This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft File: lTUaGSeo8Q660c48bEpaxGUVynA.mft (raw, json) Hash identifier: JfeUVf2Dzneu5liJ73v3GYIleXUGWPrN8bzwTP3v9QA= Subject key identifier: C0:95:E8:1B:78:96:20:7B:A0:59:BD:EC:2D:55:B4:35:5E:8E:CF:D3 Authority key identifier: 95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 Certificate issuer: /CN=A91D4E15/serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft Manifest number: 01E9 Signing time: Sun 21 Dec 2025 01:52:37 +0000 Manifest this update: Sun 21 Dec 2025 01:52:36 +0000 Manifest next update: Sun 28 Dec 2025 01:52:36 +0000 Files and hashes: 1: lTUaGSeo8Q660c48bEpaxGUVynA.crl (hash: y0y8Txn1CTmhor6GhAaJO3a/mxIQZ1FWQc204X5lJxU=) 2: 90F09734F1B311EDA789BB57C4F9AE02.roa (hash: nQOUg9YX4u69ZrVdmC/H632YznQdnlGcTOZN3JI/5dE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E15, serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Validity Not Before: Dec 21 01:52:36 2025 GMT Not After : Dec 28 01:52:36 2025 GMT Subject: CN=694752e5-9b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cf:f3:29:54:48:cb:39:b5:7d:1f:02:ae:fb: 42:4b:4a:3d:c5:bb:d7:4d:6a:60:d8:8c:cc:9d:ed: ca:80:aa:2a:c1:f9:0f:28:ab:1a:c2:b6:76:dc:cb: 02:77:a8:4b:16:48:8d:7d:74:54:6c:b6:3c:66:04: 69:67:1a:60:53:ba:0e:c4:2a:5e:3e:ee:1a:2e:94: a4:9d:0a:69:75:1c:22:0f:81:9a:28:e8:3f:12:14: 9d:5d:ac:a7:a7:c0:11:28:4e:4f:3f:b1:af:1f:d0: a0:1e:26:c1:89:89:40:87:f0:38:66:9d:95:65:73: 95:c9:aa:31:b5:81:56:fe:47:87:c5:a2:8f:c9:79: 87:ed:56:43:8f:2e:fd:67:0f:41:d2:80:bf:ee:e5: fe:3d:3a:68:51:e8:8e:64:c1:be:3b:21:8a:69:19: 0e:bd:b6:e6:ee:5b:b8:70:d1:e1:14:2d:ab:d0:57: 33:a5:b3:8a:4a:a1:01:f5:38:c2:61:ec:fb:0e:a9: d2:0d:6c:d0:77:09:6e:35:b6:79:7a:55:1f:75:53: 12:01:71:a8:a6:b5:3d:3b:5b:63:12:40:04:87:2e: ba:0f:9d:b2:f8:7b:ec:55:e5:91:3f:e6:d2:7a:5f: b4:c1:d3:c1:05:51:2b:dc:de:0b:2e:60:da:11:5b: ef:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:95:E8:1B:78:96:20:7B:A0:59:BD:EC:2D:55:B4:35:5E:8E:CF:D3 X509v3 Authority Key Identifier: keyid:95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:5e:2d:69:fd:aa:a8:35:33:4f:0c:f9:32:40:1d:e0:a1:11: 81:52:8a:be:fa:35:27:8d:7d:70:1b:12:f1:ad:13:32:c6:9e: bf:79:b1:7c:fc:f7:62:28:83:da:47:d2:7b:e1:06:ce:87:0e: 9f:76:f4:00:cf:06:07:88:d4:a1:27:87:b3:98:ae:88:21:3d: 14:d5:a1:a4:ee:be:8d:58:9f:11:2c:8b:5c:59:3b:30:a0:98: 53:14:ea:07:45:49:68:b9:73:6a:92:83:6b:09:5c:f1:68:95: 73:e1:fd:64:05:5f:e9:be:a5:56:55:df:e7:13:19:d7:53:30: 87:71:56:35:10:3a:10:6c:a9:0d:7f:b8:f3:33:32:54:28:c4: 39:57:db:e8:20:81:d1:31:a3:4b:65:d3:0a:4f:43:42:aa:a8: f0:5d:f4:cc:fc:9d:42:65:b0:88:d3:90:4e:6b:d4:8d:26:e8: 92:ea:e2:3c:63:27:67:e3:a3:e5:ad:27:80:d9:18:92:fc:ab: 95:ed:cf:6f:83:7a:02:24:d8:dd:78:27:a6:85:38:01:47:18: b2:c7:18:cb:4f:cd:5d:db:88:56:21:d3:8e:7a:ee:c4:13:a6: 7a:d4:e2:90:46:f4:cd:da:82:78:c4:36:3d:ee:50:3c:b2:e9: d0:94:8f:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFMTUxMTAvBgNVBAUTKDk1MzUxQTE5MjdBOEYxMEVCQUQxQ0UzQzZDNEE1QUM0 NjUxNUNBNzAwHhcNMjUxMjIxMDE1MjM2WhcNMjUxMjI4MDE1MjM2WjAYMRYwFAYD VQQDDA02OTQ3NTJlNS05Yjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl8/zKVRIyzm1fR8CrvtCS0o9xbvXTWpg2IzMne3KgKoqwfkPKKsawrZ23MsC d6hLFkiNfXRUbLY8ZgRpZxpgU7oOxCpePu4aLpSknQppdRwiD4GaKOg/EhSdXayn p8ARKE5PP7GvH9CgHibBiYlAh/A4Zp2VZXOVyaoxtYFW/keHxaKPyXmH7VZDjy79 Zw9B0oC/7uX+PTpoUeiOZMG+OyGKaRkOvbbm7lu4cNHhFC2r0FczpbOKSqEB9TjC Yez7DqnSDWzQdwluNbZ5elUfdVMSAXGoprU9O1tjEkAEhy66D52y+HvsVeWRP+bS el+0wdPBBVEr3N4LLmDaEVvvhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCV6Bt4 liB7oFm97C1VtDVejs/TMB8GA1UdIwQYMBaAFJU1GhknqPEOutHOPGxKWsRlFcpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEUxNS81RERCNDQ0MEYx QUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhRNjYwYzQ4YkVwYXhHVVZ5 bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUVWFHU2VvOFE2NjBjNDhiRXBheEdVVnluQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEUxNS81RERCNDQ0MEYxQUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhR NjYwYzQ4YkVwYXhHVVZ5bkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDXi1p/aqoNTNPDPkyQB3goRGBUoq++jUnjX1wGxLxrRMyxp6/ebF8 /PdiKIPaR9J74QbOhw6fdvQAzwYHiNShJ4ezmK6IIT0U1aGk7r6NWJ8RLItcWTsw oJhTFOoHRUlouXNqkoNrCVzxaJVz4f1kBV/pvqVWVd/nExnXUzCHcVY1EDoQbKkN f7jzMzJUKMQ5V9voIIHRMaNLZdMKT0NCqqjwXfTM/J1CZbCI05BOa9SNJuiS6uI8 Yydn46PlrSeA2RiS/KuV7c9vg3oCJNjdeCemhTgBRxiyxxjLT81d24hWIdOOeu7E E6Z61OKQRvTN2oJ4xDY97lA8sunQlI8d -----END CERTIFICATE-----Generated at Tue Dec 23 00:03:11 2025 by rpki-client