This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft File: lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft (raw, json) Hash identifier: osg1ndDUOV0r4KztDOpDvC4GFLc+FFOH4DanIQFYSL8= Subject key identifier: 22:FC:04:A5:DF:6A:CE:30:1D:60:B2:CE:8D:A8:E6:BC:89:9B:B2:AA Authority key identifier: 96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2 Certificate issuer: /CN=A91A58AA/serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft Manifest number: 70 Signing time: Wed 03 Dec 2025 05:07:45 +0000 Manifest this update: Wed 03 Dec 2025 05:07:45 +0000 Manifest next update: Wed 10 Dec 2025 05:07:45 +0000 Files and hashes: 1: lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl (hash: W5+Um5d4/lHQdaDCdbt78NtIcZp3ynp7D9MYI0ySBGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A58AA, serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2 Validity Not Before: Dec 3 05:07:45 2025 GMT Not After : Dec 10 05:07:45 2025 GMT Subject: CN=692fc5a1-ea05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:92:c4:31:2e:5a:94:38:98:0c:51:92:59:99: 0b:3b:36:0a:71:f8:e3:b6:e1:00:9d:00:e1:97:8c: 84:a8:5a:bb:38:4c:10:d4:10:2f:16:08:60:c8:34: 39:64:22:ec:84:93:b1:db:fb:3f:b3:c9:49:39:53: 0b:83:fe:e0:91:ae:4b:55:6f:c8:12:96:be:8f:bf: 6a:5e:c7:7f:00:49:fd:f8:e2:68:9f:c0:12:50:a1: 47:40:77:68:c9:16:1c:ac:dc:05:3c:6d:04:45:10: 89:99:80:25:d4:e1:76:67:f1:e7:28:d5:11:dd:33: 99:7c:9c:2c:5d:ca:ba:db:4c:97:72:ba:fa:27:84: 58:44:b8:74:e7:5f:69:41:b2:71:34:e7:9a:aa:a9: 74:7b:9f:42:26:29:b3:2a:5c:7d:97:03:d0:f5:54: 9b:d1:d8:3a:24:5e:14:74:37:7f:1b:70:29:1c:17: 37:a2:d9:8e:dc:35:ea:44:8d:ae:d7:bc:c9:16:20: 41:f6:e4:8f:c0:96:b4:c6:d6:3a:03:e5:b4:16:55: c8:b7:72:19:65:e0:f0:6b:3a:5e:bc:3d:e5:c5:3b: 03:48:58:03:71:92:7c:3b:2f:84:4b:62:73:47:4f: 59:11:ae:19:c0:b0:d8:d9:7b:ae:3d:51:ae:45:87: 01:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FC:04:A5:DF:6A:CE:30:1D:60:B2:CE:8D:A8:E6:BC:89:9B:B2:AA X509v3 Authority Key Identifier: keyid:96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:78:27:23:bf:89:ce:d4:e5:7b:ac:5d:9f:88:58:96:25:84: dc:53:78:55:34:c5:33:6f:58:16:d7:d8:fc:27:45:cf:16:62: 23:bb:0a:f7:6d:f4:ce:55:ef:34:e1:74:e6:5e:f0:19:35:75: 38:00:52:94:61:e4:0c:b7:69:0e:e7:6c:d8:4f:93:2f:e1:c4: 36:94:cf:ef:f5:d4:55:8c:e8:f7:34:99:3d:46:2c:e6:53:6c: bd:af:db:6b:bc:37:ee:16:a6:b5:1f:d2:01:f0:62:9d:7b:af: e8:2d:61:32:2d:02:af:68:3f:e8:e9:04:af:bf:ba:28:d0:e6: ae:fc:38:a6:8c:e8:1c:c0:33:2e:f0:cd:bf:ac:35:10:d4:1d: a6:d4:b2:4a:fb:5f:cd:88:a6:18:01:35:4a:85:9e:a5:c8:49: b9:ee:8e:d1:b3:36:dd:8b:fd:c0:1c:4a:d9:9b:f1:1c:c4:65: cc:df:48:6b:0f:76:72:b5:26:36:f9:06:e9:bc:d1:62:ba:81: d4:4b:91:dd:27:b3:ec:1e:92:62:48:d1:7f:10:8a:77:d0:6b: c8:d3:3c:b5:e5:56:0e:d9:ed:05:06:20:41:0b:3e:98:bb:39: 40:83:76:b5:8c:69:eb:f4:aa:4e:e8:0c:c9:6d:8c:52:dd:87: bf:0d:22:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NThBQTExMC8GA1UEBRMoOTY3M0I1Q0NGMEE4RUE1Q0U0MUEyRTQ3NjMxMUYzNzVD RDgzQzBEMjAeFw0yNTEyMDMwNTA3NDVaFw0yNTEyMTAwNTA3NDVaMBgxFjAUBgNV BAMTDTY5MmZjNWExLWVhMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSksQxLlqUOJgMUZJZmQs7Ngpx+OO24QCdAOGXjISoWrs4TBDUEC8WCGDINDlk IuyEk7Hb+z+zyUk5UwuD/uCRrktVb8gSlr6Pv2pex38ASf344mifwBJQoUdAd2jJ Fhys3AU8bQRFEImZgCXU4XZn8eco1RHdM5l8nCxdyrrbTJdyuvonhFhEuHTnX2lB snE055qqqXR7n0ImKbMqXH2XA9D1VJvR2DokXhR0N38bcCkcFzei2Y7cNepEja7X vMkWIEH25I/AlrTG1joD5bQWVci3chll4PBrOl68PeXFOwNIWANxknw7L4RLYnNH T1kRrhnAsNjZe649Ua5FhwEBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIvwEpd9q zjAdYLLOjajmvImbsqowHwYDVR0jBBgwFoAUlnO1zPCo6lzkGi5HYxHzdc2DwNIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1OEFBL0MxOTM5Q0U2MjQw MjExRjA5NjFCNjQ2REM0RjlBRTAyL2xuTzF6UENvNmx6a0dpNUhZeEh6ZGMyRHdO SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbG5PMXpQQ282bHprR2k1SFl4SHpkYzJEd05JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 OEFBL0MxOTM5Q0U2MjQwMjExRjA5NjFCNjQ2REM0RjlBRTAyL2xuTzF6UENvNmx6 a0dpNUhZeEh6ZGMyRHdOSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEh4JyO/ic7U5XusXZ+IWJYlhNxTeFU0xTNvWBbX2PwnRc8WYiO7Cvdt 9M5V7zThdOZe8Bk1dTgAUpRh5Ay3aQ7nbNhPky/hxDaUz+/11FWM6Pc0mT1GLOZT bL2v22u8N+4WprUf0gHwYp17r+gtYTItAq9oP+jpBK+/uijQ5q78OKaM6BzAMy7w zb+sNRDUHabUskr7X82IphgBNUqFnqXISbnujtGzNt2L/cAcStmb8RzEZczfSGsP dnK1Jjb5Bum80WK6gdRLkd0ns+wekmJI0X8QinfQa8jTPLXlVg7Z7QUGIEELPpi7 OUCDdrWMaev0qk7oDMltjFLdh78NItA= -----END CERTIFICATE-----Generated at Wed Dec 3 15:50:41 2025 by rpki-client