This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft File: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json) Hash identifier: GdgO8zc0V37oWfynxuQHY8/v3JVbs+cqX6ZXcGJUxfQ= Subject key identifier: 44:EF:A8:F0:12:59:E5:66:7E:9E:1E:A5:B6:FC:33:C7:6E:9B:D1:DD Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 Certificate issuer: /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Certificate serial: 0332 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft Manifest number: 032C Signing time: Sun 21 Dec 2025 00:17:53 +0000 Manifest this update: Sun 21 Dec 2025 00:17:53 +0000 Manifest next update: Sun 28 Dec 2025 00:17:53 +0000 Files and hashes: 1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: IHKJky7MJgeskqzwM8ontDcHuICx0irHueqggnil7pc=) 2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: qa15tYjyvK+v+9+dFGqhDZRxQn9RFba+Z/+v8OfQMJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 818 (0x332) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF83, serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Validity Not Before: Dec 21 00:17:53 2025 GMT Not After : Dec 28 00:17:53 2025 GMT Subject: CN=69473cb1-142b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:29:a4:61:8e:19:96:eb:35:33:4b:78:02:75: 6a:f0:0b:e3:69:37:17:4d:9b:45:5d:3e:3a:4a:cd: 55:17:6d:3d:81:81:04:2e:9f:c6:35:b2:dd:e3:59: 16:44:e6:4e:84:f5:af:e6:b1:6e:0d:8d:0e:9c:5f: a6:04:b4:eb:25:64:1d:1f:f6:bd:4a:52:5a:4e:a0: 9d:df:08:4e:9b:f2:36:98:21:5e:d0:1f:1f:9f:ac: 06:e9:5f:60:62:98:d9:25:c8:60:b8:c6:c8:49:fe: 24:31:27:b0:b2:6e:10:ed:1e:b7:87:9a:b2:b3:eb: 5d:bd:3e:b7:21:db:c7:e9:47:41:b8:3c:76:05:d9: d6:c9:ec:1c:b8:6a:be:d4:de:6c:f7:d6:42:57:f7: 17:4f:1e:f9:51:0c:e3:98:5b:85:ee:c8:a4:44:64: 24:33:71:a8:b2:f2:6c:e5:56:1a:40:2e:ab:1f:e9: be:f7:fe:35:56:cf:8a:69:bf:0f:43:8a:00:fb:8a: 11:e0:10:50:b5:1b:6b:bd:12:f7:2f:f3:ef:59:a8: dc:cc:7a:93:c3:ae:7d:67:33:b1:fa:66:0e:b6:41: 3a:fb:28:f4:b2:dc:32:12:93:4c:73:ba:8f:26:bc: b1:f3:19:3e:4c:37:d3:f6:e1:57:6f:5e:49:4f:61: f9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EF:A8:F0:12:59:E5:66:7E:9E:1E:A5:B6:FC:33:C7:6E:9B:D1:DD X509v3 Authority Key Identifier: keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:88:4e:d2:52:fb:5f:73:fb:95:6e:33:a8:7d:33:ef:ae:54: f2:e8:b7:ba:ff:9a:0b:a2:53:da:93:b1:a8:a2:56:38:05:a4: b9:90:0d:44:4a:b8:5d:a2:5d:13:7e:62:48:92:de:17:ef:82: 39:de:69:e4:77:d1:5b:48:66:1b:87:b3:df:7e:74:43:cf:ea: 3b:3b:f8:0b:6d:ca:f3:5d:cd:fc:4c:e1:a5:a3:bf:29:28:da: a6:99:65:1b:77:8d:e4:42:81:76:df:fc:e5:a4:93:d2:1a:ec: e3:ae:1c:ee:32:58:06:a4:96:3b:13:18:f5:ac:88:a4:50:36: 93:a0:33:ef:9d:3d:82:9c:c8:48:c4:25:d6:12:6d:9d:45:de: 20:db:4d:95:a7:36:2e:1b:6a:33:87:5e:3f:ba:5c:2e:35:07: 5f:32:30:0d:e2:98:74:e1:99:53:5e:09:fe:98:16:e7:c1:69: 21:b6:25:2e:49:c0:94:2d:71:ed:d9:45:d5:35:88:d2:ac:56: 3e:0d:4d:b4:e5:87:1a:ed:79:56:49:8e:61:68:69:d0:85:ec: 53:e7:a7:d5:7a:55:d9:88:14:ff:ae:0f:9c:07:80:9a:0c:03: e4:d3:0c:0e:18:48:47:f1:b7:e5:e6:5f:03:e0:61:d8:66:60: 35:28:0b:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGODMxMTAvBgNVBAUTKDJFRjg3NkE2NjRFNUQ4QjZDREUwMUNGMDg0MTBEQkFE OTZCQzQ5OTgwHhcNMjUxMjIxMDAxNzUzWhcNMjUxMjI4MDAxNzUzWjAYMRYwFAYD VQQDDA02OTQ3M2NiMS0xNDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvimkYY4Zlus1M0t4AnVq8AvjaTcXTZtFXT46Ss1VF209gYEELp/GNbLd41kW ROZOhPWv5rFuDY0OnF+mBLTrJWQdH/a9SlJaTqCd3whOm/I2mCFe0B8fn6wG6V9g YpjZJchguMbISf4kMSewsm4Q7R63h5qys+tdvT63IdvH6UdBuDx2BdnWyewcuGq+ 1N5s99ZCV/cXTx75UQzjmFuF7sikRGQkM3GosvJs5VYaQC6rH+m+9/41Vs+Kab8P Q4oA+4oR4BBQtRtrvRL3L/PvWajczHqTw659ZzOx+mYOtkE6+yj0stwyEpNMc7qP Jryx8xk+TDfT9uFXb15JT2H5hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETvqPAS WeVmfp4epbb8M8dum9HdMB8GA1UdIwQYMBaAFC74dqZk5di2zeAc8IQQ262WvEmY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREY4My9FMkFFM0IwQUYx MzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJMYk40Qnp3aEJEYnJaYThT WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x2aDJwbVRsMkxiTjRCendoQkRiclphOFNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REY4My9FMkFFM0IwQUYxMzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJM Yk40Qnp3aEJEYnJaYThTWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5iE7SUvtfc/uVbjOofTPvrlTy6Le6/5oLolPak7GoolY4BaS5kA1E Srhdol0TfmJIkt4X74I53mnkd9FbSGYbh7PffnRDz+o7O/gLbcrzXc38TOGlo78p KNqmmWUbd43kQoF23/zlpJPSGuzjrhzuMlgGpJY7Exj1rIikUDaToDPvnT2CnMhI xCXWEm2dRd4g202VpzYuG2ozh14/ulwuNQdfMjAN4ph04ZlTXgn+mBbnwWkhtiUu ScCULXHt2UXVNYjSrFY+DU205Yca7XlWSY5haGnQhexT56fVelXZiBT/rg+cB4Ca DAPk0wwOGEhH8bfl5l8D4GHYZmA1KAtn -----END CERTIFICATE-----Generated at Mon Dec 22 04:00:00 2025 by rpki-client