This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft File: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft (raw, json) Hash identifier: ePu9cqLmD3qrayq0HJSUrpU1yfB5Nz8kiK5I7igrIbo= Subject key identifier: 58:11:4B:4B:B0:53:77:50:79:47:59:27:F1:53:20:AF:D0:B1:29:08 Authority key identifier: 97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7 Certificate issuer: /CN=A91597A7/serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft Manifest number: 1B Signing time: Tue 23 Dec 2025 06:40:18 +0000 Manifest this update: Tue 23 Dec 2025 06:40:18 +0000 Manifest next update: Tue 30 Dec 2025 06:40:18 +0000 Files and hashes: 1: lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl (hash: m1usjTYWei5E3pM6Pj7s1f+x40qm1mGrqxxj1ftRlrc=) 2: B674DD44BB3C11F0AD98C485C4F9AE02.roa (hash: PNZrl6zNI+1AHV1SGmGe71ONQBJFe9ys1G9nldi1fqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597A7, serialNumber=971F99D18F830DAD4554906CAD0AD5998BBB52A7 Validity Not Before: Dec 23 06:40:18 2025 GMT Not After : Dec 30 06:40:18 2025 GMT Subject: CN=694a3952-aad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:70:27:f0:b5:50:e0:14:4d:17:b0:32:fe:0c: c4:c6:dd:2c:78:dd:f0:8c:18:53:48:1f:7c:b7:80: 9a:1b:e4:ef:e2:17:5f:df:8d:98:dd:d0:2b:54:39: 33:ee:b3:be:0c:85:10:fc:c9:2b:11:64:0d:90:d2: 3d:aa:17:2a:93:63:ee:1e:27:29:de:21:5c:15:a4: 45:6b:ba:25:e8:07:d6:ca:f5:8d:c3:6c:be:55:8c: ef:9b:fc:e1:6a:34:da:47:07:79:fd:b0:67:01:7e: 7c:a2:e6:6e:56:39:b2:fd:3e:e8:fc:fe:70:76:71: 38:ec:88:58:88:a5:c2:ef:8e:6b:dc:bb:0c:cc:14: 63:da:eb:df:70:4c:db:6f:19:08:b2:61:b3:23:c4: 7d:f7:95:61:f5:23:27:1c:d0:64:37:bf:94:97:43: 9b:80:1d:4e:fc:95:a6:fd:0f:80:db:2d:0b:8f:28: 0a:b5:b4:2b:85:81:4d:77:a3:8e:9c:70:af:0c:de: 97:0e:70:de:04:e6:ed:91:dd:13:f2:ca:0a:e2:a1: 2c:b4:fc:07:19:62:7a:63:68:b9:f2:39:4c:d8:9b: cb:4c:90:bc:58:66:69:8c:e1:06:41:6d:fe:58:21: cd:0a:38:de:84:34:3f:5c:c9:93:3b:90:0b:26:fd: 43:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:11:4B:4B:B0:53:77:50:79:47:59:27:F1:53:20:AF:D0:B1:29:08 X509v3 Authority Key Identifier: keyid:97:1F:99:D1:8F:83:0D:AD:45:54:90:6C:AD:0A:D5:99:8B:BB:52:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/0B4C2DA0BA3811F093408F6BC4F9AE02/lx-Z0Y-DDa1FVJBsrQrVmYu7Uqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:33:5c:db:36:5c:35:66:34:0b:9b:0e:f1:64:99:1b:c3:9a: 