This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft File: lvQuGfadWWoDGJIVkKF91TIz5ZU.mft (raw, json) Hash identifier: zLFGbAQrRbKvz5tNvcScNc4DWQ85pSXN5ylkKW158TI= Subject key identifier: 19:BA:EF:A1:D4:3C:B7:4B:7E:B5:93:7D:2A:0A:4B:23:25:D6:21:6F Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Certificate serial: 08A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft Manifest number: 0861 Signing time: Sat 20 Dec 2025 20:23:40 +0000 Manifest this update: Sat 20 Dec 2025 20:23:39 +0000 Manifest next update: Sat 27 Dec 2025 20:23:39 +0000 Files and hashes: 1: lvQuGfadWWoDGJIVkKF91TIz5ZU.crl (hash: 0iH5mG7v7OXVHs0dMm08+f2pgbwlwcDHb2X1Vwnzs5M=) 2: ABC4A34EAFB511F0815FDC37C4F9AE02.roa (hash: Rz/l4cwIWK/gcFPFzENAaQQtEAacYXl5yCLeBdnkcaA=) 3: C2D9F4BCD24311EF92066413C4F9AE02.roa (hash: ytUICka7R3sUiUv+nGbD8m7xL4LEtJjOERqtgUBd29c=) 4: 746DFE7C37CE11F0A4C19C85C4F9AE02.roa (hash: UUEsJz/WQSBHmwrRY/8iQ6JdsqT1T0sucZ71LaxIHRw=) 5: D10AEBE6DBCE11F0AEB5E93D54641951.roa (hash: esV8OZlbi9/XWvfZfCSKXoyyriYIl4zeyIirsBlh8qo=) 6: F539311C7DA011F08A71610EC4F9AE02.roa (hash: +UcOfQZU0ZJQOGOAjEM3uGGCRkyEmhxcs6uXu75xsP8=) 7: D34D9A72BBEB11EC83BEA22AC4F9AE02.roa (hash: c/n6DX8r7nJjVUXwPVxV5kzEZ7bIPC1UqZ86XGA9if0=) 8: BC38A630AFB511F0912BFF37C4F9AE02.roa (hash: yYq9FUi9QUL8JQHPDpyePLTnQdBwLv7qNIB4oZOqa8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2208 (0x8a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Validity Not Before: Dec 20 20:23:39 2025 GMT Not After : Dec 27 20:23:39 2025 GMT Subject: CN=694705cb-d692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e3:5c:8a:31:ba:4f:da:5e:90:1b:98:b7:e0: e8:33:9e:29:dd:1b:d4:05:17:12:2f:3c:f4:08:1a: 66:6a:a3:74:0c:6e:0b:0d:b3:c8:42:2f:d9:3e:a7: 59:ae:83:7d:a4:bc:ae:cc:0b:df:52:d9:28:2c:e2: f3:d4:35:b9:f1:73:12:77:c4:87:6d:a6:36:92:43: 56:3a:fa:c2:37:a9:fc:42:33:7d:be:f3:de:90:a8: 95:f7:c9:11:23:e3:d5:ec:ca:2a:87:14:bf:2a:c6: 31:a7:85:6c:eb:5c:61:e6:38:b2:9f:ea:f2:5a:8a: 05:88:b7:e7:03:0a:51:c4:be:d0:c8:13:b1:68:58: 1f:5c:21:88:79:8e:a4:76:43:13:14:ef:d5:7a:5e: c6:36:40:af:7c:55:b8:31:98:07:37:fc:99:e3:72: 40:d2:1c:ce:8c:c4:53:5a:ac:54:bb:87:59:80:c4: df:a9:44:1f:77:06:28:29:2a:a6:cd:fe:b4:28:43: 04:fc:e0:d5:66:c0:43:da:01:46:5d:b5:ba:b7:71: c7:ba:d4:cc:3d:50:0e:f2:4c:f7:14:19:c0:6d:13: b9:85:a7:c3:95:6b:23:66:45:f4:57:e8:f7:94:8b: