This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft File: lRKAntQ1o2QK-bdfCvspKNQWPDE.mft (raw, json) Hash identifier: He6pT9SH0UxJSZB2ecqkhQFS4CQmpVkT3aRV6+cUA7g= Subject key identifier: F8:5E:2E:79:20:EB:BC:01:A1:F1:94:EB:DA:0D:3A:DB:94:4E:CA:CD Authority key identifier: 95:12:80:9E:D4:35:A3:64:0A:F9:B7:5F:0A:FB:29:28:D4:16:3C:31 Certificate issuer: /CN=A91B45C0/serialNumber=9512809ED435A3640AF9B75F0AFB2928D4163C31 Certificate serial: 125C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft Manifest number: 1257 Signing time: Mon 22 Dec 2025 16:49:00 +0000 Manifest this update: Mon 22 Dec 2025 16:49:00 +0000 Manifest next update: Mon 29 Dec 2025 16:49:00 +0000 Files and hashes: 1: lRKAntQ1o2QK-bdfCvspKNQWPDE.crl (hash: NuTCui9apazcKVMfW6OL9LfzVVD4rO49YH9PhRUpbvE=) 2: 9995A38CFADC11EF87E86958C4F9AE02.roa (hash: lPLi48Hcf9N1auMQ0fWenp3rORwIoz4fywb8Qz85E7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.crl rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4700 (0x125c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B45C0, serialNumber=9512809ED435A3640AF9B75F0AFB2928D4163C31 Validity Not Before: Dec 22 16:49:00 2025 GMT Not After : Dec 29 16:49:00 2025 GMT Subject: CN=6949767c-7c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4b:cb:4f:6c:a4:86:67:61:d7:02:fd:f5:8e: ef:02:97:b5:73:43:c3:10:2a:23:d7:e7:bd:6d:c6: 24:64:39:37:43:40:41:b9:eb:59:95:b6:a0:68:15: 1a:0c:64:1f:c8:cc:51:37:d7:ba:d9:1e:5e:5d:dd: aa:38:23:fa:21:a9:31:f6:71:ea:58:c4:14:01:19: d3:41:18:36:77:85:80:8b:fb:fc:e6:27:bd:6b:03: d9:50:e2:59:07:cf:4c:d5:12:e2:0e:fd:c8:09:99: 94:a5:b1:62:5c:08:0f:29:fc:6c:9a:b1:c9:34:92: be:ae:19:45:1c:05:c5:19:66:78:24:e3:9e:e3:42: c0:ed:8d:51:06:c2:11:2b:a1:83:52:6a:d7:65:1e: 0f:b2:90:c0:07:b8:e0:57:1b:15:b5:a5:e5:5c:20: 07:9d:af:b5:21:a7:58:2f:95:0d:56:f4:c0:4c:e3: 82:5c:59:d5:0d:ac:45:7e:bd:7c:98:ae:33:3f:67: ff:3a:ea:f2:2e:3b:68:18:d9:84:7c:f9:7d:bc:79: 40:aa:16:ee:57:51:33:2d:3b:a2:ad:94:21:67:3d: 66:df:15:98:a1:c4:3e:2f:38:e0:71:6a:1d:a2:a0: 06:3a:cd:56:ec:c3:33:c7:05:51:cf:c1:4c:ea:13: 54:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5E:2E:79:20:EB:BC:01:A1:F1:94:EB:DA:0D:3A:DB:94:4E:CA:CD X509v3 Authority Key Identifier: keyid:95:12:80:9E:D4:35:A3:64:0A:F9:B7:5F:0A:FB:29:28:D4:16:3C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:eb:1b:5e:ad:e1:0d:bf:8b:20:f5:a7:a9:4f:64:ef:b2:11: