This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft File: LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft (raw, json) Hash identifier: YRzoTJTJ2VVMbo1LQG+zC2mlGvB4005pXI5WRSRxIKc= Subject key identifier: 60:38:AC:21:D2:4B:E5:29:6D:A1:60:4F:B0:B8:7F:F4:A0:72:55:13 Authority key identifier: 2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C Certificate issuer: /CN=A91552E3/serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Certificate serial: 069D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft Manifest number: 068C Signing time: Mon 22 Dec 2025 21:43:38 +0000 Manifest this update: Mon 22 Dec 2025 21:43:37 +0000 Manifest next update: Mon 29 Dec 2025 21:43:37 +0000 Files and hashes: 1: LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl (hash: cAavs8LL5+ap7PLGLIES2wq5slUdMbzGfUnn+iHSARs=) 2: E0A9637E41FA11ECB2D7F760C4F9AE02.roa (hash: syoIEmBkPUbXHyU102SwHVQfhD/obq6DIZMw3IYU94w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1693 (0x69d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91552E3, serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Validity Not Before: Dec 22 21:43:37 2025 GMT Not After : Dec 29 21:43:37 2025 GMT Subject: CN=6949bb8a-c7b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:04:dc:26:f2:8c:34:72:bf:31:b3:ab:1d:38: 8e:df:f8:51:5c:0f:ea:a5:f3:b2:c5:eb:fd:e9:2b: b5:91:c2:db:0f:4e:9f:02:67:49:7a:71:bf:10:82: 1e:34:8f:7a:a0:73:e4:b9:ad:57:62:ef:d2:86:88: 67:61:aa:bc:c8:61:5e:a8:04:ca:31:0a:40:06:32: 77:4b:d8:ec:82:05:4d:6c:ab:29:8e:77:5b:7b:91: 73:a0:e8:95:47:d4:88:e1:c7:1d:5b:b9:f0:67:32: 14:08:a5:ff:1d:e7:06:94:03:f7:06:17:f9:5e:45: 2a:f2:4b:65:d7:76:57:9a:a7:2c:7c:27:f9:41:3c: e5:bb:e7:2d:4e:b5:88:74:ca:41:af:60:9c:1b:80: 23:20:04:c9:a8:fb:6b:b0:1a:ae:7d:7d:3d:ee:1d: 3d:8c:2c:30:0a:a0:89:46:f3:72:82:1f:07:fd:84: 96:f8:5a:55:72:a9:13:d4:7b:06:fd:37:ea:bb:71: 08:88:ab:c3:66:29:d1:84:00:bd:ad:2e:a7:16:3c: fc:b9:06:8d:15:a8:15:7e:2f:cd:7d:cf:ff:48:c3: c7:52:dc:60:50:af:87:e3:c8:2d:ba:51:8b:19:ce: 41:ca:16:9f:eb:5a:c4:88:04:f6:4b:8a:36:d1:f2: df:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:38:AC:21:D2:4B:E5:29:6D:A1:60:4F:B0:B8:7F:F4:A0:72:55:13 X509v3 Authority Key Identifier: keyid:2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c1:80:66:2c:9f:81:d5:42:8f:e3:e2:3f:f0:ef:34:8d:fd: 76:6c:70:10:4e:c1:5d:9f:27:ea:bd:18:b5:2e:4e:45:6e:88: 8b:86:bf:c4:1c:ee:d1:cc:8e:ca:2e:95:71:f4:2c:ce:f6:cf: 0f:0b:8f:38:f2:39:4c:a4:37:60:13:0b:57:00:19:6b:6f:04: 88:e2:6f:18:5b:cd:de:2b:27:64:a7:45:b7:71:b8:8f:2e:5e: 31:6d:ec:e0:b4:44:17:a5:df:00:a6:c7:d7:bf:01:c0:a1:eb: 17:08:90:da:5a:4d:22:06:22:9e:15:d1:d3:59:4e:eb:0c:70: 46:26:f3:83:78:6f:f2:91:42:5c:d2:75:b1:89:89:67:51:d5: a1:72:ea:85:86:d4:84:03:42:28:a2:da:1d:7e:b8:87:ed:6f: 46:66:87:74:e3:a3:5b:15:db:ff:cc:ed:ef:bf:f8:c6:ab:03: 33:be:54:d2:66:20:f6:bf:41:5a:53:b8:05:c8:b1:f7:b1:a9: ad:03:af:69:d8:f9:42:79:c6:3f:db:58:dd:9a:da:27:3f:f8: 11:ec:2a:d9:18:9e:b4:9b:53:6a:56:b2:e2:0f:13:3e:75:19: 37:be:95:16:43:43:07:48:5b:a8:d4:dd:11:0b:c6:6e:e8:b0: a0:9b:b6:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUyRTMxMTAvBgNVBAUTKDJDRkE0RDhGNDQxMEE5NTFBQTE2NEU1NTRDNjU4MDVE OENGODg5NUMwHhcNMjUxMjIyMjE0MzM3WhcNMjUxMjI5MjE0MzM3WjAYMRYwFAYD VQQDDA02OTQ5YmI4YS1jN2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQTcJvKMNHK/MbOrHTiO3/hRXA/qpfOyxev96Su1kcLbD06fAmdJenG/EIIe NI96oHPkua1XYu/ShohnYaq8yGFeqATKMQpABjJ3S9jsggVNbKspjndbe5FzoOiV R9SI4ccdW7nwZzIUCKX/HecGlAP3Bhf5XkUq8ktl13ZXmqcsfCf5QTzlu+ctTrWI dMpBr2CcG4AjIATJqPtrsBqufX097h09jCwwCqCJRvNygh8H/YSW+FpVcqkT1HsG /Tfqu3EIiKvDZinRhAC9rS6nFjz8uQaNFagVfi/Nfc//SMPHUtxgUK+H48gtulGL Gc5Byhaf61rEiAT2S4o20fLfkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGA4rCHS S+UpbaFgT7C4f/SgclUTMB8GA1UdIwQYMBaAFCz6TY9EEKlRqhZOVUxlgF2M+Ilc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTJFMy8yOTQ1M0I3NEEw NzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFWR3FGazVWVEdXQVhZejRp VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xQcE5qMFFRcVZHcUZrNVZUR1dBWFl6NGlWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTJFMy8yOTQ1M0I3NEEwNzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFW R3FGazVWVEdXQVhZejRpVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtwYBmLJ+B1UKP4+I/8O80jf12bHAQTsFdnyfqvRi1Lk5FboiLhr/E HO7RzI7KLpVx9CzO9s8PC4848jlMpDdgEwtXABlrbwSI4m8YW83eKydkp0W3cbiP Ll4xbezgtEQXpd8ApsfXvwHAoesXCJDaWk0iBiKeFdHTWU7rDHBGJvODeG/ykUJc 0nWxiYlnUdWhcuqFhtSEA0IootodfriH7W9GZod046NbFdv/zO3vv/jGqwMzvlTS ZiD2v0FaU7gFyLH3samtA69p2PlCecY/21jdmtonP/gR7CrZGJ60m1NqVrLiDxM+ dRk3vpUWQ0MHSFuo1N0RC8Zu6LCgm7YS -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:21 2025 by rpki-client