This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft File: lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json) Hash identifier: pz3BKdj7+U+sOKr4ssc372Yy2jAyPnNziFN7yXZDYWI= Subject key identifier: F9:21:B6:AE:DA:FE:18:C1:CE:50:60:F2:4D:3A:F5:7E:A7:2C:15:AA Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22 Certificate issuer: /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft Manifest number: 8D Signing time: Fri 05 Dec 2025 04:39:11 +0000 Manifest this update: Fri 05 Dec 2025 04:39:10 +0000 Manifest next update: Fri 12 Dec 2025 04:39:10 +0000 Files and hashes: 1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: pRsZdxjWqw+VfOB7fhofpcK4xERnHBiNRp6bMZWHXKs=) 2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: wfDreRJEGF1JW5W3fjwvAomrv9lvr6AoS+ZjgINTuCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922 Validity Not Before: Dec 5 04:39:10 2025 GMT Not After : Dec 12 04:39:10 2025 GMT Subject: CN=693261ee-135f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3a:1f:56:fd:c7:8d:e0:74:99:74:23:b4:68: e5:4e:61:9a:37:e4:49:8e:f4:70:84:96:85:af:9d: 94:7b:57:57:e1:db:2d:17:02:c8:8e:6f:d5:49:d4: fb:d2:7a:5d:83:6c:e5:02:8d:e8:1f:df:68:37:88: ff:8a:c6:bc:3f:74:06:70:09:00:29:d3:6b:e9:37: 20:10:1b:fc:52:e7:06:4b:78:15:85:46:4d:85:3c: a1:ae:99:19:2c:47:4b:71:ee:ee:ba:41:31:74:1e: 70:aa:69:e1:77:a6:c1:43:68:98:85:c1:79:fd:5b: e8:eb:f5:1c:08:96:86:d9:86:f7:a0:35:05:64:eb: 70:d7:a1:0b:1d:44:af:3e:9a:71:ca:2e:16:9d:d8: ac:fd:14:60:3b:a8:bc:22:1f:7d:30:c6:9a:55:d2: 98:f1:f3:3a:da:79:38:ac:d1:8a:e4:cd:e7:1b:8a: 31:63:54:7c:40:dd:22:fa:da:05:25:8f:ee:e1:ca: bd:69:55:96:84:77:1a:ee:dc:85:eb:cc:61:5e:69: 44:22:72:1d:3f:80:f9:e2:2a:52:06:19:e9:63:d2: 5c:af:48:20:27:9e:90:9c:22:96:9c:74:57:da:21: 95:fc:12:fc:5b:1c:62:ed:bf:55:0f:25:1d:7b:b8: 3b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:21:B6:AE:DA:FE:18:C1:CE:50:60:F2:4D:3A:F5:7E:A7:2C:15:AA X509v3 Authority Key Identifier: keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f0:f3:22:be:0d:1e:82:c9:08:b7:53:a2:06:07:f6:c7:00: 9d:bf:b5:7e:9b:8d:8b:31:8b:17:4f:cb:d3:1e:fa:eb:5d:9a: 6c:15:9d:af:8c:f3:cb:2c:ed:8e:f7:e0:4c:8d:bf:1c:d9:e0: 50:ea:3d:af:f3:dc:3f:ea:06:82:a9:87:58:e0:25:de:82:ef: e5:3f:0c:20:14:28:1e:22:a9:89:31:f4:e2:4d:d7:e1:43:3c: 89:37:ed:e7:89:a3:26:d7:b2:07:79:f1:bd:ec:50:af:41:b8: 45:b8:2f:3e:a0:19:f8:93:be:8e:5a:47:30:c7:03:e2:10:9f: bb:96:16:68:c5:10:12:8f:64:b3:66:47:09:c3:22:e1:59:7b: f4:3e:39:08:ed:04:5e:a5:74:d2:6f:d5:6f:1e:b4:7f:a4:a2: ee:bc:7e:25:84:4d:3d:aa:76:1b:c1:4c:69:91:bf:c3:04:8f: 28:1f:6b:92:90:ab:ac:d0:f8:90:1a:86:1d:a2:b1:0c:e7:0c: 01:4f:73:b9:89:bd:e5:6c:00:10:f5:95:a5:18:40:7c:4b:17: 89:e3:1f:99:ae:51:c6:56:10:ae:33:34:52:d8:03:f2:0c:13: 66:79:14:3a:38:14:d4:95:20:45:0f:c5:fa:a4:1e:cc:1c:f9: 0b:be:aa:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0QzkxMTAvBgNVBAUTKDk1NzQ1MjkzQzg4QTI3MjZFMTBBNTdENThGNDJDQzMx NjlCN0M5MjIwHhcNMjUxMjA1MDQzOTEwWhcNMjUxMjEyMDQzOTEwWjAYMRYwFAYD VQQDEw02OTMyNjFlZS0xMzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTofVv3HjeB0mXQjtGjlTmGaN+RJjvRwhJaFr52Ue1dX4dstFwLIjm/VSdT7 0npdg2zlAo3oH99oN4j/isa8P3QGcAkAKdNr6TcgEBv8UucGS3gVhUZNhTyhrpkZ LEdLce7uukExdB5wqmnhd6bBQ2iYhcF5/Vvo6/UcCJaG2Yb3oDUFZOtw16ELHUSv Pppxyi4Wndis/RRgO6i8Ih99MMaaVdKY8fM62nk4rNGK5M3nG4oxY1R8QN0i+toF JY/u4cq9aVWWhHca7tyF68xhXmlEInIdP4D54ipSBhnpY9Jcr0ggJ56QnCKWnHRX 2iGV/BL8Wxxi7b9VDyUde7g7zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkhtq7a /hjBzlBg8k069X6nLBWqMB8GA1UdIwQYMBaAFJV0UpPIiicm4QpX1Y9CzDFpt8ki MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRDOS84NDJGOTg5NDBF QzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9sWFJTazhpS0p5YmhDbGZWajBMTU1XbTN5 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xYUlNrOGlLSnliaENsZlZqMExNTVdtM3lTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDRDOS84NDJGOTg5NDBFQzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9sWFJTazhpS0p5 YmhDbGZWajBMTU1XbTN5U0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM8PMivg0egskIt1OiBgf2xwCdv7V+m42LMYsXT8vTHvrrXZpsFZ2v jPPLLO2O9+BMjb8c2eBQ6j2v89w/6gaCqYdY4CXegu/lPwwgFCgeIqmJMfTiTdfh QzyJN+3niaMm17IHefG97FCvQbhFuC8+oBn4k76OWkcwxwPiEJ+7lhZoxRASj2Sz ZkcJwyLhWXv0PjkI7QRepXTSb9VvHrR/pKLuvH4lhE09qnYbwUxpkb/DBI8oH2uS kKus0PiQGoYdorEM5wwBT3O5ib3lbAAQ9ZWlGEB8SxeJ4x+ZrlHGVhCuMzRS2APy DBNmeRQ6OBTUlSBFD8X6pB7MHPkLvqq2 -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:35 2025 by rpki-client