This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft File: ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json) Hash identifier: wocito5NuMviVe9qbtblOWMuPPcB8qUuNADgWVa7dR4= Subject key identifier: 6A:7D:80:98:EE:C9:84:FB:81:4E:E4:08:40:79:03:F3:3F:8E:27:7F Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF Certificate issuer: /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft Manifest number: 01C9 Signing time: Fri 05 Dec 2025 01:11:50 +0000 Manifest this update: Fri 05 Dec 2025 01:11:49 +0000 Manifest next update: Fri 12 Dec 2025 01:11:49 +0000 Files and hashes: 1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: cXRKExqlaLPknKUHqNqJSTHRyM8aSXHYBpXoFncyscw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF Validity Not Before: Dec 5 01:11:49 2025 GMT Not After : Dec 12 01:11:49 2025 GMT Subject: CN=69323156-e9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:60:93:2f:4a:1c:24:93:10:fa:08:ad:3e:a0: 2f:f1:e7:a6:ff:b0:0e:ce:f3:fc:d2:d1:71:3a:4f: d5:44:f7:0d:77:c1:b9:c7:2f:ea:f8:ff:a6:c7:3c: 50:ec:b5:6e:4c:8a:94:bf:e0:f9:84:ec:6c:6c:5f: df:1d:3d:7c:22:5e:6a:88:b9:4a:9e:cf:e8:92:98: 00:d1:2b:8a:7c:b4:44:ce:08:a4:88:bb:9a:f2:5e: 20:5a:9c:ec:b7:d5:ce:66:2d:cc:6a:60:ee:e3:d5: 0b:3e:a9:43:bf:bf:65:35:8b:3d:32:01:35:81:90: e2:02:bd:e6:9a:a7:d6:79:2a:d8:36:07:85:be:2c: da:da:07:4d:a3:2f:2c:dc:fe:0b:37:81:6e:b6:0b: 93:1b:f8:b2:4f:bf:0f:79:f7:c5:47:6e:f8:34:e5: 76:1e:bb:c2:82:48:b0:99:80:32:b1:17:1b:28:c4: 7f:69:d2:f0:8a:79:af:0c:34:2f:61:6b:f1:cc:5f: 34:85:31:16:cc:22:ed:35:2f:e7:13:a2:6f:f7:b7: fe:30:1b:53:72:39:71:e5:fc:cf:b5:65:d8:44:d0: 90:22:ce:5c:cd:e8:25:c2:93:29:fd:1e:45:c0:b8: 03:cb:6c:a3:d6:cd:62:7f:b3:6d:63:81:01:67:96: 8c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7D:80:98:EE:C9:84:FB:81:4E:E4:08:40:79:03:F3:3F:8E:27:7F X509v3 Authority Key Identifier: keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:30:c6:dc:1c:b8:9c:d5:4c:fa:b4:8a:f8:ab:70:62:33:95: 2d:fd:bd:3b:3f:77:c9:d3:b6:e3:db:04:56:0c:1a:61:df:59: 2c:43:99:bb:f2:fa:a1:35:c9:1c:8e:47:96:97:bc:52:80:21: 6d:17:69:02:62:15:34:7b:d0:9b:55:45:a9:54:f6:3e:b3:4b: e9:02:b9:9c:48:46:99:e0:08:1d:53:d5:94:bb:81:be:0f:70: 9f:f8:6b:ed:0e:50:04:48:70:e7:c4:f7:44:ad:6b:af:de:62: 1a:17:f9:39:a4:4b:e3:e1:da:87:a5:a6:8b:b6:1d:7c:a3:09: 26:d8:71:23:13:3f:bf:2d:e8:b7:47:bd:18:47:df:ee:b1:ec: 0b:61:ef:36:6c:c8:98:c0:2e:be:c9:39:82:e1:94:99:43:6c: 69:13:d4:b5:97:70:0f:b9:c1:ba:36:ae:a6:9b:37:90:0f:74: 93:91:68:02:c1:6e:ad:eb:53:2f:d0:76:c2:60:e1:83:39:6e: 0e:d3:85:2d:1a:4f:16:54:c5:21:6a:d3:e5:b9:ee:68:ba:a4: 3e:db:66:80:03:97:1c:c6:21:09:65:3e:ea:24:7c:b8:99:07: 71:4b:8f:e0:5a:52:f5:ad:ec:b6:2d:42:c4:e9:57:c3:60:68: d7:1e:3e:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwRjgxMTAvBgNVBAUTKDk2MzNGNjJGRkIyMTg2NzZFQkM5M0YxQzM3Njk2NDlD MEM1RDg0REYwHhcNMjUxMjA1MDExMTQ5WhcNMjUxMjEyMDExMTQ5WjAYMRYwFAYD VQQDEw02OTMyMzE1Ni1lOWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGCTL0ocJJMQ+gitPqAv8eem/7AOzvP80tFxOk/VRPcNd8G5xy/q+P+mxzxQ 7LVuTIqUv+D5hOxsbF/fHT18Il5qiLlKns/okpgA0SuKfLREzgikiLua8l4gWpzs t9XOZi3MamDu49ULPqlDv79lNYs9MgE1gZDiAr3mmqfWeSrYNgeFviza2gdNoy8s 3P4LN4FutguTG/iyT78PeffFR274NOV2HrvCgkiwmYAysRcbKMR/adLwinmvDDQv YWvxzF80hTEWzCLtNS/nE6Jv97f+MBtTcjlx5fzPtWXYRNCQIs5czeglwpMp/R5F wLgDy2yj1s1if7NtY4EBZ5aMSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGp9gJju yYT7gU7kCEB5A/M/jid/MB8GA1UdIwQYMBaAFJYz9i/7IYZ268k/HDdpZJwMXYTf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjBGOC9CMDZGQUUyRTE5 N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhuYnJ5VDhjTjJsa25BeGRo TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xqUDJMX3NoaG5icnlUOGNOMmxrbkF4ZGhOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjBGOC9CMDZGQUUyRTE5N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhu YnJ5VDhjTjJsa25BeGRoTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsMMbcHLic1Uz6tIr4q3BiM5Ut/b07P3fJ07bj2wRWDBph31ksQ5m7 8vqhNckcjkeWl7xSgCFtF2kCYhU0e9CbVUWpVPY+s0vpArmcSEaZ4AgdU9WUu4G+ D3Cf+GvtDlAESHDnxPdErWuv3mIaF/k5pEvj4dqHpaaLth18owkm2HEjEz+/Lei3 R70YR9/usewLYe82bMiYwC6+yTmC4ZSZQ2xpE9S1l3APucG6Nq6mmzeQD3STkWgC wW6t61Mv0HbCYOGDOW4O04UtGk8WVMUhatPlue5ouqQ+22aAA5ccxiEJZT7qJHy4 mQdxS4/gWlL1rey2LULE6VfDYGjXHj44 -----END CERTIFICATE-----Generated at Sat Dec 6 23:46:05 2025 by rpki-client