This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft File: L3LcETktqlBahWLidjiGBgPNvr8.mft (raw, json) Hash identifier: 0T5EIknsL0TO5zm29Dz3So7NuENcQQ7dHn2OLt7MGzg= Subject key identifier: EF:37:8C:4B:72:D4:7E:1B:BE:02:56:DA:31:DB:B2:14:07:CB:80:75 Authority key identifier: 2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF Certificate issuer: /CN=A91FD59F/serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft Manifest number: 66 Signing time: Fri 05 Dec 2025 04:52:57 +0000 Manifest this update: Fri 05 Dec 2025 04:52:57 +0000 Manifest next update: Fri 12 Dec 2025 04:52:57 +0000 Files and hashes: 1: L3LcETktqlBahWLidjiGBgPNvr8.crl (hash: pO90FpBd6bKoiUr9zoVOimF6b9g1DWF6D8F85zUj27s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD59F, serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF Validity Not Before: Dec 5 04:52:57 2025 GMT Not After : Dec 12 04:52:57 2025 GMT Subject: CN=69326529-0c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:92:c5:7a:7b:9d:52:54:40:c9:74:16:22:fd: 11:0d:3d:3f:90:e1:19:70:fc:77:eb:4a:d1:1c:41: 02:73:b6:22:8f:4c:0e:9f:da:ca:eb:04:1a:78:ac: 1d:ca:bd:73:1c:88:6e:c4:2d:cb:c4:37:c0:6c:e8: 07:52:9f:2e:28:ea:f1:6b:9b:11:e3:7a:0c:9d:a7: e1:7a:36:c8:9a:6e:5c:0f:98:3b:d5:55:eb:43:40: f2:f7:2b:3e:0b:1d:c7:23:06:50:24:f9:b0:2a:f3: c4:4a:a4:8f:23:c6:b5:df:f7:36:f7:54:c9:be:a8: 21:71:33:8c:c6:4a:ad:4e:47:93:fd:d1:45:9e:7b: 2c:0e:44:a5:c6:76:b0:8d:1f:3f:20:31:2c:3e:c4: db:cf:0b:35:cd:53:e6:9e:86:39:95:f8:6a:fb:fc: 2c:0b:6c:02:51:d9:1d:38:d3:de:41:c6:7a:70:d6: 70:2e:c6:11:f9:98:ae:7f:8b:cb:95:fd:33:87:91: ca:02:6b:92:f9:82:aa:01:d6:e8:26:25:2e:c5:ed: db:3f:ab:df:ca:0d:a2:73:99:d0:2f:a1:b6:74:52: 78:6c:aa:d1:d5:74:b1:09:f0:72:53:46:79:21:7b: 0f:ad:5d:a9:fa:d4:4a:d3:0c:aa:75:9a:26:79:12: ea:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:37:8C:4B:72:D4:7E:1B:BE:02:56:DA:31:DB:B2:14:07:CB:80:75 X509v3 Authority Key Identifier: keyid:2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:a0:9b:7e:53:f2:11:a5:22:e1:92:7c:d2:9c:39:91:e4:68: 3f:72:5e:7a:5a:43:be:60:59:7d:90:22:74:2e:03:af:1a:b9: 16:c0:a7:7f:36:ec:1d:10:3e:77:8b:12:ff:ff:d8:cd:2c:23: be:18:ac:51:ff:c2:2a:06:35:7b:72:87:a3:23:3d:a8:b8:a2: 06:57:83:e8:9d:7f:cd:d7:70:30:2d:0e:f0:c5:36:1e:e9:9c: f9:77:32:80:5d:72:24:1e:bb:03:1c:11:ec:a1:1f:a5:69:fd: de:36:94:05:ee:9e:3a:af:03:91:84:a1:7c:23:65:0c:70:2c: 8e:46:e5:87:ec:3f:4b:65:27:1f:06:80:5a:ad:c2:66:f6:38: 79:34:5b:fd:ec:07:3e:7b:d6:0d:dc:56:5a:bf:26:c9:68:56: 64:d5:1f:32:ef:e3:1e:16:b3:58:78:68:53:cf:ce:72:c1:3c: 79:47:d0:78:8c:21:61:37:bf:cf:cf:06:67:37:6d:a8:39:1e: 3b:02:cc:7d:9c:39:c5:ed:74:cf:8a:fb:b9:8d:4b:e0:23:88: f8:3c:65:c6:6a:35:00:25:cc:64:1a:48:eb:e0:c4:66:6e:35: ab:0e:ee:81:80:ec:3a:79:3d:b2:5a:23:78:32:4a:a7:9e:21: 09:6e:c0:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDU5RjExMC8GA1UEBRMoMkY3MkRDMTEzOTJEQUE1MDVBODU2MkUyNzYzODg2MDYw M0NEQkVCRjAeFw0yNTEyMDUwNDUyNTdaFw0yNTEyMTIwNDUyNTdaMBgxFjAUBgNV BAMTDTY5MzI2NTI5LTBjOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsksV6e51SVEDJdBYi/RENPT+Q4Rlw/HfrStEcQQJztiKPTA6f2srrBBp4rB3K vXMciG7ELcvEN8Bs6AdSny4o6vFrmxHjegydp+F6NsiablwPmDvVVetDQPL3Kz4L HccjBlAk+bAq88RKpI8jxrXf9zb3VMm+qCFxM4zGSq1OR5P90UWeeywORKXGdrCN Hz8gMSw+xNvPCzXNU+aehjmV+Gr7/CwLbAJR2R04095Bxnpw1nAuxhH5mK5/i8uV /TOHkcoCa5L5gqoB1ugmJS7F7ds/q9/KDaJzmdAvobZ0UnhsqtHVdLEJ8HJTRnkh ew+tXan61ErTDKp1miZ5EurNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7zeMS3LU fhu+AlbaMduyFAfLgHUwHwYDVR0jBBgwFoAUL3LcETktqlBahWLidjiGBgPNvr8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZENTlGLzAxOTA0M0YwMzNG NjExRjA5Q0UzOEU0MUM0RjlBRTAyL0wzTGNFVGt0cWxCYWhXTGlkamlHQmdQTnZy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDNMY0VUa3RxbEJhaFdMaWRqaUdCZ1BOdnI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE NTlGLzAxOTA0M0YwMzNGNjExRjA5Q0UzOEU0MUM0RjlBRTAyL0wzTGNFVGt0cWxC YWhXTGlkamlHQmdQTnZyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALOgm35T8hGlIuGSfNKcOZHkaD9yXnpaQ75gWX2QInQuA68auRbAp382 7B0QPneLEv//2M0sI74YrFH/wioGNXtyh6MjPai4ogZXg+idf83XcDAtDvDFNh7p nPl3MoBdciQeuwMcEeyhH6Vp/d42lAXunjqvA5GEoXwjZQxwLI5G5YfsP0tlJx8G gFqtwmb2OHk0W/3sBz571g3cVlq/JsloVmTVHzLv4x4Ws1h4aFPPznLBPHlH0HiM IWE3v8/PBmc3bag5HjsCzH2cOcXtdM+K+7mNS+AjiPg8ZcZqNQAlzGQaSOvgxGZu NasO7oGA7Dp5PbJaI3gySqeeIQluwIg= -----END CERTIFICATE-----Generated at Sat Dec 6 16:13:17 2025 by rpki-client