This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft File: Lz71uQE3FOMXTGcArgSCTi8FwjA.mft (raw, json) Hash identifier: MWLrWFLg0K/32dCZV24pzzAoe/KifxDjXK8LrOo6YyA= Subject key identifier: B1:73:1B:74:C1:52:03:AA:34:EE:F8:AC:7E:0A:30:B4:30:C9:50:7F Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Certificate serial: 0398 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft Manifest number: 0376 Signing time: Thu 04 Dec 2025 23:18:10 +0000 Manifest this update: Thu 04 Dec 2025 23:18:09 +0000 Manifest next update: Thu 11 Dec 2025 23:18:09 +0000 Files and hashes: 1: Lz71uQE3FOMXTGcArgSCTi8FwjA.crl (hash: sM8/TAYvNbH5Z6evk7L2RYs/2KiPlk3Brbqjdc5F0+0=) 2: 19E46D60D0F711EC8673072FC4F9AE02.roa (hash: eS0SkthbbyWxVM1PH+Y2UO1xSi4Vr2C2N13i593TCX4=) 3: 69C96612D0F411EC8DAD6D11C4F9AE02.roa (hash: ugSG0jqem3rs4xTGOWUqAAlzlasFYzS5jXjJfZyh3NM=) 4: 196C52A8D0F711EC8673072FC4F9AE02.roa (hash: 1zywqVEPzRbdKjUH9lfurYX548Q8woU0JCmn0L04HiU=) 5: 6A430D5AD0F411EC8DAD6D11C4F9AE02.roa (hash: QV4TEx4o0H+S1ztXPsRaHI/PqCLYaPoZZrkBgaPymwI=) 6: 1BC3E9F8D0F711EC8673072FC4F9AE02.roa (hash: uEFMEysaJCpfT6acgeEaH657dOYiucYQFMSducsR5+M=) 7: 6920E4D8D0F411EC8DAD6D11C4F9AE02.roa (hash: RP0USEP4cmm5/rPyavYfSImz5bM19LFBMACm4cna7sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 920 (0x398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Validity Not Before: Dec 4 23:18:09 2025 GMT Not After : Dec 11 23:18:09 2025 GMT Subject: CN=693216b2-25cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2f:6b:1e:07:b4:4f:3a:6e:d1:74:85:e3:39: 62:f1:94:af:ff:2e:e4:3d:3a:04:da:04:d2:9f:6d: 4e:c4:5b:13:d8:1c:2a:35:77:3c:8b:eb:89:eb:68: e7:f4:6f:e2:7a:5c:7e:9e:43:e1:ef:b6:83:ea:33: 26:af:ea:c8:00:7b:8b:02:81:16:5f:52:62:c5:d9: 76:0d:8f:ff:f4:b2:19:b5:47:77:95:47:fb:1d:78: 8c:e7:93:32:a0:c5:80:0d:a6:12:3e:0f:dd:61:68: bd:63:6d:e1:5b:94:87:d4:a7:9f:96:4d:89:24:6d: 64:3d:30:bc:51:bf:b1:97:27:b4:28:17:be:aa:8a: 0f:37:27:ed:08:f5:e2:96:c0:37:ab:e1:fc:cb:a4: d8:d5:a1:02:ea:00:d3:12:7d:76:63:c9:9c:98:02: 2a:5e:84:f7:ed:f2:e1:a9:fc:00:6e:f3:05:4f:9d: 8c:1b:d0:16:1a:7e:aa:f0:07:f4:bd:7e:3c:18:d3: 2a:94:7e:b9:5e:95:ac:e2:32:09:98:a4:f6:78:10: 2d:fc:92:6e:81:a5:3e:9d:3d:fa:29:78:cf:b4:be: 09:2a:0b:76:36:cb:0a:fb:89:0e:be:3a:72:37:43: 0b:fc:0c:80:f0:0e:11:4b:ed:4c:98:b7:c4:d9:2a: 79:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:73:1B:74:C1:52:03:AA:34:EE:F8:AC:7E:0A:30:B4:30:C9:50:7F X509v3 Authority Key Identifier: keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:cd:3e:79:94:78:de:24:b7:4d:fd:e2:6b:98:95:59:a7:91: a3:99:55:a8:54:84:29:e3:83:c4:c1:44:20:c1:08:4d:2f:6f: 13:56:5c:68:9a:64:fa:ab:57:a4:29:e3:86:93:b3:8b:ee:7f: 5b:75:0f:93:fb:fa:48:c4:78:0f:8e:29:a2:7e:7e:79:ce:69: db:a5:02:c6:97:3b:8c:3f:83:6d:3f:ca:52:5c:8d:ca:6b:28: cf:3d:c6:13:ed:87:cc:2c:d4:4f:ab:7b:fd:1e:47:0c:e5:21: 8e:b7:44:02:d0:f2:1c:8c:50:f3:2d:4b:8e:00:51:ca:14:7f: 6e:7f:a5:7a:80:59:90:8d:5e:75:a8:6f:02:c4:cb:cd:12:06: a3:3e:87:4f:03:4e:bd:a8:a9:22:aa:57:2b:f6:4f:79:00:3f: 3c:8b:40:c1:78:03:c9:3d:12:58:ff:82:51:2b:3d:ea:75:08: 55:9f:1b:f0:76:19:2d:bc:7c:b0:43:f8:60:da:79:17:a5:a5: 52:3b:ea:8d:40:33:b9:63:19:95:22:fa:1b:6c:48:c7:51:2c: dd:f6:e2:a3:d9:ce:c5:cb:e3:27:98:f6:52:5c:ba:ca:dd:cb: 07:5c:80:26:a3:6e:76:62:2b:bf:c9:75:f3:0d:0c:98:72:17: 37:b5:d3:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ2QjExMTAvBgNVBAUTKDJGM0VGNUI5MDEzNzE0RTMxNzRDNjcwMEFFMDQ4MjRF MkYwNUMyMzAwHhcNMjUxMjA0MjMxODA5WhcNMjUxMjExMjMxODA5WjAYMRYwFAYD VQQDEw02OTMyMTZiMi0yNWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwC9rHge0Tzpu0XSF4zli8ZSv/y7kPToE2gTSn21OxFsT2BwqNXc8i+uJ62jn 9G/ielx+nkPh77aD6jMmr+rIAHuLAoEWX1Jixdl2DY//9LIZtUd3lUf7HXiM55My oMWADaYSPg/dYWi9Y23hW5SH1Keflk2JJG1kPTC8Ub+xlye0KBe+qooPNyftCPXi lsA3q+H8y6TY1aEC6gDTEn12Y8mcmAIqXoT37fLhqfwAbvMFT52MG9AWGn6q8Af0 vX48GNMqlH65XpWs4jIJmKT2eBAt/JJugaU+nT36KXjPtL4JKgt2NssK+4kOvjpy N0ML/AyA8A4RS+1MmLfE2Sp52wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFzG3TB UgOqNO74rH4KMLQwyVB/MB8GA1UdIwQYMBaAFC8+9bkBNxTjF0xnAK4Egk4vBcIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDZCMS85QTBFQ0UxMEQw RjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZPTVhUR2NBcmdTQ1RpOEZ3 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6NzF1UUUzRk9NWFRHY0FyZ1NDVGk4RndqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDZCMS85QTBFQ0UxMEQwRjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZP TVhUR2NBcmdTQ1RpOEZ3akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCzT55lHjeJLdN/eJrmJVZp5GjmVWoVIQp44PEwUQgwQhNL28TVlxo mmT6q1ekKeOGk7OL7n9bdQ+T+/pIxHgPjimifn55zmnbpQLGlzuMP4NtP8pSXI3K ayjPPcYT7YfMLNRPq3v9HkcM5SGOt0QC0PIcjFDzLUuOAFHKFH9uf6V6gFmQjV51 qG8CxMvNEgajPodPA069qKkiqlcr9k95AD88i0DBeAPJPRJY/4JRKz3qdQhVnxvw dhktvHywQ/hg2nkXpaVSO+qNQDO5YxmVIvobbEjHUSzd9uKj2c7Fy+MnmPZSXLrK 3csHXIAmo252Yiu/yXXzDQyYchc3tdPX -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:51 2025 by rpki-client