This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: npMl5tpUc/rG60Cg5EtV21QnmfJcltNIYt0L0kQgeZ4= Subject key identifier: 2B:C0:0F:19:DF:F8:85:49:45:15:D0:F9:0E:7F:2B:5B:FD:1B:20:C7 Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: 0114 Signing time: Tue 23 Dec 2025 03:51:21 +0000 Manifest this update: Tue 23 Dec 2025 03:51:20 +0000 Manifest next update: Tue 30 Dec 2025 03:51:20 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: ZIRcW/qKikyRcAZ8UaKwyLUz2RJK7MCzWdmAW5al7gs=) 2: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: XWY3Z0PrjeVbgUGRkkonKlE66Ol3xZjgkZ/1G2BNmmU=) 3: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: clF6JNb3xxwZ4+TvE/qZQW2JPLeVEQfwTMXzv7FMnBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Dec 23 03:51:20 2025 GMT Not After : Dec 30 03:51:20 2025 GMT Subject: CN=694a11b9-4058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1b:d9:d3:69:0f:d2:e5:34:b4:bb:43:ad:53: 03:22:24:c0:ed:f5:f0:0d:e1:79:5e:9c:13:87:0f: 9a:ce:47:78:9c:57:17:6a:7f:49:12:86:11:34:fa: 56:94:a9:71:68:92:bb:ad:69:1b:de:b5:72:47:75: 26:18:05:b3:84:15:96:5a:93:4a:a1:6a:7f:7e:58: 87:ae:cb:5d:cb:ed:ff:3d:71:53:f4:86:e4:0f:f5: 30:0b:a2:19:d2:d4:95:bc:f7:17:c2:2e:b6:61:9b: 5e:ec:13:44:b8:40:e2:2e:77:35:c7:bc:64:cb:2c: 22:93:bd:1c:a8:81:ae:17:da:fa:5e:8e:bf:28:9e: 4f:02:99:36:a7:47:88:0d:ff:91:2a:9b:e1:2e:8f: b6:c3:99:1e:de:de:ec:66:94:e9:80:a0:07:bc:54: bf:83:fa:32:6c:9d:ba:88:ae:a8:8d:64:05:b4:47: 23:56:24:55:00:d5:f2:c4:70:a5:29:c5:b4:99:e6: 43:05:6c:e9:10:a3:60:43:52:77:88:a2:a2:9f:19: 55:9f:dd:1d:1d:f8:76:aa:4f:5b:60:68:82:52:a1: 56:e0:64:83:09:b0:d4:b0:4a:ea:45:c9:f1:7e:dd: 0d:99:ff:59:c4:d1:90:64:0a:6c:4e:39:8b:1e:60: 26:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C0:0F:19:DF:F8:85:49:45:15:D0:F9:0E:7F:2B:5B:FD:1B:20:C7 X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:8b:73:e5:aa:ec:fb:5d:3b:d7:93:3f:6d:01:33:64:a6:73: 8c:b5:c3:9c:e2:08:e0:ef:b0:c7:71:ec:85:88:ce:3e:f4:49: 1d:82:ee:0d:bb:7f:45:40:5e:57:2b:d0:01:a0:37:b4:9c:4c: 86:74:27:64:2d:32:29:5a:30:e7:9c:ef:41:67:7d:23:9d:6e: d6:e9:e1:24:9b:2e:a1:e8:55:93:69:d7:28:93:5f:e4:6c:91: db:06:af:d5:e7:2a:c7:7b:8d:a5:78:8f:5f:80:5c:8d:76:34: d9:00:fe:0f:e4:a6:a1:a3:c9:6d:ba:78:ed:95:51:21:f0:1e: b7:13:47:6f:ac:fb:4a:c1:e5:5b:89:f5:e7:6f:ca:e5:e9:1d: b2:2a:5a:b0:e7:5a:0b:0e:f3:4d:66:f9:9c:e4:74:2d:a3:00: ec:a4:94:4b:c2:69:d4:bb:59:e4:c9:37:6b:cf:92:d0:f9:ec: b9:1e:04:c2:8a:63:98:ef:df:5c:b3:e7:6b:7f:9f:55:b4:7b: 74:21:fb:83:b8:e2:2b:1c:a4:94:56:5c:9b:73:4b:d1:eb:ee: 2d:08:31:87:1b:36:25:cf:73:b4:ba:da:11:6e:a1:a3:2a:57: 41:f6:10:c3:38:ac:a6:f0:ad:2b:d9:43:2e:e0:02:16:10:fc: 96:ea:67:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx OTM3RjlGOUMwHhcNMjUxMjIzMDM1MTIwWhcNMjUxMjMwMDM1MTIwWjAYMRYwFAYD VQQDDA02OTRhMTFiOS00MDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BvZ02kP0uU0tLtDrVMDIiTA7fXwDeF5XpwThw+azkd4nFcXan9JEoYRNPpW lKlxaJK7rWkb3rVyR3UmGAWzhBWWWpNKoWp/fliHrstdy+3/PXFT9IbkD/UwC6IZ 0tSVvPcXwi62YZte7BNEuEDiLnc1x7xkyywik70cqIGuF9r6Xo6/KJ5PApk2p0eI Df+RKpvhLo+2w5ke3t7sZpTpgKAHvFS/g/oybJ26iK6ojWQFtEcjViRVANXyxHCl KcW0meZDBWzpEKNgQ1J3iKKinxlVn90dHfh2qk9bYGiCUqFW4GSDCbDUsErqRcnx ft0Nmf9ZxNGQZApsTjmLHmAm2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvADxnf +IVJRRXQ+Q5/K1v9GyDHMB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t bEJBRkh2VTdlLWNaTl9uNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIi3Plquz7XTvXkz9tATNkpnOMtcOc4gjg77DHceyFiM4+9Ekdgu4N u39FQF5XK9ABoDe0nEyGdCdkLTIpWjDnnO9BZ30jnW7W6eEkmy6h6FWTadcok1/k bJHbBq/V5yrHe42leI9fgFyNdjTZAP4P5Kaho8ltunjtlVEh8B63E0dvrPtKweVb ifXnb8rl6R2yKlqw51oLDvNNZvmc5HQtowDspJRLwmnUu1nkyTdrz5LQ+ey5HgTC imOY799cs+drf59VtHt0IfuDuOIrHKSUVlybc0vR6+4tCDGHGzYlz3O0utoRbqGj KldB9hDDOKym8K0r2UMu4AIWEPyW6mey -----END CERTIFICATE-----Generated at Thu Dec 25 00:36:35 2025 by rpki-client