This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft File: LR4Op3rKP-WX3vMZYh70DRLUwdw.mft (raw, json) Hash identifier: jxpra7gJ7IZA/M7DDHWXeIR6yCQQY5L7L4HyVnks3jA= Subject key identifier: E0:41:49:AB:AF:00:01:95:D7:71:FD:0D:09:E5:FD:E1:EF:76:16:34 Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC Certificate issuer: /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft Manifest number: 011B Signing time: Fri 19 Dec 2025 03:56:30 +0000 Manifest this update: Fri 19 Dec 2025 03:56:30 +0000 Manifest next update: Fri 26 Dec 2025 03:56:30 +0000 Files and hashes: 1: LR4Op3rKP-WX3vMZYh70DRLUwdw.crl (hash: takbcV2SDo39PiXyIQqVFzmrTte6hQ+erVcBprTA07I=) 2: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (hash: tqUNG1S/rsB6bW3LBm3IsjWdqGyc7l/8ScuxBxWoVEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91939DA, serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Validity Not Before: Dec 19 03:56:30 2025 GMT Not After : Dec 26 03:56:30 2025 GMT Subject: CN=6944ccee-9b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e3:30:47:28:62:c2:5f:b5:ad:8a:1e:07:e4: 9b:78:95:3b:5d:c9:56:b2:a4:23:59:ba:9e:47:7e: 6d:9f:db:70:da:41:03:7a:40:20:fa:a9:3e:42:03: be:bd:b1:9b:9f:cf:b1:f2:cc:be:38:96:8c:68:64: 5b:16:9e:dc:78:88:eb:c3:b6:a1:8d:0e:bf:b8:bb: 98:ec:7c:b1:db:58:9b:02:04:90:f0:35:1a:c7:56: 30:bf:5d:f5:0a:91:60:28:9c:b0:3e:ec:6f:33:9e: 6f:27:28:8d:05:33:e2:8a:ca:5e:79:4b:66:da:4c: fd:28:8e:c0:34:95:c9:f1:63:03:b1:91:6a:0d:d3: 28:78:b1:bd:36:f0:51:7d:8f:87:bb:cd:c0:a8:8f: 35:29:ec:14:5e:b0:7c:c8:73:86:b6:a5:19:90:53: 03:2e:44:8c:1e:2a:a5:73:5f:65:47:a5:47:9f:c6: 05:7e:51:15:48:3a:b7:0b:0f:05:06:de:b4:d9:6f: 47:55:c4:43:d8:ae:f5:47:9d:b1:5f:aa:8d:a9:2c: e4:51:ec:24:50:ae:63:d1:d7:1e:29:e3:45:c9:2f: 9b:a1:dc:30:f3:26:96:6d:45:f4:16:42:fb:d9:f1: 42:15:55:e0:e6:b6:c7:56:98:72:16:ce:ce:1b:10: ce:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:41:49:AB:AF:00:01:95:D7:71:FD:0D:09:E5:FD:E1:EF:76:16:34 X509v3 Authority Key Identifier: keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:45:cc:22:ea:f3:bd:4e:02:c6:e3:69:50:9c:1b:09:89:6a: b5:10:8c:b3:86:71:ee:08:e3:04:0c:45:5a:4a:f6:44:63:65: 74:20:82:76:26:2c:12:cf:b5:6e:bc:85:47:29:8e:7b:5b:ff: e4:83:a9:b3:32:9e:3b:3d:40:8d:33:96:a7:d2:81:06:33:18: 47:94:23:24:fb:7b:64:96:54:70:09:fc:47:b8:13:0b:43:c9: d5:c2:a3:26:49:ec:8d:d3:35:30:b4:34:58:e8:8d:a3:7c:c7: 16:e1:da:30:b2:16:e0:f7:0d:7d:3a:fe:c0:88:90:59:d8:ce: 12:3f:08:3b:cd:c2:cb:62:b9:8d:29:90:b5:9a:b8:55:b2:55: 1b:79:a6:10:59:1d:62:65:ab:c2:4f:3f:cb:3a:13:0c:41:62: d3:53:ce:d0:b8:6d:eb:d4:3d:89:82:b6:cf:a7:0d:84:c4:f1: 48:e8:c1:29:fc:c3:23:1d:25:df:fd:b4:52:0a:84:5e:ad:06: 71:a3:9e:c8:ed:a4:dc:de:a7:19:65:90:31:2a:91:e6:0d:13: 21:0c:98:4c:06:b1:9e:15:d9:1c:e5:79:67:02:ed:74:cd:e9: 0c:5b:f9:b4:fc:06:6a:46:8f:ed:94:a1:96:64:c3:e3:dd:b1: 54:53:30:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM5REExMTAvBgNVBAUTKDJEMUUwRUE3N0FDQTNGRTU5N0RFRjMxOTYyMUVGNDBE MTJENEMxREMwHhcNMjUxMjE5MDM1NjMwWhcNMjUxMjI2MDM1NjMwWjAYMRYwFAYD VQQDDA02OTQ0Y2NlZS05YjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6uMwRyhiwl+1rYoeB+SbeJU7XclWsqQjWbqeR35tn9tw2kEDekAg+qk+QgO+ vbGbn8+x8sy+OJaMaGRbFp7ceIjrw7ahjQ6/uLuY7Hyx21ibAgSQ8DUax1Ywv131 CpFgKJywPuxvM55vJyiNBTPiispeeUtm2kz9KI7ANJXJ8WMDsZFqDdMoeLG9NvBR fY+Hu83AqI81KewUXrB8yHOGtqUZkFMDLkSMHiqlc19lR6VHn8YFflEVSDq3Cw8F Bt602W9HVcRD2K71R52xX6qNqSzkUewkUK5j0dceKeNFyS+bodww8yaWbUX0FkL7 2fFCFVXg5rbHVphyFs7OGxDOvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBBSauv AAGV13H9DQnl/eHvdhY0MB8GA1UdIwQYMBaAFC0eDqd6yj/ll97zGWIe9A0S1MHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzlEQS82Q0I5RDBBNjJG QUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1AtV1gzdk1aWWg3MERSTFV3 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xSNE9wM3JLUC1XWDN2TVpZaDcwRFJMVXdkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzlEQS82Q0I5RDBBNjJGQUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1At V1gzdk1aWWg3MERSTFV3ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfRcwi6vO9TgLG42lQnBsJiWq1EIyzhnHuCOMEDEVaSvZEY2V0IIJ2 JiwSz7VuvIVHKY57W//kg6mzMp47PUCNM5an0oEGMxhHlCMk+3tkllRwCfxHuBML Q8nVwqMmSeyN0zUwtDRY6I2jfMcW4dowshbg9w19Ov7AiJBZ2M4SPwg7zcLLYrmN KZC1mrhVslUbeaYQWR1iZavCTz/LOhMMQWLTU87QuG3r1D2JgrbPpw2ExPFI6MEp /MMjHSXf/bRSCoRerQZxo57I7aTc3qcZZZAxKpHmDRMhDJhMBrGeFdkc5XlnAu10 zekMW/m0/AZqRo/tlKGWZMPj3bFUUzC8 -----END CERTIFICATE-----Generated at Fri Dec 19 22:56:42 2025 by rpki-client