This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft File: LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json) Hash identifier: 7InsowvuOjcZICRgOkW3IBbvZuVI9HAt2yu2vkhQBUA= Subject key identifier: 86:FD:C6:1E:B7:E0:AF:FE:AB:50:6C:0E:92:91:60:B9:38:D8:CC:72 Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B Certificate issuer: /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft Manifest number: 0156 Signing time: Wed 03 Dec 2025 02:37:58 +0000 Manifest this update: Wed 03 Dec 2025 02:37:57 +0000 Manifest next update: Wed 10 Dec 2025 02:37:57 +0000 Files and hashes: 1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: ZAS/F574QySKBKj13aBhlyQcQW0BubfPA8Rt6JO7gXY=) 2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: 9aD9MOI/POVIQ6uNZALTtWvg8bFsGYj1bzTi/aW5HI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 02:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Validity Not Before: Dec 3 02:37:57 2025 GMT Not After : Dec 10 02:37:57 2025 GMT Subject: CN=692fa285-beb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a9:f0:09:7c:be:7e:8c:b4:d2:cf:80:56:77: 24:8b:f2:ac:d4:95:7a:c7:e8:4e:37:0f:f5:5c:ac: b3:6d:f0:b2:56:b5:14:e6:df:c1:a5:41:76:63:87: bb:0b:2a:fd:86:7f:8c:cc:65:46:bd:1f:2f:d0:a9: 9b:b5:2f:f4:b7:e8:8f:3f:51:24:75:f5:e2:c7:15: af:d7:82:90:e6:78:98:be:16:8e:07:55:fd:a4:7c: 22:5e:3b:b7:e2:91:37:bd:0c:03:94:29:70:4d:cf: 97:66:ce:cf:c3:ea:95:19:f7:ad:81:db:9a:72:35: 49:36:2b:0e:b4:31:08:99:e8:20:5b:b8:78:e8:51: 76:f9:3e:0d:7d:f4:28:d2:8e:9d:b3:ea:39:65:b0: 31:fc:9e:e4:b4:0f:d2:06:52:3c:7c:6b:2a:c4:35: 8f:7b:7d:97:08:c0:e1:4f:42:ae:03:b0:9f:3c:fb: 96:80:15:ce:c6:78:18:26:f3:62:07:26:44:cb:95: 40:05:6f:f8:56:53:ca:0c:55:9f:2e:95:34:f9:0f: b3:0e:26:b0:83:e0:96:73:2d:4c:fc:fa:36:05:75: 54:4b:26:5a:58:89:2e:fd:8c:dd:c9:f4:72:f2:6f: 10:7f:1f:b7:9a:8b:de:ab:ec:96:10:8c:02:f8:74: 16:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FD:C6:1E:B7:E0:AF:FE:AB:50:6C:0E:92:91:60:B9:38:D8:CC:72 X509v3 Authority Key Identifier: keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:c7:10:7b:86:09:38:f8:6d:f2:c3:74:92:4e:f2:22:db:e8: 2c:4b:1e:5c:95:41:c8:5b:60:05:82:10:06:a7:ac:d7:9c:59: 4a:15:2c:96:a4:40:57:56:5d:21:19:7c:1f:30:16:13:2f:11: 39:8b:70:52:a8:59:c9:8a:89:49:13:ca:44:f2:05:48:50:d0: c9:d1:44:58:97:b1:27:a5:b4:0d:53:b1:e3:30:c6:e1:5e:a3: 22:a0:22:b8:e8:e7:41:b3:22:88:96:d5:d6:9d:8c:c2:fd:15: b6:3a:a5:93:38:f3:47:e2:9a:4b:56:1e:a4:f5:cc:e2:ec:76: a0:e5:cc:a9:ca:de:51:7e:dd:ff:b8:fb:4d:0d:4b:b3:87:16: 2a:e2:00:99:e0:83:b4:ef:d6:3d:5f:81:bc:d1:4b:1f:7b:ba: 7e:17:dc:6a:74:81:67:af:6e:04:68:42:08:89:b3:7b:3a:c8: ba:cc:06:bd:cc:4b:02:06:c2:48:82:ae:11:ec:95:7e:6b:7b: 1a:37:09:1f:85:a9:dc:29:b0:71:5d:88:5c:20:41:06:dc:34: 2c:9c:ef:b0:5b:ec:da:47:a1:8a:96:62:33:06:51:d0:ef:2e: 2e:34:a4:fd:95:73:76:21:8c:73:6b:a9:08:70:45:9e:c1:94: 65:eb:39:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDJDNkI4QzdGOEI2MTBFODkxQ0I5Q0JGNkNEQkQ5OTk4 QUE5Mzg2MEIwHhcNMjUxMjAzMDIzNzU3WhcNMjUxMjEwMDIzNzU3WjAYMRYwFAYD VQQDEw02OTJmYTI4NS1iZWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3anwCXy+foy00s+AVncki/Ks1JV6x+hONw/1XKyzbfCyVrUU5t/BpUF2Y4e7 Cyr9hn+MzGVGvR8v0KmbtS/0t+iPP1EkdfXixxWv14KQ5niYvhaOB1X9pHwiXju3 4pE3vQwDlClwTc+XZs7Pw+qVGfetgduacjVJNisOtDEImeggW7h46FF2+T4NffQo 0o6ds+o5ZbAx/J7ktA/SBlI8fGsqxDWPe32XCMDhT0KuA7CfPPuWgBXOxngYJvNi ByZEy5VABW/4VlPKDFWfLpU0+Q+zDiawg+CWcy1M/Po2BXVUSyZaWIku/YzdyfRy 8m8Qfx+3moveq+yWEIwC+HQWLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIb9xh63 4K/+q1BsDpKRYLk42MxyMB8GA1UdIwQYMBaAFCxrjH+LYQ6JHLnL9s29mZiqk4YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EMjA1NTlGRUMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERva2N1Y3YyemIyWm1LcVRo Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xHdU1mNHRoRG9rY3VjdjJ6YjJabUtxVGhncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EMjA1NTlGRUMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERv a2N1Y3YyemIyWm1LcVRoZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUxxB7hgk4+G3yw3SSTvIi2+gsSx5clUHIW2AFghAGp6zXnFlKFSyW pEBXVl0hGXwfMBYTLxE5i3BSqFnJiolJE8pE8gVIUNDJ0URYl7EnpbQNU7HjMMbh XqMioCK46OdBsyKIltXWnYzC/RW2OqWTOPNH4ppLVh6k9czi7Hag5cypyt5Rft3/ uPtNDUuzhxYq4gCZ4IO079Y9X4G80Usfe7p+F9xqdIFnr24EaEIIibN7Osi6zAa9 zEsCBsJIgq4R7JV+a3saNwkfhancKbBxXYhcIEEG3DQsnO+wW+zaR6GKlmIzBlHQ 7y4uNKT9lXN2IYxza6kIcEWewZRl6zna -----END CERTIFICATE-----Generated at Wed Dec 3 16:13:34 2025 by rpki-client