This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft File: LQx0fe_201Ecz11T86dlcA8cgqA.mft (raw, json) Hash identifier: MCBbyUdB+757jH234YNrQNjavj97s2S5nGBnE+QE8LM= Subject key identifier: B5:73:28:71:E6:71:F9:DD:B4:67:A7:75:D3:E2:83:D5:34:64:9E:0A Authority key identifier: 2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0 Certificate issuer: /CN=A9170975/serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft Manifest number: 65 Signing time: Tue 09 Dec 2025 04:54:00 +0000 Manifest this update: Tue 09 Dec 2025 04:53:59 +0000 Manifest next update: Tue 16 Dec 2025 04:53:59 +0000 Files and hashes: 1: LQx0fe_201Ecz11T86dlcA8cgqA.crl (hash: aY+6R72MuSkxuJvYNj8o8/oiDpnjtZiBmf6puDx6sYo=) 2: B0B8FBDA3A2A11F09E37DB48C4F9AE02.roa (hash: Gk5HrV+ASLgWFwT9SMxMpFzIA+vBFJ75IOUj++Jvz6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 04:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170975, serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0 Validity Not Before: Dec 9 04:53:59 2025 GMT Not After : Dec 16 04:53:59 2025 GMT Subject: CN=6937ab67-cedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e8:4c:3b:6b:b7:04:3b:6e:0a:22:ae:5e:20: 31:b7:7c:37:52:9d:8d:58:51:c3:4c:51:d7:ee:0d: 53:b3:af:94:91:26:25:fb:b5:9f:ec:0b:f5:5d:a9: 77:83:be:a4:c0:ee:65:90:a0:e0:65:94:51:0d:51: a6:fb:4a:4f:d4:2e:d5:89:b5:cf:2e:f4:58:eb:62: 80:1c:9d:8d:73:4c:a6:d7:30:27:dc:1c:d1:7e:f7: 50:9e:c0:1e:ec:99:b4:9c:a7:79:48:ab:4f:06:a3: 37:38:f4:dc:70:73:8e:c9:b5:a1:af:ab:4d:f8:b9: 41:1e:7e:1b:69:f5:26:91:de:65:e0:68:9b:00:5b: e1:bb:d7:75:1d:d0:5b:1b:b5:b4:23:2a:7c:dd:a6: 33:b3:70:f1:47:c7:3a:c8:ad:c1:78:6c:5c:cf:2b: cd:52:38:93:26:f4:47:8a:8a:4b:12:95:b6:2f:62: 87:ab:84:4b:99:4a:df:05:ed:e4:88:fd:0b:5e:42: 8a:73:67:16:b6:a3:92:41:5d:82:ce:0a:d0:86:29: 73:77:e2:da:ef:b3:78:51:12:eb:aa:cd:9a:0a:1f: d8:e1:5a:aa:5f:6e:67:6c:1e:6d:2c:e5:b5:03:6b: 58:f1:62:67:a0:54:5f:a2:23:db:af:56:71:c2:14: 70:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:73:28:71:E6:71:F9:DD:B4:67:A7:75:D3:E2:83:D5:34:64:9E:0A X509v3 Authority Key Identifier: keyid:2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d8:fe:b3:47:cc:8a:25:28:52:26:1b:4a:25:9f:af:94:4c: 7f:8f:c4:ef:08:be:64:9a:7c:42:2b:9e:17:04:42:dc:96:17: 1c:63:cd:61:21:df:af:79:05:da:00:b4:4d:3d:b2:5e:ec:b7: fb:b3:ed:33:82:c8:f1:67:38:47:d1:c1:52:2d:ba:91:b1:e5: 70:c6:c4:5f:70:ee:f8:76:66:44:d0:b2:26:25:8d:c8:11:26: 38:20:3c:7d:0b:50:a3:0b:bf:16:33:99:87:05:5e:41:02:26: 41:2d:bc:4d:f0:da:df:8b:ba:c1:7e:57:2b:39:2e:86:17:e6: d2:a8:f3:d1:19:26:f3:8b:45:32:b2:07:85:1f:3d:b5:5c:27: d7:5e:0a:e5:8c:a1:78:a4:10:53:0b:bb:9a:40:1f:fa:66:4a: e4:71:52:bd:4f:65:47:88:17:04:66:85:5c:62:5c:0a:e3:fc: 56:ea:45:be:27:92:88:83:66:71:af:d1:f8:eb:f9:6f:66:3b: 87:9d:a1:e0:92:4a:d4:42:e3:70:34:ab:fe:78:e7:a7:db:fe: 8c:42:60:a4:b1:06:7e:e7:79:d2:bd:15:b5:80:1a:57:1c:2a: a0:a7:d4:25:a4:d1:4d:85:08:ee:c4:ba:6a:87:77:8f:2b:7f: d1:eb:1f:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDk3NTExMC8GA1UEBRMoMkQwQzc0N0RFRkY2RDM1MTFDQ0Y1RDUzRjNBNzY1NzAw RjFDODJBMDAeFw0yNTEyMDkwNDUzNTlaFw0yNTEyMTYwNDUzNTlaMBgxFjAUBgNV BAMTDTY5MzdhYjY3LWNlZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS6Ew7a7cEO24KIq5eIDG3fDdSnY1YUcNMUdfuDVOzr5SRJiX7tZ/sC/VdqXeD vqTA7mWQoOBllFENUab7Sk/ULtWJtc8u9FjrYoAcnY1zTKbXMCfcHNF+91CewB7s mbScp3lIq08Gozc49Nxwc47JtaGvq034uUEefhtp9SaR3mXgaJsAW+G713Ud0Fsb tbQjKnzdpjOzcPFHxzrIrcF4bFzPK81SOJMm9EeKiksSlbYvYoerhEuZSt8F7eSI /QteQopzZxa2o5JBXYLOCtCGKXN34trvs3hREuuqzZoKH9jhWqpfbmdsHm0s5bUD a1jxYmegVF+iI9uvVnHCFHAtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtXMoceZx +d20Z6d10+KD1TRkngowHwYDVR0jBBgwFoAULQx0fe/201Ecz11T86dlcA8cgqAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTc1LzVGOTAzNUY2M0Ey NjExRjBCQ0NGNUUxRkM0RjlBRTAyL0xReDBmZV8yMDFFY3oxMVQ4NmRsY0E4Y2dx QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFF4MGZlXzIwMUVjejExVDg2ZGxjQThjZ3FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OTc1LzVGOTAzNUY2M0EyNjExRjBCQ0NGNUUxRkM0RjlBRTAyL0xReDBmZV8yMDFF Y3oxMVQ4NmRsY0E4Y2dxQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB3Y/rNHzIolKFImG0oln6+UTH+PxO8IvmSafEIrnhcEQtyWFxxjzWEh 3695BdoAtE09sl7st/uz7TOCyPFnOEfRwVItupGx5XDGxF9w7vh2ZkTQsiYljcgR JjggPH0LUKMLvxYzmYcFXkECJkEtvE3w2t+LusF+Vys5LoYX5tKo89EZJvOLRTKy B4UfPbVcJ9deCuWMoXikEFMLu5pAH/pmSuRxUr1PZUeIFwRmhVxiXArj/FbqRb4n koiDZnGv0fjr+W9mO4edoeCSStRC43A0q/5456fb/oxCYKSxBn7nedK9FbWAGlcc KqCn1CWk0U2FCO7EumqHd48rf9HrH90= -----END CERTIFICATE-----Generated at Wed Dec 10 05:24:02 2025 by rpki-client