This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft File: LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft (raw, json) Hash identifier: b1+kstlU05XcXmkOHo14Lq4M3Jc3iiUgPIMqLHDwbUc= Subject key identifier: 71:3C:BC:00:8F:94:9D:4D:81:C9:AA:15:DA:95:89:3B:EE:73:AF:DC Authority key identifier: 2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2 Certificate issuer: /CN=A91FF94F/serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2 Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft Manifest number: 0171 Signing time: Tue 23 Dec 2025 02:52:25 +0000 Manifest this update: Tue 23 Dec 2025 02:52:25 +0000 Manifest next update: Tue 30 Dec 2025 02:52:25 +0000 Files and hashes: 1: LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl (hash: u306f605ItAcqIKbxB/UEL10zijDqLA3kK4l9wBnqFY=) 2: F41E4608AD1511EE8FBA3458C4F9AE02.roa (hash: njsFK1qFbRu1CveVfyk+stg89vXjnCGuvbUS6fMSxUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF94F, serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2 Validity Not Before: Dec 23 02:52:25 2025 GMT Not After : Dec 30 02:52:25 2025 GMT Subject: CN=694a03e9-3098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:02:48:39:c2:f4:fd:0c:98:8f:9a:97:0e:d5: ae:5d:8d:fb:a6:45:9e:c0:b9:9a:f0:63:bd:47:55: c9:5f:3e:4e:b9:29:41:2a:37:30:16:c5:f0:e3:15: 85:93:e1:9c:d7:1f:bd:a2:b2:6a:0d:cf:b3:e9:de: e6:21:e3:32:0f:7a:56:33:97:1c:3f:40:ed:67:d5: 72:77:13:d7:c6:73:e7:05:67:50:1d:59:d0:2e:65: da:8d:57:b5:4a:7f:bc:26:80:eb:89:5e:63:bc:d4: 23:63:38:f7:e3:5e:3f:48:0f:5d:ed:56:09:1d:c3: a7:5a:c2:9d:f0:d0:88:b3:c2:71:fc:3b:5d:1b:1c: 82:e5:a9:37:e6:43:aa:2e:d5:66:94:05:dd:cf:0e: e3:95:06:b9:9a:d4:38:4f:08:c3:dd:d7:18:e0:ac: cc:8a:ac:6f:f2:b3:27:9a:16:3c:cd:8c:e6:d0:a5: bd:6f:ba:6b:8b:d9:64:c8:6e:e2:79:d1:e0:4c:70: b8:09:1a:d9:ea:32:16:d0:65:8b:9b:03:e2:28:ec: 5e:75:77:af:d0:b8:1e:84:fb:55:7e:6a:69:98:40: 97:f7:0e:3f:c0:0b:cc:11:b8:23:17:1e:61:9f:a7: c6:59:0b:0c:ed:4b:44:4b:0c:dc:65:4c:48:f1:d7: ba:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3C:BC:00:8F:94:9D:4D:81:C9:AA:15:DA:95:89:3B:EE:73:AF:DC X509v3 Authority Key Identifier: keyid:2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:06:e7:b5:72:f6:fc:e1:1e:72:07:e8:b2:6c:f8:03:35:92: d4:98:e4:29:3e:24:cc:a7:d4:a1:6e:a8:dc:2d:a7:31:e7:0f: e7:35:74:5b:f6:68:15:99:4e:79:e0:11:a9:da:11:62:8e:5c: 36:74:38:b9:6f:49:62:0b:0d:9d:ee:03:05:6f:ea:54:99:2f: 31:d7:0d:ee:51:f8:0e:df:87:60:62:0e:ed:fd:cd:45:c5:27: 99:bd:aa:61:58:0a:43:d4:cd:93:fb:85:e1:37:d2:e0:cd:78: a9:75:f1:48:dd:db:29:67:0e:e4:28:b4:64:b8:ec:76:cf:95: 8f:c6:33:48:7e:44:0c:70:48:db:57:5e:e6:ba:76:e0:3e:e7: 4a:4a:79:bd:14:0d:e2:b2:eb:6c:96:b1:9e:fc:da:a0:92:75: 63:59:2c:7e:46:a1:e5:ce:62:97:5b:41:80:5d:7e:1c:d7:d4: 2a:e0:c8:6e:ec:98:47:21:ff:96:e0:2e:f9:5f:86:95:1f:5c: 15:30:c2:48:f8:64:dc:6e:01:b2:c9:df:b0:86:d2:52:93:ce: b9:10:84:18:97:bb:e6:ac:11:d7:38:54:fa:20:9c:4c:a1:43: 7c:b8:55:38:d5:93:ea:39:86:f3:9b:f7:c2:0c:e7:9e:b5:2b: 1d:d7:d3:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY5NEYxMTAvBgNVBAUTKDJFQTYyOEFCNTVEMTgxNzQzRUYyOTBFRjgyNDk5ODBE NjI5OUFGQTIwHhcNMjUxMjIzMDI1MjI1WhcNMjUxMjMwMDI1MjI1WjAYMRYwFAYD VQQDDA02OTRhMDNlOS0zMDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQJIOcL0/QyYj5qXDtWuXY37pkWewLma8GO9R1XJXz5OuSlBKjcwFsXw4xWF k+Gc1x+9orJqDc+z6d7mIeMyD3pWM5ccP0DtZ9VydxPXxnPnBWdQHVnQLmXajVe1 Sn+8JoDriV5jvNQjYzj3414/SA9d7VYJHcOnWsKd8NCIs8Jx/DtdGxyC5ak35kOq LtVmlAXdzw7jlQa5mtQ4TwjD3dcY4KzMiqxv8rMnmhY8zYzm0KW9b7pri9lkyG7i edHgTHC4CRrZ6jIW0GWLmwPiKOxedXev0LgehPtVfmppmECX9w4/wAvMEbgjFx5h n6fGWQsM7UtESwzcZUxI8de6NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHE8vACP lJ1NgcmqFdqViTvuc6/cMB8GA1UdIwQYMBaAFC6mKKtV0YF0PvKQ74JJmA1ima+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjk0Ri9EMzQ4RjJEMEFE MTQxMUVFQjBCODExMzlDNEY5QUUwMi9McVlvcTFYUmdYUS04cER2Z2ttWURXS1py NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxWW9xMVhSZ1hRLThwRHZna21ZRFdLWnI2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjk0Ri9EMzQ4RjJEMEFEMTQxMUVFQjBCODExMzlDNEY5QUUwMi9McVlvcTFYUmdY US04cER2Z2ttWURXS1pyNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEBue1cvb84R5yB+iybPgDNZLUmOQpPiTMp9ShbqjcLacx5w/nNXRb 9mgVmU554BGp2hFijlw2dDi5b0liCw2d7gMFb+pUmS8x1w3uUfgO34dgYg7t/c1F xSeZvaphWApD1M2T+4XhN9LgzXipdfFI3dspZw7kKLRkuOx2z5WPxjNIfkQMcEjb V17munbgPudKSnm9FA3isutslrGe/NqgknVjWSx+RqHlzmKXW0GAXX4c19Qq4Mhu 7JhHIf+W4C75X4aVH1wVMMJI+GTcbgGyyd+whtJSk865EIQYl7vmrBHXOFT6IJxM oUN8uFU41ZPqOYbzm/fCDOeetSsd19Pj -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:30 2025 by rpki-client