This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft File: Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft (raw, json) Hash identifier: +0DIADRKsdYQqvuGrBnitU65RHkpxRpJB5cMG5RfpO8= Subject key identifier: 4E:5B:82:4D:19:4D:F8:28:A2:95:27:F7:EA:6F:BB:8B:62:C6:6B:52 Authority key identifier: 2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA Certificate issuer: /CN=A9118009/serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft Manifest number: 01A1 Signing time: Fri 05 Dec 2025 01:31:35 +0000 Manifest this update: Fri 05 Dec 2025 01:31:34 +0000 Manifest next update: Fri 12 Dec 2025 01:31:34 +0000 Files and hashes: 1: Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl (hash: 5lh3UaEjjkGJnmCP00aWv+NdUP++KLMZxra1ANkMCc8=) 2: 7AE89AF4513511EE88C64E20C4F9AE02.roa (hash: 5LGDu0CCi6DfJNCRARsLcv5edhJaqrMRVu8YSoKbd1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118009, serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA Validity Not Before: Dec 5 01:31:34 2025 GMT Not After : Dec 12 01:31:34 2025 GMT Subject: CN=693235f6-3606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9f:56:2e:cb:b8:8a:4f:b0:33:2f:11:af:56: 09:08:1e:96:8b:96:53:c9:2d:df:ed:b1:7c:15:d6: 34:c8:9d:c3:38:36:c5:26:d7:a7:fa:57:20:3b:db: 3b:2b:3d:82:01:0d:d1:e8:c5:ce:1f:21:c6:73:f3: 29:d5:d5:fc:8a:e5:81:d7:2b:d3:1a:40:35:28:9c: 8e:94:fe:67:a3:90:96:ed:98:46:3f:0a:5c:84:6d: e6:0f:22:3a:5f:cf:dd:67:a5:27:2a:f0:a3:09:52: 54:ef:f8:85:af:cc:b7:b8:cb:9a:6a:fc:6a:63:74: b6:4d:3b:cb:8e:4a:43:f1:27:89:71:49:cc:cb:f5: c6:2a:9f:ca:fb:d1:1a:0a:b8:71:4a:97:eb:2c:53: 59:6f:b6:d1:45:96:8f:e3:c6:eb:cf:a8:b3:53:4c: 88:47:41:1a:bb:56:48:32:15:0a:e2:f1:f4:18:6c: ee:c3:08:01:a9:64:71:47:6f:3e:9f:5b:a9:c3:10: 8f:22:6b:d6:9b:b7:4a:69:ed:d5:15:80:55:38:97: 74:dc:e9:9d:01:8c:3c:2d:d5:e1:f4:4c:87:b1:06: df:5e:6d:b0:e4:45:69:10:4a:42:bf:f7:df:e1:be: 4a:ea:6a:b4:58:c7:ca:b7:5c:72:4c:29:e1:e9:b8: 67:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5B:82:4D:19:4D:F8:28:A2:95:27:F7:EA:6F:BB:8B:62:C6:6B:52 X509v3 Authority Key Identifier: keyid:2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:88:36:59:0f:50:ea:37:2f:13:be:47:72:d1:f9:42:6a:03: 2a:29:de:d5:7e:f9:20:63:1f:dd:77:72:bf:7f:e8:3e:fc:78: 32:29:96:92:08:12:1d:07:b0:67:72:4a:2d:9d:79:a0:dc:99: 31:1e:b9:ad:34:ed:35:41:16:8b:42:68:2a:45:09:e4:85:85: 0d:79:dc:90:ee:c6:f2:e4:e1:5e:54:52:90:bf:9e:f9:ae:be: e6:ae:23:32:7e:a2:6b:a2:7e:08:15:aa:a7:13:a5:5e:05:a7: 84:1f:5f:11:90:6c:d5:ec:e8:5e:73:2b:01:e5:2b:d9:ee:62: 23:61:dd:e5:28:6b:af:e7:a5:08:93:08:bc:b6:7f:53:0d:47: 93:1a:99:d6:a9:bf:4e:f8:6b:a9:ad:0e:2a:21:25:ad:ba:6b: e9:76:35:51:d4:d8:84:af:f5:a0:13:07:03:cc:df:8d:44:32: 61:cf:11:78:b6:9d:ac:ee:bb:26:91:17:f6:26:13:61:cd:a9: a7:7e:92:5c:2a:98:6e:83:cf:e1:f4:50:af:d1:e9:97:8a:af: 0d:78:d3:0b:ab:2f:34:47:bc:ec:a8:e6:b3:4d:81:c0:e5:69: 9a:9a:c8:ee:8b:ac:60:18:5c:f0:1c:29:bc:03:3b:e9:c4:eb: 1d:81:91:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMDkxMTAvBgNVBAUTKDJEQkVERDg4RUIyQjJEQzQ3Q0I1MzA5MEMzQTM4NTFG QzY1MjRFQ0EwHhcNMjUxMjA1MDEzMTM0WhcNMjUxMjEyMDEzMTM0WjAYMRYwFAYD VQQDEw02OTMyMzVmNi0zNjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZ9WLsu4ik+wMy8Rr1YJCB6Wi5ZTyS3f7bF8FdY0yJ3DODbFJten+lcgO9s7 Kz2CAQ3R6MXOHyHGc/Mp1dX8iuWB1yvTGkA1KJyOlP5no5CW7ZhGPwpchG3mDyI6 X8/dZ6UnKvCjCVJU7/iFr8y3uMuaavxqY3S2TTvLjkpD8SeJcUnMy/XGKp/K+9Ea CrhxSpfrLFNZb7bRRZaP48brz6izU0yIR0Eau1ZIMhUK4vH0GGzuwwgBqWRxR28+ n1upwxCPImvWm7dKae3VFYBVOJd03OmdAYw8LdXh9EyHsQbfXm2w5EVpEEpCv/ff 4b5K6mq0WMfKt1xyTCnh6bhnNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5bgk0Z TfgoopUn9+pvu4tixmtSMB8GA1UdIwQYMBaAFC2+3YjrKy3EfLUwkMOjhR/GUk7K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAwOS9FMzVBQ0FGNDUx MzQxMUVFQTM5MjRFMUZDNEY5QUUwMi9MYjdkaU9zckxjUjh0VENRdzZPRkg4WlNU c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xiN2RpT3NyTGNSOHRUQ1F3Nk9GSDhaU1Rzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAwOS9FMzVBQ0FGNDUxMzQxMUVFQTM5MjRFMUZDNEY5QUUwMi9MYjdkaU9zckxj Ujh0VENRdzZPRkg4WlNUc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfiDZZD1DqNy8Tvkdy0flCagMqKd7VfvkgYx/dd3K/f+g+/HgyKZaS CBIdB7BnckotnXmg3JkxHrmtNO01QRaLQmgqRQnkhYUNedyQ7sby5OFeVFKQv575 rr7mriMyfqJron4IFaqnE6VeBaeEH18RkGzV7OhecysB5SvZ7mIjYd3lKGuv56UI kwi8tn9TDUeTGpnWqb9O+GuprQ4qISWtumvpdjVR1NiEr/WgEwcDzN+NRDJhzxF4 tp2s7rsmkRf2JhNhzamnfpJcKphug8/h9FCv0emXiq8NeNMLqy80R7zsqOazTYHA 5Wmamsjui6xgGFzwHCm8AzvpxOsdgZHX -----END CERTIFICATE-----Generated at Sat Dec 6 22:06:09 2025 by rpki-client