This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json) Hash identifier: W+6npGCEYI3pEB5sl412Iap4WdrucS+coKoHlyfgElU= Subject key identifier: 1B:A9:D5:77:12:51:B4:F9:A7:1D:60:76:78:4A:1A:A5:56:65:D8:60 Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft Manifest number: 0102 Signing time: Tue 23 Dec 2025 04:03:04 +0000 Manifest this update: Tue 23 Dec 2025 04:03:04 +0000 Manifest next update: Tue 30 Dec 2025 04:03:04 +0000 Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: w8hNnKKSZsvrDBTsZvT8CKOxDaR5qVwhA4OPR2Lf5c0=) 2: 11763FC8648D11F0950AB94BC4F9AE02.roa (hash: 86Rvuv44s2BQaDBbytq/QrAOdGP+XaqCHubjdpDvCpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Validity Not Before: Dec 23 04:03:04 2025 GMT Not After : Dec 30 04:03:04 2025 GMT Subject: CN=694a1478-4025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f0:d0:d1:14:69:31:a7:7c:d7:90:25:f3:de: de:ae:fc:e4:4c:e4:cb:33:8f:b4:33:72:e9:a3:e0: bb:51:69:5d:4e:c9:86:d6:41:24:75:ba:ed:d0:c4: dc:04:cb:dc:63:e4:f4:ef:ae:40:06:74:87:b1:c1: d0:85:b9:fe:c7:70:78:bf:e4:fa:e9:0c:c9:87:28: 01:1f:ba:ae:de:2b:4e:08:75:e2:c4:08:67:d7:0d: e0:5a:6d:9f:23:1e:2c:2c:8c:e8:14:26:36:0c:58: d8:fd:53:82:50:90:8f:8a:d8:2c:f1:b2:a6:09:41: 3c:5d:d0:c2:45:27:c3:2a:9c:1c:27:88:38:d6:08: 96:34:73:e2:bc:5b:d4:5d:8c:09:13:5b:10:bb:b7: d0:f8:89:05:4a:1e:00:ee:c3:85:6b:23:69:3c:f4: a8:19:46:f9:e5:0d:67:dc:83:2b:9b:86:80:30:67: 9d:c2:a8:e6:58:22:ce:90:32:09:6d:b5:dc:4b:7a: 8f:f7:14:fa:a7:c7:38:43:69:e4:b8:4b:e5:fd:a2: 67:9d:2b:b4:7f:b5:dc:1b:29:48:dd:3c:a3:4f:1f: 70:d1:93:dc:78:58:fe:7c:45:39:0e:15:95:78:7c: c6:8d:dd:b2:ca:09:27:a1:3a:ef:fd:6c:1c:c0:55: ad:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A9:D5:77:12:51:B4:F9:A7:1D:60:76:78:4A:1A:A5:56:65:D8:60 X509v3 Authority Key Identifier: keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:fc:0c:15:19:fb:5f:3f:5c:74:8e:3d:b2:02:fe:f5:34:3c: cd:e0:61:0d:f6:c6:11:5d:d3:49:b2:97:eb:7f:05:a0:99:93: 99:b6:0b:b7:04:f9:90:82:68:a5:a4:67:90:17:d9:04:ac:39: 21:ba:ad:11:4c:2f:39:1c:17:72:ef:e7:c4:24:85:66:73:75: 50:9e:da:25:b4:fd:3e:e6:57:82:97:7d:2d:15:70:38:a0:7b: f5:2a:eb:45:79:5e:12:bd:83:1b:83:da:8c:76:20:ac:4c:d6: f2:59:e2:48:3d:f4:2e:e0:1f:d2:12:df:9e:c0:7d:3e:8a:5e: df:7a:db:ea:58:27:87:4b:bb:19:a3:5a:7b:01:c0:42:68:a8: ff:44:e5:77:06:38:eb:4a:85:75:53:dc:01:8c:1d:e0:c1:60: c5:13:da:ac:11:41:f2:cf:db:91:7e:44:86:86:5e:91:26:3a: 3c:14:65:e8:de:47:32:50:e2:1e:fd:70:e1:f2:59:98:9b:c4: 7c:8f:e8:96:db:b8:f1:94:fe:83:d5:b1:1e:3a:d7:d3:4b:7f: 8d:ca:d6:14:7a:a1:71:06:13:dd:a7:8c:82:4b:6b:c2:08:65: af:5d:b5:4d:91:52:21:68:71:0e:69:7b:f4:df:63:7b:ee:cf: 24:20:fb:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKDk3MDZCRjEyMTkzNTREMDE4QzE1ODU4Q0U5NzY3OUZF NDNFNkIzMTIwHhcNMjUxMjIzMDQwMzA0WhcNMjUxMjMwMDQwMzA0WjAYMRYwFAYD VQQDDA02OTRhMTQ3OC00MDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfDQ0RRpMad815Al897ervzkTOTLM4+0M3Lpo+C7UWldTsmG1kEkdbrt0MTc BMvcY+T0765ABnSHscHQhbn+x3B4v+T66QzJhygBH7qu3itOCHXixAhn1w3gWm2f Ix4sLIzoFCY2DFjY/VOCUJCPitgs8bKmCUE8XdDCRSfDKpwcJ4g41giWNHPivFvU XYwJE1sQu7fQ+IkFSh4A7sOFayNpPPSoGUb55Q1n3IMrm4aAMGedwqjmWCLOkDIJ bbXcS3qP9xT6p8c4Q2nkuEvl/aJnnSu0f7XcGylI3TyjTx9w0ZPceFj+fEU5DhWV eHzGjd2yygknoTrv/WwcwFWt7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBup1XcS UbT5px1gdnhKGqVWZdhgMB8GA1UdIwQYMBaAFJcGvxIZNU0BjBWFjOl2ef5D5rMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9DMTJFODQyQzU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRRR01GWVdNNlhaNV9rUG1z eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9DMTJFODQyQzU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRR R01GWVdNNlhaNV9rUG1zeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX/AwVGftfP1x0jj2yAv71NDzN4GEN9sYRXdNJspfrfwWgmZOZtgu3 BPmQgmilpGeQF9kErDkhuq0RTC85HBdy7+fEJIVmc3VQntoltP0+5leCl30tFXA4 oHv1KutFeV4SvYMbg9qMdiCsTNbyWeJIPfQu4B/SEt+ewH0+il7fetvqWCeHS7sZ o1p7AcBCaKj/ROV3BjjrSoV1U9wBjB3gwWDFE9qsEUHyz9uRfkSGhl6RJjo8FGXo 3kcyUOIe/XDh8lmYm8R8j+iW27jxlP6D1bEeOtfTS3+NytYUeqFxBhPdp4yCS2vC CGWvXbVNkVIhaHEOaXv032N77s8kIPuz -----END CERTIFICATE-----Generated at Wed Dec 24 21:24:04 2025 by rpki-client