNgVC/7a 3UBibzOyWyKcdfn7CK6e3k9yDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNBY3iy 0mwvbe+EKiLrA392Rk2vMB8GA1UdIwQYMBaAFJTD7ozAck66PLEDJPntuBushQMg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0RENS8xNkQ0QjBEQzgx Q0YxMUVFQkMxNTJGNjBDNEY5QUUwMi9sTVB1ak1CeVRybzhzUU1rLWUyNEc2eUZB eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNUHVqTUJ5VHJvOHNRTWstZTI0RzZ5RkF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0RENS8xNkQ0QjBEQzgxQ0YxMUVFQkMxNTJGNjBDNEY5QUUwMi9sTVB1ak1CeVRy bzhzUU1rLWUyNEc2eUZBeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC46rbCujCSfZ/gwDmj+Jm9NBMq0Ga3G5D14MVrwCdQnCJtRRgfmbn Z7oi/nFudjwDyBSEkIZ8kcReDpD+XJW2+AkHwwqXLNZ/mBUAUZQepMhT7i9My5iM 7zxqCoJSjTZlcZhsRo5KNSKHP00VYHr97NPtZI4eOrH3BExrrXgUxMiWTvgYoCtn VqOiI7MREeXTrHn8c+wOmNIKINLyGUs7Q5WjA3Ee7U4KQmh0xqCTmLUJwXEPIjKZ v8+MjH/Evb1Q+pPC3INdDLknD/MJFwHLDupBWwDPj5rtBXj5PjYgI/fd6MBOicFe XVLP6IfG4oSS6GZiJQLQnEGjUqBx23xk -----END CERTIFICATE-----Generated at Sat Dec 6 20:59:33 2025 by rpki-client