This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft File: lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft (raw, json) Hash identifier: W1KP1ncmcGBea/le6YRSX8ZVKDgcoXDYhOmU1G4juvg= Subject key identifier: 42:2B:9E:3E:6D:CB:66:4D:3D:34:89:D9:AE:E2:12:4C:5E:7C:49:C6 Authority key identifier: 96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 Certificate issuer: /CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Certificate serial: 0705 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft Manifest number: 06E4 Signing time: Mon 22 Dec 2025 21:25:33 +0000 Manifest this update: Mon 22 Dec 2025 21:25:33 +0000 Manifest next update: Mon 29 Dec 2025 21:25:33 +0000 Files and hashes: 1: lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl (hash: rVeGy+PW/kvc9t6+wNksejvArwpxk7EnmgEBH09cki0=) 2: 1C9DA52E9BD011F0AE2D7868C4F9AE02.roa (hash: DWlVGSmUTrs+mVqgzEs4ZghKv3WdHzrNxG9RIMrV1aI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1797 (0x705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91211D4, serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Validity Not Before: Dec 22 21:25:33 2025 GMT Not After : Dec 29 21:25:33 2025 GMT Subject: CN=6949b74d-2fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:18:fb:e1:59:58:e1:56:de:26:f7:1b:ef:cc: 0d:50:e0:28:7a:8a:c3:4d:9e:89:64:08:fd:a5:fb: 8c:90:d8:22:0f:e9:b6:53:6c:5e:eb:5b:49:14:a5: af:12:66:0b:96:9c:44:21:db:92:91:d9:da:90:33: df:65:ad:66:a9:3d:51:35:2b:6f:73:cc:73:a8:8a: 12:6e:03:c9:49:a8:93:1c:46:b6:02:09:d9:b8:fa: 73:c9:41:8b:32:e5:a6:ef:c7:30:9b:5a:cb:a8:3d: 78:09:a0:e2:a8:be:ba:de:02:86:de:a8:9c:13:bd: 9f:21:0d:94:f8:84:d0:d7:9b:9e:b2:36:10:0d:91: 10:e5:96:41:4c:22:fc:62:99:96:9a:28:8e:c5:a5: 36:2a:1f:3a:25:73:5e:c1:63:31:dd:b9:81:a7:c7: 6c:40:8b:eb:39:2f:a0:d0:4c:f0:b3:ec:8a:28:1b: be:19:57:50:47:aa:36:34:6a:5b:2b:d1:19:cc:e9: 09:ac:4c:94:9c:f6:d8:58:ff:67:2d:05:d9:03:f5: 25:f0:a8:b6:2c:68:68:9f:e4:2a:fb:70:34:eb:a9: ac:06:eb:03:48:51:c5:cd:fa:75:e2:04:91:b7:de: 52:e4:b4:81:2c:32:8e:f9:b9:19:6d:da:f7:dc:57: 2d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2B:9E:3E:6D:CB:66:4D:3D:34:89:D9:AE:E2:12:4C:5E:7C:49:C6 X509v3 Authority Key Identifier: keyid:96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:5d:44:6a:77:5c:9b:2e:53:61:08:20:fd:34:c5:89:9d:f2: 2e:67:0b:37:4a:cd:4c:e9:8a:51:64:a7:2c:60:6f:59:91:13: 30:e1:37:dd:af:b6:da:cc:6f:40:fd:34:43:83:f2:c0:ae:45: 2d:e4:74:15:d7:c5:c4:b4:39:90:78:2c:ac:3d:f9:e4:35:ba: 71:da:64:10:53:25:d0:69:b6:4d:d2:33:71:19:66:fc:d3:b4: 7b:48:3a:f8:79:c4:99:71:a6:8a:d8:33:0b:c7:6b:88:7e:b7: 19:61:77:63:50:78:bc:dc:30:2f:c8:53:3d:6c:da:42:55:3c: 57:de:a1:31:ad:02:62:a6:6e:10:47:8d:c2:41:6b:34:ef:c4: 3d:91:f9:4c:ea:21:08:40:4b:5d:d8:87:e7:9a:43:b7:aa:7e: 79:78:3d:c2:e5:73:ae:64:87:ca:7e:fd:ba:0a:4f:81:0b:74: 88:ec:19:a4:e6:31:13:a5:fa:78:bf:73:4e:40:20:8b:f0:4b: b5:2f:5c:0b:aa:8f:67:f0:a7:d7:e9:8f:ee:2a:12:58:3f:55: 85:30:2e:19:0e:13:d6:eb:92:5e:53:10:dc:97:01:79:62:f2: ef:f1:08:e0:79:ab:a6:38:4e:00:83:e8:7c:b4:bd:08:a1:f2: a6:7e:fd:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExRDQxMTAvBgNVBAUTKDk2OEQyQUFBNjE2OENCNDk2OTQ0QTcyNzAxOEFGQjQy QTI2RTMxRTEwHhcNMjUxMjIyMjEyNTMzWhcNMjUxMjI5MjEyNTMzWjAYMRYwFAYD VQQDDA02OTQ5Yjc0ZC0yZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxj74VlY4VbeJvcb78wNUOAoeorDTZ6JZAj9pfuMkNgiD+m2U2xe61tJFKWv EmYLlpxEIduSkdnakDPfZa1mqT1RNStvc8xzqIoSbgPJSaiTHEa2AgnZuPpzyUGL MuWm78cwm1rLqD14CaDiqL663gKG3qicE72fIQ2U+ITQ15uesjYQDZEQ5ZZBTCL8 YpmWmiiOxaU2Kh86JXNewWMx3bmBp8dsQIvrOS+g0Ezws+yKKBu+GVdQR6o2NGpb K9EZzOkJrEyUnPbYWP9nLQXZA/Ul8Ki2LGhon+Qq+3A066msBusDSFHFzfp14gSR t95S5LSBLDKO+bkZbdr33FctIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIrnj5t y2ZNPTSJ2a7iEkxefEnGMB8GA1UdIwQYMBaAFJaNKqphaMtJaUSnJwGK+0KibjHh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTFENC9BOUY0OTY1Mjg2 Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kwbHBSS2NuQVlyN1FxSnVN ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvMHFxbUZveTBscFJLY25BWXI3UXFKdU1lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTFENC9BOUY0OTY1Mjg2Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kw bHBSS2NuQVlyN1FxSnVNZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBXURqd1ybLlNhCCD9NMWJnfIuZws3Ss1M6YpRZKcsYG9ZkRMw4Tfd r7bazG9A/TRDg/LArkUt5HQV18XEtDmQeCysPfnkNbpx2mQQUyXQabZN0jNxGWb8 07R7SDr4ecSZcaaK2DMLx2uIfrcZYXdjUHi83DAvyFM9bNpCVTxX3qExrQJipm4Q R43CQWs078Q9kflM6iEIQEtd2IfnmkO3qn55eD3C5XOuZIfKfv26Ck+BC3SI7Bmk 5jETpfp4v3NOQCCL8Eu1L1wLqo9n8KfX6Y/uKhJYP1WFMC4ZDhPW65JeUxDclwF5 YvLv8QjgeaumOE4Ag+h8tL0IofKmfv1d -----END CERTIFICATE-----Generated at Wed Dec 24 15:59:09 2025 by rpki-client