This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft File: Lz71uQE3FOMXTGcArgSCTi8FwjA.mft (raw, json) Hash identifier: yPS71kBjJRjL+a2c5j3cU+iSGpCM9xkRl1qdmVMzxJU= Subject key identifier: 41:47:35:62:30:A3:8C:E3:38:A5:5E:94:F9:AC:07:0E:E3:E4:98:3E Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Certificate serial: 039F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft Manifest number: 037D Signing time: Fri 19 Dec 2025 00:06:40 +0000 Manifest this update: Fri 19 Dec 2025 00:06:40 +0000 Manifest next update: Fri 26 Dec 2025 00:06:40 +0000 Files and hashes: 1: Lz71uQE3FOMXTGcArgSCTi8FwjA.crl (hash: 6cGpn5f7+BULZ8VPrnePH4ZSk+EFjtnVV3zO4Rxiu0o=) 2: 19E46D60D0F711EC8673072FC4F9AE02.roa (hash: eS0SkthbbyWxVM1PH+Y2UO1xSi4Vr2C2N13i593TCX4=) 3: 69C96612D0F411EC8DAD6D11C4F9AE02.roa (hash: ugSG0jqem3rs4xTGOWUqAAlzlasFYzS5jXjJfZyh3NM=) 4: 1BC3E9F8D0F711EC8673072FC4F9AE02.roa (hash: uEFMEysaJCpfT6acgeEaH657dOYiucYQFMSducsR5+M=) 5: 196C52A8D0F711EC8673072FC4F9AE02.roa (hash: 1zywqVEPzRbdKjUH9lfurYX548Q8woU0JCmn0L04HiU=) 6: 6920E4D8D0F411EC8DAD6D11C4F9AE02.roa (hash: RP0USEP4cmm5/rPyavYfSImz5bM19LFBMACm4cna7sk=) 7: 6A430D5AD0F411EC8DAD6D11C4F9AE02.roa (hash: QV4TEx4o0H+S1ztXPsRaHI/PqCLYaPoZZrkBgaPymwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 927 (0x39f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Validity Not Before: Dec 19 00:06:40 2025 GMT Not After : Dec 26 00:06:40 2025 GMT Subject: CN=69449710-0f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:af:e1:f5:ad:dc:d5:8e:a2:f3:72:82:37:f2: 95:4a:01:56:5f:71:80:be:43:d7:20:d4:2b:13:eb: a3:12:ab:89:d9:6b:c2:0f:7f:01:6b:dd:2c:55:00: 0c:89:1c:e5:49:47:fc:aa:d2:39:34:ee:20:9f:5d: b7:16:a6:54:21:91:9f:1e:b4:65:12:b0:91:1b:c2: bc:0c:d4:de:7b:10:59:5e:34:f1:61:b7:cf:42:72: d2:25:ef:ea:18:14:88:1a:6c:e8:8f:95:05:dd:71: e6:32:ba:63:8b:ed:e7:0a:a5:ce:e7:57:c3:09:42: 2b:9e:53:4b:41:e9:5b:a6:fc:4f:a6:bd:33:bb:49: 07:62:45:8d:fb:86:c1:27:9c:c5:26:92:a7:bb:88: 42:17:c3:8e:bc:22:cd:57:a3:bd:4a:d4:2a:4c:32: 4d:70:0d:d0:9d:16:6d:ca:c1:0f:fd:4a:ee:c7:04: a8:92:45:2b:92:3b:78:5b:8f:d5:4e:6d:21:30:43: 09:d1:41:ed:58:1d:aa:83:37:74:aa:4b:bd:6d:34: 1b:f1:d1:cd:3f:11:b5:66:4b:d2:59:e3:5e:e1:7a: f3:3f:4f:d7:f9:e3:8b:09:73:97:51:ac:c6:d0:0e: ee:84:49:82:91:95:93:24:af:fb:93:e0:6d:4a:43: 3e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:47:35:62:30:A3:8C:E3:38:A5:5E:94:F9:AC:07:0E:E3:E4:98:3E X509v3 Authority Key Identifier: keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:90:e5:0b:21:89:a6:5f:5f:73:8f:90:6c:74:3b:e7:d9:37: e9:27:74:96:97:a8:23:8f:b7:e4:75:8c:29:12:97:27:ea:23: eb:c3:0a:df:b2:71:88:b0:ae:a8:be:bd:b5:48:71:3d:34:3c: e8:70:2a:2e:0e:36:f4:c7:f8:0e:cd:f7:23:ef:d1:3b:d6:2e: ed:86:bf:b5:8a:51:90:8d:9c:95:c9:c8:47:84:bf:22:29:66: a0:f2:76:61:3e:07:a9:91:08:eb:9d:66:6e:95:1b:c3:1b:5b: 0c:2c:0a:1f:be:55:c9:7b:1e:59:bd:1c:ac:5b:06:5e:47:78: 15:00:77:8e:11:89:6d:88:7a:73:9b:14:90:d3:97:5b:37:61: c2:cf:77:c9:3a:a3:2d:61:de:42:01:6a:a2:16:17:d4:3e:01: 9d:da:42:f9:ab:e4:5a:90:62:7f:46:3d:8a:ed:0a:47:3d:75: 0f:85:02:8c:a4:e3:b7:25:6b:94:fc:eb:31:f3:86:20:f6:8d: cd:b8:98:0a:5b:e8:86:c3:bb:65:1e:76:6c:ec:6c:1b:ac:c3: a3:5d:45:23:3f:54:ec:29:94:67:68:bb:cd:3c:ea:26:d1:94: a0:35:65:ab:2f:17:23:7f:a6:04:73:f4:a0:ab:26:14:aa:7d: 34:a9:b7:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ2QjExMTAvBgNVBAUTKDJGM0VGNUI5MDEzNzE0RTMxNzRDNjcwMEFFMDQ4MjRF MkYwNUMyMzAwHhcNMjUxMjE5MDAwNjQwWhcNMjUxMjI2MDAwNjQwWjAYMRYwFAYD VQQDDA02OTQ0OTcxMC0wZjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxa/h9a3c1Y6i83KCN/KVSgFWX3GAvkPXINQrE+ujEquJ2WvCD38Ba90sVQAM iRzlSUf8qtI5NO4gn123FqZUIZGfHrRlErCRG8K8DNTeexBZXjTxYbfPQnLSJe/q GBSIGmzoj5UF3XHmMrpji+3nCqXO51fDCUIrnlNLQelbpvxPpr0zu0kHYkWN+4bB J5zFJpKnu4hCF8OOvCLNV6O9StQqTDJNcA3QnRZtysEP/UruxwSokkUrkjt4W4/V Tm0hMEMJ0UHtWB2qgzd0qku9bTQb8dHNPxG1ZkvSWeNe4XrzP0/X+eOLCXOXUazG 0A7uhEmCkZWTJK/7k+BtSkM+WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFHNWIw o4zjOKVelPmsBw7j5Jg+MB8GA1UdIwQYMBaAFC8+9bkBNxTjF0xnAK4Egk4vBcIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDZCMS85QTBFQ0UxMEQw RjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZPTVhUR2NBcmdTQ1RpOEZ3 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6NzF1UUUzRk9NWFRHY0FyZ1NDVGk4RndqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDZCMS85QTBFQ0UxMEQwRjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZP TVhUR2NBcmdTQ1RpOEZ3akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCokOULIYmmX19zj5BsdDvn2TfpJ3SWl6gjj7fkdYwpEpcn6iPrwwrf snGIsK6ovr21SHE9NDzocCouDjb0x/gOzfcj79E71i7thr+1ilGQjZyVychHhL8i KWag8nZhPgepkQjrnWZulRvDG1sMLAofvlXJex5ZvRysWwZeR3gVAHeOEYltiHpz mxSQ05dbN2HCz3fJOqMtYd5CAWqiFhfUPgGd2kL5q+RakGJ/Rj2K7QpHPXUPhQKM pOO3JWuU/Osx84Yg9o3NuJgKW+iGw7tlHnZs7GwbrMOjXUUjP1TsKZRnaLvNPOom 0ZSgNWWrLxcjf6YEc/SgqyYUqn00qbe7 -----END CERTIFICATE-----Generated at Fri Dec 19 10:54:50 2025 by rpki-client