This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft File: lC4n1lxHr7WXCpr-goCbMXnYtGY.mft (raw, json) Hash identifier: 8XtWbhQkE3SlonrTk0Ma2Vo4k/8w2LRY9Q6+VoN2WII= Subject key identifier: E2:62:CB:6B:58:31:D4:67:F0:63:57:0E:D8:54:A7:93:57:BA:8A:D5 Authority key identifier: 94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66 Certificate issuer: /CN=A91DC33B/serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft Manifest number: 171F Signing time: Mon 22 Dec 2025 16:24:19 +0000 Manifest this update: Mon 22 Dec 2025 16:24:18 +0000 Manifest next update: Mon 29 Dec 2025 16:24:18 +0000 Files and hashes: 1: lC4n1lxHr7WXCpr-goCbMXnYtGY.crl (hash: wsLxYmO+UzC45bcJniVfeaBXRPTU+MupIe6pxR9nBhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC33B, serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466 Validity Not Before: Dec 22 16:24:18 2025 GMT Not After : Dec 29 16:24:18 2025 GMT Subject: CN=694970b3-336e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:29:59:8b:6e:d4:37:9c:0d:a9:3f:25:53:70: 28:41:00:74:5b:bb:90:75:66:bc:d7:50:3c:9c:12: 19:ab:71:54:b5:9f:a5:bd:f1:1e:d6:b1:79:5f:94: e3:94:3b:cf:84:e1:12:2c:d3:5d:a7:5b:a3:aa:4a: 9e:ef:97:8b:f9:78:b8:04:0e:d5:81:ee:ba:f0:71: 3f:d9:dd:9e:c1:34:70:e7:9d:89:5e:73:ce:1b:b8: fa:ca:3e:13:16:18:df:f6:7b:23:44:e3:1f:40:24: b1:76:66:ef:28:ba:5e:1c:2b:68:4d:c6:6c:86:0d: 69:16:e1:e9:a2:b2:e0:bd:52:be:bd:e5:41:6f:bb: 3b:20:4c:ed:99:3d:b8:88:2f:13:02:25:6e:85:2e: e9:2d:67:18:7f:e2:cd:f8:67:7f:cc:f3:11:e1:e5: b4:bd:6f:ca:e5:4c:93:93:31:d7:ba:a2:da:d9:01: ee:ee:da:29:a4:8d:71:7a:3d:91:50:66:84:d2:d8: 2f:f1:2c:57:ad:af:e5:84:ed:36:8a:22:c6:8e:99: 97:07:21:bc:d5:0f:05:c8:b4:97:06:38:cf:78:ac: e5:47:22:ad:c6:33:cd:c0:34:0f:3b:b8:0b:8a:0c: 08:76:12:f4:e4:65:7c:ed:46:c1:3d:4c:95:f7:03: 7d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:62:CB:6B:58:31:D4:67:F0:63:57:0E:D8:54:A7:93:57:BA:8A:D5 X509v3 Authority Key Identifier: keyid:94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:76:09:02:a1:c0:d8:16:ca:60:ce:d0:1b:a7:03:7a:f6:8c: 64:e4:b9:d7:e8:f2:47:74:fc:61:4b:1c:58:80:56:59:71:e2: dc:21:25:4d:2f:c6:20:3e:0e:7e:6b:9a:af:a8:cd:5e:63:d9: 68:98:67:1f:f2:e9:61:ff:5a:a1:74:2d:81:f2:02:b6:60:19: 98:bf:89:23:29:8b:27:53:59:a2:51:d1:71:a3:2a:23:cd:3d: 2a:a6:6c:73:12:35:4a:e6:d5:f3:27:9f:99:9b:c0:46:36:19: ec:58:47:c0:20:2d:cd:0b:9c:cb:fc:88:14:11:8f:34:d0:cd: 0f:50:fa:35:03:39:ae:4b:37:90:04:55:b2:76:bb:fa:fd:4e: 25:b7:ae:e4:f3:99:84:2b:8a:47:f8:45:15:7b:36:54:06:95: 4e:66:96:c2:08:8a:2f:63:15:9a:3a:52:0d:58:43:25:b4:35: e8:70:56:41:c3:02:90:f5:b5:4b:1a:b5:a6:e8:03:fe:63:b4: 1f:7b:d2:75:05:dc:59:50:a8:87:ae:e1:92:48:ff:3c:16:64: e2:38:b9:d3:1d:1c:0a:db:ca:97:fd:1c:13:86:45:dc:51:21: 63:e8:b4:90:bb:34:09:8c:95:b5:36:b7:45:b8:b7:35:1e:39: 13:35:e6:bc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QzMzQjExMC8GA1UEBRMoOTQyRTI3RDY1QzQ3QUZCNTk3MEE5QUZFODI4MDlCMzE3 OUQ4QjQ2NjAeFw0yNTEyMjIxNjI0MThaFw0yNTEyMjkxNjI0MThaMBgxFjAUBgNV BAMMDTY5NDk3MGIzLTMzNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtKVmLbtQ3nA2pPyVTcChBAHRbu5B1ZrzXUDycEhmrcVS1n6W98R7WsXlflOOU O8+E4RIs012nW6OqSp7vl4v5eLgEDtWB7rrwcT/Z3Z7BNHDnnYlec84buPrKPhMW GN/2eyNE4x9AJLF2Zu8oul4cK2hNxmyGDWkW4emisuC9Ur695UFvuzsgTO2ZPbiI LxMCJW6FLuktZxh/4s34Z3/M8xHh5bS9b8rlTJOTMde6otrZAe7u2imkjXF6PZFQ ZoTS2C/xLFetr+WE7TaKIsaOmZcHIbzVDwXItJcGOM94rOVHIq3GM83ANA87uAuK DAh2EvTkZXztRsE9TJX3A32rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4mLLa1gx 1GfwY1cO2FSnk1e6itUwHwYDVR0jBBgwFoAUlC4n1lxHr7WXCpr+goCbMXnYtGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDMzNCL0I0QzlGRTkyMDZG NTExRTg5NjE4RjQyRkM0RjlBRTAyL2xDNG4xbHhIcjdXWENwci1nb0NiTVhuWXRH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEM0bjFseEhyN1dYQ3ByLWdvQ2JNWG5ZdEdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD MzNCL0I0QzlGRTkyMDZGNTExRTg5NjE4RjQyRkM0RjlBRTAyL2xDNG4xbHhIcjdX WENwci1nb0NiTVhuWXRHWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACx2CQKhwNgWymDO0BunA3r2jGTkudfo8kd0/GFLHFiAVllx4twhJU0v xiA+Dn5rmq+ozV5j2WiYZx/y6WH/WqF0LYHyArZgGZi/iSMpiydTWaJR0XGjKiPN PSqmbHMSNUrm1fMnn5mbwEY2GexYR8AgLc0LnMv8iBQRjzTQzQ9Q+jUDOa5LN5AE VbJ2u/r9TiW3ruTzmYQrikf4RRV7NlQGlU5mlsIIii9jFZo6Ug1YQyW0NehwVkHD ApD1tUsataboA/5jtB970nUF3FlQqIeu4ZJI/zwWZOI4udMdHArbypf9HBOGRdxR IWPotJC7NAmMlbU2t0W4tzUeORM15rw= -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:45 2025 by rpki-client