This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft File: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft (raw, json) Hash identifier: YMUC3Na2MhjhKMsZik2lKY99NDM4nVTwMqbuqGI9Xyo= Subject key identifier: 88:B2:1B:FD:1F:EB:1F:DE:13:9D:98:F9:B2:6E:85:D6:1C:D1:59:B6 Authority key identifier: D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 Certificate issuer: /CN=A91311BC/serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft Manifest number: 0128 Signing time: Fri 05 Dec 2025 02:45:33 +0000 Manifest this update: Fri 05 Dec 2025 02:45:33 +0000 Manifest next update: Fri 12 Dec 2025 02:45:33 +0000 Files and hashes: 1: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl (hash: 18D/R4zjxrleKEwCtPi6A6JIz4bNGXpeQQNQPnhz2Jk=) 2: 4B0C31680FA511EFA3249B35C4F9AE02.roa (hash: xyAm+OptmLWgEZqD9AH33MZxMqQhEFXVgaoDCMDjmoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91311BC, serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Validity Not Before: Dec 5 02:45:33 2025 GMT Not After : Dec 12 02:45:33 2025 GMT Subject: CN=6932474d-7eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:77:cf:52:8c:96:69:66:9f:ad:b1:dd:e6:5d: 3a:4b:4a:52:32:2d:ef:03:a4:91:dd:06:13:15:a5: d2:ad:78:bc:81:68:32:b0:5a:ed:b9:7a:b3:b5:ff: 8a:14:9a:07:1e:e6:42:00:19:15:82:b4:ac:c7:4f: 01:fb:54:6e:55:82:34:fb:7f:63:87:a3:9c:fd:61: 33:71:bc:c8:90:65:af:1f:b5:b2:d6:85:82:4d:e8: e2:49:1a:21:80:1e:00:a0:d7:c7:f8:73:d2:f0:0e: 11:73:74:6a:97:f7:77:b6:b5:a5:d9:40:a2:5a:a1: ce:c1:17:36:9f:3d:43:62:98:97:d4:92:7e:6b:d4: f6:49:bc:a2:fc:cb:4e:a2:a3:91:b6:4e:1d:d5:c3: 06:c8:e6:c4:ea:9d:d2:56:dc:c4:65:8b:8c:5d:54: 60:83:77:bb:c2:9b:7a:e7:48:55:be:63:0c:ad:2b: 40:9e:72:6e:b9:ba:ba:47:62:80:00:ca:b3:82:5a: 29:ef:5c:11:0e:23:34:c8:1f:6c:b7:40:46:e3:24: 12:38:c4:f6:12:f0:4b:07:d6:1a:d3:bf:07:01:8d: fc:e5:65:99:e9:24:d9:d9:ce:9c:3f:f1:12:62:b5: 2a:0d:4e:ca:7e:4d:81:1e:93:4b:3c:a2:c6:ec:f6: 9a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B2:1B:FD:1F:EB:1F:DE:13:9D:98:F9:B2:6E:85:D6:1C:D1:59:B6 X509v3 Authority Key Identifier: keyid:D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:91:c3:91:e0:81:aa:89:c1:db:b9:f6:06:b3:06:10:aa:55: 20:73:02:40:7a:02:91:ee:30:f7:4e:29:a9:af:87:de:84:e1: e0:1a:c4:99:34:2e:e6:93:53:bb:a5:c1:35:ec:67:d7:4e:76: 17:ab:a7:5a:61:d4:13:9e:f9:f3:6e:ae:8e:f8:a3:3a:3c:38: f3:c0:fc:69:6e:7c:02:f3:3c:90:af:83:97:c4:ba:1c:ef:b5: 9c:55:e3:f2:ea:50:4d:6d:80:4b:9c:36:54:4c:bb:76:4c:15: 92:9a:1f:33:1b:59:a2:bf:e8:62:01:37:5c:6c:ce:5e:81:6d: 47:53:90:f1:ee:52:f3:ab:83:bc:4e:26:bd:71:79:43:fb:5b: 1e:1e:65:50:d5:73:95:88:80:f9:5f:ea:40:9f:48:b5:76:4e: 2e:96:fd:09:81:24:71:b7:5e:35:04:cc:05:9d:f0:83:6d:5b: 37:56:a2:c6:52:b7:04:4b:52:10:66:cc:6c:07:0f:b5:c0:11: d2:81:03:5a:54:92:09:82:07:9c:3d:62:46:3a:62:18:40:23: 6d:02:41:b1:8b:e2:17:b4:5a:2d:77:a4:61:42:b2:9c:07:3a: cc:d7:b3:41:54:a7:65:46:19:1a:af:5d:cb:34:b2:fd:d3:82: 16:66:0f:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzExQkMxMTAvBgNVBAUTKEQ0QjFERDNFQjFBMDZGQTI2MkFCNkM1RUJGNEFGNTM2 NzFBQ0QyRjQwHhcNMjUxMjA1MDI0NTMzWhcNMjUxMjEyMDI0NTMzWjAYMRYwFAYD VQQDEw02OTMyNDc0ZC03ZWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HfPUoyWaWafrbHd5l06S0pSMi3vA6SR3QYTFaXSrXi8gWgysFrtuXqztf+K FJoHHuZCABkVgrSsx08B+1RuVYI0+39jh6Oc/WEzcbzIkGWvH7Wy1oWCTejiSRoh gB4AoNfH+HPS8A4Rc3Rql/d3trWl2UCiWqHOwRc2nz1DYpiX1JJ+a9T2Sbyi/MtO oqORtk4d1cMGyObE6p3SVtzEZYuMXVRgg3e7wpt650hVvmMMrStAnnJuubq6R2KA AMqzglop71wRDiM0yB9st0BG4yQSOMT2EvBLB9Ya078HAY385WWZ6STZ2c6cP/ES YrUqDU7Kfk2BHpNLPKLG7PaaAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiyG/0f 6x/eE52Y+bJuhdYc0Vm2MB8GA1UdIwQYMBaAFNSx3T6xoG+iYqtsXr9K9TZxrNL0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTFCQy8wNUVFQUJGQzBG QTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2SmlxMnhldjByMU5uR3Mw dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMSGRQckdnYjZKaXEyeGV2MHIxTm5HczB2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTFCQy8wNUVFQUJGQzBGQTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2 SmlxMnhldjByMU5uR3MwdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvkcOR4IGqicHbufYGswYQqlUgcwJAegKR7jD3Timpr4fehOHgGsSZ NC7mk1O7pcE17GfXTnYXq6daYdQTnvnzbq6O+KM6PDjzwPxpbnwC8zyQr4OXxLoc 77WcVePy6lBNbYBLnDZUTLt2TBWSmh8zG1miv+hiATdcbM5egW1HU5Dx7lLzq4O8 Tia9cXlD+1seHmVQ1XOViID5X+pAn0i1dk4ulv0JgSRxt141BMwFnfCDbVs3VqLG UrcES1IQZsxsBw+1wBHSgQNaVJIJggecPWJGOmIYQCNtAkGxi+IXtFotd6RhQrKc BzrM17NBVKdlRhkar13LNLL904IWZg/O -----END CERTIFICATE-----Generated at Sun Dec 7 03:24:10 2025 by rpki-client