This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft File: LUmzrm2hi2NGSjF3qzIQGULmpRo.mft (raw, json) Hash identifier: SohfC8rS5qZbq7GVMPwKNWQ6eKOxgOU4vSkDwcc85O4= Subject key identifier: E1:C9:F7:60:34:AE:9D:6B:C6:DA:D9:01:94:1E:34:AE:DA:1B:E1:19 Authority key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A Certificate issuer: /CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft Manifest number: C5 Signing time: Fri 05 Dec 2025 04:03:20 +0000 Manifest this update: Fri 05 Dec 2025 04:03:19 +0000 Manifest next update: Fri 12 Dec 2025 04:03:19 +0000 Files and hashes: 1: LUmzrm2hi2NGSjF3qzIQGULmpRo.crl (hash: msDy3/wmrZHtn2dKllDQ7U7Ap03cF5NyaLy/7VKnZsc=) 2: 45541EE4C9F711F087D2166DC4F9AE02.roa (hash: ou4XIefPRD+gcNDDXhaZbU7PKX3s57bqkC7i0ZQskmE=) 3: 44870D64C9F711F0BE5A166DC4F9AE02.roa (hash: bp0RLIpTitUcQ67OSTbBZOecrYQ1aQaiC31xXwpL9Bc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F753, serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A Validity Not Before: Dec 5 04:03:19 2025 GMT Not After : Dec 12 04:03:19 2025 GMT Subject: CN=69325987-5fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d4:96:5b:06:94:95:45:31:4d:4b:e6:88:24: 8b:85:00:77:58:ea:27:0d:03:a4:c2:13:0d:c1:fa: f2:75:5e:3b:c3:e0:84:8a:fd:50:91:00:08:2f:c0: 38:12:f1:cf:2b:2f:ea:91:8d:99:75:53:66:25:b6: f6:d8:3b:98:42:7f:31:c1:ab:8f:2f:bc:76:12:9c: 5f:c8:f9:aa:aa:3b:3c:9a:92:8f:e1:2b:e5:9f:ad: 31:cf:e2:39:23:7f:b1:df:c4:cf:fc:6f:fd:0f:18: 5a:88:39:64:c2:b9:41:9d:8a:f4:d7:2d:bc:d0:51: d6:39:ee:8f:fa:2e:91:ea:3f:8e:ff:bf:7c:6c:8f: ba:9e:cf:42:20:08:a9:70:7d:30:7f:98:5f:01:46: 30:8e:b4:7b:4b:20:11:c4:46:c1:c9:dc:97:f2:77: 69:59:b8:1c:d4:4b:c7:48:0c:01:6e:0b:98:7d:d1: 18:64:09:77:e3:bc:0b:5a:65:68:c5:dc:08:cc:d1: 3c:af:d4:63:13:d6:4d:3b:29:ee:b4:e5:c1:d4:24: b0:c6:63:9c:de:7d:20:69:d6:41:09:dd:9c:f8:05: f8:e6:9d:65:8b:82:a3:6c:db:b2:fb:23:63:39:e8: 60:3a:1b:0a:81:e4:66:7b:fe:40:71:39:dc:a4:e4: e3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C9:F7:60:34:AE:9D:6B:C6:DA:D9:01:94:1E:34:AE:DA:1B:E1:19 X509v3 Authority Key Identifier: keyid:2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:df:91:33:f6:75:c9:fa:ae:35:15:55:82:97:a8:81:ae:c0: b6:01:f1:93:7a:b3:37:4f:ef:79:63:1a:2b:8d:bc:75:70:66: 