This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft File: lx1PfDIP2Y7P374A1z4CiBX-I_E.mft (raw, json) Hash identifier: gOPkdKN2/tWXPcaErWzRSY4btZGjFXYpYB6dHmBktfc= Subject key identifier: 7E:C2:DA:2E:E2:C0:F1:57:3C:AE:FE:39:D2:DB:B2:60:E9:66:E4:A6 Authority key identifier: 97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 Certificate issuer: /CN=A916588E/serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Certificate serial: 25D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft Manifest number: 25C0 Signing time: Sat 06 Dec 2025 15:29:30 +0000 Manifest this update: Sat 06 Dec 2025 15:29:29 +0000 Manifest next update: Sat 13 Dec 2025 15:29:29 +0000 Files and hashes: 1: lx1PfDIP2Y7P374A1z4CiBX-I_E.crl (hash: quyvkXPDd0/g9SqKhJYpTayzdahgPd4Urr1BKLYVmRM=) 2: 77139F3054EF11E783C5A42EC4F9AE02.roa (hash: WW7ULLrrOIB9GGHcDB9wM2m87d2vUNfw8IK2SkFOaB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9680 (0x25d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916588E, serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Validity Not Before: Dec 6 15:29:29 2025 GMT Not After : Dec 13 15:29:29 2025 GMT Subject: CN=69344bd9-b19d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:04:79:74:ff:e8:0b:fb:1d:65:ad:6a:48:cb: 55:98:01:d4:43:9c:fb:54:75:25:17:9d:e5:62:aa: 9d:45:43:a3:4f:9d:53:97:5f:1d:95:e7:ce:a6:ef: 0b:9c:46:26:85:ed:7b:d1:c4:4f:09:51:ef:a3:7a: 83:79:35:5b:10:9b:4a:ba:71:f1:48:9a:72:a8:57: 13:ec:07:fa:97:b2:60:25:01:f0:ed:78:21:63:d4: da:79:5e:05:85:f6:69:bb:74:fb:95:fe:07:b1:75: ba:db:af:b0:e0:60:41:09:a7:15:1f:ac:39:be:89: 5d:21:1b:01:37:b4:01:93:ce:03:e6:50:0e:04:95: 07:2d:e1:92:53:cc:a8:46:f8:0e:9c:0d:cf:5d:60: 12:2b:73:7f:07:75:8b:12:47:c2:65:96:89:66:6a: 49:66:68:82:13:7d:fe:29:93:5b:3a:10:52:b7:b4: b0:3e:c5:b7:ef:1b:a5:ae:09:3f:e1:05:de:f9:a3: 29:2e:1d:28:f8:92:af:8f:ad:4a:eb:b2:de:cf:79: f8:5f:78:b3:18:ca:a9:64:90:a4:d3:f5:2a:29:98: 22:02:cf:b0:db:82:9e:78:44:49:4e:61:f5:e9:a0: 8a:84:e9:49:52:bf:b2:b0:8f:c9:89:30:79:bb:c0: 44:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C2:DA:2E:E2:C0:F1:57:3C:AE:FE:39:D2:DB:B2:60:E9:66:E4:A6 X509v3 Authority Key Identifier: keyid:97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:1e:1f:49:82:06:13:ff:89:b7:21:28:03:57:d2:95:cc:d8: 86:0e:77:6c:c6:6c:d2:97:20:37:c5:42:27:75:06:63:a3:db: 6e:64:47:b6:18:63:be:6f:be:ff:ea:46:60:94:96:36:72:be: 65:84:ed:c5:4b:90:92:99:12:27:a0:af:4e:42:93:58:52:c1: 0a:ec:06:bd:40:4e:ef:f9:62:b2:16:c3:f7:07:ac:9d:6f:b5: e1:3f:8f:88:52:7d:65:ea:55:ef:14:97:75:96:c1:6b:81:cc: 0d:ee:db:c2:30:eb:75:24:2e:ed:7e:c0:27:e0:b9:13:d8:d3: b5:c8:92:c4:c0:c6:11:d5:97:8c:6b:11:1e:72:a0:60:a2:49: 4a:5f:77:9c:20:cf:0d:98:10:5c:0d:1e:65:1d:c5:2c:76:74: ba:e1:cb:c8:5b:b9:3a:31:30:34:d1:ff:d1:e6:84:fb:84:1d: 9a:c5:b1:16:44:11:ca:d5:ee:ce:c6:41:95:a9:06:9e:04:f9: 08:c3:c2:66:d1:f3:ef:22:42:4f:40:6c:4d:1d:83:83:ed:be: ad:a0:3d:8f:3d:53:fd:12:30:b0:af:fa:64:dd:b0:d0:f6:83: c7:ab:d5:75:2e:aa:8f:64:72:bc:f7:c2:5c:80:6f:92:0d:cc: 49:3d:3b:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4OEUxMTAvBgNVBAUTKDk3MUQ0RjdDMzIwRkQ5OEVDRkRGQkUwMEQ3M0UwMjg4 MTVGRTIzRjEwHhcNMjUxMjA2MTUyOTI5WhcNMjUxMjEzMTUyOTI5WjAYMRYwFAYD VQQDEw02OTM0NGJkOS1iMTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywR5dP/oC/sdZa1qSMtVmAHUQ5z7VHUlF53lYqqdRUOjT51Tl18dlefOpu8L nEYmhe170cRPCVHvo3qDeTVbEJtKunHxSJpyqFcT7Af6l7JgJQHw7XghY9TaeV4F hfZpu3T7lf4HsXW626+w4GBBCacVH6w5voldIRsBN7QBk84D5lAOBJUHLeGSU8yo RvgOnA3PXWASK3N/B3WLEkfCZZaJZmpJZmiCE33+KZNbOhBSt7SwPsW37xulrgk/ 4QXe+aMpLh0o+JKvj61K67Lez3n4X3izGMqpZJCk0/UqKZgiAs+w24KeeERJTmH1 6aCKhOlJUr+ysI/JiTB5u8BEKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7C2i7i wPFXPK7+OdLbsmDpZuSmMB8GA1UdIwQYMBaAFJcdT3wyD9mOz9++ANc+AogV/iPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTg4RS9EQTgwMzFCMjFB MjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZN1AzNzRBMXo0Q2lCWC1J X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x4MVBmRElQMlk3UDM3NEExejRDaUJYLUlfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTg4RS9EQTgwMzFCMjFBMjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZ N1AzNzRBMXo0Q2lCWC1JX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyHh9JggYT/4m3ISgDV9KVzNiGDndsxmzSlyA3xUIndQZjo9tuZEe2 GGO+b77/6kZglJY2cr5lhO3FS5CSmRInoK9OQpNYUsEK7Aa9QE7v+WKyFsP3B6yd b7XhP4+IUn1l6lXvFJd1lsFrgcwN7tvCMOt1JC7tfsAn4LkT2NO1yJLEwMYR1ZeM axEecqBgoklKX3ecIM8NmBBcDR5lHcUsdnS64cvIW7k6MTA00f/R5oT7hB2axbEW RBHK1e7OxkGVqQaeBPkIw8Jm0fPvIkJPQGxNHYOD7b6toD2PPVP9EjCwr/pk3bDQ 9oPHq9V1LqqPZHK898JcgG+SDcxJPTsW -----END CERTIFICATE-----Generated at Sat Dec 6 19:10:27 2025 by rpki-client