This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft File: LURD4dwv1QJlAbu5nX1p2vpgvxc.mft (raw, json) Hash identifier: t66zbXPu8OFttA99L3lQqBD+3bgZcIWjKsVh7IPq3D4= Subject key identifier: 80:D6:D9:02:8D:BC:C1:AF:C2:73:1C:75:95:22:A7:AA:7C:9D:D8:DC Authority key identifier: 2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 Certificate issuer: /CN=A91361B4/serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft Manifest number: 01D0 Signing time: Fri 05 Dec 2025 01:05:22 +0000 Manifest this update: Fri 05 Dec 2025 01:05:22 +0000 Manifest next update: Fri 12 Dec 2025 01:05:22 +0000 Files and hashes: 1: LURD4dwv1QJlAbu5nX1p2vpgvxc.crl (hash: ov3NF+zWzliMZamBcpbjBINwPV7NxIR5svu7VBwYc4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91361B4, serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Validity Not Before: Dec 5 01:05:22 2025 GMT Not After : Dec 12 01:05:22 2025 GMT Subject: CN=69322fd2-70bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7d:ae:7c:dc:e6:c4:ce:07:b2:8d:d4:12:47: d9:cb:1a:7f:e3:04:53:18:94:d2:80:f0:a3:6d:f5: 36:5f:2f:d3:a1:13:f1:2c:1b:3a:e8:81:7f:38:90: 8c:94:80:28:25:3e:ae:6d:06:7e:ba:38:fa:89:1c: 83:eb:31:61:27:66:68:27:6e:50:1b:10:e7:74:01: a3:2d:f6:46:9e:21:8d:5e:67:bc:10:da:07:be:e2: be:ec:54:d3:56:71:3a:4b:e2:d2:6a:0d:ef:92:a7: ca:81:54:1f:a7:8e:ef:0d:b6:c3:f3:a5:26:99:d9: 2e:d2:ba:a5:4e:34:03:a9:6b:c9:ee:61:1d:f3:86: 1d:11:92:ae:ba:a3:2e:46:8e:5f:59:1a:55:6c:a7: f5:59:1e:a8:3d:6c:08:3c:04:7e:32:f6:e2:99:a0: 36:55:87:21:2b:d3:92:11:8d:aa:d4:e2:ad:15:ef: 43:a4:61:26:9c:d0:8d:0f:07:ef:17:62:93:b8:16: e2:57:92:58:80:e9:8f:ab:90:61:4d:e2:68:be:bf: 3f:7b:d8:e8:4e:c8:a3:27:5e:79:c5:64:d1:50:67: 4e:de:cc:fa:da:2e:4d:73:6b:62:04:2e:4e:ea:9a: 40:eb:44:ca:63:49:eb:e8:31:f3:33:5d:68:74:7e: 60:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D6:D9:02:8D:BC:C1:AF:C2:73:1C:75:95:22:A7:AA:7C:9D:D8:DC X509v3 Authority Key Identifier: keyid:2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:25:77:95:ef:99:a0:e5:1c:e2:ef:0f:22:47:d7:bb:94:d1: 9b:b9:d9:ac:e1:29:ee:98:73:ee:3f:67:be:5d:72:d5:ab:cc: 8e:42:e3:1a:f4:e7:1b:2f:0d:50:c5:57:d0:e4:d2:88:82:da: 40:ed:6c:67:78:32:17:6c:39:f4:14:68:1d:95:59:58:11:d0: 1b:4b:02:46:9a:1a:2f:0b:19:c9:39:5f:d3:42:84:d4:e6:9c: f4:6f:b3:94:3f:8f:3a:7d:13:1c:38:98:ac:d3:e0:b4:e5:09: 57:b3:77:c5:32:e7:cb:c7:1c:e5:a2:d7:7d:a3:8d:34:39:b7: d7:b1:7e:c2:5c:d1:4c:5a:db:f4:e9:36:91:f3:1b:9e:09:4e: 7c:f1:bf:95:15:97:28:7d:78:9c:d8:ad:fb:4c:c6:7d:a3:8a: 1d:29:07:93:54:32:d6:8b:7c:e0:6d:f8:8e:4e:a5:14:ef:f5: fc:52:8d:9c:12:c7:60:bb:42:98:78:67:1f:02:f3:33:a8:06: f1:37:a7:6a:0f:77:5e:61:cf:7b:e5:dd:be:5e:1b:c5:8c:f1: 11:db:c0:e1:bb:e5:c7:47:0f:bb:b9:39:c8:ec:a5:59:71:9e: d1:ef:9b:d2:88:4a:d2:2b:44:11:bf:f0:bb:3f:a6:1e:2f:98: 67:b0:7b:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxQjQxMTAvBgNVBAUTKDJENDQ0M0UxREMyRkQ1MDI2NTAxQkJCOTlEN0Q2OURB RkE2MEJGMTcwHhcNMjUxMjA1MDEwNTIyWhcNMjUxMjEyMDEwNTIyWjAYMRYwFAYD VQQDEw02OTMyMmZkMi03MGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy32ufNzmxM4Hso3UEkfZyxp/4wRTGJTSgPCjbfU2Xy/ToRPxLBs66IF/OJCM lIAoJT6ubQZ+ujj6iRyD6zFhJ2ZoJ25QGxDndAGjLfZGniGNXme8ENoHvuK+7FTT VnE6S+LSag3vkqfKgVQfp47vDbbD86Ummdku0rqlTjQDqWvJ7mEd84YdEZKuuqMu Ro5fWRpVbKf1WR6oPWwIPAR+MvbimaA2VYchK9OSEY2q1OKtFe9DpGEmnNCNDwfv F2KTuBbiV5JYgOmPq5BhTeJovr8/e9joTsijJ155xWTRUGdO3sz62i5Nc2tiBC5O 6ppA60TKY0nr6DHzM11odH5g6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDW2QKN vMGvwnMcdZUip6p8ndjcMB8GA1UdIwQYMBaAFC1EQ+HcL9UCZQG7uZ19adr6YL8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjFCNC83Q0QxMUZBMjA1 RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFRSmxBYnU1blgxcDJ2cGd2 eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVUkQ0ZHd2MVFKbEFidTVuWDFwMnZwZ3Z4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjFCNC83Q0QxMUZBMjA1RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFR SmxBYnU1blgxcDJ2cGd2eGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+JXeV75mg5Rzi7w8iR9e7lNGbudms4SnumHPuP2e+XXLVq8yOQuMa 9OcbLw1QxVfQ5NKIgtpA7WxneDIXbDn0FGgdlVlYEdAbSwJGmhovCxnJOV/TQoTU 5pz0b7OUP486fRMcOJis0+C05QlXs3fFMufLxxzlotd9o400ObfXsX7CXNFMWtv0 6TaR8xueCU588b+VFZcofXic2K37TMZ9o4odKQeTVDLWi3zgbfiOTqUU7/X8Uo2c Esdgu0KYeGcfAvMzqAbxN6dqD3deYc975d2+XhvFjPER28Dhu+XHRw+7uTnI7KVZ cZ7R75vSiErSK0QRv/C7P6YeL5hnsHuW -----END CERTIFICATE-----Generated at Sat Dec 6 16:13:46 2025 by rpki-client