This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json) Hash identifier: ejbE2rqQyRx/DSe3Pft1Hit273obhFJG8sMzI2caKmA= Subject key identifier: 3B:C3:34:1C:62:F5:B9:A7:BB:55:05:8C:24:A1:29:40:92:33:51:DB Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Certificate serial: 0425 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft Manifest number: 041E Signing time: Thu 04 Dec 2025 22:50:26 +0000 Manifest this update: Thu 04 Dec 2025 22:50:25 +0000 Manifest next update: Thu 11 Dec 2025 22:50:25 +0000 Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: +i18QpZBk79r+djVuhOhcPYY+cr4RhtjByXHllzSjsI=) 2: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: 41dvwuGONsbAf2NNxcw97I3G8Q6DNf+rajP9T/KIeiw=) 3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: q51gHdBYG+mFAHDh24P09p42ENPRR4e2b1fq2dGY3KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1061 (0x425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Validity Not Before: Dec 4 22:50:25 2025 GMT Not After : Dec 11 22:50:25 2025 GMT Subject: CN=69321031-cc33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:44:0e:d7:25:e4:64:ff:f2:d8:9c:9d:54:52: 48:5d:cc:64:c8:96:69:54:c0:e6:0c:be:d2:12:31: a9:c2:a6:fb:f5:e6:6a:ad:0f:95:b2:30:55:62:df: 8f:b2:61:18:f6:b9:bc:8a:f6:b5:65:fa:12:99:e9: ce:ae:ae:99:c4:99:73:a8:18:d8:db:53:05:90:a5: 21:b7:11:3e:a9:48:a5:05:74:95:4c:3f:02:59:cd: 7b:c0:93:69:82:a4:ec:b2:b5:af:d0:ea:3d:77:2e: 6d:97:aa:2f:d6:62:58:2a:25:27:34:6c:0b:6c:d7: 76:02:46:06:8b:60:5d:80:7d:e0:dd:31:52:37:6f: 5e:a2:ca:37:25:7f:4d:1b:12:04:73:df:15:df:05: 70:b1:0f:ba:f8:86:8e:ba:0c:42:0a:76:13:d4:f7: fd:49:85:fc:36:e2:78:8f:01:46:d7:ac:32:96:38: a6:70:9c:f7:1b:1a:5c:22:6d:fe:6b:72:9c:68:61: b3:c8:59:f7:00:e3:7d:bd:e3:b0:04:7f:d4:ed:dc: 4b:0c:6c:f0:95:a1:dd:cf:9c:42:39:34:0d:d7:82: 89:dd:6c:43:38:f6:d3:07:61:ba:51:98:56:19:2a: fc:d2:b0:f9:40:1d:b6:d4:78:9e:28:3f:92:fc:70: 29:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C3:34:1C:62:F5:B9:A7:BB:55:05:8C:24:A1:29:40:92:33:51:DB X509v3 Authority Key Identifier: keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:9a:86:d8:8c:2f:fd:aa:8d:b2:9b:1d:23:d8:68:e4:dc:39: ce:e0:7f:d4:e2:c3:d2:18:e5:e5:47:6c:85:b8:ea:59:2e:e0: 30:48:fc:5d:3f:be:0c:d1:e1:cc:e9:d2:1e:ab:85:5d:ec:8a: 67:f7:f4:cb:cb:9f:85:95:9a:3c:a1:df:b8:ab:77:f8:02:8c: 1d:41:66:8d:3d:b3:c6:59:d0:9c:57:73:bf:e1:44:ea:cd:94: 11:6b:6e:55:7b:ea:4e:d0:d8:69:c1:41:c3:be:dd:e2:f9:a7: c0:50:48:9a:56:7e:a3:ed:c1:6a:04:73:07:af:3e:a8:7e:df: 97:b5:ab:67:05:f1:cb:ab:8b:d5:1a:18:96:7a:7b:d2:7d:23: 99:31:13:79:fb:2c:3a:e2:a1:27:90:a7:cc:52:99:ce:1b:9d: a5:1e:d4:01:cb:20:aa:44:7f:a4:a1:f5:eb:c3:c6:bd:53:46: 43:b6:a4:93:6c:79:d4:d0:d0:a5:ce:01:af:8a:78:c1:66:3c: e1:66:ee:43:de:56:7e:bb:49:b2:ea:d7:d4:1b:ec:7d:3c:a0: 96:fb:17:ae:be:f5:8e:cb:21:07:2e:57:17:4c:d9:d1:5e:07: a5:96:59:db:8b:b4:a9:ba:68:2f:ab:e0:ca:b2:72:6d:0e:5e: 95:bf:45:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD NTM2RkRGOUIwHhcNMjUxMjA0MjI1MDI1WhcNMjUxMjExMjI1MDI1WjAYMRYwFAYD VQQDEw02OTMyMTAzMS1jYzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0QO1yXkZP/y2JydVFJIXcxkyJZpVMDmDL7SEjGpwqb79eZqrQ+VsjBVYt+P smEY9rm8iva1ZfoSmenOrq6ZxJlzqBjY21MFkKUhtxE+qUilBXSVTD8CWc17wJNp gqTssrWv0Oo9dy5tl6ov1mJYKiUnNGwLbNd2AkYGi2BdgH3g3TFSN29eoso3JX9N GxIEc98V3wVwsQ+6+IaOugxCCnYT1Pf9SYX8NuJ4jwFG16wyljimcJz3GxpcIm3+ a3KcaGGzyFn3AON9veOwBH/U7dxLDGzwlaHdz5xCOTQN14KJ3WxDOPbTB2G6UZhW GSr80rD5QB221HieKD+S/HAp6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvDNBxi 9bmnu1UFjCShKUCSM1HbMB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqmobYjC/9qo2ymx0j2Gjk3DnO4H/U4sPSGOXlR2yFuOpZLuAwSPxd P74M0eHM6dIeq4Vd7Ipn9/TLy5+FlZo8od+4q3f4AowdQWaNPbPGWdCcV3O/4UTq zZQRa25Ve+pO0NhpwUHDvt3i+afAUEiaVn6j7cFqBHMHrz6oft+XtatnBfHLq4vV GhiWenvSfSOZMRN5+yw64qEnkKfMUpnOG52lHtQByyCqRH+kofXrw8a9U0ZDtqST bHnU0NClzgGvinjBZjzhZu5D3lZ+u0my6tfUG+x9PKCW+xeuvvWOyyEHLlcXTNnR Xgelllnbi7Spumgvq+DKsnJtDl6Vv0UI -----END CERTIFICATE-----Generated at Sat Dec 6 19:17:05 2025 by rpki-client