This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft File: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft (raw, json) Hash identifier: AZGeKQL7+GcdGvWEjkGPZfbf5+EsHkjFWDQ4g94Uypo= Subject key identifier: 30:A1:63:94:F5:B7:04:20:02:9E:DD:16:9C:20:4D:AA:CA:E2:D9:03 Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 Certificate issuer: /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft Manifest number: CE Signing time: Fri 05 Dec 2025 04:15:08 +0000 Manifest this update: Fri 05 Dec 2025 04:15:07 +0000 Manifest next update: Fri 12 Dec 2025 04:15:07 +0000 Files and hashes: 1: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl (hash: H8HmTklsW2v3O2vHu8R3Y88il4S7yNMY0+ZGqcjkFOM=) 2: 45322DB8BF9111F0B4CD4C4FC4F9AE02.roa (hash: ud1mE3zDUyJoUD45JUyLpu4ly9UG6jF4f8pk2Ff/D/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Validity Not Before: Dec 5 04:15:07 2025 GMT Not After : Dec 12 04:15:07 2025 GMT Subject: CN=69325c4b-1f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:11:d5:09:0c:b4:59:c5:f7:83:0d:b0:e2:d6: 3a:48:4a:b1:96:1f:cf:3a:65:0e:03:43:28:50:f9: fb:7c:af:b5:34:69:d6:e7:32:a2:9e:ce:a4:c0:2f: f1:9d:c3:28:22:d7:42:f3:24:c8:9d:b7:ef:d5:cb: 41:dd:7a:65:82:1e:f7:66:d6:d5:52:22:80:58:85: 80:44:a2:8d:17:85:fa:74:6b:8e:53:2d:a6:68:cd: 27:0b:ec:ed:0a:c8:e3:15:2c:63:fc:36:b0:fa:47: 20:bf:59:f4:02:db:a3:35:16:d9:62:e8:52:3d:e3: 9a:dc:07:89:a4:01:0e:82:8d:f9:2b:70:ab:6b:8d: 88:ba:14:73:a3:c2:70:fb:f1:b8:a8:d1:5e:a0:60: 38:11:fe:57:42:80:65:ba:67:8c:38:a9:d0:8f:95: a2:9a:41:70:21:83:cd:12:5b:54:4c:fc:d5:60:6d: 1a:da:36:ba:12:da:f1:94:f1:4d:e1:2b:76:19:bd: c4:6e:3c:b4:fc:82:84:4d:c9:18:dd:b7:31:5d:4b: d0:d8:f3:c8:20:27:8b:dc:f6:9b:1c:b2:08:fd:b6: 68:78:36:97:f0:0d:ce:84:a7:73:52:45:3a:c7:f2: 17:17:52:7d:15:c2:a2:7f:8e:73:f0:5b:e7:78:af: ed:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A1:63:94:F5:B7:04:20:02:9E:DD:16:9C:20:4D:AA:CA:E2:D9:03 X509v3 Authority Key Identifier: keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:07:4d:02:5a:f5:44:ad:43:52:49:52:71:14:e0:66:cf:ce: b7:da:1a:07:90:e7:75:fb:42:fc:a5:1c:3b:d5:cc:82:42:04: 18:3a:05:32:2a:bf:d2:01:d0:12:8d:50:94:4f:b9:42:3c:b5: f9:15:1a:77:a7:15:cf:ff:50:ec:c2:fd:ca:f9:27:19:bf:4d: 59:1d:16:7f:6c:a2:11:c0:ea:2f:b6:4c:66:08:79:1a:b6:9d: 36:7f:72:b7:c5:9c:49:af:9f:bb:5f:c0:e7:48:c2:b8:4d:72: a0:4a:b8:84:3f:47:25:b7:b2:4e:cb:bc:c6:da:8f:6c:ab:4a: fb:c5:f1:04:82:42:1d:12:32:fa:41:1d:cc:2a:06:52:ea:c8: 23:f9:d4:0a:32:19:ed:90:75:c7:4b:f7:7c:5b:3d:a2:16:bd: d5:e9:fa:2f:95:47:7a:eb:52:26:46:47:55:cc:c7:9e:a3:f1: 60:0b:67:41:a4:ec:7a:5e:53:af:ed:6e:aa:07:e5:4c:c0:31: 72:81:b6:fc:74:01:13:6a:d4:a2:29:ef:78:19:97:12:8d:34: 0d:b8:58:57:31:05:43:6f:1f:89:c5:56:63:66:61:bf:b0:fb: 71:42:07:18:cc:6e:8f:65:92:6d:3b:0e:56:72:34:26:16:46: 68:0a:8f:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZERDkxMTAvBgNVBAUTKDk2N0I5N0Q5RTMxMTI1MEQ4Mjk0MkQyN0U0QzVGOTBE OTgxMzgwNTgwHhcNMjUxMjA1MDQxNTA3WhcNMjUxMjEyMDQxNTA3WjAYMRYwFAYD VQQDEw02OTMyNWM0Yi0xZjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBHVCQy0WcX3gw2w4tY6SEqxlh/POmUOA0MoUPn7fK+1NGnW5zKins6kwC/x ncMoItdC8yTInbfv1ctB3Xplgh73ZtbVUiKAWIWARKKNF4X6dGuOUy2maM0nC+zt CsjjFSxj/Daw+kcgv1n0AtujNRbZYuhSPeOa3AeJpAEOgo35K3Cra42IuhRzo8Jw +/G4qNFeoGA4Ef5XQoBlumeMOKnQj5WimkFwIYPNEltUTPzVYG0a2ja6EtrxlPFN 4St2Gb3Ebjy0/IKETckY3bcxXUvQ2PPIICeL3PabHLII/bZoeDaX8A3OhKdzUkU6 x/IXF1J9FcKif45z8FvneK/t6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDChY5T1 twQgAp7dFpwgTarK4tkDMB8GA1UdIwQYMBaAFJZ7l9njESUNgpQtJ+TF+Q2YE4BY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkREOS9CNjIyRkE4QUQ2 REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9sbnVYMmVNUkpRMkNsQzBuNU1YNURaZ1Rn RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xudVgyZU1SSlEyQ2xDMG41TVg1RFpnVGdGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkREOS9CNjIyRkE4QUQ2REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9sbnVYMmVNUkpR MkNsQzBuNU1YNURaZ1RnRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrB00CWvVErUNSSVJxFOBmz8632hoHkOd1+0L8pRw71cyCQgQYOgUy Kr/SAdASjVCUT7lCPLX5FRp3pxXP/1Dswv3K+ScZv01ZHRZ/bKIRwOovtkxmCHka tp02f3K3xZxJr5+7X8DnSMK4TXKgSriEP0clt7JOy7zG2o9sq0r7xfEEgkIdEjL6 QR3MKgZS6sgj+dQKMhntkHXHS/d8Wz2iFr3V6fovlUd661ImRkdVzMeeo/FgC2dB pOx6XlOv7W6qB+VMwDFygbb8dAETatSiKe94GZcSjTQNuFhXMQVDbx+JxVZjZmG/ sPtxQgcYzG6PZZJtOw5WcjQmFkZoCo8l -----END CERTIFICATE-----Generated at Sat Dec 6 23:02:45 2025 by rpki-client