This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft File: LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json) Hash identifier: KRB1Kgcs6ioMV/YTxZFSPwsK1PwcWHT3/ZB2X115DU8= Subject key identifier: 28:8D:B4:69:CB:3B:3B:67:99:DE:DD:65:E1:77:E1:79:D6:C0:F6:4D Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 Certificate issuer: /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Certificate serial: 09F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft Manifest number: 09F3 Signing time: Thu 04 Dec 2025 19:08:06 +0000 Manifest this update: Thu 04 Dec 2025 19:08:06 +0000 Manifest next update: Thu 11 Dec 2025 19:08:06 +0000 Files and hashes: 1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: gC80Qx3QhLC5ziz3EWSGyfnPOt0H0r9vdi7jfckzpSA=) 2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: i2d36Tq1yNa4fjxLB+ZorR2vyngn7bqMC3Q74Co0C4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2553 (0x9f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Validity Not Before: Dec 4 19:08:06 2025 GMT Not After : Dec 11 19:08:06 2025 GMT Subject: CN=6931dc16-70c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b8:26:2d:9f:e4:05:a9:53:c1:01:0e:4e:f2: 6e:6a:1f:20:07:07:57:1e:8a:8c:68:b3:77:56:39: c0:8f:10:4a:41:f2:cb:81:2b:8a:61:f8:d4:f9:69: 55:54:07:80:b6:b7:35:37:aa:81:7c:ce:08:f4:1c: f0:0b:c6:60:b7:c5:71:5d:22:56:62:b6:dc:bb:ae: 80:18:49:0c:0f:19:b9:98:5f:a4:05:44:d4:77:b6: b1:c3:0b:aa:aa:f2:24:8a:c8:fd:46:2e:fe:e6:ba: 29:56:53:15:be:97:36:b9:18:99:1a:db:cf:76:1c: ed:89:39:a6:72:66:40:e4:02:35:27:32:a0:6b:70: 30:b9:b0:5e:f6:dd:c5:cd:a6:67:2b:a5:f5:13:82: e4:f4:1e:a9:a9:d4:93:b3:c8:25:c5:84:8c:04:2b: e4:1e:2d:10:57:fc:0f:81:af:bd:8e:09:c7:43:ec: ff:66:35:66:84:ef:0d:70:b7:10:00:ab:13:52:a1: 04:a3:ad:8c:61:76:42:67:fd:36:d1:90:ff:c3:4b: 70:00:bd:3c:0f:c7:c4:8b:38:8f:8a:33:80:cd:61: c6:bf:60:08:d3:c7:88:7a:8b:84:2d:c9:6e:5c:48: c7:38:79:39:eb:aa:c3:61:7c:38:a1:4d:68:2a:72: 49:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8D:B4:69:CB:3B:3B:67:99:DE:DD:65:E1:77:E1:79:D6:C0:F6:4D X509v3 Authority Key Identifier: keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:00:23:4e:65:09:bd:c8:cc:1b:3a:32:f8:0f:45:63:ac:3d: 23:b8:27:2e:f8:fa:3c:6e:07:68:28:d3:36:14:9b:d0:c8:99: f6:6d:63:93:65:d1:41:80:88:02:7f:7b:fa:67:58:a8:d1:b1: 46:3d:73:78:4a:66:4e:7f:6d:9b:9a:62:1b:ae:96:51:e4:56: f2:d9:91:ee:6f:45:e5:ac:4f:e0:55:11:df:f1:14:b3:c1:92: d9:d4:fc:f6:2b:f4:4a:35:01:b8:db:b1:6a:16:50:5e:39:c8: 9a:49:94:c8:85:2e:be:21:04:78:27:a4:bf:d0:73:7d:a8:d7: 3a:95:b7:b8:db:3d:ab:48:97:15:a6:18:72:33:35:ce:56:0a: b8:9a:c8:e3:e9:c0:76:7c:29:cf:d4:8e:97:46:04:3e:12:a9: 79:bf:c9:4d:47:0d:9d:e0:6a:98:ff:43:bb:7f:b3:1a:4c:34: 05:bd:06:49:ec:35:4f:5e:78:88:ce:7e:ba:a7:c1:a3:31:db: 5b:70:ad:c6:98:54:19:1f:34:a0:e9:e7:c2:4c:a5:83:3a:7b: d7:48:d2:ff:07:d4:62:37:35:21:df:a6:9e:41:d8:75:2f:4d: df:f8:c1:ca:19:45:65:95:4a:01:5a:99:72:ce:6b:32:4c:7e: b9:ed:74:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDNDYxMTAvBgNVBAUTKDJEN0IwRDdBM0Y5RjE1REUwMDcyQTVBNkM0RUQwQTVG OEYyMjFFMDMwHhcNMjUxMjA0MTkwODA2WhcNMjUxMjExMTkwODA2WjAYMRYwFAYD VQQDEw02OTMxZGMxNi03MGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7gmLZ/kBalTwQEOTvJuah8gBwdXHoqMaLN3VjnAjxBKQfLLgSuKYfjU+WlV VAeAtrc1N6qBfM4I9BzwC8Zgt8VxXSJWYrbcu66AGEkMDxm5mF+kBUTUd7axwwuq qvIkisj9Ri7+5ropVlMVvpc2uRiZGtvPdhztiTmmcmZA5AI1JzKga3AwubBe9t3F zaZnK6X1E4Lk9B6pqdSTs8glxYSMBCvkHi0QV/wPga+9jgnHQ+z/ZjVmhO8NcLcQ AKsTUqEEo62MYXZCZ/020ZD/w0twAL08D8fEiziPijOAzWHGv2AI08eIeouELclu XEjHOHk566rDYXw4oU1oKnJJ1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiNtGnL Oztnmd7dZeF34XnWwPZNMB8GA1UdIwQYMBaAFC17DXo/nxXeAHKlpsTtCl+PIh4D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUM0Ni81OEY3NTEzRThB OEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZkNEFjcVdteE8wS1g0OGlI Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYc05lai1mRmQ0QWNxV214TzBLWDQ4aUhnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUM0Ni81OEY3NTEzRThBOEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZk NEFjcVdteE8wS1g0OGlIZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1ACNOZQm9yMwbOjL4D0VjrD0juCcu+Po8bgdoKNM2FJvQyJn2bWOT ZdFBgIgCf3v6Z1io0bFGPXN4SmZOf22bmmIbrpZR5Fby2ZHub0XlrE/gVRHf8RSz wZLZ1Pz2K/RKNQG427FqFlBeOciaSZTIhS6+IQR4J6S/0HN9qNc6lbe42z2rSJcV phhyMzXOVgq4msjj6cB2fCnP1I6XRgQ+Eql5v8lNRw2d4GqY/0O7f7MaTDQFvQZJ 7DVPXniIzn66p8GjMdtbcK3GmFQZHzSg6efCTKWDOnvXSNL/B9RiNzUh36aeQdh1 L03f+MHKGUVllUoBWplyzmsyTH657XR8 -----END CERTIFICATE-----Generated at Sat Dec 6 16:45:28 2025 by rpki-client