This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft File: LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json) Hash identifier: YlnrRFW9w6PDB1MNb4SC5nPoLNvCqx4tYzbZYwT5CnY= Subject key identifier: A3:55:3F:4A:8F:9B:35:BB:6F:7D:DB:DB:49:D2:E0:FF:5D:D3:F1:A9 Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Certificate serial: 09BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft Manifest number: 098F Signing time: Thu 04 Dec 2025 19:20:37 +0000 Manifest this update: Thu 04 Dec 2025 19:20:36 +0000 Manifest next update: Thu 11 Dec 2025 19:20:36 +0000 Files and hashes: 1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: hi5zHLUigf/NcpM3bgnqc2ygkk6O3E8k1AHgMyQiegw=) 2: E206DC460DEA11F0A924CF5CC4F9AE02.roa (hash: VB8lXHaRWCgJbChk21N3X1tByJzueb4oQFsyi3R2FSI=) 3: 570B25FA305111F0BED81784C4F9AE02.roa (hash: HRghPtYyJF7KhObZGzOSLoHVq6GqZy5jEHbcGyo6zuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2492 (0x9bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Validity Not Before: Dec 4 19:20:36 2025 GMT Not After : Dec 11 19:20:36 2025 GMT Subject: CN=6931df05-376f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e2:b1:1d:d7:0c:ec:6c:52:f2:4b:d3:c4:fb: 56:0d:fc:61:8d:1c:8a:1d:af:58:bb:53:9f:b4:8f: c9:7d:b9:4a:64:fe:1b:d9:69:86:f6:12:53:d1:34: 36:48:85:6c:0d:58:b9:7a:0d:51:4a:e2:48:06:8e: a7:6b:a4:88:c1:08:ce:b0:58:07:b2:88:88:ec:28: 2f:52:e9:33:b3:5c:9b:71:cd:06:c0:24:1f:4b:74: 83:09:f6:cd:f8:4e:cf:90:87:ab:31:3f:83:63:b4: b1:81:24:33:d5:fb:4b:b2:c7:08:a3:c0:df:3d:68: ed:db:fe:ac:48:95:2e:f9:4a:73:5a:d6:bc:85:f5: b2:fb:18:61:ea:f8:97:cb:85:46:00:dd:84:b4:ef: 42:3f:c8:7a:21:2f:06:15:26:ac:71:73:db:74:3b: 42:12:47:4d:b8:c7:61:b5:bf:27:7f:38:7b:fa:26: 53:ec:9d:78:f5:db:9c:1a:c3:b7:84:6f:2c:c5:b5: 6c:39:74:d0:f4:18:d4:04:92:f9:e2:77:64:28:b7: e1:d9:ec:d8:7f:21:b4:41:d2:41:07:81:32:98:27: 76:f7:30:07:69:46:fd:5f:24:cf:39:0b:4a:ac:6e: b2:b1:fc:ad:6e:7f:7d:06:57:45:60:4b:0f:2c:dd: 1c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:55:3F:4A:8F:9B:35:BB:6F:7D:DB:DB:49:D2:E0:FF:5D:D3:F1:A9 X509v3 Authority Key Identifier: keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8d:15:f4:15:cc:66:85:fe:e6:16:d5:79:80:05:60:7a:e5: d8:0b:5f:f3:16:87:1b:49:48:e0:cb:65:1c:ab:14:90:c8:2f: 58:74:18:3c:bc:98:71:a4:22:a5:00:88:57:86:05:aa:78:02: 41:c1:2b:80:c0:98:2a:d8:14:fa:80:a3:5e:ee:f1:82:00:46: 7e:80:d0:25:99:fb:e5:b6:3f:08:27:40:70:61:38:03:49:e6: b6:47:be:a3:c9:b5:8e:9b:a6:63:de:85:19:fd:36:8a:42:3e: 36:1e:49:a8:98:fc:5c:dd:d9:70:29:15:17:7a:d7:c9:c3:d3: 10:b5:21:5f:de:61:ba:be:a5:7c:f1:12:b0:6c:35:f3:99:35: 80:f3:a6:d5:3a:db:b7:11:27:c2:29:54:b0:c0:37:ab:d1:28: bb:5f:18:0d:14:35:ac:6d:58:a1:a1:83:a5:68:4d:f3:da:57: cb:1b:c1:45:49:9d:d9:f2:e4:f7:59:a3:73:2e:b9:0e:8b:8a: 03:1c:4c:7e:f0:41:e0:ab:d6:d2:6f:0d:2e:00:86:cf:ee:df: 1c:a3:9c:03:10:b3:2c:a9:43:89:4a:84:6d:91:a7:f0:f9:f9: 3d:c1:49:2e:fb:9a:71:3e:60:04:25:b0:1f:99:61:25:43:4a: e5:7b:04:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0ODYxMTAvBgNVBAUTKDJFMzA0QTNEOTI0OTlEOUQ3RDMzOEEzRUEwMkY3QzUz NDg0MjVCMTcwHhcNMjUxMjA0MTkyMDM2WhcNMjUxMjExMTkyMDM2WjAYMRYwFAYD VQQDEw02OTMxZGYwNS0zNzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeKxHdcM7GxS8kvTxPtWDfxhjRyKHa9Yu1OftI/JfblKZP4b2WmG9hJT0TQ2 SIVsDVi5eg1RSuJIBo6na6SIwQjOsFgHsoiI7CgvUukzs1ybcc0GwCQfS3SDCfbN +E7PkIerMT+DY7SxgSQz1ftLsscIo8DfPWjt2/6sSJUu+UpzWta8hfWy+xhh6viX y4VGAN2EtO9CP8h6IS8GFSascXPbdDtCEkdNuMdhtb8nfzh7+iZT7J149ducGsO3 hG8sxbVsOXTQ9BjUBJL54ndkKLfh2ezYfyG0QdJBB4EymCd29zAHaUb9XyTPOQtK rG6ysfytbn99BldFYEsPLN0c6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNVP0qP mzW7b33b20nS4P9d0/GpMB8GA1UdIwQYMBaAFC4wSj2SSZ2dfTOKPqAvfFNIQlsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQ4Ni84NTZBMjQ5Q0E5 ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5aMTlNNG8tb0M5OFUwaENX eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xqQktQWkpKbloxOU00by1vQzk4VTBoQ1d4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQ4Ni84NTZBMjQ5Q0E5ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5a MTlNNG8tb0M5OFUwaENXeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9jRX0Fcxmhf7mFtV5gAVgeuXYC1/zFocbSUjgy2UcqxSQyC9YdBg8 vJhxpCKlAIhXhgWqeAJBwSuAwJgq2BT6gKNe7vGCAEZ+gNAlmfvltj8IJ0BwYTgD Sea2R76jybWOm6Zj3oUZ/TaKQj42HkmomPxc3dlwKRUXetfJw9MQtSFf3mG6vqV8 8RKwbDXzmTWA86bVOtu3ESfCKVSwwDer0Si7XxgNFDWsbVihoYOlaE3z2lfLG8FF SZ3Z8uT3WaNzLrkOi4oDHEx+8EHgq9bSbw0uAIbP7t8co5wDELMsqUOJSoRtkafw +fk9wUku+5pxPmAEJbAfmWElQ0rlewTe -----END CERTIFICATE-----Generated at Fri Dec 5 02:28:01 2025 by rpki-client