This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft File: LPF-aFt4j16uSgHViDUmG18LLqQ.mft (raw, json) Hash identifier: jZ3xOWBbsgHKaonhYDxKh0x25wNklsn0cYhqgSJrw8A= Subject key identifier: 30:44:41:8D:5E:B7:4A:E0:13:D6:BD:4D:A7:66:5E:9D:6E:E0:17:D3 Authority key identifier: 2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4 Certificate issuer: /CN=A91FABEF/serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft Manifest number: 0158 Signing time: Tue 23 Dec 2025 03:07:13 +0000 Manifest this update: Tue 23 Dec 2025 03:07:13 +0000 Manifest next update: Tue 30 Dec 2025 03:07:13 +0000 Files and hashes: 1: LPF-aFt4j16uSgHViDUmG18LLqQ.crl (hash: WRgwVEp2o3YQzMmxkvxbo+4dzQt5OL8T/7fXZZ8SVJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FABEF, serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4 Validity Not Before: Dec 23 03:07:13 2025 GMT Not After : Dec 30 03:07:13 2025 GMT Subject: CN=694a0761-3bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:58:8c:33:0f:29:8e:19:92:71:f6:ec:00:19: 78:4c:2e:33:ad:a2:ce:bc:76:f0:d6:89:ca:a3:a7: ff:c1:18:b3:79:cd:d3:4b:a7:9d:6d:02:fe:76:ec: 93:84:5b:74:51:e0:87:f1:7c:2b:51:2d:42:bd:2e: 79:d4:2a:60:26:ea:5a:5d:13:d3:b0:2c:f7:2b:de: 59:d8:51:64:30:9d:fa:fb:d0:02:a0:7e:83:68:f1: 58:7c:a4:82:42:24:80:f5:2e:a1:0b:59:52:6b:ff: 1e:86:f3:88:7c:7a:28:73:57:2b:32:60:86:f4:a7: ac:21:ae:42:d4:80:c6:30:84:a2:c7:0f:c9:35:b1: f1:55:0d:1f:e3:ff:2c:fe:47:e4:06:07:c8:a9:17: 78:0a:99:d8:c0:11:06:33:8a:db:69:bb:05:3c:4e: c3:e4:2a:7e:17:0b:31:e2:3f:36:a3:d6:44:66:3c: ee:13:ec:48:c6:32:2c:47:6f:d5:64:7b:03:9d:5b: be:32:66:23:a8:99:98:e6:cb:73:9c:f2:61:14:79: af:98:44:67:41:9b:de:76:f8:9c:b4:f5:45:60:f3: 36:f8:e4:19:20:af:59:a3:64:a0:4b:f7:84:2d:bf: a3:7b:b2:55:f9:91:24:5e:5f:9c:d1:65:72:96:bf: a6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:44:41:8D:5E:B7:4A:E0:13:D6:BD:4D:A7:66:5E:9D:6E:E0:17:D3 X509v3 Authority Key Identifier: keyid:2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:5a:2d:e5:4a:da:9a:0d:69:8a:ab:9b:56:d9:23:ab:d4:8d: 50:97:52:f1:df:e8:9f:84:7b:78:9d:78:14:c3:ab:2b:c1:ca: db:59:e5:3b:b4:ec:c3:0b:80:2c:95:4b:d1:a7:30:3c:5d:c8: 54:87:1e:14:9c:38:0f:37:a7:64:c9:76:b2:52:00:cf:fa:0b: 3c:7e:93:73:7e:1b:49:43:f7:dc:ca:79:ff:52:92:fc:dc:d9: 08:5f:14:ab:d9:8c:3f:e8:8f:9d:b3:2a:cc:93:17:e6:ef:49: f4:b9:58:04:91:bc:29:91:78:65:9e:86:4d:a8:9b:e7:11:c7: 7d:3d:e3:48:6a:96:8e:07:00:bf:38:9a:cd:ba:bb:70:6c:c4: 05:7c:ed:5e:0a:f7:99:96:09:b3:d9:af:83:e6:1e:94:8e:62: 60:e9:c0:87:af:11:79:d6:31:9a:c5:70:d7:16:51:20:52:7b: cd:67:48:86:56:24:27:e5:20:64:be:36:5f:24:72:fc:bc:a0: 51:58:c6:3d:aa:95:f8:6b:86:1d:3d:28:9c:ae:90:40:d6:3b: 77:c9:cb:1f:0a:fc:8d:50:67:71:92:6f:fc:fa:6d:80:ba:6f: 5e:5e:06:89:47:25:e1:46:07:88:e8:53:76:81:7f:a0:97:02: c1:fc:e4:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCRUYxMTAvBgNVBAUTKDJDRjE3RTY4NUI3ODhGNUVBRTRBMDFENTg4MzUyNjFC NUYwQjJFQTQwHhcNMjUxMjIzMDMwNzEzWhcNMjUxMjMwMDMwNzEzWjAYMRYwFAYD VQQDDA02OTRhMDc2MS0zYmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1iMMw8pjhmScfbsABl4TC4zraLOvHbw1onKo6f/wRizec3TS6edbQL+duyT hFt0UeCH8XwrUS1CvS551CpgJupaXRPTsCz3K95Z2FFkMJ36+9ACoH6DaPFYfKSC QiSA9S6hC1lSa/8ehvOIfHooc1crMmCG9KesIa5C1IDGMISixw/JNbHxVQ0f4/8s /kfkBgfIqRd4CpnYwBEGM4rbabsFPE7D5Cp+Fwsx4j82o9ZEZjzuE+xIxjIsR2/V ZHsDnVu+MmYjqJmY5stznPJhFHmvmERnQZvedvictPVFYPM2+OQZIK9Zo2SgS/eE Lb+je7JV+ZEkXl+c0WVylr+mDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBEQY1e t0rgE9a9TadmXp1u4BfTMB8GA1UdIwQYMBaAFCzxfmhbeI9erkoB1Yg1JhtfCy6k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUJFRi9DOUFGNUQyQ0NC MTkxMUVFODE1RkFCNjhDNEY5QUUwMi9MUEYtYUZ0NGoxNnVTZ0hWaURVbUcxOExM cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xQRi1hRnQ0ajE2dVNnSFZpRFVtRzE4TExxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUJFRi9DOUFGNUQyQ0NCMTkxMUVFODE1RkFCNjhDNEY5QUUwMi9MUEYtYUZ0NGox NnVTZ0hWaURVbUcxOExMcVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADWi3lStqaDWmKq5tW2SOr1I1Ql1Lx3+ifhHt4nXgUw6srwcrbWeU7 tOzDC4AslUvRpzA8XchUhx4UnDgPN6dkyXayUgDP+gs8fpNzfhtJQ/fcynn/UpL8 3NkIXxSr2Yw/6I+dsyrMkxfm70n0uVgEkbwpkXhlnoZNqJvnEcd9PeNIapaOBwC/ OJrNurtwbMQFfO1eCveZlgmz2a+D5h6UjmJg6cCHrxF51jGaxXDXFlEgUnvNZ0iG ViQn5SBkvjZfJHL8vKBRWMY9qpX4a4YdPSicrpBA1jt3ycsfCvyNUGdxkm/8+m2A um9eXgaJRyXhRgeI6FN2gX+glwLB/OTg -----END CERTIFICATE-----Generated at Wed Dec 24 19:26:58 2025 by rpki-client