This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft File: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft (raw, json) Hash identifier: 4oQEVCcYny+GAWgywkAPYvI5P+FLwQv8CNDPjDeHd1E= Subject key identifier: 11:FC:9B:B9:19:2D:62:13:4E:2D:D7:DC:3A:B2:4E:47:D2:2F:66:C8 Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77 Certificate issuer: /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677 Certificate serial: 0585 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft Manifest number: 0568 Signing time: Mon 22 Dec 2025 22:31:52 +0000 Manifest this update: Mon 22 Dec 2025 22:31:51 +0000 Manifest next update: Mon 29 Dec 2025 22:31:51 +0000 Files and hashes: 1: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl (hash: nVwAfcnzS+FWLX4hqkQhpa28oMEcurUy0gFLgVMRKyQ=) 2: 1347AA9019FE11ECB459B141C4F9AE02.roa (hash: fCn+m1Y3s4qDIZUNYo4x+QJzX9KNTkFwagXKOoylYkw=) 3: F0F715D8D91811EFAD9B2462C4F9AE02.roa (hash: 0eC5c42+O3/zR7ToxD38Dr0t546Zok3PpDvZy47K3EU=) 4: D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa (hash: 0EFgLjyojEn+oExrioyWCuc3c6/85UK37c3kRT/1o4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1413 (0x585) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677 Validity Not Before: Dec 22 22:31:51 2025 GMT Not After : Dec 29 22:31:51 2025 GMT Subject: CN=6949c6d8-b1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cd:80:28:c4:d0:16:1b:81:e6:06:01:49:6e: 7e:63:45:25:86:88:10:64:a8:87:28:b3:c5:58:36: 3f:f9:00:7c:be:ac:cb:5d:0a:4a:27:a4:31:1b:54: b5:61:4f:16:3c:29:48:33:be:0e:a2:d8:64:a4:92: b1:9c:c9:a6:84:ab:d3:7e:5a:d3:c2:a9:2b:92:0f: 41:2e:29:0d:6a:e5:ea:1c:c1:01:d4:85:19:5b:fe: d0:2e:7b:1f:a7:04:06:d0:4d:54:df:37:51:68:97: c2:bc:42:99:6a:53:c4:17:2e:e4:56:70:60:02:4f: 33:58:de:d1:6d:1f:73:a7:e2:79:4b:f0:6a:76:dc: 4b:d6:02:34:9c:71:cb:e7:0d:44:71:c0:06:23:37: ab:b8:0f:08:b1:28:ab:be:13:40:c7:33:e4:00:6d: c1:2a:e4:f3:0c:8b:b9:34:7d:25:b5:53:21:1c:93: 9c:22:67:f0:13:90:5a:3f:90:62:27:6b:2c:41:54: fe:68:9a:e6:38:7f:de:6d:c5:1b:59:cd:56:71:20: ce:97:ce:ea:3c:eb:22:8f:ad:c1:43:51:8a:69:f6: f7:22:3b:c8:bb:ea:09:56:b9:6c:91:1d:6b:b2:8e: b9:31:22:82:94:94:db:00:64:86:9a:b9:5f:94:ef: e6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FC:9B:B9:19:2D:62:13:4E:2D:D7:DC:3A:B2:4E:47:D2:2F:66:C8 X509v3 Authority Key Identifier: keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:15:77:da:3b:e8:6b:75:1f:53:94:bc:77:66:45:41:54:19: 45:2a:2a:49:4d:28:20:67:46:24:24:7d:25:b0:a6:20:c0:df: 5a:20:08:df:04:75:c7:dd:6a:45:1d:99:b2:90:3e:c7:de:72: 3d:5a:f7:9e:56:9e:46:d2:0a:df:9e:2a:d8:ea:84:6e:27:c5: 09:bf:1b:24:9c:df:30:88:30:72:56:07:2f:f9:77:45:0e:dd: 65:b0:ad:ce:2b:fe:98:ec:ec:22:0d:d4:e9:60:9b:26:b3:29: 55:45:c0:2a:26:86:f5:7c:69:3f:5c:bb:55:9f:6b:83:07:88: ab:b7:86:71:40:11:88:33:f3:25:b3:6a:45:63:67:16:14:ca: ae:c8:28:5a:32:b0:78:81:d4:84:a6:ee:f9:3f:eb:e3:c8:af: c5:bd:de:ea:6b:cb:9e:f1:67:3a:13:5d:d5:52:99:de:1d:58: 7e:2f:cf:11:b5:3e:72:48:97:6e:a4:5f:33:f1:c1:18:9b:65: 8e:32:cd:59:3f:3e:e3:5a:9e:ee:39:98:d3:c9:e9:36:13:3e: 89:1e:a4:08:94:84:7d:3e:c7:56:61:2a:52:f0:f3:d2:a3:f0: 8f:62:e9:f8:ff:d1:86:5e:5b:96:c5:77:bc:42:bd:47:9f:5d: 75:62:14:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2QkIxMTAvBgNVBAUTKDJDQ0ExMzU0MEYwMTNCOTNCMjNDOURGMTREOTYxN0RB NDBDQjI2NzcwHhcNMjUxMjIyMjIzMTUxWhcNMjUxMjI5MjIzMTUxWjAYMRYwFAYD VQQDDA02OTQ5YzZkOC1iMWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzc2AKMTQFhuB5gYBSW5+Y0UlhogQZKiHKLPFWDY/+QB8vqzLXQpKJ6QxG1S1 YU8WPClIM74OothkpJKxnMmmhKvTflrTwqkrkg9BLikNauXqHMEB1IUZW/7QLnsf pwQG0E1U3zdRaJfCvEKZalPEFy7kVnBgAk8zWN7RbR9zp+J5S/BqdtxL1gI0nHHL 5w1EccAGIzeruA8IsSirvhNAxzPkAG3BKuTzDIu5NH0ltVMhHJOcImfwE5BaP5Bi J2ssQVT+aJrmOH/ebcUbWc1WcSDOl87qPOsij63BQ1GKafb3IjvIu+oJVrlskR1r so65MSKClJTbAGSGmrlflO/mcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBH8m7kZ LWITTi3X3DqyTkfSL2bIMB8GA1UdIwQYMBaAFCzKE1QPATuTsjyd8U2WF9pAyyZ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQi81Q0VBNTQ5NDE2 RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81T3lQSjN4VFpZWDJrRExK bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNb1RWQThCTzVPeVBKM3hUWllYMmtETEpuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTZCQi81Q0VBNTQ5NDE2RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81 T3lQSjN4VFpZWDJrRExKbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRFXfaO+hrdR9TlLx3ZkVBVBlFKipJTSggZ0YkJH0lsKYgwN9aIAjf BHXH3WpFHZmykD7H3nI9WveeVp5G0grfnirY6oRuJ8UJvxsknN8wiDByVgcv+XdF Dt1lsK3OK/6Y7OwiDdTpYJsmsylVRcAqJob1fGk/XLtVn2uDB4irt4ZxQBGIM/Ml s2pFY2cWFMquyChaMrB4gdSEpu75P+vjyK/Fvd7qa8ue8Wc6E13VUpneHVh+L88R tT5ySJdupF8z8cEYm2WOMs1ZPz7jWp7uOZjTyek2Ez6JHqQIlIR9PsdWYSpS8PPS o/CPYun4/9GGXluWxXe8Qr1Hn111YhRm -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:53 2025 by rpki-client