This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft File: lx1PfDIP2Y7P374A1z4CiBX-I_E.mft (raw, json) Hash identifier: 79rQyoeaBmdTbiR20FSLg0seRGJCOlUBOQSUK2epN/g= Subject key identifier: 83:15:65:D9:B1:37:B8:37:FA:C9:58:86:58:A9:7E:0F:56:8D:E6:28 Authority key identifier: 97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 Certificate issuer: /CN=A916588E/serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Certificate serial: 25D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft Manifest number: 25C6 Signing time: Thu 18 Dec 2025 15:39:47 +0000 Manifest this update: Thu 18 Dec 2025 15:39:46 +0000 Manifest next update: Thu 25 Dec 2025 15:39:46 +0000 Files and hashes: 1: lx1PfDIP2Y7P374A1z4CiBX-I_E.crl (hash: oHUvb0DT7ELnfgkKASmqBN9vE5U1fUFkzsihgIEWyto=) 2: 77139F3054EF11E783C5A42EC4F9AE02.roa (hash: WW7ULLrrOIB9GGHcDB9wM2m87d2vUNfw8IK2SkFOaB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9686 (0x25d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916588E, serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Validity Not Before: Dec 18 15:39:46 2025 GMT Not After : Dec 25 15:39:46 2025 GMT Subject: CN=69442043-6a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7a:6f:cb:58:74:1b:79:86:dd:95:98:a4:fc: 89:ea:5b:e6:c7:50:e0:aa:3c:c7:42:64:b6:3b:11: 0b:9e:d8:8f:80:db:5d:8e:cb:b8:87:1e:55:01:64: 45:a1:38:cc:c8:b7:98:cf:c0:1a:5d:fc:cf:97:d4: b8:28:41:4b:33:d3:4c:7b:f8:fb:60:a0:f9:98:82: c3:d4:34:a9:ce:67:3b:76:ed:e3:c0:37:9f:9a:2d: bb:f3:c5:f7:99:8b:34:ed:ad:7e:6a:76:32:f5:8a: 64:97:f4:9d:e9:9a:8f:c8:03:e5:a8:2c:1d:68:b2: 8e:3d:62:24:86:45:eb:20:5f:b7:59:3d:1e:99:41: fc:76:25:87:93:b0:ce:9e:99:dc:4c:84:9b:a0:e7: c6:3e:32:ed:13:4f:33:b8:d8:60:60:fe:94:96:af: bd:bc:1c:9b:4d:8f:97:fe:f2:72:1b:8c:16:3c:80: 8b:25:c4:da:63:d3:68:16:20:17:27:3c:eb:b5:e8: 82:8f:b5:4a:9b:04:86:7b:00:60:8b:b1:10:66:49: 90:da:6e:ea:47:bb:16:cd:cd:6f:40:a6:3c:1e:7d: 24:df:95:53:48:89:f7:2f:54:25:e2:4f:ef:14:be: 89:29:57:a2:da:43:90:52:b5:bb:4f:fa:83:d7:60: 8d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:15:65:D9:B1:37:B8:37:FA:C9:58:86:58:A9:7E:0F:56:8D:E6:28 X509v3 Authority Key Identifier: keyid:97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:17:7a:3b:65:22:45:56:72:54:67:3e:60:72:bf:60:99:e1: ba:0e:c1:14:9e:91:68:6b:1a:35:d8:03:bd:99:44:08:30:ed: c6:7c:71:e3:9b:c3:f2:3d:e9:ed:42:89:cd:df:eb:02:64:b7: fc:47:5f:ce:cf:4c:dd:14:b8:9d:c4:81:e4:66:7b:33:33:14: 97:e7:e9:03:bc:db:71:c2:63:a2:37:04:04:0b:db:bd:4b:1f: 67:29:a4:fc:a6:07:b0:90:40:aa:7b:04:18:d2:3c:62:b9:09: 2c:f8:53:8d:11:9d:2c:73:27:d0:75:b1:0e:5a:64:d4:a1:ed: 02:11:84:b3:14:0d:7e:1a:c2:4c:53:9d:fa:c6:36:a2:8a:0a: 6f:99:54:20:64:33:49:7e:2e:52:28:44:18:78:71:d5:f1:3e: ed:c0:19:d4:2d:73:e1:16:68:d6:3c:45:2d:c8:7d:4e:9e:5d: 47:47:a5:aa:75:48:37:cb:69:a7:f2:80:42:e4:94:78:30:85: 6d:95:9b:45:25:f4:25:96:b6:99:3c:30:0b:ff:eb:5f:9b:2f: ef:ed:9a:26:31:3a:94:24:4c:0a:e2:12:3d:93:d5:6a:9a:e5: 45:86:67:4e:34:d2:e8:50:c7:7d:7b:ea:d4:b2:ee:c5:0a:ba: d9:db:11:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4OEUxMTAvBgNVBAUTKDk3MUQ0RjdDMzIwRkQ5OEVDRkRGQkUwMEQ3M0UwMjg4 MTVGRTIzRjEwHhcNMjUxMjE4MTUzOTQ2WhcNMjUxMjI1MTUzOTQ2WjAYMRYwFAYD VQQDDA02OTQ0MjA0My02YTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXpvy1h0G3mG3ZWYpPyJ6lvmx1DgqjzHQmS2OxELntiPgNtdjsu4hx5VAWRF oTjMyLeYz8AaXfzPl9S4KEFLM9NMe/j7YKD5mILD1DSpzmc7du3jwDefmi2788X3 mYs07a1+anYy9Ypkl/Sd6ZqPyAPlqCwdaLKOPWIkhkXrIF+3WT0emUH8diWHk7DO npncTISboOfGPjLtE08zuNhgYP6Ulq+9vBybTY+X/vJyG4wWPICLJcTaY9NoFiAX JzzrteiCj7VKmwSGewBgi7EQZkmQ2m7qR7sWzc1vQKY8Hn0k35VTSIn3L1Ql4k/v FL6JKVei2kOQUrW7T/qD12CNXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMVZdmx N7g3+slYhlipfg9WjeYoMB8GA1UdIwQYMBaAFJcdT3wyD9mOz9++ANc+AogV/iPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTg4RS9EQTgwMzFCMjFB MjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZN1AzNzRBMXo0Q2lCWC1J X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x4MVBmRElQMlk3UDM3NEExejRDaUJYLUlfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTg4RS9EQTgwMzFCMjFBMjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZ N1AzNzRBMXo0Q2lCWC1JX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwF3o7ZSJFVnJUZz5gcr9gmeG6DsEUnpFoaxo12AO9mUQIMO3GfHHj m8PyPentQonN3+sCZLf8R1/Oz0zdFLidxIHkZnszMxSX5+kDvNtxwmOiNwQEC9u9 Sx9nKaT8pgewkECqewQY0jxiuQks+FONEZ0scyfQdbEOWmTUoe0CEYSzFA1+GsJM U536xjaiigpvmVQgZDNJfi5SKEQYeHHV8T7twBnULXPhFmjWPEUtyH1Onl1HR6Wq dUg3y2mn8oBC5JR4MIVtlZtFJfQllraZPDAL/+tfmy/v7ZomMTqUJEwK4hI9k9Vq muVFhmdONNLoUMd9e+rUsu7FCrrZ2xEI -----END CERTIFICATE-----Generated at Fri Dec 19 13:31:21 2025 by rpki-client