This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft File: ltGlmUmhu3ombXKg8S_81fUFnxc.mft (raw, json) Hash identifier: sZY6U270IUHnvSuvU9ZHpfg8X7FTnqL6kmS6uY0W0o8= Subject key identifier: 40:8B:4C:34:7C:DA:74:D7:E8:93:86:6E:15:6C:62:42:C8:E0:1F:43 Authority key identifier: 96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17 Certificate issuer: /CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17 Certificate serial: 04B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft Manifest number: 04B3 Signing time: Mon 22 Dec 2025 23:00:29 +0000 Manifest this update: Mon 22 Dec 2025 23:00:29 +0000 Manifest next update: Mon 29 Dec 2025 23:00:29 +0000 Files and hashes: 1: ltGlmUmhu3ombXKg8S_81fUFnxc.crl (hash: DIxu+S4o6l3wkfKQQ33X76oQ4fS1AbIhYgntc4ryQ3U=) 2: 5BD4372457DE11EC88BC6713C4F9AE02.roa (hash: 8wyGVainQ6D893xesOuFf+FM10EglgdmC+4yeYmYJKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1208 (0x4b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB001, serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17 Validity Not Before: Dec 22 23:00:29 2025 GMT Not After : Dec 29 23:00:29 2025 GMT Subject: CN=6949cd8d-5c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:fa:ef:e0:35:89:74:0b:20:b1:6b:d8:55: 33:0f:c3:30:df:72:f3:ad:f9:22:78:fc:91:e0:d7: 9c:33:95:86:ad:ac:01:9c:34:2b:22:c6:a7:9c:a7: 85:a0:79:32:36:ac:27:1f:7e:6a:14:c4:8f:cd:93: eb:d3:e5:2c:5d:51:9b:3f:41:87:e0:c9:8d:a0:21: ac:7a:9f:c7:4b:51:17:7d:b6:dc:88:57:8f:79:3d: 6b:12:c3:63:b1:36:5d:03:f2:04:e2:28:52:88:84: 94:f6:79:3c:47:b9:4d:85:1f:7a:db:2a:91:1b:e1: e3:53:be:37:4d:cd:b6:d3:1e:1f:71:a4:3b:8f:61: b3:e6:f3:58:23:72:f9:2d:df:31:8c:b6:9f:95:7d: 71:62:6f:0f:6b:98:62:9c:fc:cb:bd:6c:65:1b:38: 41:3a:34:90:89:ab:74:92:35:22:15:1a:bb:b7:6c: 6e:ac:f7:38:55:20:9d:2e:8f:bd:cf:02:2c:21:66: 44:09:32:3b:18:e8:b1:8e:3a:e0:9f:3b:39:79:0e: 4b:c5:bd:db:e9:c4:97:70:e7:b6:26:2a:5d:18:0c: 43:56:40:5d:ba:60:1e:0a:86:ed:62:a6:8d:13:de: 15:b1:f8:8c:c0:f7:a4:64:b0:0f:b5:2e:99:f0:1d: 3d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8B:4C:34:7C:DA:74:D7:E8:93:86:6E:15:6C:62:42:C8:E0:1F:43 X509v3 Authority Key Identifier: keyid:96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:27:01:83:94:62:76:c6:f0:b7:bd:a4:3e:01:7f:17:d5:ac: a0:8a:2b:9e:07:43:8a:45:04:98:d9:20:00:ff:1d:ae:28:58: 6e:a2:92:b5:31:79:98:a8:51:44:6d:22:2b:73:29:57:48:63: b1:94:53:fe:56:6a:ae:80:2f:44:03:7f:70:70:55:65:08:83: ac:dd:9f:49:00:42:fb:d8:8d:b2:1b:41:cd:38:56:3c:6d:0c: 4e:f8:d7:3f:22:77:fd:b6:d7:1f:06:7a:99:c2:60:95:4b:0f: 80:fb:38:da:29:b5:0f:60:2c:ef:eb:04:f9:cb:44:2f:fc:5d: 10:74:5d:02:89:86:27:9a:2d:de:e6:23:76:6c:8d:07:86:df: 9f:60:c2:19:42:41:35:53:5f:89:39:f8:bd:57:1f:ee:69:e7: 46:f9:2a:59:2a:e7:fa:3a:3c:9e:bb:97:11:de:d9:63:d2:9a: 68:b1:66:96:0c:71:08:d6:34:1b:06:0c:9b:18:71:18:7b:8c: 61:86:66:fa:4a:a4:5b:2e:9c:c8:78:d8:ef:31:4a:45:bd:71: 08:6a:e2:0d:20:cb:95:3c:54:09:75:3b:a9:82:25:6d:a3:ba: ce:04:ef:b3:2f:6b:8e:68:7c:3a:e1:fb:c2:ab:97:b1:94:73: 7c:f4:9a:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIwMDExMTAvBgNVBAUTKDk2RDFBNTk5NDlBMUJCN0EyNjZENzJBMEYxMkZGQ0Q1 RjUwNTlGMTcwHhcNMjUxMjIyMjMwMDI5WhcNMjUxMjI5MjMwMDI5WjAYMRYwFAYD VQQDDA02OTQ5Y2Q4ZC01YzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUH67+A1iXQLILFr2FUzD8Mw33LzrfkiePyR4NecM5WGrawBnDQrIsannKeF oHkyNqwnH35qFMSPzZPr0+UsXVGbP0GH4MmNoCGsep/HS1EXfbbciFePeT1rEsNj sTZdA/IE4ihSiISU9nk8R7lNhR962yqRG+HjU743Tc220x4fcaQ7j2Gz5vNYI3L5 Ld8xjLaflX1xYm8Pa5hinPzLvWxlGzhBOjSQiat0kjUiFRq7t2xurPc4VSCdLo+9 zwIsIWZECTI7GOixjjrgnzs5eQ5Lxb3b6cSXcOe2JipdGAxDVkBdumAeCobtYqaN E94VsfiMwPekZLAPtS6Z8B09owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECLTDR8 2nTX6JOGbhVsYkLI4B9DMB8GA1UdIwQYMBaAFJbRpZlJobt6Jm1yoPEv/NX1BZ8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjAwMS84M0Q1NEU1MjU3 NDgxMUVDQTc3RTVEODZDNEY5QUUwMi9sdEdsbVVtaHUzb21iWEtnOFNfODFmVUZu eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x0R2xtVW1odTNvbWJYS2c4U184MWZVRm54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjAwMS84M0Q1NEU1MjU3NDgxMUVDQTc3RTVEODZDNEY5QUUwMi9sdEdsbVVtaHUz b21iWEtnOFNfODFmVUZueGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfJwGDlGJ2xvC3vaQ+AX8X1aygiiueB0OKRQSY2SAA/x2uKFhuopK1 MXmYqFFEbSIrcylXSGOxlFP+VmqugC9EA39wcFVlCIOs3Z9JAEL72I2yG0HNOFY8 bQxO+Nc/Inf9ttcfBnqZwmCVSw+A+zjaKbUPYCzv6wT5y0Qv/F0QdF0CiYYnmi3e 5iN2bI0Hht+fYMIZQkE1U1+JOfi9Vx/uaedG+SpZKuf6Ojyeu5cR3tlj0pposWaW DHEI1jQbBgybGHEYe4xhhmb6SqRbLpzIeNjvMUpFvXEIauINIMuVPFQJdTupgiVt o7rOBO+zL2uOaHw64fvCq5exlHN89Jqy -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:20 2025 by rpki-client