61:07:c7:f9:d9:5d:31:f2:95:f6:f0:6e:12:fe:90:14:18:25: 8f:8b:34:3b:f6:b4:a7:51:e4:06:ef:2a:36:fb:29:39:58:14: d9:5f:ba:9b:3d:2c:1e:ad:d7:fe:9c:ab:98:a2:49:95:b0:b0: d2:e8:0b:11:a0:7e:0a:a9:2a:25:c4:8e:29:02:ef:78:f1:27: 1c:2f:8a:e4:d4:cd:61:4d:55:48:36:94:07:d8:dd:2b:27:34: 2a:dd:7a:5a:6a:e1:95:19:32:fa:17:08:cc:96:a1:5d:4d:98: e6:68:62:54:99:32:55:94:40:7d:b0:5f:e2:49:47:e6:ca:c2: 1b:52:5b:40:08:cf:73:a9:cc:1e:4e:75:56:ac:e4:9a:8d:ed: 63:8e:1e:36:1a:c6:0d:f0:5d:fb:c5:76:df:9d:57:ba:94:20: 05:49:06:df:a5:33:84:65:fe:97:80:30:84:6d:a7:69:5c:7c: 0c:25:1c:6d:57:e8:11:49:62:54:50:63:17:82:9f:1b:e6:2b: 9a:c3:a7:5a:30:ff:e4:2d:ed:8c:a8:f1:c2:26:c7:66:b8:b3: e5:5c:ce:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3NTMxMTAvBgNVBAUTKDJENDlCM0FFNkRBMThCNjM0NjRBMzE3N0FCMzIxMDE5 NDJFNkE1MUEwHhcNMjUxMjA1MDQwMzE5WhcNMjUxMjEyMDQwMzE5WjAYMRYwFAYD VQQDEw02OTMyNTk4Ny01ZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlNSWWwaUlUUxTUvmiCSLhQB3WOonDQOkwhMNwfrydV47w+CEiv1QkQAIL8A4 EvHPKy/qkY2ZdVNmJbb22DuYQn8xwauPL7x2EpxfyPmqqjs8mpKP4Svln60xz+I5 I3+x38TP/G/9DxhaiDlkwrlBnYr01y280FHWOe6P+i6R6j+O/798bI+6ns9CIAip cH0wf5hfAUYwjrR7SyARxEbBydyX8ndpWbgc1EvHSAwBbguYfdEYZAl347wLWmVo xdwIzNE8r9RjE9ZNOynutOXB1CSwxmOc3n0gadZBCd2c+AX45p1li4KjbNuy+yNj OehgOhsKgeRme/5AcTncpOTjlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHJ92A0 rp1rxtrZAZQeNK7aG+EZMB8GA1UdIwQYMBaAFC1Js65toYtjRkoxd6syEBlC5qUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjc1My83ODA5REEwMkJD MEQxMUVGOUI0QUQ2NDlDNEY5QUUwMi9MVW16cm0yaGkyTkdTakYzcXpJUUdVTG1w Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xVbXpybTJoaTJOR1NqRjNxeklRR1VMbXBSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Rjc1My83ODA5REEwMkJDMEQxMUVGOUI0QUQ2NDlDNEY5QUUwMi9MVW16cm0yaGky TkdTakYzcXpJUUdVTG1wUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO35Ez9nXJ+q41FVWCl6iBrsC2AfGTerM3T+95Yxorjbx1cGZhB8f5 2V0x8pX28G4S/pAUGCWPizQ79rSnUeQG7yo2+yk5WBTZX7qbPSwerdf+nKuYokmV sLDS6AsRoH4KqSolxI4pAu948SccL4rk1M1hTVVINpQH2N0rJzQq3XpaauGVGTL6 FwjMlqFdTZjmaGJUmTJVlEB9sF/iSUfmysIbUltACM9zqcweTnVWrOSaje1jjh42 GsYN8F37xXbfnVe6lCAFSQbfpTOEZf6XgDCEbadpXHwMJRxtV+gRSWJUUGMXgp8b 5iuaw6daMP/kLe2MqPHCJsdmuLPlXM6q -----END CERTIFICATE-----Generated at Sun Dec 7 00:41:17 2025 by rpki-client