This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json) Hash identifier: 7NtNDZlyL7kQ0GyC1wkaiCu8yZ2TSvrJLag+ZS3apNg= Subject key identifier: 29:13:9F:A4:AB:87:A7:F4:FF:4F:89:0D:16:B6:8D:37:C1:09:4A:30 Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Certificate serial: 0BDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft Manifest number: 0BCE Signing time: Wed 24 Dec 2025 18:31:03 +0000 Manifest this update: Wed 24 Dec 2025 18:31:02 +0000 Manifest next update: Wed 31 Dec 2025 18:31:02 +0000 Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: uCNst2YpEast4O9v5CyVHn27UT6ifPZ9R4/BvF1oymw=) 2: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: /nz/1q0UnnUh7/646JLbHcYkN8JqYIJjZYielEh/K48=) 3: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: 325+Q5b9bGMNFjpY1dytCT5yzU1HW8KiWlyU6/c5X5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3039 (0xbdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Validity Not Before: Dec 24 18:31:02 2025 GMT Not After : Dec 31 18:31:02 2025 GMT Subject: CN=694c3166-cb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:45:41:c0:f3:28:c3:cb:a9:be:d7:b6:d8:bf: 02:03:d7:7a:35:79:dc:2d:ed:60:2c:84:e7:8e:86: d6:61:36:ac:00:ef:f6:72:1c:7f:86:b1:96:2b:a3: 88:f0:c8:41:8d:41:08:dd:34:60:e4:6b:a8:87:a1: 76:c5:16:58:50:0a:26:a9:cf:c3:67:bf:d8:a4:cb: ba:af:02:9e:f8:09:c8:44:83:24:ea:f5:dd:e1:6e: 2d:7f:6d:df:b4:1c:f3:de:35:92:52:fd:77:16:ac: 4a:c6:82:17:99:0d:c5:48:e2:7d:60:06:7c:6f:85: d7:65:6c:5c:35:90:74:7c:a7:42:cc:fc:d5:42:bc: 3e:a7:ae:19:26:9e:54:b5:7e:59:7c:5d:24:fb:27: dc:4f:ee:8f:97:42:ce:9c:77:41:9b:e0:82:e8:cd: 65:29:5a:58:42:46:ea:e9:bd:fb:d0:d5:36:2a:08: 4c:32:57:c8:f4:42:d8:da:2d:7a:21:ab:03:49:3f: 3d:c7:ae:e9:a0:fe:1c:f0:15:96:a5:01:04:03:c1: ef:11:31:7f:49:bd:57:bf:d1:74:e9:03:f0:42:62: 65:76:11:0e:c6:70:b4:f3:21:1a:2d:28:2c:22:f7: af:91:51:1b:5b:37:3e:d0:86:2b:7d:c3:7d:ee:dc: ed:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:13:9F:A4:AB:87:A7:F4:FF:4F:89:0D:16:B6:8D:37:C1:09:4A:30 X509v3 Authority Key Identifier: keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:0f:6c:8e:67:3c:ac:0e:a3:20:8a:98:de:07:c2:ab:fc:2b: 76:6b:f9:1e:cf:ed:88:c9:c7:5b:b2:2d:73:ec:91:5d:92:69: 9b:97:e4:45:52:57:6c:6b:a1:c8:56:bf:c3:77:32:b1:d7:db: 72:18:89:95:c5:eb:02:a9:ad:70:6b:17:23:9b:44:b4:69:6c: 55:7d:88:e8:66:fc:95:e0:52:ed:d1:9e:ec:ee:b2:20:62:f9: 82:83:c7:88:ac:26:88:09:45:1b:e3:14:23:cd:58:b5:a0:ae: 18:24:b9:59:db:12:49:bf:2e:49:b7:ae:96:1b:7b:34:34:23: b8:96:b9:6a:9b:61:72:6c:fb:55:84:60:f8:58:9d:7f:d4:1e: 42:ec:f7:6e:c5:42:bb:b2:a0:88:31:f4:57:16:00:c6:38:85: 5d:c8:77:13:ca:6d:24:ce:a4:9b:85:05:da:47:1b:8c:5e:af: fa:43:78:0d:c2:f6:61:42:d6:2c:08:b5:16:3f:c0:90:bc:76: 30:a3:f1:ec:26:84:03:95:f0:54:e7:cc:86:8d:65:37:eb:99: d7:ef:93:a5:80:59:ed:57:ef:ee:e0:be:8d:81:b7:16:26:95: 63:eb:6d:cd:cc:63:38:7f:67:a6:23:75:db:98:19:3d:79:f1: ee:c9:78:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDQTYxMTAvBgNVBAUTKDk2RjgxN0JENDA3MEI1Q0MxOUEwQjUzOTNENTVCRTc3 Mzk4MEE4MTAwHhcNMjUxMjI0MTgzMTAyWhcNMjUxMjMxMTgzMTAyWjAYMRYwFAYD VQQDDA02OTRjMzE2Ni1jYjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5kVBwPMow8upvte22L8CA9d6NXncLe1gLITnjobWYTasAO/2chx/hrGWK6OI 8MhBjUEI3TRg5Guoh6F2xRZYUAomqc/DZ7/YpMu6rwKe+AnIRIMk6vXd4W4tf23f tBzz3jWSUv13FqxKxoIXmQ3FSOJ9YAZ8b4XXZWxcNZB0fKdCzPzVQrw+p64ZJp5U tX5ZfF0k+yfcT+6Pl0LOnHdBm+CC6M1lKVpYQkbq6b370NU2KghMMlfI9ELY2i16 IasDST89x67poP4c8BWWpQEEA8HvETF/Sb1Xv9F06QPwQmJldhEOxnC08yEaLSgs IvevkVEbWzc+0IYrfcN97tztcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkTn6Sr h6f0/0+JDRa2jTfBCUowMB8GA1UdIwQYMBaAFJb4F71AcLXMGaC1OT1Vvnc5gKgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOENBNi85QkQ2NDA1NjMy MDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rjd1pvTFU1UFZXLWR6bUFx QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2Z1h2VUJ3dGN3Wm9MVTVQVlctZHptQXFCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OENBNi85QkQ2NDA1NjMyMDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rj d1pvTFU1UFZXLWR6bUFxQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCD2yOZzysDqMgipjeB8Kr/Ct2a/kez+2Iycdbsi1z7JFdkmmbl+RF Uldsa6HIVr/DdzKx19tyGImVxesCqa1waxcjm0S0aWxVfYjoZvyV4FLt0Z7s7rIg YvmCg8eIrCaICUUb4xQjzVi1oK4YJLlZ2xJJvy5Jt66WG3s0NCO4lrlqm2FybPtV hGD4WJ1/1B5C7PduxUK7sqCIMfRXFgDGOIVdyHcTym0kzqSbhQXaRxuMXq/6Q3gN wvZhQtYsCLUWP8CQvHYwo/HsJoQDlfBU58yGjWU365nX75OlgFntV+/u4L6NgbcW JpVj623NzGM4f2emI3XbmBk9efHuyXhT -----END CERTIFICATE-----Generated at Wed Dec 24 19:30:39 2025 by rpki-client