02:e2:06:39:2a:91:9e:4e:b6:27:35:fe:2c:ff:d6:7f:80:f7: ac:00:18:d8:33:3b:85:cb:1f:46:28:36:c8:1f:05:0c:f7:88: 03:27:52:bd:43:29:80:2e:ef:97:d9:78:2d:55:cd:df:84:2d: 08:24:b4:4b:39:c5:c0:b7:a6:e6:e1:f9:b8:32:40:a7:c7:67: 7a:a8:ea:81:dc:23:56:e2:ce:0b:e5:2c:fd:a4:72:b9:f7:fa: cc:7c:e0:02:e0:2e:8b:54:77:cd:95:ed:df:4f:86:1e:8d:90: f9:c7:c3:b0:f2:65:41:5f:94:d7:e9:85:7b:93:f2:4c:46:25: ea:5b:9e:ed:ff:ba:bd:f2:38:9d:b2:50:7a:e9:e0:84:e1:73: a8:d9:6a:1d:71:df:b2:b9:ad:73:be:6d:3d:b1:53:2c:79:39: 25:07:59:9b:50:a7:e7:3a:ad:5c:d0:cc:31:c6:10:c1:75:79: ad:d9:c8:d8:b0:71:e2:65:de:93:5d:78:c2:40:b6:21:b1:9d: 6a:c5:e3:c9:68:02:7e:8c:67:9c:68:c7:05:75:b2:cc:3a:eb: 8a:82:14:3c:1b:16:49:c0:c0:2b:2b:b4:a3:f2:71:b0:e5:e9: 2d:2e:d4:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTdBNzExMC8GA1UEBRMoOTcxRjk5RDE4RjgzMERBRDQ1NTQ5MDZDQUQwQUQ1OTk4 QkJCNTJBNzAeFw0yNTEyMjMwNjQwMThaFw0yNTEyMzAwNjQwMThaMBgxFjAUBgNV BAMMDTY5NGEzOTUyLWFhZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8cCfwtVDgFE0XsDL+DMTG3Sx43fCMGFNIH3y3gJob5O/iF1/fjZjd0CtUOTPu s74MhRD8ySsRZA2Q0j2qFyqTY+4eJyneIVwVpEVruiXoB9bK9Y3DbL5VjO+b/OFq NNpHB3n9sGcBfnyi5m5WObL9Puj8/nB2cTjsiFiIpcLvjmvcuwzMFGPa699wTNtv GQiyYbMjxH33lWH1Iycc0GQ3v5SXQ5uAHU78lab9D4DbLQuPKAq1tCuFgU13o46c cK8M3pcOcN4E5u2R3RPyygrioSy0/AcZYnpjaLnyOUzYm8tMkLxYZmmM4QZBbf5Y Ic0KON6END9cyZM7kAsm/UMfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWBFLS7BT d1B5R1kn8VMgr9CxKQgwHwYDVR0jBBgwFoAUlx+Z0Y+DDa1FVJBsrQrVmYu7Uqcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5N0E3LzBCNEMyREEwQkEz ODExRjA5MzQwOEY2QkM0RjlBRTAyL2x4LVowWS1ERGExRlZKQnNyUXJWbVl1N1Vx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHgtWjBZLUREYTFGVkpCc3JRclZtWXU3VXFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 N0E3LzBCNEMyREEwQkEzODExRjA5MzQwOEY2QkM0RjlBRTAyL2x4LVowWS1ERGEx RlZKQnNyUXJWbVl1N1VxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIYzXNs2XDVmNAubDvFkmRvDmgLiBjkqkZ5Otic1/iz/1n+A96wAGNgz O4XLH0YoNsgfBQz3iAMnUr1DKYAu75fZeC1Vzd+ELQgktEs5xcC3pubh+bgyQKfH Z3qo6oHcI1bizgvlLP2kcrn3+sx84ALgLotUd82V7d9Phh6NkPnHw7DyZUFflNfp hXuT8kxGJepbnu3/ur3yOJ2yUHrp4IThc6jZah1x37K5rXO+bT2xUyx5OSUHWZtQ p+c6rVzQzDHGEMF1ea3ZyNiwceJl3pNdeMJAtiGxnWrF48loAn6MZ5xoxwV1ssw6 64qCFDwbFknAwCsrtKPycbDl6S0u1G4= -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:29 2025 by rpki-client