This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft File: lvYxs3stzK--57Cb_fRxXhocUFs.mft (raw, json) Hash identifier: NyFWRJ3OlmksnCBNmFxTuqa6ahUQ3YOTRoGKyGeOYro= Subject key identifier: 6F:40:A2:2B:D6:92:3B:1E:87:4F:29:28:A2:47:B7:EC:BD:F6:8C:48 Authority key identifier: 96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B Certificate issuer: /CN=A9171DB9/serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B Certificate serial: 04E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft Manifest number: 04E2 Signing time: Sat 06 Dec 2025 22:30:42 +0000 Manifest this update: Sat 06 Dec 2025 22:30:41 +0000 Manifest next update: Sat 13 Dec 2025 22:30:41 +0000 Files and hashes: 1: lvYxs3stzK--57Cb_fRxXhocUFs.crl (hash: TUmPVdayI5XFeW9+k2f+eZYPqRy0iNM/k93HvU8J0sg=) 2: 6EC5F1A8420611ECB8345E7DC4F9AE02.roa (hash: pWVT/yLPwS8QXceP4ztZ/aw/Myzun+GPcuksVrgOEUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1255 (0x4e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171DB9, serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B Validity Not Before: Dec 6 22:30:41 2025 GMT Not After : Dec 13 22:30:41 2025 GMT Subject: CN=6934ae92-f009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:43:5d:dd:bb:3d:b4:38:de:45:61:87:10:44: 61:6b:d3:82:e9:b0:23:03:d1:95:d5:e9:ee:9b:cc: cb:6b:d8:99:fc:05:82:73:c4:dc:dd:a6:22:e1:dd: 08:79:68:0f:99:66:8c:3c:7f:4c:50:3e:5e:f1:61: 3a:2a:ab:90:bf:aa:c7:22:22:92:f5:08:dd:b6:41: c1:bd:0b:5a:e7:1a:cf:09:5c:d7:f9:55:ba:a0:35: 9a:a4:eb:97:bb:03:28:1c:5c:44:21:59:0f:02:d9: c0:b9:aa:61:0d:0b:d4:1d:49:c2:1e:ef:d7:9a:b9: 9a:62:26:13:9f:09:b7:04:b0:a1:d2:30:6c:ce:73: 5a:28:9d:a9:bb:ea:d0:28:1b:5b:f2:d2:cc:84:bb: 3a:6f:ce:3a:d2:41:e9:43:4c:c1:13:02:fe:b3:f8: 61:4e:96:aa:3b:c2:18:38:e9:da:4c:ec:24:10:bf: b6:40:e3:9b:bc:73:50:dc:cc:3e:24:94:1d:7d:28: 92:80:ce:af:4c:03:e1:5b:a7:9d:97:fb:ef:f1:b7: ba:1e:76:4e:e0:cd:02:2b:41:f1:fa:83:3f:31:50: 76:32:20:67:7b:3e:84:98:a1:2d:7e:fa:88:26:c2: 7f:8c:f6:f4:bb:dc:4c:c5:8c:21:c6:6e:8e:b1:90: f7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:40:A2:2B:D6:92:3B:1E:87:4F:29:28:A2:47:B7:EC:BD:F6:8C:48 X509v3 Authority Key Identifier: keyid:96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3d:eb:80:eb:b1:7c:c5:40:be:9d:92:af:26:ae:a1:de:4b: 79:c6:13:57:1f:ed:12:af:d2:fa:81:47:e9:0d:e8:76:b0:c5: c7:95:29:52:67:48:54:42:1c:40:17:d5:be:d8:ac:31:08:55: 7a:36:af:4f:f3:d3:b1:3c:d4:04:ba:aa:a5:53:88:07:d2:a3: 3d:92:64:d1:3b:ff:82:37:b4:d1:91:e5:2b:85:4d:c3:eb:76: 2c:44:66:2e:8b:79:f3:8e:e1:80:31:28:c8:3d:63:fa:39:28: 6d:4e:98:34:c7:67:92:da:87:09:fa:54:13:4b:74:5a:b1:ce: cc:8e:00:b8:38:0c:be:ae:33:86:71:97:18:1a:f3:6e:68:95: be:24:9d:e9:98:23:7b:b5:99:f9:12:f8:3c:5e:93:11:6e:f5: 39:1f:ea:7e:2a:db:e3:da:68:35:3b:db:08:4c:21:c8:17:79: f1:ab:b5:2e:68:41:75:ee:ff:b6:75:ff:7f:db:f8:f2:9b:d6: a0:07:b9:17:c7:68:ba:96:13:7a:d7:ef:bd:10:96:f6:ce:33: 95:8a:18:7e:f3:ba:65:4c:38:f6:44:68:0b:f2:0d:4e:e1:84: e3:4a:72:8d:bd:2f:6f:e0:e1:06:be:f6:43:54:8d:65:bd:ef: be:49:88:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEQjkxMTAvBgNVBAUTKDk2RjYzMUIzN0IyRENDQUZCRUU3QjA5QkZERjQ3MTVF MUExQzUwNUIwHhcNMjUxMjA2MjIzMDQxWhcNMjUxMjEzMjIzMDQxWjAYMRYwFAYD VQQDEw02OTM0YWU5Mi1mMDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7UNd3bs9tDjeRWGHEERha9OC6bAjA9GV1enum8zLa9iZ/AWCc8Tc3aYi4d0I eWgPmWaMPH9MUD5e8WE6KquQv6rHIiKS9QjdtkHBvQta5xrPCVzX+VW6oDWapOuX uwMoHFxEIVkPAtnAuaphDQvUHUnCHu/XmrmaYiYTnwm3BLCh0jBsznNaKJ2pu+rQ KBtb8tLMhLs6b8460kHpQ0zBEwL+s/hhTpaqO8IYOOnaTOwkEL+2QOObvHNQ3Mw+ JJQdfSiSgM6vTAPhW6edl/vv8be6HnZO4M0CK0Hx+oM/MVB2MiBnez6EmKEtfvqI JsJ/jPb0u9xMxYwhxm6OsZD3nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9AoivW kjseh08pKKJHt+y99oxIMB8GA1UdIwQYMBaAFJb2MbN7Lcyvvuewm/30cV4aHFBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MURCOS9BOUM5MEYxNDQy MDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpLLS01N0NiX2ZSeFhob2NV RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2WXhzM3N0ekstLTU3Q2JfZlJ4WGhvY1VGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MURCOS9BOUM5MEYxNDQyMDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpL LS01N0NiX2ZSeFhob2NVRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6PeuA67F8xUC+nZKvJq6h3kt5xhNXH+0Sr9L6gUfpDeh2sMXHlSlS Z0hUQhxAF9W+2KwxCFV6Nq9P89OxPNQEuqqlU4gH0qM9kmTRO/+CN7TRkeUrhU3D 63YsRGYui3nzjuGAMSjIPWP6OShtTpg0x2eS2ocJ+lQTS3Rasc7MjgC4OAy+rjOG cZcYGvNuaJW+JJ3pmCN7tZn5Evg8XpMRbvU5H+p+Ktvj2mg1O9sITCHIF3nxq7Uu aEF17v+2df9/2/jym9agB7kXx2i6lhN61++9EJb2zjOVihh+87plTDj2RGgL8g1O 4YTjSnKNvS9v4OEGvvZDVI1lve++SYj7 -----END CERTIFICATE-----Generated at Sun Dec 7 02:58:29 2025 by rpki-client