This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json) Hash identifier: s8aDkY/jKCQ+laHTfAEhNW4O5J0/JUQDXluy1/VySho= Subject key identifier: 34:14:B4:0A:88:E5:66:D7:9D:64:4D:55:90:6F:54:72:E5:63:2B:CF Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0D1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft Manifest number: 0D10 Signing time: Thu 04 Dec 2025 17:33:39 +0000 Manifest this update: Thu 04 Dec 2025 17:33:39 +0000 Manifest next update: Thu 11 Dec 2025 17:33:38 +0000 Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: YPVC5tjQx98LgA1fgPfDpX1nqzBwWkNv8c3HBVmVE5E=) 2: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: hN5uWTMLKihaDnB2GMrlEkHThQZGD2la1832Pp7TIb4=) 3: 0A7CA184B8C611F0B55B8B4EC4F9AE02.roa (hash: h1zv5buc+Cn7JuifmG3cLQTCbFRzAjARZCrKCnqaFQY=) 4: 97834674B8C511F0A874F663C4F9AE02.roa (hash: ccWVBhFOcENM09AuDRyLIP93A/dh9M6+1AU3r2Fkb/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3359 (0xd1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Dec 4 17:33:39 2025 GMT Not After : Dec 11 17:33:38 2025 GMT Subject: CN=6931c5f3-b952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:bf:c9:b1:5f:07:f8:08:be:2c:50:93:e4: ed:29:37:31:c2:4c:2e:d8:05:1f:2f:9e:d6:2f:88: 9f:60:ac:d8:de:ec:4c:e1:33:d8:e1:3f:99:90:4b: b1:27:91:93:fa:e8:f1:a5:c2:b2:86:ca:da:42:bd: b3:bc:3d:5a:68:9e:4f:84:df:bc:ca:48:ce:43:3a: 41:b3:b5:00:08:69:0c:06:a4:11:5f:a2:b0:30:c9: d1:88:cd:79:b8:a3:04:d0:f3:a7:5a:02:59:bc:0f: c7:0c:94:c8:18:21:0b:09:0c:fe:f5:d5:a7:3f:e2: 27:fa:79:d4:ae:dd:33:37:d2:6a:6c:ff:2f:2f:99: d0:97:82:34:00:e4:31:88:48:f9:71:4c:4f:43:f8: a4:ef:f5:04:7e:23:ae:d3:db:bd:d0:52:64:e7:78: 0a:f2:59:0c:89:52:f7:bb:e1:46:01:45:9e:be:fe: b3:58:d7:43:a5:11:a6:de:7a:c6:d4:a7:09:c2:7e: c9:51:6b:63:ef:ae:32:5b:30:21:88:d0:aa:41:bf: 48:37:80:c8:3c:c6:1e:a0:bf:86:8c:3b:67:c5:c6: a2:13:21:22:9a:22:3c:3b:9d:99:e5:4d:3b:71:4d: ea:07:4b:0d:5e:62:b0:4c:98:4d:18:2f:8c:86:d0: 9f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:14:B4:0A:88:E5:66:D7:9D:64:4D:55:90:6F:54:72:E5:63:2B:CF X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ed:89:9e:e3:77:6f:0f:59:75:d1:8f:92:8c:13:2a:52:50: 09:e1:94:94:af:e1:29:26:80:34:b2:40:36:2e:46:3e:7e:0e: 9f:88:f8:ae:6c:ac:27:98:25:b8:03:bc:3d:e1:c0:ab:06:05: 76:fb:62:fd:45:0b:7d:02:e4:02:09:ce:d2:41:1a:01:11:74: 1b:d0:9b:d8:a1:de:a9:fa:76:f1:c1:1f:31:9e:22:d5:4c:2c: 8b:f4:8b:eb:4d:ef:5a:12:6e:91:30:d9:93:11:dc:a9:77:ee: 9e:2c:90:2d:5c:10:f1:55:23:f8:88:f5:d1:f6:41:50:07:18: d9:2c:01:df:e9:06:71:82:34:06:fd:6d:dc:b6:22:d4:bd:64: 67:fe:33:96:a3:95:9e:4b:72:d9:53:4b:01:be:a6:75:eb:21: 39:2e:cd:39:c4:ca:9b:c3:82:fc:89:fd:b0:93:73:8a:b3:8e: 2d:cd:09:c2:63:5f:92:b6:48:03:df:08:00:02:f8:4e:3d:e6: 59:6d:48:f3:55:34:c4:c8:d4:de:ba:ac:59:01:57:db:56:29: c3:37:2e:80:92:4d:59:30:58:92:71:03:fd:79:9e:8b:91:e1: e7:b0:78:f2:14:39:ce:0d:5b:6a:e5:36:1d:f4:c7:7a:b4:c7: d3:6e:96:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjUxMjA0MTczMzM5WhcNMjUxMjExMTczMzM4WjAYMRYwFAYD VQQDEw02OTMxYzVmMy1iOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtk2/ybFfB/gIvixQk+TtKTcxwkwu2AUfL57WL4ifYKzY3uxM4TPY4T+ZkEux J5GT+ujxpcKyhsraQr2zvD1aaJ5PhN+8ykjOQzpBs7UACGkMBqQRX6KwMMnRiM15 uKME0POnWgJZvA/HDJTIGCELCQz+9dWnP+In+nnUrt0zN9JqbP8vL5nQl4I0AOQx iEj5cUxPQ/ik7/UEfiOu09u90FJk53gK8lkMiVL3u+FGAUWevv6zWNdDpRGm3nrG 1KcJwn7JUWtj764yWzAhiNCqQb9IN4DIPMYeoL+GjDtnxcaiEyEimiI8O52Z5U07 cU3qB0sNXmKwTJhNGC+MhtCf8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQUtAqI 5WbXnWRNVZBvVHLlYyvPMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3 aFFDWC1NYnRoWEhheHhCYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb7Yme43dvD1l10Y+SjBMqUlAJ4ZSUr+EpJoA0skA2LkY+fg6fiPiu bKwnmCW4A7w94cCrBgV2+2L9RQt9AuQCCc7SQRoBEXQb0JvYod6p+nbxwR8xniLV TCyL9IvrTe9aEm6RMNmTEdypd+6eLJAtXBDxVSP4iPXR9kFQBxjZLAHf6QZxgjQG /W3ctiLUvWRn/jOWo5WeS3LZU0sBvqZ16yE5Ls05xMqbw4L8if2wk3OKs44tzQnC Y1+StkgD3wgAAvhOPeZZbUjzVTTEyNTeuqxZAVfbVinDNy6Akk1ZMFiScQP9eZ6L keHnsHjyFDnODVtq5TYd9Md6tMfTbpbO -----END CERTIFICATE-----Generated at Sat Dec 6 15:36:03 2025 by rpki-client