cb:39:3f:1f:1b:8a:78:1b:d3:03:dd:92:56:a1:2c:12:44:1a: 57:8f:a9:94:1f:6f:70:ed:18:a0:03:93:5a:07:78:e8:1d:b8: 1a:a1:b6:eb:5c:25:11:ad:c2:85:07:90:67:ab:d1:1c:b6:47: 19:d7:e6:c1:47:3a:d7:5b:24:6f:e3:b9:89:c0:84:da:ed:e7: ec:60:22:e0:20:76:45:eb:5f:d3:ee:59:7e:a3:8d:0f:fa:53: 7a:f8:0a:11:c1:8c:4a:2d:fc:4a:1c:ba:c6:e2:10:1a:c3:f3: 85:29:5a:8c:53:dd:9f:43:6a:b3:dd:c8:e1:f0:a9:eb:0f:ea: 74:04:12:71:04:d9:b1:3b:fb:8b:73:ec:7b:6a:73:ea:19:af: d9:aa:3f:c9:1a:2f:88:0e:20:8d:99:5d:d0:be:c8:6f:9b:6d: 12:96:02:27:83:72:93:46:8e:f7:20:1c:8a:84:d6:a6:f2:ad: bd:c1:96:93:75:b5:ff:d0:64:c9:b0:be:54:ae:8c:99:c2:da: 27:3e:f1:1c:0d:d0:09:86:88:63:7e:39:bf:a0:24:9f:40:fc: 45:15:e8:d5:32:f8:b2:2b:13:6c:47:e8:1d:10:bf:4a:10:fe: ef:27:6e:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICElwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ1QzAxMTAvBgNVBAUTKDk1MTI4MDlFRDQzNUEzNjQwQUY5Qjc1RjBBRkIyOTI4 RDQxNjNDMzEwHhcNMjUxMjIyMTY0OTAwWhcNMjUxMjI5MTY0OTAwWjAYMRYwFAYD VQQDDA02OTQ5NzY3Yy03Yzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUvLT2ykhmdh1wL99Y7vApe1c0PDECoj1+e9bcYkZDk3Q0BBuetZlbagaBUa DGQfyMxRN9e62R5eXd2qOCP6Iakx9nHqWMQUARnTQRg2d4WAi/v85ie9awPZUOJZ B89M1RLiDv3ICZmUpbFiXAgPKfxsmrHJNJK+rhlFHAXFGWZ4JOOe40LA7Y1RBsIR K6GDUmrXZR4PspDAB7jgVxsVtaXlXCAHna+1IadYL5UNVvTATOOCXFnVDaxFfr18 mK4zP2f/OuryLjtoGNmEfPl9vHlAqhbuV1EzLTuirZQhZz1m3xWYocQ+LzjgcWod oqAGOs1W7MMzxwVRz8FM6hNUTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPheLnkg 67wBofGU69oNOtuUTsrNMB8GA1UdIwQYMBaAFJUSgJ7UNaNkCvm3Xwr7KSjUFjwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDVDMC9CREVFNzI5QUU2 RDkxMUU4OEI4QkY3N0NDNEY5QUUwMi9sUktBbnRRMW8yUUstYmRmQ3ZzcEtOUVdQ REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSS0FudFExbzJRSy1iZGZDdnNwS05RV1BERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDVDMC9CREVFNzI5QUU2RDkxMUU4OEI4QkY3N0NDNEY5QUUwMi9sUktBbnRRMW8y UUstYmRmQ3ZzcEtOUVdQREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh6xtereENv4sg9aepT2TvshHLOT8fG4p4G9MD3ZJWoSwSRBpXj6mU H29w7RigA5NaB3joHbgaobbrXCURrcKFB5Bnq9EctkcZ1+bBRzrXWyRv47mJwITa 7efsYCLgIHZF61/T7ll+o40P+lN6+AoRwYxKLfxKHLrG4hAaw/OFKVqMU92fQ2qz 3cjh8KnrD+p0BBJxBNmxO/uLc+x7anPqGa/Zqj/JGi+IDiCNmV3Qvshvm20SlgIn g3KTRo73IByKhNam8q29wZaTdbX/0GTJsL5UroyZwtonPvEcDdAJhohjfjm/oCSf QPxFFejVMviyKxNsR+gdEL9KEP7vJ24h -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:50 2025 by rpki-client