This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft File: LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json) Hash identifier: 5FIE+Qz/FKqxRtNJlQI2sRkj7uz3aiAggd4PvkpNpVY= Subject key identifier: BD:2F:45:46:38:E8:9D:7C:BD:EA:9E:78:FA:3E:6F:6E:77:2B:F9:5F Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Certificate serial: 0A1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft Manifest number: 0A0A Signing time: Sat 20 Dec 2025 19:20:03 +0000 Manifest this update: Sat 20 Dec 2025 19:20:02 +0000 Manifest next update: Sat 27 Dec 2025 19:20:02 +0000 Files and hashes: 1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: fxS9m9jPu57jji0Fnl8IrdyMav2Z3e6YJ3DEI+/BCp8=) 2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: VFpsjuU9PDSH64UL2gEPWAoxtpRrzaaut6Rewkzu2Xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2588 (0xa1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Validity Not Before: Dec 20 19:20:02 2025 GMT Not After : Dec 27 19:20:02 2025 GMT Subject: CN=6946f6e2-50d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:04:75:b8:c8:3e:d9:88:fe:f5:ff:a3:47:f1: d2:68:59:a9:54:91:5b:7d:e8:8d:d5:ed:bb:4d:5f: eb:4e:f0:b9:77:84:c7:e9:5a:45:e9:4b:9c:f2:31: b1:6b:39:76:38:e7:e7:fe:b9:1c:d1:79:75:0a:7c: 74:f8:24:1d:38:76:62:88:db:ef:82:a1:06:d3:cb: 40:22:22:2f:84:40:f3:a3:4a:f5:57:a9:3c:e1:c7: 51:28:99:8a:85:17:b9:50:8f:a5:a5:7e:d4:71:6a: e9:be:eb:69:41:36:7c:a4:0b:86:ca:78:63:13:b8: 07:a4:6e:2b:e0:5f:35:29:7b:43:1a:78:29:8e:93: f1:87:7a:e5:13:b7:66:2b:09:49:bf:1a:ce:55:74: bd:92:5b:9b:96:c4:12:4f:c0:fd:d8:aa:7f:8b:54: b3:c8:02:eb:6b:0f:80:de:d1:59:f3:9f:6e:39:52: e3:b7:5c:b6:48:77:c0:98:a2:50:70:54:d1:c8:c2: 02:a8:fe:bf:1a:f8:9a:45:df:b9:ce:e1:a8:5b:21: 95:d3:50:c1:a0:a8:61:00:aa:8c:ae:2e:99:98:99: 39:c4:97:9d:95:69:ec:8a:7c:31:4a:24:3c:b9:2e: 2b:67:9e:eb:54:1d:06:27:cc:b4:52:0a:d0:f0:be: eb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2F:45:46:38:E8:9D:7C:BD:EA:9E:78:FA:3E:6F:6E:77:2B:F9:5F X509v3 Authority Key Identifier: keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:94:49:18:d4:3f:8c:af:88:f6:98:d7:af:49:7d:30:c7:3c: 96:f3:4a:df:8b:f5:88:35:50:2f:00:c4:93:37:d9:8f:6c:9f: 78:ff:20:05:f7:b2:30:00:c5:7b:30:4f:f3:0f:fe:c6:09:3b: ef:0e:09:e3:32:75:7b:1d:57:2d:da:3e:f9:30:43:61:ab:7e: 46:71:73:10:39:18:c0:dd:64:bf:9f:4d:5a:1b:0f:f4:ed:f3: a3:bb:d3:44:9a:70:06:84:cd:01:84:ee:d7:ef:83:c2:44:b5: 35:68:ff:e1:06:a4:33:e3:db:c4:ab:7e:0d:fa:4f:16:39:e2: 63:b7:91:30:ee:f5:97:f4:19:fe:1f:7c:84:8a:a0:2c:c9:eb: 15:82:dd:ff:76:87:92:31:7b:9f:85:27:39:73:d1:e6:12:f1: e7:b1:0f:c8:99:5f:fe:22:d1:55:0e:48:0f:25:42:54:38:2d: 11:13:14:90:23:11:90:f8:bd:3f:6d:a0:22:9d:40:9b:18:f5: 2e:3a:e6:31:d7:f2:80:b3:c5:4f:45:14:4a:cf:79:9a:12:41: ca:34:48:fd:d9:9b:29:68:e1:43:53:6f:5a:8d:c6:a2:c2:9a: 5f:c0:3d:ed:87:1f:99:b3:c6:7b:eb:8d:aa:73:e8:7e:d0:92: 7f:f2:7e:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBREYxMTAvBgNVBAUTKDJFNzI4M0E4RkRENUNGMEIzRDlGQUEyQkU5NzQyODgx OTg5MTkzQTUwHhcNMjUxMjIwMTkyMDAyWhcNMjUxMjI3MTkyMDAyWjAYMRYwFAYD VQQDDA02OTQ2ZjZlMi01MGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlAR1uMg+2Yj+9f+jR/HSaFmpVJFbfeiN1e27TV/rTvC5d4TH6VpF6Uuc8jGx azl2OOfn/rkc0Xl1Cnx0+CQdOHZiiNvvgqEG08tAIiIvhEDzo0r1V6k84cdRKJmK hRe5UI+lpX7UcWrpvutpQTZ8pAuGynhjE7gHpG4r4F81KXtDGngpjpPxh3rlE7dm KwlJvxrOVXS9klublsQST8D92Kp/i1SzyALraw+A3tFZ859uOVLjt1y2SHfAmKJQ cFTRyMICqP6/GviaRd+5zuGoWyGV01DBoKhhAKqMri6ZmJk5xJedlWnsinwxSiQ8 uS4rZ57rVB0GJ8y0UgrQ8L7rLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0vRUY4 6J18veqeePo+b253K/lfMB8GA1UdIwQYMBaAFC5yg6j91c8LPZ+qK+l0KIGYkZOl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkFERi81ODUzMjBERThC RDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3czluNm9yNlhRb2daaVJr NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuS0RxUDNWendzOW42b3I2WFFvZ1ppUms2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkFERi81ODUzMjBERThCRDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3 czluNm9yNlhRb2daaVJrNlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCClEkY1D+Mr4j2mNevSX0wxzyW80rfi/WINVAvAMSTN9mPbJ94/yAF 97IwAMV7ME/zD/7GCTvvDgnjMnV7HVct2j75MENhq35GcXMQORjA3WS/n01aGw/0 7fOju9NEmnAGhM0BhO7X74PCRLU1aP/hBqQz49vEq34N+k8WOeJjt5Ew7vWX9Bn+ H3yEiqAsyesVgt3/doeSMXufhSc5c9HmEvHnsQ/ImV/+ItFVDkgPJUJUOC0RExSQ IxGQ+L0/baAinUCbGPUuOuYx1/KAs8VPRRRKz3maEkHKNEj92ZspaOFDU29ajcai wppfwD3thx+Zs8Z7642qc+h+0JJ/8n4z -----END CERTIFICATE-----Generated at Mon Dec 22 17:51:37 2025 by rpki-client