This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json) Hash identifier: /hWWXEfqKApWLal9XaUc3cGionneJ5hZxyVIFyexFaI= Subject key identifier: 98:91:74:8B:9B:59:9A:45:15:B2:09:D9:FE:FE:1F:9E:BE:7C:D1:0F Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft Manifest number: F9 Signing time: Fri 05 Dec 2025 03:12:27 +0000 Manifest this update: Fri 05 Dec 2025 03:12:27 +0000 Manifest next update: Fri 12 Dec 2025 03:12:27 +0000 Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: L6Q/NKJGZd4c5/nXRM+FXD1dYcTQ1xcfk8JrVUlbj+I=) 2: 11763FC8648D11F0950AB94BC4F9AE02.roa (hash: 86Rvuv44s2BQaDBbytq/QrAOdGP+XaqCHubjdpDvCpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Validity Not Before: Dec 5 03:12:27 2025 GMT Not After : Dec 12 03:12:27 2025 GMT Subject: CN=69324d9b-5140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a2:cf:81:50:9c:fc:03:18:d4:a2:6d:a5:01: 56:e8:11:1c:81:0a:56:18:3e:a4:60:55:04:5f:7f: d2:0b:a4:0d:79:37:6e:5c:71:4a:a4:f2:c7:cc:01: 2f:49:6b:e1:e8:88:f8:3e:e3:a1:95:05:a3:bc:5f: 5b:0d:c3:d6:28:42:76:6d:1a:1c:0c:f1:7b:23:0f: 57:51:64:11:50:fa:c5:d9:ff:bb:1f:75:ca:a3:5d: 87:cf:0e:b9:50:13:67:54:ef:aa:0e:65:c5:81:c9: 6b:32:86:4b:0f:23:ab:e0:b6:0f:59:8b:54:7e:6f: e2:74:c9:11:c0:37:f9:a1:eb:17:80:14:51:15:f0: 43:db:a8:26:52:dc:7f:e6:ae:39:16:10:73:1e:cd: ed:b5:2a:f5:89:28:c5:9b:77:3e:a2:4a:0c:35:f4: db:f7:4c:03:a1:b0:ea:fe:13:51:e0:c8:b9:a0:84: 41:70:71:74:3b:43:f3:3e:58:4e:d4:01:e3:84:8a: ff:e4:23:54:5c:1c:b6:70:72:ec:bd:24:b6:e8:f6: 60:dd:c5:e5:14:9d:36:5c:66:56:dc:a9:79:ba:1c: c7:53:9b:16:99:cc:fa:c1:ae:48:29:62:b7:fd:de: c5:9a:ea:6d:f3:75:5f:7c:08:a4:ae:b0:90:b0:bf: 6c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:91:74:8B:9B:59:9A:45:15:B2:09:D9:FE:FE:1F:9E:BE:7C:D1:0F X509v3 Authority Key Identifier: keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:2e:af:37:3e:bb:d6:c3:00:94:df:b9:9c:d0:58:99:86:05: 96:e1:ea:bc:d5:ea:a8:01:4b:9c:f8:87:25:03:21:11:cb:0e: 72:b7:53:64:53:94:d1:7d:76:43:ca:b8:a1:21:e3:88:ab:83: 65:a5:a5:f5:b5:fa:d0:60:e0:83:ed:22:77:b0:d9:51:b5:88: 1c:21:48:05:b6:35:c7:36:99:0a:38:c4:b2:2d:08:1e:ff:19: a5:ba:98:4c:fa:76:96:df:e6:74:26:ab:e5:e5:3d:3a:51:6e: 54:a7:f9:3e:1e:08:ea:db:ca:68:8e:9d:99:8a:1b:df:14:18: 15:e1:3b:cd:ad:a0:70:dd:74:37:d5:4b:70:5d:ab:3c:14:f2: 77:04:49:52:c7:18:cf:60:10:9b:8c:40:ae:27:5b:b6:da:c8: e9:0d:f2:c2:db:17:56:dd:a1:c6:20:47:cc:71:ec:4c:35:7a: 61:a8:cc:45:5a:4e:32:80:cd:01:5c:3c:d0:a6:7f:d4:15:ab: 37:d6:37:7e:b1:5f:48:b2:b5:c4:2b:55:ae:31:f4:15:bd:52: 56:87:f1:d1:46:01:0e:1b:2f:32:a0:d5:48:aa:cb:67:f0:31: 57:e1:b5:a6:76:dc:79:87:69:ac:85:29:08:d1:a1:2c:6c:66: 1f:61:99:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKDk3MDZCRjEyMTkzNTREMDE4QzE1ODU4Q0U5NzY3OUZF NDNFNkIzMTIwHhcNMjUxMjA1MDMxMjI3WhcNMjUxMjEyMDMxMjI3WjAYMRYwFAYD VQQDEw02OTMyNGQ5Yi01MTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKLPgVCc/AMY1KJtpQFW6BEcgQpWGD6kYFUEX3/SC6QNeTduXHFKpPLHzAEv SWvh6Ij4PuOhlQWjvF9bDcPWKEJ2bRocDPF7Iw9XUWQRUPrF2f+7H3XKo12Hzw65 UBNnVO+qDmXFgclrMoZLDyOr4LYPWYtUfm/idMkRwDf5oesXgBRRFfBD26gmUtx/ 5q45FhBzHs3ttSr1iSjFm3c+okoMNfTb90wDobDq/hNR4Mi5oIRBcHF0O0PzPlhO 1AHjhIr/5CNUXBy2cHLsvSS26PZg3cXlFJ02XGZW3Kl5uhzHU5sWmcz6wa5IKWK3 /d7Fmupt83VffAikrrCQsL9sgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiRdIub WZpFFbIJ2f7+H56+fNEPMB8GA1UdIwQYMBaAFJcGvxIZNU0BjBWFjOl2ef5D5rMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9DMTJFODQyQzU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRRR01GWVdNNlhaNV9rUG1z eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9DMTJFODQyQzU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRR R01GWVdNNlhaNV9rUG1zeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrLq83PrvWwwCU37mc0FiZhgWW4eq81eqoAUuc+IclAyERyw5yt1Nk U5TRfXZDyrihIeOIq4NlpaX1tfrQYOCD7SJ3sNlRtYgcIUgFtjXHNpkKOMSyLQge /xmluphM+naW3+Z0Jqvl5T06UW5Up/k+Hgjq28pojp2ZihvfFBgV4TvNraBw3XQ3 1UtwXas8FPJ3BElSxxjPYBCbjECuJ1u22sjpDfLC2xdW3aHGIEfMcexMNXphqMxF Wk4ygM0BXDzQpn/UFas31jd+sV9IsrXEK1WuMfQVvVJWh/HRRgEOGy8yoNVIqstn 8DFX4bWmdtx5h2mshSkI0aEsbGYfYZmO -----END CERTIFICATE-----Generated at Sun Dec 7 04:19:17 2025 by rpki-client