This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft File: LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft (raw, json) Hash identifier: pSjrzFLrP5awh5nrAujSM2mOQVypqtJpWUtGiAv5XhU= Subject key identifier: 60:FC:05:46:C8:45:3E:6B:B7:D6:1D:C3:19:01:8D:D0:69:2E:14:2A Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C Certificate issuer: /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Certificate serial: 13B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft Manifest number: 1358 Signing time: Thu 04 Dec 2025 16:40:02 +0000 Manifest this update: Thu 04 Dec 2025 16:40:02 +0000 Manifest next update: Thu 11 Dec 2025 16:40:02 +0000 Files and hashes: 1: LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl (hash: aJCoE9EqYcW5UemdR4GpUszNcEXqUuZKKTNvxPnrapw=) 2: ED7D926622C511EE8579CC72C4F9AE02.roa (hash: nyv08QSRNJhv3RvW17AH6qbhQ4D5Q9YXzn9YfgnDQT8=) 3: 7302617AC78E11E8BC20B719C4F9AE02.roa (hash: sjn+Ca3CIoVaW6VbJ0cVQY8YczhjL0b0Si8hIFo/7wg=) 4: 0396C48E5E7011EDAD328E21C4F9AE02.roa (hash: vKpj3gtlk/oArus3QVt8qMIl2rVV8ZR8fTIi0bGHkes=) 5: 4AC75BA8FFE311EBB4FA4965C4F9AE02.roa (hash: jOyHfCeGHLkQkWPLP0TxF4XakIxFwaSt07hLgc5fNhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5041 (0x13b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436, serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Validity Not Before: Dec 4 16:40:02 2025 GMT Not After : Dec 11 16:40:02 2025 GMT Subject: CN=6931b962-0122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:da:7c:f8:8c:78:a5:4d:94:ee:8d:1e:ed:0a: b3:93:42:59:d4:b4:9d:eb:b0:56:68:43:31:52:00: 99:5f:ec:dd:6f:39:1f:78:bd:43:9d:66:18:0d:b6: 7b:42:29:e8:24:5e:e2:39:5c:66:a8:de:fd:b2:c7: 34:fa:d3:cc:a3:a8:f5:cb:e8:21:d7:aa:65:d2:a1: 77:cd:da:cb:8a:0b:67:9a:87:65:bf:61:c2:d5:c6: 4a:a9:c5:55:af:96:02:8c:09:d6:36:06:8f:58:aa: f0:ce:ee:8a:84:5d:5e:3e:b4:09:57:81:5b:25:ab: 26:f2:34:f7:b0:9a:6f:08:e2:da:a4:1a:ae:84:0f: 3a:f0:77:45:b6:bf:84:fe:6f:86:e5:27:0f:f2:40: c6:71:c5:61:2b:07:9f:9d:8c:8f:0a:9f:0b:3a:0b: 65:cb:da:0c:9c:54:69:ab:66:ce:15:7b:40:36:c2: 2b:5a:da:88:68:e2:8d:ea:8b:50:a6:18:b6:8b:9a: 9b:d2:1d:7f:6f:ad:0c:f6:35:82:73:49:b4:7d:91: ff:be:4f:c2:97:96:f5:60:40:2e:9c:80:06:5e:32: 54:69:99:5d:2d:f5:0c:1a:b5:f5:07:51:cb:75:22: 2c:e8:d1:47:01:32:ef:5b:01:b8:63:df:19:92:9f: 53:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FC:05:46:C8:45:3E:6B:B7:D6:1D:C3:19:01:8D:D0:69:2E:14:2A X509v3 Authority Key