e9:f5:a5:ea:4f:b5:8d:a3:2f:99:c5:a3:44:08:7e: 10:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BA:EF:A1:D4:3C:B7:4B:7E:B5:93:7D:2A:0A:4B:23:25:D6:21:6F X509v3 Authority Key Identifier: keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:a5:66:8e:f8:9f:b3:dd:aa:bf:52:0b:39:44:30:61:bf:25: 8f:85:6b:86:3d:22:71:0e:32:62:c6:a5:56:2f:3b:1c:56:64: 5a:7e:cc:06:96:5a:90:ab:fe:11:a1:19:74:0e:1b:43:47:6d: 19:09:a4:9d:e0:85:0c:6a:c8:c5:40:7c:63:95:9a:2e:96:20: 7c:4b:37:6c:b3:dc:df:67:23:78:c3:9d:04:04:3b:08:50:59: e4:89:d1:89:05:7b:a8:20:7d:35:16:e0:f5:c0:e4:d2:85:7e: 6e:65:c6:12:2c:dd:d4:e6:33:64:fe:dc:47:0b:b9:4e:98:71: f9:7c:ef:a9:e9:7c:99:1c:5d:e2:89:38:98:50:c6:d1:c0:07: eb:02:e2:80:47:9a:a0:6d:73:00:ac:01:0c:61:71:65:bb:72: 53:2e:6f:9f:dd:6f:f2:db:8f:50:ce:7c:94:0f:a0:da:98:c6: 5d:34:44:dd:be:50:57:7b:03:22:11:a1:60:1d:89:a3:fa:4b: 6f:1c:d7:28:df:70:ad:d8:35:a2:ef:88:b4:86:78:12:b7:70: fa:b2:ff:65:ba:23:92:59:f2:cc:b4:b8:ef:20:da:dc:cd:01: 96:dc:df:e8:a9:b6:ad:d9:6f:ce:70:3c:05:e9:fa:c8:6d:d7: 55:0c:ee:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1 MzIzM0U1OTUwHhcNMjUxMjIwMjAyMzM5WhcNMjUxMjI3MjAyMzM5WjAYMRYwFAYD VQQDDA02OTQ3MDVjYi1kNjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhONcijG6T9pekBuYt+DoM54p3RvUBRcSLzz0CBpmaqN0DG4LDbPIQi/ZPqdZ roN9pLyuzAvfUtkoLOLz1DW58XMSd8SHbaY2kkNWOvrCN6n8QjN9vvPekKiV98kR I+PV7MoqhxS/KsYxp4Vs61xh5jiyn+ryWooFiLfnAwpRxL7QyBOxaFgfXCGIeY6k dkMTFO/Vel7GNkCvfFW4MZgHN/yZ43JA0hzOjMRTWqxUu4dZgMTfqUQfdwYoKSqm zf60KEME/ODVZsBD2gFGXbW6t3HHutTMPVAO8kz3FBnAbRO5hafDlWsjZkX0V+j3 lIvp9aXqT7WNoy+ZxaNECH4Q2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBm676HU PLdLfrWTfSoKSyMl1iFvMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2 QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTc2RC85M0QxN0NEMDA2QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdX b0RHSklWa0tGOTFUSXo1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFpWaO+J+z3aq/Ugs5RDBhvyWPhWuGPSJxDjJixqVWLzscVmRafswG llqQq/4RoRl0DhtDR20ZCaSd4IUMasjFQHxjlZouliB8Szdss9zfZyN4w50EBDsI UFnkidGJBXuoIH01FuD1wOTShX5uZcYSLN3U5jNk/txHC7lOmHH5fO+p6XyZHF3i iTiYUMbRwAfrAuKAR5qgbXMArAEMYXFlu3JTLm+f3W/y249QznyUD6DamMZdNETd vlBXewMiEaFgHYmj+ktvHNco33Ct2DWi74i0hngSt3D6sv9luiOSWfLMtLjvINrc zQGW3N/oqbat2W/OcDwF6frIbddVDO5f -----END CERTIFICATE-----Generated at Sun Dec 21 13:06:45 2025 by rpki-client