This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft File: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json) Hash identifier: P0pD7EQF6U1pvzky5sreDbyiZx1lCIpf4noaS739vgc= Subject key identifier: CF:16:4F:A1:59:1F:F8:B1:97:85:5E:4E:D6:EC:1F:00:33:DA:66:49 Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Certificate serial: 0498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft Manifest number: 0477 Signing time: Mon 08 Dec 2025 22:37:31 +0000 Manifest this update: Mon 08 Dec 2025 22:37:31 +0000 Manifest next update: Mon 15 Dec 2025 22:37:31 +0000 Files and hashes: 1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: wbyRCEiFQ8PWm2NCMWhzpgpYo4cljr1EZJZu0jcHP04=) 2: A8827568116911EEBB241C32C4F9AE02.roa (hash: ePscgiftvgu3AgZJRcwiRUYhc5l5akEknNm+3bxCM0A=) 3: A6FA9A4A116911EEBB241C32C4F9AE02.roa (hash: RgkBiig85GBTWo6hrTV95O/BhHQIjrp9qKOVuIGC96Q=) 4: E248BDA63C5211EF94184A20C4F9AE02.roa (hash: uCKPAwy0X3Z4CL+hlBr0CZ+w6vMoqyCthCGEPEwyTxY=) 5: F4D295243FDA11EFAF5E676AC4F9AE02.roa (hash: aj4Q4SeRE+NI4REEKNFbR+3ayDuDtlipzDAl7u7My1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 22:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1176 (0x498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Validity Not Before: Dec 8 22:37:31 2025 GMT Not After : Dec 15 22:37:31 2025 GMT Subject: CN=6937532b-162a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5a:a6:81:c8:fe:25:5a:9d:e9:02:8c:44:35: c4:c3:cf:e5:d7:49:29:cb:84:eb:cb:c1:65:17:9f: b0:9b:97:5b:80:47:05:76:01:bf:0c:33:c7:49:4a: db:dc:dd:bd:62:e2:9b:b5:22:07:f5:d9:05:e7:8d: 4e:86:93:af:a1:94:30:b0:a6:21:3f:34:52:c1:58: 78:da:26:c0:28:68:d2:cc:3d:69:dd:ca:5b:23:ca: 5a:33:c3:0f:ac:66:ff:2b:9e:a2:dd:76:db:be:e0: 6d:02:4e:27:56:01:0f:77:94:d5:6c:38:da:4d:d6: ef:9d:4e:9d:83:c8:e6:8e:4c:4c:12:11:83:3f:56: 58:c1:9c:2f:3b:35:9c:6b:d2:fe:c8:75:96:60:e0: 46:65:0a:b6:45:d7:92:c5:f0:22:b7:08:b7:00:23: 85:71:0b:c5:3a:e5:3f:ef:d1:02:64:18:ef:0c:06: 32:6e:64:45:28:94:31:f6:2a:5e:06:2b:07:c3:ed: 5b:1d:40:4a:43:b8:4c:2e:a7:39:ac:2e:c9:e7:71: 00:ce:cc:3e:e6:70:96:da:94:5e:53:44:81:d8:1e: 9c:4d:ee:7a:98:5a:2a:ad:82:15:a2:cd:95:ed:2b: 36:d6:5c:b4:71:16:fa:22:f2:cf:16:96:85:e2:24: 92:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:16:4F:A1:59:1F:F8:B1:97:85:5E:4E:D6:EC:1F:00:33:DA:66:49 X509v3 Authority Key Identifier: keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:38:df:d0:1c:31:b4:79:1c:65:68:45:ab:90:d9:81:5b:5a: 1d:ba:43:54:2f:d2:8d:bb:94:30:2b:46:6a:bd:60:64:e9:83: dc:6b:b8:03:e8:cb:4b:6d:a1:91:9e:7c:ad:81:24:a7:0e:e1: f1:60:5f:91:f5:a6:12:65:f9:81:2b:da:fe:fe:43:ca:45:49: 52:d9:42:8d:03:83:50:ee:a3:67:96:f2:ab:55:2f:f7:82:80: 4e:ae:76:6d:5f:5d:59:9d:a8:3f:5f:27:ae:b6:47:54:e7:2d: 31:d2:c7:f1:5b:5b:02:b5:cf:cf:b3:d6:1f:cb:70:b2:e9:c9: b6:9a:36:8d:f8:a3:a3:ba:bf:85:22:11:ad:3b:42:bf:1c:75: f1:16:f0:6a:92:ba:a6:b8:f6:f2:4e:52:9f:26:65:70:68:0c: d4:f5:94:91:39:be:9f:d2:93:bd:c4:8f:97:7c:98:ed:d9:cc: 67:02:04:f3:e1:03:f8:33:f4:ad:7b:40:c0:c4:91:58:89:b6: cc:0d:9a:81:bf:b5:04:83:86:9e:51:26:08:11:8d:b9:c8:e7: ea:47:6d:38:cd:ec:e1:ce:a6:d1:ba:a2:b9:ed:c8:66:a1:31: 6b:3b:7c:3a:19:23:06:98:c2:ed:15:c1:29:ae:70:33:e8:8c: 67:3e:37:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG NjExOUYzMEMwHhcNMjUxMjA4MjIzNzMxWhcNMjUxMjE1MjIzNzMxWjAYMRYwFAYD VQQDEw02OTM3NTMyYi0xNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1qmgcj+JVqd6QKMRDXEw8/l10kpy4Try8FlF5+wm5dbgEcFdgG/DDPHSUrb 3N29YuKbtSIH9dkF541OhpOvoZQwsKYhPzRSwVh42ibAKGjSzD1p3cpbI8paM8MP rGb/K56i3XbbvuBtAk4nVgEPd5TVbDjaTdbvnU6dg8jmjkxMEhGDP1ZYwZwvOzWc a9L+yHWWYOBGZQq2RdeSxfAitwi3ACOFcQvFOuU/79ECZBjvDAYybmRFKJQx9ipe BisHw+1bHUBKQ7hMLqc5rC7J53EAzsw+5nCW2pReU0SB2B6cTe56mFoqrYIVos2V 7Ss21ly0cRb6IvLPFpaF4iSSRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8WT6FZ H/ixl4VeTtbsHwAz2mZJMB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0 MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4 d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEM4RS8wMzJFNTdCODc0MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendD bkZoVnRNRjBVRnIyRVo4d3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiON/QHDG0eRxlaEWrkNmBW1odukNUL9KNu5QwK0ZqvWBk6YPca7gD 6MtLbaGRnnytgSSnDuHxYF+R9aYSZfmBK9r+/kPKRUlS2UKNA4NQ7qNnlvKrVS/3 goBOrnZtX11Znag/XyeutkdU5y0x0sfxW1sCtc/Ps9Yfy3Cy6cm2mjaN+KOjur+F IhGtO0K/HHXxFvBqkrqmuPbyTlKfJmVwaAzU9ZSROb6f0pO9xI+XfJjt2cxnAgTz 4QP4M/Ste0DAxJFYibbMDZqBv7UEg4aeUSYIEY25yOfqR204zezhzqbRuqK57chm oTFrO3w6GSMGmMLtFcEprnAz6IxnPjfG -----END CERTIFICATE-----Generated at Wed Dec 10 09:05:23 2025 by rpki-client