This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft File: lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft (raw, json) Hash identifier: HTFLcyCbpdnij6XHIIaTDvTzs0cr33SQXSelach4pn0= Subject key identifier: ED:05:2F:66:5E:56:80:0F:9A:79:22:48:85:EE:E0:71:17:AD:8F:9F Authority key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 Certificate issuer: /CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft Manifest number: 0236 Signing time: Fri 05 Dec 2025 00:19:24 +0000 Manifest this update: Fri 05 Dec 2025 00:19:24 +0000 Manifest next update: Fri 12 Dec 2025 00:19:24 +0000 Files and hashes: 1: lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl (hash: Taf0FgFc732fgUdx2IwE+J7/tb05KlSyOtDtnos2lVo=) 2: 0DCBAC3863C111EE9A8AA77AC4F9AE02.roa (hash: inCWlFg4eyi3SZb4mhg7QgWhnaX3zI3I9iGqmhoauLc=) 3: 9ADB02A27F4E11EDB22F3582C4F9AE02.roa (hash: 9Oyy54xhiWuTllhGlORwlpgALp6JCiYOJTYLu9JoBj0=) 4: 5420A28C7F5211ED8A16EF81C4F9AE02.roa (hash: 5EKiWHDPeMiKNhe7uJ6GnZoz2bb2Ob3eC5qrY4BOvLk=) 5: 912586FA7F4F11ED96FDE369C4F9AE02.roa (hash: vg/uug9ogWENghuoz8JvK8TWhFT7WTN1jNAJcLX1AUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3E3F, serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Validity Not Before: Dec 5 00:19:24 2025 GMT Not After : Dec 12 00:19:24 2025 GMT Subject: CN=6932250c-a716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:9f:12:b3:5f:f8:ba:05:44:1d:8f:03:7a: f2:15:87:8f:ed:96:02:ba:00:ec:44:ce:5d:b6:36: 58:cc:1d:52:c7:aa:ed:40:85:79:0b:08:c4:6e:9c: 35:ca:f0:1f:b3:86:71:b0:30:16:25:bc:a0:bf:c3: 53:01:7b:b1:2e:19:77:b4:ff:a9:d8:ea:bf:b8:a3: 59:20:c9:f7:31:97:5a:07:8a:a1:92:30:7c:ae:3a: c9:3f:7b:9c:58:96:28:9b:e5:07:b5:92:2e:09:45: 5c:36:fd:3e:36:1a:d8:00:18:c4:ec:1c:58:24:f9: 89:55:28:ed:fa:68:ec:b5:45:08:92:43:07:7b:ad: da:08:6f:7d:22:de:ac:bd:2b:3c:91:c0:85:9c:e1: e1:2d:93:25:ce:93:51:dc:4d:38:a1:3a:4a:13:ff: 75:aa:29:f9:42:ac:1e:fc:a2:a7:77:e1:80:11:31: a5:4e:cc:90:9a:8a:06:b0:da:eb:ae:b8:f3:b4:1c: 88:e7:92:53:a2:10:01:41:76:a6:ce:23:e0:76:45: f7:c3:19:07:95:ee:fe:7a:65:8c:b8:4a:74:eb:09: 76:62:ca:15:a6:99:92:23:d1:77:4e:ad:28:89:32: a7:73:51:33:6c:8b:42:97:ee:ed:2e:46:a7:76:1c: fb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:05:2F:66:5E:56:80:0F:9A:79:22:48:85:EE:E0:71:17:AD:8F:9F X509v3 Authority Key Identifier: keyid:94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:5f:e6:de:89:35:46:e3:bf:d3:f6:10:30:93:d5:f9:5a:ca: