This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft File: LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft (raw, json) Hash identifier: NI/meqflZP0BOflGod0b7CXI4hLldCI4a9lgZQqw9a4= Subject key identifier: 1E:7E:4D:8C:88:6C:C0:02:07:A7:C5:C7:05:04:B0:C4:80:05:7A:88 Authority key identifier: 2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 Certificate issuer: /CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Certificate serial: 0492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft Manifest number: 0487 Signing time: Mon 22 Dec 2025 23:09:09 +0000 Manifest this update: Mon 22 Dec 2025 23:09:08 +0000 Manifest next update: Mon 29 Dec 2025 23:09:08 +0000 Files and hashes: 1: LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl (hash: gq3Da7oBkGAy3TJXtl54CL+UvfsANh4rlRsROV5u4DI=) 2: A69224164EAE11EDBF0D8256C4F9AE02.roa (hash: tNJLz/05MhN+kNpDsEpSvyxEjiBHI8/Qy5MZGniM9So=) 3: A60006804EAE11EDBF0D8256C4F9AE02.roa (hash: PeSRHrlXLPWq0OR7M6KoyLAqMUZOAeVzYm1KrZ/ISG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1170 (0x492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABE54, serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Validity Not Before: Dec 22 23:09:08 2025 GMT Not After : Dec 29 23:09:08 2025 GMT Subject: CN=6949cf95-7f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a8:d6:75:ec:87:93:42:9a:80:0f:21:1d:cf: 72:5e:df:48:cc:3b:ab:2a:bf:c3:bd:ca:c6:d8:83: 74:45:89:90:49:ba:b6:00:6b:df:b5:60:ed:77:ff: 0f:f3:e4:76:a7:56:a6:59:6b:c8:79:dc:ac:98:88: f5:dc:1d:27:dc:2e:53:ed:9f:44:74:62:04:67:bb: fd:9f:21:f8:3f:05:01:91:7d:8c:b1:0b:2f:29:92: bd:0c:24:31:30:a1:1c:25:bc:75:97:c5:1c:cc:26: 87:f3:e1:61:12:e8:4c:b7:99:83:c9:1d:d2:d1:f1: 6b:56:f9:e3:64:9a:40:df:9d:1a:9e:b7:03:87:9d: 60:56:c1:41:b3:f1:eb:3d:3c:f5:b4:85:9a:86:77: ea:f5:9d:65:8d:fd:7f:91:2c:12:75:06:9f:55:ec: bc:5b:89:9f:8e:af:af:7d:85:65:82:b4:e9:12:69: 32:6e:9f:42:e9:7c:36:9e:b9:de:42:9a:70:4f:02: 91:8f:d7:39:bd:f1:2c:77:15:14:13:a4:b1:12:6e: df:76:86:7c:cb:9c:b6:6e:84:3d:fc:30:7f:1a:27: 64:b0:83:25:98:39:7a:2d:5d:13:41:1f:56:4c:5d: 59:f3:4d:2c:48:cb:a1:c4:28:0d:b5:fd:90:92:2d: 8f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7E:4D:8C:88:6C:C0:02:07:A7:C5:C7:05:04:B0:C4:80:05:7A:88 X509v3 Authority Key Identifier: keyid:2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:bb:5b:94:a1:b8:3f:1b:f9:3e:54:39:4d:e3:8e:e6:84:90: d9:94:95:47:f6:e2:3b:5d:a2:57:b7:48:37:f6:99:ac:d6:d3: 2b:64:53:b2:60:08:6d:7a:14:f5:40:40:12:e4:0d:65:ec:3a: bc:79:19:f1:68:3c:5a:e5:7c:76:30:8d:b3:28:71:c0:2e:98: b8:c7:30:c7:11:80:a4:d1:81:06:79:9f:45:36:8c:73:ff:f7: 98:0b:5f:45:23:ea:e7:47:ba:12:8c:d2:bc:0f:3d:b8:1a:8a: 39:ef:bf:a0:36:e8:0c:87:72:5a:62:0b:ed:16:de:da:35:67: 80:53:f9:90:99:ae:13:35:c7:91:5e:fa:7c:bd:c7:f6:a1:49: 1f:10:ee:a2:27:a6:94:86:9c:97:b9:87:1a:07:c3:c9:98:2e: 6e:8b:81:a2:cb:30:30:dd:cd:fa:36:bf:80:83:ba:49:54:29: 0a:9d:f3:c8:e9:ec:8e:83:82:41:7c:54:d5:cf:63:dd:83:6c: 8d:b4:06:b1:ff:30:7e:9e:98:48:6e:c1:55:f2:3c:60:06:0c: bf:7b:5b:9e:8d:c6:a3:06:3f:4a:31:59:f4:c5:25:9e:b1:75: 41:f6:3e:2b:4e:f7:46:72:b0:84:c3:3f:19:62:a4:d3:dc:05: 2a:0e:62:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFNTQxMTAvBgNVBAUTKDJEN0NFOTRGMTNEODJFNTRGODM0MjNDNjFFQjk2MzNB Rjk0MDU5MjQwHhcNMjUxMjIyMjMwOTA4WhcNMjUxMjI5MjMwOTA4WjAYMRYwFAYD VQQDDA02OTQ5Y2Y5NS03ZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkqjWdeyHk0KagA8hHc9yXt9IzDurKr/DvcrG2IN0RYmQSbq2AGvftWDtd/8P 8+R2p1amWWvIedysmIj13B0n3C5T7Z9EdGIEZ7v9nyH4PwUBkX2MsQsvKZK9DCQx MKEcJbx1l8UczCaH8+FhEuhMt5mDyR3S0fFrVvnjZJpA350anrcDh51gVsFBs/Hr PTz1tIWahnfq9Z1ljf1/kSwSdQafVey8W4mfjq+vfYVlgrTpEmkybp9C6Xw2nrne QppwTwKRj9c5vfEsdxUUE6SxEm7fdoZ8y5y2boQ9/DB/GidksIMlmDl6LV0TQR9W TF1Z800sSMuhxCgNtf2Qki2P7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5+TYyI bMACB6fFxwUEsMSABXqIMB8GA1UdIwQYMBaAFC186U8T2C5U+DQjxh65Yzr5QFkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkU1NC9BNUMxNTBBQzY4 RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxsVDROQ1BHSHJsak92bEFX U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYenBUeFBZTGxUNE5DUEdIcmxqT3ZsQVdTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkU1NC9BNUMxNTBBQzY4RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxs VDROQ1BHSHJsak92bEFXU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvu1uUobg/G/k+VDlN447mhJDZlJVH9uI7XaJXt0g39pms1tMrZFOy YAhtehT1QEAS5A1l7Dq8eRnxaDxa5Xx2MI2zKHHALpi4xzDHEYCk0YEGeZ9FNoxz //eYC19FI+rnR7oSjNK8Dz24Goo577+gNugMh3JaYgvtFt7aNWeAU/mQma4TNceR Xvp8vcf2oUkfEO6iJ6aUhpyXuYcaB8PJmC5ui4GiyzAw3c36Nr+Ag7pJVCkKnfPI 6eyOg4JBfFTVz2Pdg2yNtAax/zB+nphIbsFV8jxgBgy/e1uejcajBj9KMVn0xSWe sXVB9j4rTvdGcrCEwz8ZYqTT3AUqDmIb -----END CERTIFICATE-----Generated at Tue Dec 23 12:59:01 2025 by rpki-client