This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft File: LR4Op3rKP-WX3vMZYh70DRLUwdw.mft (raw, json) Hash identifier: /dttrzyUtpIhimmSFGQduH2r2j9xZOmuW4B5N33suyc= Subject key identifier: B9:78:09:16:49:40:63:D8:E6:45:BB:52:A0:60:2B:5A:8B:CE:4F:33 Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC Certificate issuer: /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft Manifest number: 0114 Signing time: Fri 05 Dec 2025 02:57:07 +0000 Manifest this update: Fri 05 Dec 2025 02:57:06 +0000 Manifest next update: Fri 12 Dec 2025 02:57:06 +0000 Files and hashes: 1: LR4Op3rKP-WX3vMZYh70DRLUwdw.crl (hash: ZISln5JQVYGcBi6GyQ+IUi9whwGbi2xZosqFew+8IkU=) 2: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (hash: tqUNG1S/rsB6bW3LBm3IsjWdqGyc7l/8ScuxBxWoVEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91939DA, serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Validity Not Before: Dec 5 02:57:06 2025 GMT Not After : Dec 12 02:57:06 2025 GMT Subject: CN=69324a02-0eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6d:9c:ac:5e:82:ff:7b:05:27:88:03:6c:8a: fd:01:dc:a6:96:f5:79:9f:5c:06:da:a0:83:6e:07: 4d:2e:26:24:eb:9b:42:1d:4f:e0:bc:12:57:a3:84: dd:b7:37:df:e7:dd:63:eb:73:dc:11:0e:ae:84:84: d6:81:23:8c:a4:dd:9a:25:06:dd:7f:80:a1:13:41: b2:1f:fd:76:b4:85:f3:cb:68:30:55:8a:80:a2:30: f8:9a:54:dc:9e:b9:0d:a7:f2:e5:e9:52:27:db:e2: 5f:87:ec:07:2b:25:e1:fd:54:ed:92:cd:1d:b9:cd: 90:16:f8:d1:18:8a:48:c2:f1:29:2b:f4:bc:bf:03: 75:8c:f8:41:29:73:c1:40:73:a5:95:75:9c:6c:b1: 48:fa:fd:20:21:73:11:9d:21:19:ac:45:8c:0c:42: c9:6f:17:d9:fa:92:6d:f2:1b:19:61:67:70:e1:0f: 03:0b:72:c0:ef:bd:05:3a:bd:a9:b3:b0:6d:6b:93: fc:47:06:c2:51:16:8f:ec:78:d0:79:34:09:b8:31: 90:df:b8:d4:94:b0:c4:e6:a3:88:c3:0e:90:02:f9: 13:f8:99:e2:fb:f6:86:dd:eb:a4:71:dc:cc:03:99: 4c:17:71:76:92:34:9d:39:a0:ce:3a:7d:cd:a1:2a: 5f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:78:09:16:49:40:63:D8:E6:45:BB:52:A0:60:2B:5A:8B:CE:4F:33 X509v3 Authority Key Identifier: keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:3f:92:5c:8a:b8:b6:65:f2:53:f2:08:ab:da:dd:5c:20:59: cc:1a:9b:f1:6f:fb:10:dd:6a:88:cd:c9:42:d5:84:6c:2b:f4: f4:c4:45:3f:97:10:5c:97:06:66:a2:84:37:08:ad:5d:39:f1: 8a:13:d2:9b:4d:71:07:5e:f6:e5:1a:3c:a3:a7:f3:7d:d4:44: 7f:46:67:80:64:fc:c2:05:b1:7f:05:4b:13:f2:98:1c:d5:1f: 71:6c:ed:1c:91:ee:c2:5a:75:b2:68:79:c3:8f:52:32:66:3e: f7:37:d7:8e:e8:32:af:22:47:4d:e5:1d:d0:0b:f0:63:eb:b6: b2:38:48:8d:94:03:37:9d:05:ca:e6:31:13:c8:63:8f:d0:72: 60:95:03:90:9d:f4:b2:8d:6a:ae:bb:12:4b:52:b5:0f:b5:e4: 7c:f4:ae:c5:2a:ee:cd:d1:61:b6:2c:f1:2a:0e:0b:80:88:99: 3b:20:4e:0b:96:6d:ab:ff:c0:64:f9:9c:e7:e4:33:fc:30:a8: df:24:8e:70:0c:c5:65:ed:19:e3:16:21:1a:21:22:f5:53:16: 06:e4:ad:25:78:c7:f0:97:84:c7:ae:d0:e5:90:a5:2a:e0:eb: 7b:bd:c1:e5:de:fb:e7:67:90:a6:a3:44:5b:f6:02:c1:69:59: 1c:b1:da:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM5REExMTAvBgNVBAUTKDJEMUUwRUE3N0FDQTNGRTU5N0RFRjMxOTYyMUVGNDBE MTJENEMxREMwHhcNMjUxMjA1MDI1NzA2WhcNMjUxMjEyMDI1NzA2WjAYMRYwFAYD VQQDEw02OTMyNGEwMi0wZWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv22crF6C/3sFJ4gDbIr9AdymlvV5n1wG2qCDbgdNLiYk65tCHU/gvBJXo4Td tzff591j63PcEQ6uhITWgSOMpN2aJQbdf4ChE0GyH/12tIXzy2gwVYqAojD4mlTc nrkNp/Ll6VIn2+Jfh+wHKyXh/VTtks0duc2QFvjRGIpIwvEpK/S8vwN1jPhBKXPB QHOllXWcbLFI+v0gIXMRnSEZrEWMDELJbxfZ+pJt8hsZYWdw4Q8DC3LA770FOr2p s7Bta5P8RwbCURaP7HjQeTQJuDGQ37jUlLDE5qOIww6QAvkT+Jni+/aG3eukcdzM A5lMF3F2kjSdOaDOOn3NoSpfvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLl4CRZJ QGPY5kW7UqBgK1qLzk8zMB8GA1UdIwQYMBaAFC0eDqd6yj/ll97zGWIe9A0S1MHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzlEQS82Q0I5RDBBNjJG QUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1AtV1gzdk1aWWg3MERSTFV3 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xSNE9wM3JLUC1XWDN2TVpZaDcwRFJMVXdkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzlEQS82Q0I5RDBBNjJGQUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1At V1gzdk1aWWg3MERSTFV3ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGP5Jciri2ZfJT8gir2t1cIFnMGpvxb/sQ3WqIzclC1YRsK/T0xEU/ lxBclwZmooQ3CK1dOfGKE9KbTXEHXvblGjyjp/N91ER/RmeAZPzCBbF/BUsT8pgc 1R9xbO0cke7CWnWyaHnDj1IyZj73N9eO6DKvIkdN5R3QC/Bj67ayOEiNlAM3nQXK 5jETyGOP0HJglQOQnfSyjWquuxJLUrUPteR89K7FKu7N0WG2LPEqDguAiJk7IE4L lm2r/8Bk+Zzn5DP8MKjfJI5wDMVl7RnjFiEaISL1UxYG5K0leMfwl4THrtDlkKUq 4Ot7vcHl3vvnZ5Cmo0Rb9gLBaVkcsdqF -----END CERTIFICATE-----Generated at Sun Dec 7 02:40:01 2025 by rpki-client