Identifier: keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:be:e3:3b:21:9a:db:4e:6b:5b:8f:03:35:56:89:15:12:82: 8c:23:ea:9d:84:8e:b3:ed:9a:26:cd:26:3a:a2:ac:67:54:85: 0b:87:2d:d1:df:d9:a8:34:c6:f2:23:b1:83:bc:ba:50:fa:67: 04:51:ad:d6:c0:a4:a8:e1:73:5b:38:c6:74:e2:ed:ee:68:81: 5d:89:25:3d:0d:8f:e2:8e:74:1f:55:2d:03:b7:8d:04:c3:71: 0f:5b:2d:d2:7f:25:cc:e5:81:9a:2d:9e:d1:f8:e0:53:ed:d2: 1b:9c:45:60:ec:a6:f1:92:ab:6e:45:da:4d:96:ee:0f:a4:26: 83:da:82:3b:20:e2:63:95:b2:8e:3e:72:90:d4:4e:96:1d:4d: 46:a3:3e:a1:86:e5:cd:48:25:63:5a:0c:ec:73:63:9e:94:1b: 16:9c:52:5f:9e:ed:de:80:2e:f7:88:d9:78:32:03:67:a3:ec: ba:66:38:b9:43:20:f9:c4:17:de:15:5e:43:15:67:ee:fd:16: 35:1b:5b:76:f2:4a:b8:d3:a9:54:61:6d:43:40:66:d0:a5:99: e3:98:fd:68:c4:e1:be:7f:69:10:73:65:77:3b:4f:6e:ba:7c: a5:5f:e4:0e:06:f8:21:47:68:ae:fc:f6:f0:ad:93:ca:6f:94: 67:58:5c:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKDJEQTI1MUMxMUFDNjg4MTRGNTI3RjIyRTU1REU5QUM4 QzU3RkQ2NkMwHhcNMjUxMjA0MTY0MDAyWhcNMjUxMjExMTY0MDAyWjAYMRYwFAYD VQQDEw02OTMxYjk2Mi0wMTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09p8+Ix4pU2U7o0e7Qqzk0JZ1LSd67BWaEMxUgCZX+zdbzkfeL1DnWYYDbZ7 QinoJF7iOVxmqN79ssc0+tPMo6j1y+gh16pl0qF3zdrLigtnmodlv2HC1cZKqcVV r5YCjAnWNgaPWKrwzu6KhF1ePrQJV4FbJasm8jT3sJpvCOLapBquhA868HdFtr+E /m+G5ScP8kDGccVhKwefnYyPCp8LOgtly9oMnFRpq2bOFXtANsIrWtqIaOKN6otQ phi2i5qb0h1/b60M9jWCc0m0fZH/vk/Cl5b1YEAunIAGXjJUaZldLfUMGrX1B1HL dSIs6NFHATLvWwG4Y98Zkp9TUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGD8BUbI RT5rt9YdwxkBjdBpLhQqMB8GA1UdIwQYMBaAFC2iUcEaxogU9SfyLlXemsjFf9Zs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BQUI4MDJFOEM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lCVDFKX0l1VmQ2YXlNVl8x bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhSlJ3UnJHaUJUMUpfSXVWZDZheU1WXzFtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTQzNi9BQUI4MDJFOEM3OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lC VDFKX0l1VmQ2YXlNVl8xbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgvuM7IZrbTmtbjwM1VokVEoKMI+qdhI6z7ZomzSY6oqxnVIULhy3R 39moNMbyI7GDvLpQ+mcEUa3WwKSo4XNbOMZ04u3uaIFdiSU9DY/ijnQfVS0Dt40E w3EPWy3SfyXM5YGaLZ7R+OBT7dIbnEVg7KbxkqtuRdpNlu4PpCaD2oI7IOJjlbKO PnKQ1E6WHU1Goz6hhuXNSCVjWgzsc2OelBsWnFJfnu3egC73iNl4MgNno+y6Zji5 QyD5xBfeFV5DFWfu/RY1G1t28kq406lUYW1DQGbQpZnjmP1oxOG+f2kQc2V3O09u unylX+QOBvghR2iu/PbwrZPKb5RnWFzh -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:55 2025 by rpki-client