This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json) Hash identifier: en/wD3Br0jetcKERMqSoLYvBBumhPYDfXW5NzA0wbHA= Subject key identifier: 69:F0:66:46:52:BA:17:E7:27:82:E1:1A:15:29:65:82:28:47:70:9E Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Certificate serial: 029F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft Manifest number: 0297 Signing time: Wed 10 Dec 2025 23:53:44 +0000 Manifest this update: Wed 10 Dec 2025 23:53:43 +0000 Manifest next update: Wed 17 Dec 2025 23:53:43 +0000 Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: 4WqsiJ8OFTGeNr8XPOlEZ7AVihGuwmWOR7ImaV5fQks=) 2: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: /QZn6eJNp1QkpQ2tx9f8l2ROi+aoRJ31N2B9Wc759hU=) 3: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: S7ZRwjfMRdXYDsbLwG2JwWob+OsTSSbwbMXmMEzGwj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 23:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 671 (0x29f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Validity Not Before: Dec 10 23:53:43 2025 GMT Not After : Dec 17 23:53:43 2025 GMT Subject: CN=693a0808-af32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:14:ce:45:ce:a2:36:1a:33:ce:82:e3:d2:13: df:9e:ac:02:29:63:8d:20:da:c9:b4:51:e3:a9:81: 5e:82:fc:b5:f1:9a:c0:40:d7:0f:4d:f6:22:90:26: b8:e3:ae:8a:96:be:51:de:53:68:66:c5:db:f7:bd: e9:7b:9b:ae:71:e4:76:0d:c3:fd:32:3f:30:c8:df: f0:06:73:14:86:89:b3:7c:99:98:0b:db:98:f6:45: 9c:a4:93:bc:08:c5:cf:64:b6:a4:68:48:59:70:5a: fd:6b:11:44:7f:a1:f9:46:f1:3b:b2:17:3d:18:c7: 50:54:d9:5d:a1:58:e6:1b:f2:be:88:60:89:4b:8a: ca:e9:19:de:e3:c6:0e:a9:25:1c:35:ec:f6:e3:0c: 58:fb:5d:6f:67:7b:49:aa:99:e5:94:3c:93:72:df: 60:74:40:f7:62:a0:df:5b:5a:2e:08:26:03:18:9f: 0b:36:aa:1f:6d:a0:67:9b:89:75:4d:9a:37:32:2d: 0c:0c:07:ef:3a:0e:4f:ef:62:1f:6f:ff:b8:fe:7c: ff:55:f8:ce:91:af:12:5b:f7:d7:a5:15:3c:18:c9: 22:4e:08:1a:81:ef:c4:4f:02:ae:c6:bf:cf:c1:f9: 3b:a1:1c:3f:54:fd:3a:05:1a:cf:c3:98:b0:9b:ce: 24:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F0:66:46:52:BA:17:E7:27:82:E1:1A:15:29:65:82:28:47:70:9E X509v3 Authority Key Identifier: keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:13:2a:e8:f5:d6:9d:cd:aa:be:00:94:e8:f1:e0:53:c7:67: 9e:d7:8b:80:1b:f6:1a:81:d2:94:c6:f5:b9:47:f5:ce:3a:b0: a4:5f:c4:42:88:97:c4:da:65:fc:7c:7d:57:e6:6a:89:2f:f1: 64:8d:fe:2f:9d:d0:10:07:84:0b:84:4f:32:cc:ac:51:74:11: 5a:f3:bb:1f:58:cf:07:47:4b:c6:a1:5d:22:77:38:ec:02:23: f3:7f:9c:58:c9:c9:c8:78:a4:cd:76:2c:fb:f1:e2:c5:a2:9c: f1:ac:a7:38:74:7f:c2:0e:12:25:6f:a7:8c:b7:e0:fb:1a:dd: 7b:b6:4d:39:d1:6c:42:d7:a2:30:a1:b5:a9:c8:d6:73:75:48: 11:46:b8:7e:bc:72:ec:0d:36:1b:17:4b:6f:6c:95:9e:59:66: ad:d8:0a:9b:be:a3:1c:45:81:17:9a:e9:27:b8:e1:67:3b:89: b5:78:ec:e9:2c:43:69:7c:ee:40:f8:f9:2e:37:d8:ad:59:ff: f6:02:ea:19:c9:21:30:70:47:cb:a8:8f:ec:6e:41:d8:70:3f: 90:27:6a:06:af:9e:85:42:ba:bf:43:f9:ab:21:a7:84:c9:53: 17:c3:83:8e:27:18:6d:6b:f3:43:0e:9c:fc:fd:f4:fb:48:c0: 49:6a:9e:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4RTExMTAvBgNVBAUTKDJEMENCMEU5OEY1NjJFOTM2NkQ1QTk5NUZCMjZGNjY2 QThDMEE5NUEwHhcNMjUxMjEwMjM1MzQzWhcNMjUxMjE3MjM1MzQzWjAYMRYwFAYD VQQDEw02OTNhMDgwOC1hZjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hTORc6iNhozzoLj0hPfnqwCKWONINrJtFHjqYFegvy18ZrAQNcPTfYikCa4 466Klr5R3lNoZsXb973pe5uuceR2DcP9Mj8wyN/wBnMUhomzfJmYC9uY9kWcpJO8 CMXPZLakaEhZcFr9axFEf6H5RvE7shc9GMdQVNldoVjmG/K+iGCJS4rK6Rne48YO qSUcNez24wxY+11vZ3tJqpnllDyTct9gdED3YqDfW1ouCCYDGJ8LNqofbaBnm4l1 TZo3Mi0MDAfvOg5P72Ifb/+4/nz/VfjOka8SW/fXpRU8GMkiTggage/ETwKuxr/P wfk7oRw/VP06BRrPw5iwm84kJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnwZkZS uhfnJ4LhGhUpZYIoR3CeMB8GA1UdIwQYMBaAFC0MsOmPVi6TZtWplfsm9maowKla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThFMS8xMTMxNjYyQzI4 NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xwTm0xYW1WLXliMlpxakFx Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xReXc2WTlXTHBObTFhbVYteWIyWnFqQXFWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MThFMS8xMTMxNjYyQzI4NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xw Tm0xYW1WLXliMlpxakFxVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1Eyro9dadzaq+AJTo8eBTx2ee14uAG/YagdKUxvW5R/XOOrCkX8RC iJfE2mX8fH1X5mqJL/Fkjf4vndAQB4QLhE8yzKxRdBFa87sfWM8HR0vGoV0idzjs AiPzf5xYycnIeKTNdiz78eLFopzxrKc4dH/CDhIlb6eMt+D7Gt17tk050WxC16Iw obWpyNZzdUgRRrh+vHLsDTYbF0tvbJWeWWat2AqbvqMcRYEXmuknuOFnO4m1eOzp LENpfO5A+PkuN9itWf/2AuoZySEwcEfLqI/sbkHYcD+QJ2oGr56FQrq/Q/mrIaeE yVMXw4OOJxhta/NDDpz8/fT7SMBJap78 -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:51 2025 by rpki-client