This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft File: LtTacwW1lNyVt6BBDZrLKN4pIL8.mft (raw, json) Hash identifier: fVD5pzCc6YtzlcdsTOisP0ynm/8OlIm592UFlC/oyu0= Subject key identifier: 3B:0F:9A:A1:83:3C:B9:25:F0:90:DD:03:D1:C3:2B:1B:68:F4:42:90 Authority key identifier: 2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF Certificate issuer: /CN=A91454E4/serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF Certificate serial: 04F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft Manifest number: 04EA Signing time: Mon 22 Dec 2025 22:51:15 +0000 Manifest this update: Mon 22 Dec 2025 22:51:14 +0000 Manifest next update: Mon 29 Dec 2025 22:51:14 +0000 Files and hashes: 1: LtTacwW1lNyVt6BBDZrLKN4pIL8.crl (hash: 5VxquC9GwFH13A5JVereFSGCFRqTPx1CzC+5l5qN9QY=) 2: A88BB9A01CA011EFB3F91015C4F9AE02.roa (hash: XmiVLeP2/s1DW27hoy1zX73fTUJ6HYcFrkZxidVKlRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1268 (0x4f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454E4, serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF Validity Not Before: Dec 22 22:51:14 2025 GMT Not After : Dec 29 22:51:14 2025 GMT Subject: CN=6949cb63-78ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:df:7d:b6:04:2e:ef:1b:f2:82:20:da:a9:34: 68:88:d6:ba:01:2d:94:3b:be:33:8c:92:29:bf:c4: 97:e2:2e:d9:37:c2:d3:7b:f3:77:6d:c7:2c:f4:08: 54:a7:cd:20:a1:00:9a:f5:74:00:4f:3b:2c:00:ca: 69:2c:fb:5d:39:e6:a8:d9:4c:9b:f7:f5:e1:99:dd: 93:f2:94:5a:07:12:76:e9:11:80:a0:9e:db:3d:a6: c1:82:ad:21:64:06:98:fe:3f:c2:b3:02:53:93:fd: 85:53:7f:3a:fa:a8:5c:61:d4:73:20:9f:8f:bb:0c: 55:09:b5:bf:20:76:31:f3:5a:d4:27:35:ed:5a:e2: 85:0a:2a:13:25:8e:61:a1:7b:f7:b0:67:8b:51:c3: 6d:1f:3b:d2:49:db:f3:49:7d:a4:15:27:53:70:0e: 9a:aa:5a:f0:a8:dc:84:d9:ea:cd:3d:47:1e:91:1c: 7f:c4:60:ff:94:7d:74:0c:8f:29:80:59:2b:54:47: bb:89:47:63:26:61:d9:21:ed:4b:e3:84:b4:64:7f: 1b:76:11:46:95:46:61:1b:26:dc:06:72:55:97:1e: 85:b2:cc:bb:d2:6e:c8:55:40:fa:f5:62:f6:74:9e: 0f:92:50:20:6f:e7:5e:f2:72:74:aa:5a:b4:cc:ce: 2a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0F:9A:A1:83:3C:B9:25:F0:90:DD:03:D1:C3:2B:1B:68:F4:42:90 X509v3 Authority Key Identifier: keyid:2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e6:d7:70:e4:53:99:dd:fd:6c:e2:81:f3:96:c4:b4:60:5c: 84:eb:63:a0:fc:ac:0a:9e:b7:7b:99:87:08:94:fe:24:a9:77: e1:ab:a7:1c:47:54:c9:b1:b3:f4:32:98:7f:ec:07:a8:75:99: cd:19:f6:29:5b:4f:24:56:9a:92:5f:db:c2:b3:7d:4d:de:ff: 45:e9:65:6e:14:3f:cf:f1:4a:5c:2f:9b:c3:92:1b:1c:58:6d: fd:cf:ac:8f:58:5c:62:95:33:2f:bb:28:aa:30:39:2b:41:b3: 44:ca:15:64:84:cd:62:01:b6:5b:ab:fb:a9:9b:a6:f3:17:89: 50:bb:82:99:ec:a1:94:9c:6e:11:1d:ff:a1:56:58:c2:bb:8c: 8a:11:c8:fe:e9:56:59:e6:90:c1:3b:e8:a1:a8:45:36:34:c8: 26:99:a8:9a:85:8a:85:10:2a:0f:0d:0f:e4:5e:4b:bc:da:81: 8d:ec:a7:99:a8:87:c4:37:d1:48:0c:cc:b3:1d:95:72:99:09: 84:40:b0:a9:63:4e:15:32:86:18:f7:c6:ab:03:ca:78:53:98: c3:37:78:85:88:2a:11:d3:4b:55:c0:dd:cb:aa:77:96:a2:e8: d2:2c:67:af:bb:25:c3:41:8a:79:b9:d3:30:cc:5e:26:83:3d: aa:fd:1a:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0RTQxMTAvBgNVBAUTKDJFRDREQTczMDVCNTk0REM5NUI3QTA0MTBEOUFDQjI4 REUyOTIwQkYwHhcNMjUxMjIyMjI1MTE0WhcNMjUxMjI5MjI1MTE0WjAYMRYwFAYD VQQDDA02OTQ5Y2I2My03OGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsN99tgQu7xvygiDaqTRoiNa6AS2UO74zjJIpv8SX4i7ZN8LTe/N3bccs9AhU p80goQCa9XQATzssAMppLPtdOeao2Uyb9/Xhmd2T8pRaBxJ26RGAoJ7bPabBgq0h ZAaY/j/CswJTk/2FU386+qhcYdRzIJ+PuwxVCbW/IHYx81rUJzXtWuKFCioTJY5h oXv3sGeLUcNtHzvSSdvzSX2kFSdTcA6aqlrwqNyE2erNPUcekRx/xGD/lH10DI8p gFkrVEe7iUdjJmHZIe1L44S0ZH8bdhFGlUZhGybcBnJVlx6Fssy70m7IVUD69WL2 dJ4PklAgb+de8nJ0qlq0zM4qtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsPmqGD PLkl8JDdA9HDKxto9EKQMB8GA1UdIwQYMBaAFC7U2nMFtZTclbegQQ2ayyjeKSC/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRFNC83NzE0QzY3QTQz ODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxOeVZ0NkJCRFpyTEtONHBJ TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x0VGFjd1cxbE55VnQ2QkJEWnJMS040cElMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRFNC83NzE0QzY3QTQzODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxO eVZ0NkJCRFpyTEtONHBJTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs5tdw5FOZ3f1s4oHzlsS0YFyE62Og/KwKnrd7mYcIlP4kqXfhq6cc R1TJsbP0Mph/7AeodZnNGfYpW08kVpqSX9vCs31N3v9F6WVuFD/P8UpcL5vDkhsc WG39z6yPWFxilTMvuyiqMDkrQbNEyhVkhM1iAbZbq/upm6bzF4lQu4KZ7KGUnG4R Hf+hVljCu4yKEcj+6VZZ5pDBO+ihqEU2NMgmmaiahYqFECoPDQ/kXku82oGN7KeZ qIfEN9FIDMyzHZVymQmEQLCpY04VMoYY98arA8p4U5jDN3iFiCoR00tVwN3LqneW oujSLGevuyXDQYp5udMwzF4mgz2q/Rpr -----END CERTIFICATE-----Generated at Tue Dec 23 09:46:07 2025 by rpki-client