This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft File: lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json) Hash identifier: gs4vEnmtEga90k1/ygr0bVEK/wxdgqLSc18XD9Yv/1A= Subject key identifier: 4C:2D:14:6C:6E:78:1D:73:DB:F2:A3:38:4E:03:B6:DF:CE:00:22:84 Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft Manifest number: 7E Signing time: Tue 23 Dec 2025 05:39:51 +0000 Manifest this update: Tue 23 Dec 2025 05:39:51 +0000 Manifest next update: Tue 30 Dec 2025 05:39:51 +0000 Files and hashes: 1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: eBWw7ddsW5i7KCVmC54jXw88l+oPuw7jd7AzOpv5UVo=) 2: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: Jax3Kvx2J0ODr5GgDNYrVUtv6/aFnopa2LSsnYbiSlg=) 3: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: maMIBW8WqwpEw8k3CdK6BFRqFVm8airXL8KIFqvlGQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Validity Not Before: Dec 23 05:39:51 2025 GMT Not After : Dec 30 05:39:51 2025 GMT Subject: CN=694a2b27-6e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:74:f8:ad:84:eb:e4:3e:88:e6:1e:f4:a1:fc: bd:a8:24:67:31:53:b9:93:0d:de:92:39:87:d5:66: fa:cb:12:3a:35:c1:97:d5:27:16:8f:c7:00:83:2c: 87:2a:92:91:56:17:43:14:aa:5d:04:b4:cd:7b:1e: 21:0b:a6:0b:13:d4:b3:e6:a3:0f:a2:10:87:ca:2b: 72:c6:1c:3f:46:e1:56:55:fe:a9:7e:e5:2f:bb:b7: 24:f0:48:10:2b:23:65:70:20:85:f7:c8:74:74:bd: bd:da:17:76:23:c1:1c:a6:57:80:66:14:0e:29:41: ea:bf:62:43:66:00:c2:48:b5:a2:07:fa:21:f9:ef: 9a:9b:d9:6e:66:8a:1c:16:b8:59:95:4f:e0:f6:f7: d6:e6:80:4e:b9:78:31:48:67:da:c7:be:4d:65:bf: f3:63:51:d6:d9:72:79:b3:e3:38:fe:e8:b9:71:7c: ef:3e:71:5f:3d:89:94:bd:6a:b3:8e:a3:3c:4a:c5: cf:cb:a5:f6:56:d1:c9:f8:8b:a5:b7:3c:a4:89:03: bf:c2:52:95:b3:57:cc:52:87:ac:dc:61:67:60:f5: 7f:ff:41:b6:d3:c5:ac:67:cc:ca:f4:fc:1b:88:d0: 89:de:df:27:a7:85:2a:d5:ee:52:eb:e4:44:6b:47: d1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2D:14:6C:6E:78:1D:73:DB:F2:A3:38:4E:03:B6:DF:CE:00:22:84 X509v3 Authority Key Identifier: keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:2c:ae:f8:cb:f2:50:e7:7e:60:37:2f:73:59:9e:06:a1:47: 5c:92:93:0c:36:96:c7:fa:d7:19:82:f5:c1:e9:c7:b9:ef:93: 52:f7:be:af:5f:e7:06:06:11:3c:80:a1:d7:79:08:bf:e1:8c: d4:bb:21:22:50:4d:f4:de:26:35:78:57:59:18:ba:50:2b:25: b5:f7:cb:66:6c:0d:bf:eb:79:cd:cb:ce:0c:89:78:55:ee:8d: 4d:23:bc:98:78:85:2b:db:ed:0b:48:39:2b:ec:b4:bb:00:d0: a0:b6:62:72:51:cb:ad:a6:9d:f8:9b:b6:f6:27:9d:c3:56:b9: 1f:77:58:78:9c:98:ca:b1:c3:e9:84:ce:60:1e:50:bb:82:69: 44:30:cd:10:ae:ef:2e:64:1f:05:44:bb:8e:c0:1e:d0:f4:ff: 0d:27:51:ce:7b:d5:9d:e9:1d:4b:7d:03:dc:d0:22:1b:41:b4: 02:78:7b:83:64:c8:30:19:a4:8d:74:2d:3e:18:f4:d9:30:89: 67:8e:06:bf:ad:da:c6:55:0d:a9:00:95:15:13:e0:fa:f2:10: d5:6c:79:59:c2:cc:3c:3a:79:ec:fc:4c:6e:dd:d9:1c:69:8f: 81:a3:cf:41:04:c0:65:5c:53:1a:bb:3c:b1:fa:d5:6f:87:12: db:ad:ac:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3QUIxMTAvBgNVBAUTKDk0QzhFRjNGMkE5MjJFRTE0NEFBNkYwQjY2NDM2Q0E0 NjZDQzRCMEEwHhcNMjUxMjIzMDUzOTUxWhcNMjUxMjMwMDUzOTUxWjAYMRYwFAYD VQQDDA02OTRhMmIyNy02ZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXT4rYTr5D6I5h70ofy9qCRnMVO5kw3ekjmH1Wb6yxI6NcGX1ScWj8cAgyyH KpKRVhdDFKpdBLTNex4hC6YLE9Sz5qMPohCHyityxhw/RuFWVf6pfuUvu7ck8EgQ KyNlcCCF98h0dL292hd2I8EcpleAZhQOKUHqv2JDZgDCSLWiB/oh+e+am9luZooc FrhZlU/g9vfW5oBOuXgxSGfax75NZb/zY1HW2XJ5s+M4/ui5cXzvPnFfPYmUvWqz jqM8SsXPy6X2VtHJ+IultzykiQO/wlKVs1fMUoes3GFnYPV//0G208WsZ8zK9Pwb iNCJ3t8np4Uq1e5S6+REa0fRvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwtFGxu eB1z2/KjOE4Dtt/OACKEMB8GA1UdIwQYMBaAFJTI7z8qki7hRKpvC2ZDbKRmzEsK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzdBQi8yNjQ4NDU5MDIx RjMxMUYwQTI4MTM1N0FDNEY5QUUwMi9sTWp2UHlxU0x1RkVxbThMWmtOc3BHYk1T d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNanZQeXFTTHVGRXFtOExaa05zcEdiTVN3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzdBQi8yNjQ4NDU5MDIxRjMxMUYwQTI4MTM1N0FDNEY5QUUwMi9sTWp2UHlxU0x1 RkVxbThMWmtOc3BHYk1Td28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbLK74y/JQ535gNy9zWZ4GoUdckpMMNpbH+tcZgvXB6ce575NS976v X+cGBhE8gKHXeQi/4YzUuyEiUE303iY1eFdZGLpQKyW198tmbA2/63nNy84MiXhV 7o1NI7yYeIUr2+0LSDkr7LS7ANCgtmJyUcutpp34m7b2J53DVrkfd1h4nJjKscPp hM5gHlC7gmlEMM0Qru8uZB8FRLuOwB7Q9P8NJ1HOe9Wd6R1LfQPc0CIbQbQCeHuD ZMgwGaSNdC0+GPTZMIlnjga/rdrGVQ2pAJUVE+D68hDVbHlZwsw8Onns/Exu3dkc aY+Bo89BBMBlXFMauzyx+tVvhxLbrazY -----END CERTIFICATE-----Generated at Tue Dec 23 15:24:58 2025 by rpki-client