This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft (raw, json) Hash identifier: Xu92DhNAgrdngA1B7JEVdfPfBwgiIe0y1W3aCwwDaog= Subject key identifier: 07:C2:98:C0:47:2B:16:59:4F:BB:29:53:E0:C4:9F:E4:F1:1A:A7:3F Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Certificate serial: 059F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft Manifest number: 0562 Signing time: Fri 12 Dec 2025 22:41:14 +0000 Manifest this update: Fri 12 Dec 2025 22:41:13 +0000 Manifest next update: Fri 19 Dec 2025 22:41:13 +0000 Files and hashes: 1: LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl (hash: s7j5Jw8xqS4fkrP/NJ6lZYOKS1U3bKg0Gi7CWsn0Jmo=) 2: 95C12B8E21A111EE8360C139C4F9AE02.roa (hash: ANarnw7th2betqTUJ1dSr/6kmM20Z4BPNu0RmkGVouY=) 3: F88F642285E411EEB951413BC4F9AE02.roa (hash: 5XS7gAJ1w57LGdHifEwdGpT41QuHVgx3tURmBIG/Ph0=) 4: BBDA9B429E6311ECA6EC8071C4F9AE02.roa (hash: WiSL38A4AfTZxujdbevnM0BHhlMtOQknr2QyeEfpbeg=) 5: CE988D80FB7311EC97CD7F85C4F9AE02.roa (hash: HJPBn4wWH9435slQdCcvd//C2eehlQjgPBpSjm2F4Lc=) 6: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (hash: 2jfJLAfv4sSmTjn+t4R2DbosLO6LZGV4JERzq1/IuT0=) 7: D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (hash: H6lUECWs/LnmCnEJB/ye5BlXZoehdKlxdmR5+P/1VOY=) 8: 1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (hash: ZVXIXb68LMeIyoHASYy5oVFyflHWdmoVD7FAYMUQOp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 22:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1439 (0x59f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Validity Not Before: Dec 12 22:41:13 2025 GMT Not After : Dec 19 22:41:13 2025 GMT Subject: CN=693c9a0a-f872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f7:6e:c9:51:d8:62:4c:8f:75:a1:5c:b4:3c: 4a:ae:ce:6b:bd:bd:53:57:cc:1c:db:62:18:fb:c4: 03:c8:47:da:b1:c1:fa:cf:85:bf:a5:3f:b2:da:da: d5:47:be:c7:73:64:d1:7c:28:41:3a:07:ff:06:b0: 02:c1:b0:6f:b4:ea:56:c7:f3:f1:52:a4:c6:7a:69: ff:97:c4:fe:96:a0:d8:bc:6a:0e:01:67:6b:cd:92: 41:e7:6c:53:e4:fe:5f:30:ab:d4:1f:27:fd:e7:bd: 01:11:f1:32:fb:c4:7e:fb:f9:7c:f3:43:4e:76:44: e9:e3:72:34:22:97:89:16:dd:47:71:c8:00:47:73: 36:fb:0c:02:09:93:b6:7b:82:e2:f0:77:4c:24:b7: 8b:18:e8:ad:cb:07:32:d1:73:df:97:07:11:f6:49: e2:9b:29:24:03:1b:02:bf:fa:80:fb:5f:a6:84:9b: 52:2c:0e:c8:55:7d:97:6c:46:9e:1c:ee:cb:cb:81: 66:3f:e1:07:4b:80:d4:7b:8a:21:c1:fb:62:72:83: ae:aa:29:10:93:f3:fe:61:16:a7:8e:92:ac:42:83: 4c:3c:57:07:10:0a:82:7a:80:b5:70:ae:45:f1:c0: b5:5e:ca:82:27:33:23:cc:c3:ae:4b:d5:63:c2:6e: b4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C2:98:C0:47:2B:16:59:4F:BB:29:53:E0:C4:9F:E4:F1:1A:A7:3F X509v3 Authority Key Identifier: keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:2d:cd:f6:93:39:78:15:ed:df:11:04:38:93:31:8a:82:9e: fa:f2:31:e8:ef:29:86:cf:78:d4:9e:cc:e6:75:ad:03:75:5b: 38:08:63:2b:76:a8:2d:99:23:a0:62:ec:be:d5:a3:8c:c3:18: ea:6a:0f:09:ad:8e:d9:38:2d:e6:b4:ef:60:a8:74:1c:2d:3f: f6:9e:9a:23:c3:16:a2:46:0f:cc:6c:82:23:9d:84:1b:b3:6d: 56:74:8b:99:33:14:05:17:c5:5b:1c:54:2c:c1:2d:d5:e3:eb: 0b:d3:53:63:98:3c:d4:34:fc:91:22:a9:23:8e:b7:91:01:67: 43:1d:cc:b1:8f:db:b2:44:00:12:33:4f:e4:df:bf:70:93:5d: 96:1e:72:ab:f5:8b:68:dc:e6:17:9a:71:8c:c3:26:89:16:9d: cb:10:1e:76:bb:25:10:7c:1b:d5:79:f8:9b:f5:b0:1c:6d:8b: 5d:ae:4d:0d:db:cc:ae:0a:07:43:9a:e0:3e:32:ca:c6:28:e1: 2b:3f:18:33:9e:ba:b4:7f:e6:4c:de:5b:29:6f:f6:ed:ef:12: e2:0b:04:75:8e:21:83:22:84:10:3c:7a:8f:86:7e:30:c7:1e: f1:fa:6c:14:30:bd:69:7d:98:d1:93:93:bf:56:ff:57:d1:33: be:70:91:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy MEM4RkQ1N0IwHhcNMjUxMjEyMjI0MTEzWhcNMjUxMjE5MjI0MTEzWjAYMRYwFAYD VQQDDA02OTNjOWEwYS1mODcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fduyVHYYkyPdaFctDxKrs5rvb1TV8wc22IY+8QDyEfascH6z4W/pT+y2trV R77Hc2TRfChBOgf/BrACwbBvtOpWx/PxUqTGemn/l8T+lqDYvGoOAWdrzZJB52xT 5P5fMKvUHyf9570BEfEy+8R++/l880NOdkTp43I0IpeJFt1HccgAR3M2+wwCCZO2 e4Li8HdMJLeLGOitywcy0XPflwcR9knimykkAxsCv/qA+1+mhJtSLA7IVX2XbEae HO7Ly4FmP+EHS4DUe4ohwfticoOuqikQk/P+YRanjpKsQoNMPFcHEAqCeoC1cK5F 8cC1XsqCJzMjzMOuS9Vjwm60MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfCmMBH KxZZT7spU+DEn+TxGqc/MB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2 MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q3Mi80NTc2QTY3MjI2MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgy d0x0WS1TRVo1bGdneVAxWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdLc32kzl4Fe3fEQQ4kzGKgp768jHo7ymGz3jUnszmda0DdVs4CGMr dqgtmSOgYuy+1aOMwxjqag8JrY7ZOC3mtO9gqHQcLT/2npojwxaiRg/MbIIjnYQb s21WdIuZMxQFF8VbHFQswS3V4+sL01NjmDzUNPyRIqkjjreRAWdDHcyxj9uyRAAS M0/k379wk12WHnKr9Yto3OYXmnGMwyaJFp3LEB52uyUQfBvVefib9bAcbYtdrk0N 28yuCgdDmuA+MsrGKOErPxgznrq0f+ZM3lspb/bt7xLiCwR1jiGDIoQQPHqPhn4w xx7x+mwUML1pfZjRk5O/Vv9X0TO+cJEt -----END CERTIFICATE-----Generated at Sun Dec 14 12:09:51 2025 by rpki-client