This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft File: LnNTksaGuNjciMDM1Zvyrvun6LA.mft (raw, json) Hash identifier: F/3SjmqUxSUggHs6SRgxdKOXQEN1xFkjNbx9INOoqcE= Subject key identifier: EB:9F:EC:9C:D6:0A:8B:FB:C0:76:8A:AE:1A:D0:FB:B8:7D:28:1C:A6 Authority key identifier: 2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0 Certificate issuer: /CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0 Certificate serial: 0B92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft Manifest number: 0B89 Signing time: Thu 04 Dec 2025 18:23:38 +0000 Manifest this update: Thu 04 Dec 2025 18:23:38 +0000 Manifest next update: Thu 11 Dec 2025 18:23:38 +0000 Files and hashes: 1: LnNTksaGuNjciMDM1Zvyrvun6LA.crl (hash: 5wfD1V0rkEXF1WChizEHWPrre3klCqx6lrPKyXIw2/k=) 2: 14B2A85C3DA611EAAD093F5EC4F9AE02.roa (hash: U5r4SWMbZzX6cEmOkEoVm3P+a9O6vlGibQIW9uT8u/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2962 (0xb92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D340, serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0 Validity Not Before: Dec 4 18:23:38 2025 GMT Not After : Dec 11 18:23:38 2025 GMT Subject: CN=6931d1aa-be3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b6:2c:c7:cf:5d:fc:e2:b9:52:ec:9e:77:5a: 39:16:56:db:bd:10:07:13:3d:8d:1c:f9:12:f0:83: 68:31:fd:07:42:1f:52:e9:61:fc:c5:04:c8:55:f1: 17:21:68:f2:ae:6c:c3:53:5f:fc:16:c1:f2:b7:db: b8:ca:79:36:c3:4b:a4:73:6d:6a:a0:99:39:b1:a6: 99:63:fe:fd:a7:86:bd:4f:68:9a:39:dd:35:85:ae: 97:5c:f9:6a:6d:81:fa:10:5d:77:2b:5f:25:75:16: 35:d3:74:ea:65:b7:8b:68:42:ed:e6:b1:77:d5:24: ed:c0:01:36:f8:02:62:69:96:72:39:35:5a:a9:0b: b4:7a:23:6a:2c:62:3c:ee:b2:94:1f:38:8f:49:3d: f1:b0:e3:e8:99:64:c2:41:11:46:d2:18:18:fb:a6: e3:55:77:97:31:09:79:b3:f5:7f:aa:07:c2:d7:f9: 7f:d7:46:5e:4c:38:8b:a2:93:82:16:47:8b:88:ce: dd:d9:01:7f:e7:6c:80:ff:67:57:32:cb:70:c1:53: cd:66:89:f9:c9:a4:43:16:6b:54:d3:47:8a:12:f8: 79:a2:7d:77:32:51:1a:65:60:89:b4:ba:4d:ce:7c: 3e:e0:23:93:1e:b8:7a:4e:bc:7d:c5:3e:66:df:da: 30:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9F:EC:9C:D6:0A:8B:FB:C0:76:8A:AE:1A:D0:FB:B8:7D:28:1C:A6 X509v3 Authority Key Identifier: keyid:2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:18:47:9b:36:f7:9b:06:d9:f2:f3:37:a3:bd:43:d1:17:c2: b4:cc:23:0c:01:4b:74:92:b4:b7:59:99:b5:47:b7:ca:59:4d: 90:b4:27:5c:aa:28:19:e7:45:24:62:bf:4e:70:25:4f:cd:fa: c6:cf:f3:c4:24:6e:a7:fa:26:66:c3:32:28:44:0f:a6:45:fc: 7a:66:f4:ef:f6:42:9a:87:dc:9a:47:6d:31:30:e5:c9:d4:2b: a2:52:72:3f:54:00:42:17:bd:6e:e0:b7:8c:9f:6a:1d:41:d1: 87:03:4e:9c:5d:a4:2b:44:8a:07:b4:d7:5b:8a:3d:2e:2e:b9: 69:bd:9f:b2:cb:5d:f9:dd:b6:23:7a:fc:55:3f:62:e7:59:bb: ae:35:7f:28:c0:cb:a4:96:cc:14:75:82:d7:b9:ad:05:7c:3b: 51:48:da:15:29:40:18:0d:0e:14:4b:94:73:e3:35:37:13:2d: b7:c6:e7:54:89:a6:64:cf:be:d4:46:33:47:5d:52:05:9a:9e: 93:ef:40:bf:8a:1a:02:7d:b8:19:a4:54:d9:68:cb:b3:52:8c: 76:6a:ef:48:eb:ef:85:1a:9d:45:ba:c2:0f:4d:2b:eb:d4:5e: cb:82:1c:6f:e7:b2:8a:66:e1:2f:ae:38:f9:20:12:3f:c7:56: 5c:5e:c7:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQzNDAxMTAvBgNVBAUTKDJFNzM1MzkyQzY4NkI4RDhEQzg4QzBDQ0Q1OUJGMkFF RkJBN0U4QjAwHhcNMjUxMjA0MTgyMzM4WhcNMjUxMjExMTgyMzM4WjAYMRYwFAYD VQQDEw02OTMxZDFhYS1iZTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbYsx89d/OK5Uuyed1o5FlbbvRAHEz2NHPkS8INoMf0HQh9S6WH8xQTIVfEX IWjyrmzDU1/8FsHyt9u4ynk2w0ukc21qoJk5saaZY/79p4a9T2iaOd01ha6XXPlq bYH6EF13K18ldRY103TqZbeLaELt5rF31STtwAE2+AJiaZZyOTVaqQu0eiNqLGI8 7rKUHziPST3xsOPomWTCQRFG0hgY+6bjVXeXMQl5s/V/qgfC1/l/10ZeTDiLopOC FkeLiM7d2QF/52yA/2dXMstwwVPNZon5yaRDFmtU00eKEvh5on13MlEaZWCJtLpN znw+4COTHrh6Trx9xT5m39ow2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuf7JzW Cov7wHaKrhrQ+7h9KBymMB8GA1UdIwQYMBaAFC5zU5LGhrjY3IjAzNWb8q77p+iw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDM0MC8wNDY4Mzk3QTND NEUxMUVBOTQ3MjVDMjhDNEY5QUUwMi9Mbk5Ua3NhR3VOamNpTURNMVp2eXJ2dW42 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuTlRrc2FHdU5qY2lNRE0xWnZ5cnZ1bjZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDM0MC8wNDY4Mzk3QTNDNEUxMUVBOTQ3MjVDMjhDNEY5QUUwMi9Mbk5Ua3NhR3VO amNpTURNMVp2eXJ2dW42TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQGEebNvebBtny8zejvUPRF8K0zCMMAUt0krS3WZm1R7fKWU2QtCdc qigZ50UkYr9OcCVPzfrGz/PEJG6n+iZmwzIoRA+mRfx6ZvTv9kKah9yaR20xMOXJ 1CuiUnI/VABCF71u4LeMn2odQdGHA06cXaQrRIoHtNdbij0uLrlpvZ+yy1353bYj evxVP2LnWbuuNX8owMuklswUdYLXua0FfDtRSNoVKUAYDQ4US5Rz4zU3Ey23xudU iaZkz77URjNHXVIFmp6T70C/ihoCfbgZpFTZaMuzUox2au9I6++FGp1FusIPTSvr 1F7Lghxv57KKZuEvrjj5IBI/x1ZcXsf0 -----END CERTIFICATE-----Generated at Sat Dec 6 13:28:41 2025 by rpki-client