This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft File: lrZQExL54S6xmmT2IuF81Ced8M8.mft (raw, json) Hash identifier: MhGWmTAJjuFLZEtyavdwympqv/2btz5QkFgYmIRB0F4= Subject key identifier: 9E:FC:01:0C:B8:50:25:2E:BB:22:97:8F:74:0F:0B:D7:91:81:37:69 Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF Certificate issuer: /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft Manifest number: 0132 Signing time: Tue 09 Dec 2025 02:39:58 +0000 Manifest this update: Tue 09 Dec 2025 02:39:57 +0000 Manifest next update: Tue 16 Dec 2025 02:39:57 +0000 Files and hashes: 1: lrZQExL54S6xmmT2IuF81Ced8M8.crl (hash: n0LoSpN5j1gQYagcQ46fbtOc9TAPDkzJPSqLKbrzvg4=) 2: 78A6163A03A111EF8B02B62AC4F9AE02.roa (hash: MhVCwr+DLav+lA/a+EyaekFbp041Ik8QtWt4lKnp/qM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 02:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBE5E, serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF Validity Not Before: Dec 9 02:39:57 2025 GMT Not After : Dec 16 02:39:57 2025 GMT Subject: CN=69378bfe-b770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6d:10:ac:8c:ab:ff:9c:ac:5f:63:f6:9f:bd: 76:b3:b2:8e:f3:a4:89:68:a1:be:17:48:d5:fa:a3: e5:b7:a6:5a:e2:30:f1:b6:11:4d:9c:6f:46:58:28: 5e:5c:20:8d:28:ed:4c:bc:a5:46:21:5e:f3:3d:a5: e1:d7:dc:72:1d:48:8d:9a:b0:04:b7:cc:a5:fc:3e: 9f:27:9f:bb:41:e3:8f:7d:35:8d:43:f9:f7:87:68: 50:b5:fb:26:19:ee:86:e4:8f:ed:32:23:7f:d5:62: 31:ba:27:e0:8f:38:8d:f1:89:21:f8:d3:de:08:a1: 91:91:f6:ef:0e:ce:22:1c:e6:37:cc:8e:ab:18:46: b7:7b:d7:4b:4b:8b:82:40:d9:ae:5c:9a:26:ad:0a: 49:b7:ad:81:75:10:6a:dd:d3:3f:5e:d6:11:00:d2: 25:af:85:e9:96:99:ed:3a:90:7a:da:6b:08:09:e7: bc:95:36:c2:d5:b9:18:a3:55:53:ba:ae:ee:5a:70: 5a:83:a3:56:a7:0d:a8:ba:a4:c0:f4:bd:97:46:f7: 3f:63:8d:d3:87:33:a9:5e:12:29:49:15:2d:05:7e: fe:14:94:30:e4:25:5f:de:fd:65:90:72:1e:42:fe: aa:aa:2b:d0:57:22:b0:40:51:4d:72:48:45:12:67: 9a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FC:01:0C:B8:50:25:2E:BB:22:97:8F:74:0F:0B:D7:91:81:37:69 X509v3 Authority Key Identifier: keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:11:d6:ee:39:61:ff:94:88:a1:7a:fe:de:6d:2d:9b:42:e8: 62:23:08:46:ac:37:2b:36:1f:30:b8:eb:e6:5c:00:34:fc:0a: d7:26:ef:11:45:84:f0:c4:cc:f5:2d:91:b8:49:6c:ee:8b:59: d1:34:46:a4:ea:b5:c1:cd:c0:b4:b4:15:ee:ec:b6:26:8f:60: c0:93:99:ba:7b:ac:a3:fe:5d:ce:2d:ab:23:fe:2e:b7:dd:0e: 54:a3:ac:05:75:2f:da:d2:08:0f:6f:65:7e:0b:ee:ae:50:47: b6:20:03:f9:7e:0e:46:d7:05:e1:0d:34:f4:cd:ed:d3:c3:2b: 62:17:59:e8:5a:08:fa:5c:b3:16:fd:b9:c8:24:4e:da:74:ef: 25:fa:70:51:df:80:83:e5:bf:b8:37:d2:bf:95:fb:75:84:1a: ed:33:a0:92:15:a5:76:14:0f:c3:b9:2f:bb:a8:e7:31:ac:50: a4:87:d5:d4:89:37:e8:6e:93:f1:db:bf:b5:57:c1:b6:f4:db: ab:a0:c7:0f:19:3b:f9:f8:00:b4:c9:62:ec:3e:1f:01:8d:77: af:1d:89:fd:95:fc:b0:85:cb:e0:eb:31:c2:83:4c:5d:95:6c: f5:4b:62:5a:ee:84:8a:fe:65:66:2e:b1:5b:dd:1b:68:3f:4c: 73:b8:97:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJFNUUxMTAvBgNVBAUTKDk2QjY1MDEzMTJGOUUxMkVCMTlBNjRGNjIyRTE3Q0Q0 Mjc5REYwQ0YwHhcNMjUxMjA5MDIzOTU3WhcNMjUxMjE2MDIzOTU3WjAYMRYwFAYD VQQDEw02OTM3OGJmZS1iNzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxm0QrIyr/5ysX2P2n712s7KO86SJaKG+F0jV+qPlt6Za4jDxthFNnG9GWChe XCCNKO1MvKVGIV7zPaXh19xyHUiNmrAEt8yl/D6fJ5+7QeOPfTWNQ/n3h2hQtfsm Ge6G5I/tMiN/1WIxuifgjziN8Ykh+NPeCKGRkfbvDs4iHOY3zI6rGEa3e9dLS4uC QNmuXJomrQpJt62BdRBq3dM/XtYRANIlr4XplpntOpB62msICee8lTbC1bkYo1VT uq7uWnBag6NWpw2ouqTA9L2XRvc/Y43ThzOpXhIpSRUtBX7+FJQw5CVf3v1lkHIe Qv6qqivQVyKwQFFNckhFEmea2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ78AQy4 UCUuuyKXj3QPC9eRgTdpMB8GA1UdIwQYMBaAFJa2UBMS+eEusZpk9iLhfNQnnfDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkU1RS84M0I4NzJGNDAz OUYxMUVGOTBGNjYyMjdDNEY5QUUwMi9sclpRRXhMNTRTNnhtbVQySXVGODFDZWQ4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xyWlFFeEw1NFM2eG1tVDJJdUY4MUNlZDhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkU1RS84M0I4NzJGNDAzOUYxMUVGOTBGNjYyMjdDNEY5QUUwMi9sclpRRXhMNTRT NnhtbVQySXVGODFDZWQ4TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWEdbuOWH/lIihev7ebS2bQuhiIwhGrDcrNh8wuOvmXAA0/ArXJu8R RYTwxMz1LZG4SWzui1nRNEak6rXBzcC0tBXu7LYmj2DAk5m6e6yj/l3OLasj/i63 3Q5Uo6wFdS/a0ggPb2V+C+6uUEe2IAP5fg5G1wXhDTT0ze3TwytiF1noWgj6XLMW /bnIJE7adO8l+nBR34CD5b+4N9K/lft1hBrtM6CSFaV2FA/DuS+7qOcxrFCkh9XU iTfobpPx27+1V8G29NuroMcPGTv5+AC0yWLsPh8BjXevHYn9lfywhcvg6zHCg0xd lWz1S2Ja7oSK/mVmLrFb3RtoP0xzuJcN -----END CERTIFICATE-----Generated at Wed Dec 10 15:02:49 2025 by rpki-client