This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft File: LUK_n_o04UF-5rzIl9pVQVPO6uU.mft (raw, json) Hash identifier: Ak7yFzT7mhC3tj/UBMF6fToN5DLL++JOZWeeLxv1i8M= Subject key identifier: 0E:6C:57:43:E9:49:0B:43:98:5D:B6:40:DF:67:55:22:B3:12:0F:25 Authority key identifier: 2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5 Certificate issuer: /CN=A915F0EF/serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5 Certificate serial: 145A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft Manifest number: 1459 Signing time: Sat 06 Dec 2025 16:26:53 +0000 Manifest this update: Sat 06 Dec 2025 16:26:52 +0000 Manifest next update: Sat 13 Dec 2025 16:26:52 +0000 Files and hashes: 1: LUK_n_o04UF-5rzIl9pVQVPO6uU.crl (hash: a7tQT6GU739lIzhe3RmWzRvixMoAo0oK5j0vridBtFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5210 (0x145a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F0EF, serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5 Validity Not Before: Dec 6 16:26:52 2025 GMT Not After : Dec 13 16:26:52 2025 GMT Subject: CN=6934594d-8818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b2:c5:11:28:4d:1c:37:79:d1:c1:bf:40:26: 22:dd:63:90:91:93:27:78:91:a4:4f:d8:ff:59:ac: 05:b3:ba:c1:55:6d:66:31:80:40:c3:09:c3:78:d9: dc:9a:2b:8a:79:0e:26:71:b3:f2:58:62:f4:c3:69: f9:10:54:45:f4:76:7d:63:b2:6f:22:5d:84:bb:8b: 44:2c:7b:0c:ec:d1:59:59:82:58:c0:31:48:f8:93: 2d:f0:32:8e:e2:97:88:f5:8c:bd:51:4e:a3:a2:c5: 0e:1c:b3:05:30:9b:a1:cb:86:74:e8:d4:30:db:8e: 5f:3c:ad:8e:a5:9e:cd:17:6d:68:85:6e:54:87:5c: b5:b5:d1:9f:26:2c:c0:01:60:68:e0:0c:94:19:8e: 3f:bb:d8:e7:f7:97:7c:0b:3e:a2:0f:53:7a:5d:7f: f8:be:d7:06:d3:3f:d0:52:ab:21:ab:10:df:07:95: 37:0f:ce:b5:71:08:3f:75:30:b5:5d:a8:b6:39:1a: 07:bc:bb:7c:1a:9d:66:28:1e:1c:68:d2:e5:e2:90: 99:5e:99:f7:b7:ab:4d:db:ab:6f:6e:78:27:fe:c8: c5:9d:19:bb:a9:cf:c1:30:81:79:b4:c2:51:88:d9: 32:ed:04:40:cf:bd:10:f0:6c:d0:24:9e:28:c0:6b: 68:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6C:57:43:E9:49:0B:43:98:5D:B6:40:DF:67:55:22:B3:12:0F:25 X509v3 Authority Key Identifier: keyid:2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:c8:b1:51:63:fd:41:2c:a4:1e:97:1e:04:9a:ce:b1:a6:e4: aa:b7:92:53:cc:d4:cb:27:51:c1:1e:8e:7f:0f:77:24:4b:39: 92:a4:f9:a6:03:a4:be:b8:19:25:d5:36:1d:03:37:51:2b:55: 39:c9:e4:ea:20:44:12:bf:19:e5:32:c1:29:50:eb:cd:87:69: 4e:2e:e4:be:b7:45:6a:4d:89:ec:f5:a3:83:33:9e:a5:5f:fd: c3:f9:88:5a:e5:88:f7:22:b6:cf:68:b7:2d:bb:1a:1b:3f:36: 69:06:45:12:cd:ea:32:d5:c9:e9:05:a5:c0:10:0b:72:38:ea: ef:c5:c5:e0:69:16:74:50:f4:41:fa:d9:1b:3e:09:77:27:32: a2:6d:8f:d3:61:8e:b0:81:54:72:56:dd:4b:35:8b:79:88:83: a9:84:14:6a:cc:76:be:76:3b:05:b4:73:9f:df:61:91:0e:cb: cf:b5:ff:67:5c:1e:c0:d2:ec:2b:9c:fe:66:a2:54:22:a1:9b: 18:7c:17:98:42:33:cd:aa:02:17:d9:9f:d3:63:09:97:a0:63: bf:5a:86:c2:f9:30:42:28:3a:8c:71:67:25:72:09:ca:fc:1b: b4:cc:61:15:eb:29:83:14:0e:b6:70:5e:02:c6:56:47:0e:b1: 3c:54:8d:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYwRUYxMTAvBgNVBAUTKDJENDJCRjlGRkEzNEUxNDE3RUU2QkNDODk3REE1NTQx NTNDRUVBRTUwHhcNMjUxMjA2MTYyNjUyWhcNMjUxMjEzMTYyNjUyWjAYMRYwFAYD VQQDEw02OTM0NTk0ZC04ODE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rLFEShNHDd50cG/QCYi3WOQkZMneJGkT9j/WawFs7rBVW1mMYBAwwnDeNnc miuKeQ4mcbPyWGL0w2n5EFRF9HZ9Y7JvIl2Eu4tELHsM7NFZWYJYwDFI+JMt8DKO 4peI9Yy9UU6josUOHLMFMJuhy4Z06NQw245fPK2OpZ7NF21ohW5Uh1y1tdGfJizA AWBo4AyUGY4/u9jn95d8Cz6iD1N6XX/4vtcG0z/QUqshqxDfB5U3D861cQg/dTC1 Xai2ORoHvLt8Gp1mKB4caNLl4pCZXpn3t6tN26tvbngn/sjFnRm7qc/BMIF5tMJR iNky7QRAz70Q8GzQJJ4owGtoxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5sV0Pp SQtDmF22QN9nVSKzEg8lMB8GA1UdIwQYMBaAFC1Cv5/6NOFBfua8yJfaVUFTzurl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjBFRi83NDBCRTg0NDdG MTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRVRi01cnpJbDlwVlFWUE82 dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVS19uX28wNFVGLTVyeklsOXBWUVZQTzZ1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjBFRi83NDBCRTg0NDdGMTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRV Ri01cnpJbDlwVlFWUE82dVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVyLFRY/1BLKQelx4Ems6xpuSqt5JTzNTLJ1HBHo5/D3ckSzmSpPmm A6S+uBkl1TYdAzdRK1U5yeTqIEQSvxnlMsEpUOvNh2lOLuS+t0VqTYns9aODM56l X/3D+Yha5Yj3IrbPaLctuxobPzZpBkUSzeoy1cnpBaXAEAtyOOrvxcXgaRZ0UPRB +tkbPgl3JzKibY/TYY6wgVRyVt1LNYt5iIOphBRqzHa+djsFtHOf32GRDsvPtf9n XB7A0uwrnP5molQioZsYfBeYQjPNqgIX2Z/TYwmXoGO/WobC+TBCKDqMcWclcgnK /Bu0zGEV6ymDFA62cF4CxlZHDrE8VI06 -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:22 2025 by rpki-client