This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft File: L2sefhQB3gCsju23qFkNA9xUD3g.mft (raw, json) Hash identifier: WGMdvE2JWHPRQr/4pONeHqltQXMX/6jCrB5k1VJYcpU= Subject key identifier: 83:26:F9:33:46:D4:29:E3:47:EF:D1:94:E2:5C:FD:36:F2:15:7E:07 Authority key identifier: 2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78 Certificate issuer: /CN=A91DD38B/serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft Manifest number: B5 Signing time: Fri 05 Dec 2025 04:03:37 +0000 Manifest this update: Fri 05 Dec 2025 04:03:36 +0000 Manifest next update: Fri 12 Dec 2025 04:03:36 +0000 Files and hashes: 1: L2sefhQB3gCsju23qFkNA9xUD3g.crl (hash: jI9YMU0HGErKdzWZxKI0oLs3tYpW9ZmA3VvXh+6BFOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD38B, serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78 Validity Not Before: Dec 5 04:03:36 2025 GMT Not After : Dec 12 04:03:36 2025 GMT Subject: CN=69325999-c58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bb:08:55:e9:c0:75:2e:cf:89:db:6d:a9:c1: 4d:0d:48:e2:4f:45:4a:64:89:a4:1b:a0:67:6c:68: a8:0f:bc:a0:50:1f:f5:5a:4b:d1:d2:72:a0:1f:6a: 3d:91:3f:71:27:55:08:bc:5d:2b:2b:b7:f5:f5:8f: 50:57:ae:83:2f:6c:93:82:e7:15:70:30:ee:03:c4: c5:04:6e:9b:c1:fc:8c:ed:eb:c9:35:bc:ac:02:1d: 9a:b4:47:06:52:05:5c:9a:2d:cf:15:4c:06:ed:70: 57:ae:e7:23:dd:1e:ca:be:ee:0b:41:4c:e6:37:c8: cf:dd:a0:3c:b6:1c:cf:21:a8:eb:a6:6a:70:92:b4: e9:d6:01:fe:c6:d7:8e:34:4a:fa:7f:eb:04:9f:cc: c6:ca:5e:d8:87:c5:ab:67:2d:39:e9:50:50:25:e4: f3:21:9c:d3:50:d7:1f:d4:ef:c8:52:2b:c0:68:6d: 89:71:2a:ad:ba:ba:89:7e:b4:33:09:70:e4:f6:ea: 1b:86:dc:ef:32:93:cd:cf:b5:a6:d2:84:68:01:5b: 31:f9:fa:f4:4e:bb:89:9a:82:9d:ac:a5:05:f9:34: b7:9c:7f:b1:51:aa:97:1e:11:68:17:19:1f:29:e0: 84:d4:81:10:e5:2e:90:07:56:a0:b8:c6:5f:f0:3a: 16:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:26:F9:33:46:D4:29:E3:47:EF:D1:94:E2:5C:FD:36:F2:15:7E:07 X509v3 Authority Key Identifier: keyid:2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a7:65:49:bb:af:b2:b6:b7:8b:2b:df:68:fc:f8:7e:dc:ad: 33:2a:ca:e3:6d:f5:2f:9a:c7:61:d4:09:49:e2:43:b2:82:5a: eb:5b:8b:72:50:f6:83:f5:41:b2:1c:55:95:70:24:f1:55:ce: 18:5f:4b:21:c8:6f:81:49:73:3c:00:02:6d:22:4b:02:05:1d: ad:91:0f:6e:cb:4c:46:64:52:8a:a7:38:9e:4a:63:55:0c:fe: 81:f0:85:10:59:b4:36:4f:85:64:16:7e:00:e7:2a:48:ac:83: af:49:21:d3:70:ca:a8:4c:7a:8b:75:66:a0:b2:0a:c5:a8:ec: e3:56:ab:f5:4c:e7:91:c9:80:2b:74:da:e8:09:30:85:89:c6: d8:8e:91:26:4b:db:4d:ef:9f:3a:c1:b7:9d:9f:88:a4:58:4b: e6:e2:36:aa:d2:4d:d0:bf:5f:eb:13:e6:3a:04:88:cc:76:98: b9:7c:7c:f9:cd:9c:f0:bf:77:fe:89:f0:12:73:e2:c2:1b:d3: cb:b5:c6:1d:e0:ff:72:45:36:7a:6f:e6:6b:89:8d:55:27:a5: 2a:2e:b1:4a:4c:d3:42:16:d8:16:86:24:d4:3e:d7:5a:3c:00: 4d:5b:6a:fb:0f:a9:64:56:0f:fb:72:54:bb:7e:18:1e:70:ae: 66:fc:32:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzOEIxMTAvBgNVBAUTKDJGNkIxRTdFMTQwMURFMDBBQzhFRURCN0E4NTkwRDAz REM1NDBGNzgwHhcNMjUxMjA1MDQwMzM2WhcNMjUxMjEyMDQwMzM2WjAYMRYwFAYD VQQDEw02OTMyNTk5OS1jNThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLsIVenAdS7PidttqcFNDUjiT0VKZImkG6BnbGioD7ygUB/1WkvR0nKgH2o9 kT9xJ1UIvF0rK7f19Y9QV66DL2yTgucVcDDuA8TFBG6bwfyM7evJNbysAh2atEcG UgVcmi3PFUwG7XBXrucj3R7Kvu4LQUzmN8jP3aA8thzPIajrpmpwkrTp1gH+xteO NEr6f+sEn8zGyl7Yh8WrZy056VBQJeTzIZzTUNcf1O/IUivAaG2JcSqturqJfrQz CXDk9uobhtzvMpPNz7Wm0oRoAVsx+fr0TruJmoKdrKUF+TS3nH+xUaqXHhFoFxkf KeCE1IEQ5S6QB1aguMZf8DoWlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMm+TNG 1CnjR+/RlOJc/TbyFX4HMB8GA1UdIwQYMBaAFC9rHn4UAd4ArI7tt6hZDQPcVA94 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDM4Qi9BMUFCMkFCQ0JB ODkxMUVGOUIzMzg1MTJDNEY5QUUwMi9MMnNlZmhRQjNnQ3NqdTIzcUZrTkE5eFVE M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wyc2VmaFFCM2dDc2p1MjNxRmtOQTl4VUQzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDM4Qi9BMUFCMkFCQ0JBODkxMUVGOUIzMzg1MTJDNEY5QUUwMi9MMnNlZmhRQjNn Q3NqdTIzcUZrTkE5eFVEM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+p2VJu6+ytreLK99o/Ph+3K0zKsrjbfUvmsdh1AlJ4kOyglrrW4ty UPaD9UGyHFWVcCTxVc4YX0shyG+BSXM8AAJtIksCBR2tkQ9uy0xGZFKKpzieSmNV DP6B8IUQWbQ2T4VkFn4A5ypIrIOvSSHTcMqoTHqLdWagsgrFqOzjVqv1TOeRyYAr dNroCTCFicbYjpEmS9tN7586wbedn4ikWEvm4jaq0k3Qv1/rE+Y6BIjMdpi5fHz5 zZzwv3f+ifASc+LCG9PLtcYd4P9yRTZ6b+ZriY1VJ6UqLrFKTNNCFtgWhiTUPtda PABNW2r7D6lkVg/7clS7fhgecK5m/DKn -----END CERTIFICATE-----Generated at Sun Dec 7 01:55:05 2025 by rpki-client