This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft File: LHMz280_ygeHgDg3tsuuMawMS2U.mft (raw, json) Hash identifier: JmdDz+nYjmXA2lexr9glrJYoQZSvU7IhB7D42VVU6Xc= Subject key identifier: F2:CD:8E:28:70:ED:9B:E4:C5:96:E9:AA:C5:78:E3:8A:2E:F4:C0:EC Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 Certificate issuer: /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Certificate serial: 0DBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft Manifest number: 0DAD Signing time: Thu 18 Dec 2025 17:42:25 +0000 Manifest this update: Thu 18 Dec 2025 17:42:25 +0000 Manifest next update: Thu 25 Dec 2025 17:42:25 +0000 Files and hashes: 1: LHMz280_ygeHgDg3tsuuMawMS2U.crl (hash: 4Vb9APppyeq/NGNX+l/zCLZh4eJMwAr/hcVaJ9ewZqw=) 2: 62BA539C48ED11EDBC251337C4F9AE02.roa (hash: +juOaIxrjQ6IhGwMB3Bm9h5unXUiB8xR+dHj1D1njhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:42:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3517 (0xdbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3FD3, serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Validity Not Before: Dec 18 17:42:25 2025 GMT Not After : Dec 25 17:42:25 2025 GMT Subject: CN=69443d01-9579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:05:98:63:f6:4a:16:c3:b7:57:a7:a1:4e:01: 59:30:bd:a5:ea:ee:f7:4d:d7:83:00:83:80:d9:11: 50:3b:ed:c0:47:9e:87:f5:39:ab:84:68:08:cd:40: 31:55:d3:a7:dc:50:04:f5:15:f7:c3:19:dd:29:b2: 1d:eb:05:b0:f9:e1:7c:14:70:2b:15:af:75:44:b1: 94:40:fb:93:ad:32:23:d6:33:61:c9:08:d0:a4:a1: 9a:c5:7b:ea:56:af:f2:08:da:9e:43:99:3c:db:49: d7:89:65:e9:37:d7:95:23:dd:f5:ad:2b:07:6d:b1: 05:bb:19:d8:85:d1:47:d9:56:ab:3b:6c:a5:be:c8: cd:e5:f8:0c:2b:12:96:c4:13:f2:ef:f2:96:68:b1: 54:64:8c:29:27:c8:ec:16:7f:8d:52:fc:16:47:a9: 71:d7:63:88:2c:0e:fb:6a:b7:9b:26:d2:bc:da:57: 82:46:7c:c2:34:d2:e2:cb:35:d0:49:4c:46:31:b7: 98:5e:68:95:79:ac:e6:99:7e:0e:e3:65:dc:6b:9c: 1a:db:9e:c5:3b:e4:8f:2c:ab:5c:62:03:82:4f:a0: 13:43:cc:4f:ec:6f:e3:09:3b:65:68:73:02:d2:79: 07:ab:6b:c7:62:4d:ba:31:1f:8a:8b:fc:1b:64:91: 15:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CD:8E:28:70:ED:9B:E4:C5:96:E9:AA:C5:78:E3:8A:2E:F4:C0:EC X509v3 Authority Key Identifier: keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:6c:ec:38:ed:f5:36:39:e4:5b:76:91:f7:b8:2e:8f:cf:01: 2d:fc:7a:45:ae:e2:38:77:62:29:74:42:78:3f:67:2f:07:69: 3e:fd:5d:b7:74:d5:04:23:c4:53:80:7f:20:b3:90:c2:72:2c: 0a:a9:04:5c:27:f8:04:20:4a:f4:e5:21:6a:02:90:a2:2b:85: 8e:48:21:a6:7b:1f:d3:3c:f8:58:06:94:c9:ed:2c:23:b9:37: cb:51:ad:d5:2a:61:3a:e4:74:4e:d0:80:38:f9:28:6e:aa:ce: 78:ba:5b:e9:1d:16:cb:aa:bf:4c:9a:30:86:af:66:1a:01:56: fc:e8:d6:b5:74:4c:41:0d:25:43:8c:5b:6e:cd:86:b8:e3:94: 6c:c7:b7:19:0d:dd:82:8c:65:ca:9f:3f:20:d2:64:96:36:b7: 68:09:80:66:e1:20:11:92:d0:84:8b:6d:c9:57:cc:79:2c:7a: 0e:9a:3a:a2:b2:6f:f6:95:12:d9:22:a0:69:ac:20:cc:3f:e7: 56:7b:23:51:19:99:a7:5e:7f:a4:e1:c7:a0:98:84:f4:ad:c7: 40:b0:75:da:15:fb:d4:08:1a:5c:4f:cc:81:5b:b6:0c:6a:d3: 3c:ec:b7:ab:4f:27:33:94:a5:80:87:4c:d4:15:15:0d:2e:0f: 68:86:08:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGRDMxMTAvBgNVBAUTKDJDNzMzM0RCQ0QzRkNBMDc4NzgwMzgzN0I2Q0JBRTMx QUMwQzRCNjUwHhcNMjUxMjE4MTc0MjI1WhcNMjUxMjI1MTc0MjI1WjAYMRYwFAYD VQQDDA02OTQ0M2QwMS05NTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAogWYY/ZKFsO3V6ehTgFZML2l6u73TdeDAIOA2RFQO+3AR56H9TmrhGgIzUAx VdOn3FAE9RX3wxndKbId6wWw+eF8FHArFa91RLGUQPuTrTIj1jNhyQjQpKGaxXvq Vq/yCNqeQ5k820nXiWXpN9eVI931rSsHbbEFuxnYhdFH2VarO2ylvsjN5fgMKxKW xBPy7/KWaLFUZIwpJ8jsFn+NUvwWR6lx12OILA77arebJtK82leCRnzCNNLiyzXQ SUxGMbeYXmiVeazmmX4O42Xca5wa257FO+SPLKtcYgOCT6ATQ8xP7G/jCTtlaHMC 0nkHq2vHYk26MR+Ki/wbZJEVwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLNjihw 7ZvkxZbpqsV444ou9MDsMB8GA1UdIwQYMBaAFCxzM9vNP8oHh4A4N7bLrjGsDEtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0ZEMy8yMURFNUI5QUQ0 OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3lnZUhnRGczdHN1dU1hd01T MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xITXoyODBfeWdlSGdEZzN0c3V1TWF3TVMyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0ZEMy8yMURFNUI5QUQ0OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3ln ZUhnRGczdHN1dU1hd01TMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRbOw47fU2OeRbdpH3uC6PzwEt/HpFruI4d2IpdEJ4P2cvB2k+/V23 dNUEI8RTgH8gs5DCciwKqQRcJ/gEIEr05SFqApCiK4WOSCGmex/TPPhYBpTJ7Swj uTfLUa3VKmE65HRO0IA4+Shuqs54ulvpHRbLqr9MmjCGr2YaAVb86Na1dExBDSVD jFtuzYa445Rsx7cZDd2CjGXKnz8g0mSWNrdoCYBm4SARktCEi23JV8x5LHoOmjqi sm/2lRLZIqBprCDMP+dWeyNRGZmnXn+k4cegmIT0rcdAsHXaFfvUCBpcT8yBW7YM atM87LerTyczlKWAh0zUFRUNLg9ohgiQ -----END CERTIFICATE-----Generated at Sat Dec 20 03:31:31 2025 by rpki-client