This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft File: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft (raw, json) Hash identifier: o9UfygxeZ93n4tBtpjrMlVsOKPnENRf9+BqDQlW4yEo= Subject key identifier: 99:BF:41:C1:03:63:F0:00:1E:4C:D9:84:D1:3D:DA:B0:64:F8:18:77 Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F Certificate issuer: /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F Certificate serial: 0BF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft Manifest number: 0BCF Signing time: Wed 10 Dec 2025 18:08:38 +0000 Manifest this update: Wed 10 Dec 2025 18:08:38 +0000 Manifest next update: Wed 17 Dec 2025 18:08:38 +0000 Files and hashes: 1: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl (hash: U7B91y0fyed18LU9e/iHvG+mBPHdnbgXAjFjzaUJ8RM=) 2: 933DE524C2B811EEAA1FD486C4F9AE02.roa (hash: tyjFJevU8AODc6eNF2UQBkVwZ0moxe8IcDHkpfRnepA=) 3: F8088528E65D11EDB5112931C4F9AE02.roa (hash: 2Y1qjCmLTaBuW+PY4V12Zh62AUY0iuAkYOwDBibrsjY=) 4: D9173AE459E811ED85614349C4F9AE02.roa (hash: 1x/xZd5ESf0eokaSQgyIvd0x7KIP8tNAt27myAiJemw=) 5: D7D5B86859E811ED85614349C4F9AE02.roa (hash: ToUAACqSoKf4DVOKi8qBNbQLxDQKu5PGsZOisylfuaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 18:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3062 (0xbf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F Validity Not Before: Dec 10 18:08:38 2025 GMT Not After : Dec 17 18:08:38 2025 GMT Subject: CN=6939b726-350c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:33:ce:35:b7:95:7b:ad:82:ca:e3:f7:20:de: 49:99:1f:fc:14:b8:45:59:90:0e:a2:94:28:c0:8f: 5d:e1:1e:a9:55:17:31:f5:31:9a:eb:3f:a7:35:39: 57:ac:66:fe:4d:70:72:ee:6d:66:0b:41:5d:7d:d6: b9:dd:e2:1a:df:95:e8:50:b1:1f:d1:e5:99:33:a7: 4d:0b:df:b4:64:b9:66:ca:4c:be:83:b7:0e:6d:87: 47:77:fa:5e:e5:45:6a:a0:c6:7f:4c:d3:2c:bf:b7: 99:42:41:e5:ff:9d:e7:79:d5:85:a8:8e:2c:87:8a: a9:65:d0:6f:40:ed:3a:e4:b9:26:cc:59:a3:2b:fb: ff:45:d0:7a:a5:f6:51:a1:ac:4d:60:8d:a2:53:e1: b1:4c:31:60:db:a6:ad:a1:b6:3d:71:86:45:fb:ce: ad:5a:7f:e4:8d:e0:e3:fe:0b:1c:4f:df:f5:c8:d3: 92:32:55:6e:cf:d9:0e:f4:be:c9:11:85:d5:07:16: 89:f9:f4:51:af:3c:d8:a0:94:6e:2e:93:78:6b:ac: 4e:22:29:ca:1f:35:67:2f:47:05:51:b2:ff:fb:b6: 2d:c7:c3:bf:1d:18:56:19:d4:e0:ac:46:75:28:14: 5e:3a:e9:97:f8:a6:02:de:94:db:13:f8:40:6d:bd: e1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BF:41:C1:03:63:F0:00:1E:4C:D9:84:D1:3D:DA:B0:64:F8:18:77 X509v3 Authority Key Identifier: keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:c3:de:c7:81:7b:d8:a8:49:93:3e:cb:0d:7b:23:ab:90:f6: 58:ff:aa:1d:48:94:0a:46:60:fb:57:5e:e1:f4:ca:7b:1e:74: ef:46:db:f9:cd:28:88:5a:d5:7e:34:36:6a:97:31:2d:91:04: 8b:33:a3:2c:2f:a2:d4:28:bc:e3:0c:a9:87:22:9a:54:53:3e: 16:b7:31:db:aa:e2:51:c4:1f:ce:7c:8e:18:66:f6:b1:d8:6f: 4f:02:b9:8b:78:54:b8:25:28:fe:7d:02:27:90:51:ca:50:31: a8:af:de:2d:e0:2d:b6:b9:27:34:05:cb:7d:76:61:8f:c4:39: 64:87:7c:cc:1e:88:88:c7:85:f6:08:3a:df:b2:60:4c:dc:91: 49:ed:d6:61:cf:df:bf:6d:ad:5f:3e:d5:17:94:0b:06:4d:e7: 0f:ff:2d:5e:0e:e1:c0:0c:c7:5f:c4:5f:5b:69:0b:c3:45:ef: 82:d7:68:2a:56:b2:f0:d8:ba:9a:6f:ec:30:5f:6d:94:6f:f7: 81:2c:89:2d:32:11:cf:1f:02:61:7b:a8:47:36:d3:24:47:6a: dd:f2:9c:e0:f2:2f:58:e9:a0:b7:d3:71:70:8c:19:e9:93:4b: ef:cc:ba:df:37:af:53:ac:a9:c2:a2:38:ff:9c:59:d6:3c:90: a8:8d:6d:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0MDUxMTAvBgNVBAUTKDJEOUVEM0QyNkU2MzVGN0NGRkU0QkJGNTIwODcxNTBC N0E0MjE4OEYwHhcNMjUxMjEwMTgwODM4WhcNMjUxMjE3MTgwODM4WjAYMRYwFAYD VQQDEw02OTM5YjcyNi0zNTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjPONbeVe62CyuP3IN5JmR/8FLhFWZAOopQowI9d4R6pVRcx9TGa6z+nNTlX rGb+TXBy7m1mC0Fdfda53eIa35XoULEf0eWZM6dNC9+0ZLlmyky+g7cObYdHd/pe 5UVqoMZ/TNMsv7eZQkHl/53nedWFqI4sh4qpZdBvQO065LkmzFmjK/v/RdB6pfZR oaxNYI2iU+GxTDFg26atobY9cYZF+86tWn/kjeDj/gscT9/1yNOSMlVuz9kO9L7J EYXVBxaJ+fRRrzzYoJRuLpN4a6xOIinKHzVnL0cFUbL/+7Ytx8O/HRhWGdTgrEZ1 KBReOumX+KYC3pTbE/hAbb3hdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJm/QcED Y/AAHkzZhNE92rBk+Bh3MB8GA1UdIwQYMBaAFC2e09JuY198/+S79SCHFQt6QhiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwNS9GOUMxOTY5NjMy MTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algzel81THYxSUljVkMzcENH STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xaN1QwbTVqWDN6XzVMdjFJSWNWQzNwQ0dJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQwNS9GOUMxOTY5NjMyMTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algz el81THYxSUljVkMzcENHSTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnw97HgXvYqEmTPssNeyOrkPZY/6odSJQKRmD7V17h9Mp7HnTvRtv5 zSiIWtV+NDZqlzEtkQSLM6MsL6LUKLzjDKmHIppUUz4WtzHbquJRxB/OfI4YZvax 2G9PArmLeFS4JSj+fQInkFHKUDGor94t4C22uSc0Bct9dmGPxDlkh3zMHoiIx4X2 CDrfsmBM3JFJ7dZhz9+/ba1fPtUXlAsGTecP/y1eDuHADMdfxF9baQvDRe+C12gq VrLw2Lqab+wwX22Ub/eBLIktMhHPHwJhe6hHNtMkR2rd8pzg8i9Y6aC303FwjBnp k0vvzLrfN69TrKnCojj/nFnWPJCojW1t -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:24 2025 by rpki-client