e6:c2:ee:cb:3a:18:5b:d2:0c:bf:be:fe:75:4c:0c:37:24:a6: d7:e9:94:cd:88:83:54:68:70:c4:99:d5:7d:2e:75:ee:04:7f: fd:64:94:4b:4b:bc:b3:e2:ae:e5:af:68:f4:b0:94:0d:62:42: 69:af:37:f9:c9:88:c3:ef:09:40:f5:b9:27:b9:82:0f:47:19: 31:32:d2:ba:4b:d3:75:fb:c6:aa:32:21:17:6a:bb:80:63:19: d6:d8:48:04:b9:bf:7b:dd:a8:c3:5c:a6:ac:fc:f4:0e:a3:38: 82:24:a4:e3:a2:f4:59:cb:31:04:58:16:4e:eb:57:06:0b:d2: bb:f1:cb:77:68:1f:49:6d:77:09:66:2e:66:03:a4:7e:61:d1: 2c:af:20:f8:04:1e:e7:2e:d2:7d:d3:a8:a1:48:4c:c9:9c:de: 7f:98:33:ae:0b:ea:26:89:22:92:c8:fb:44:78:7b:f4:1d:b5: 98:b5:87:f9:b1:ca:f8:d8:6f:ab:d6:49:20:01:f0:c2:a5:16: f6:e9:fc:ec:45:e4:e8:47:3f:d3:b9:bf:4a:cb:3f:99:1e:58: 7e:5e:bb:1f:68:48:cf:9d:a0:70:09:35:9d:b0:fa:0e:c9:3e: dd:03:b5:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNFM0YxMTAvBgNVBAUTKDk0M0QzRTEwQjhCQkUxMzhCNDc3MzQ1NTRCNjkwNTMx MTBENDVCRTMwHhcNMjUxMjA1MDAxOTI0WhcNMjUxMjEyMDAxOTI0WjAYMRYwFAYD VQQDEw02OTMyMjUwYy1hNzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiafErNf+LoFRB2PA3ryFYeP7ZYCugDsRM5dtjZYzB1Sx6rtQIV5CwjEbpw1 yvAfs4ZxsDAWJbygv8NTAXuxLhl3tP+p2Oq/uKNZIMn3MZdaB4qhkjB8rjrJP3uc WJYom+UHtZIuCUVcNv0+NhrYABjE7BxYJPmJVSjt+mjstUUIkkMHe63aCG99It6s vSs8kcCFnOHhLZMlzpNR3E04oTpKE/91qin5Qqwe/KKnd+GAETGlTsyQmooGsNrr rrjztByI55JTohABQXamziPgdkX3wxkHle7+emWMuEp06wl2YsoVppmSI9F3Tq0o iTKnc1EzbItCl+7tLkandhz74wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0FL2Ze VoAPmnkiSIXu4HEXrY+fMB8GA1UdIwQYMBaAFJQ9PhC4u+E4tHc0VUtpBTEQ1Fvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi8zMDVFQjg3NjdD REIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRUaTBkelJWUzJrRk1SRFVX LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xEMC1FTGk3NFRpMGR6UlZTMmtGTVJEVVctTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0UzRi8zMDVFQjg3NjdDREIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRU aTBkelJWUzJrRk1SRFVXLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrX+beiTVG47/T9hAwk9X5Wsrmwu7LOhhb0gy/vv51TAw3JKbX6ZTN iINUaHDEmdV9LnXuBH/9ZJRLS7yz4q7lr2j0sJQNYkJprzf5yYjD7wlA9bknuYIP RxkxMtK6S9N1+8aqMiEXaruAYxnW2EgEub973ajDXKas/PQOoziCJKTjovRZyzEE WBZO61cGC9K78ct3aB9JbXcJZi5mA6R+YdEsryD4BB7nLtJ906ihSEzJnN5/mDOu C+omiSKSyPtEeHv0HbWYtYf5scr42G+r1kkgAfDCpRb26fzsReToRz/Tub9Kyz+Z Hlh+XrsfaEjPnaBwCTWdsPoOyT7dA7Ut -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:02 2025 by rpki-client