This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft File: LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft (raw, json) Hash identifier: 5+qr7UlgUstnRida3UBK+D1GjY4RsBLOMNHaaSaV7cY= Subject key identifier: 3C:ED:44:66:8B:C2:5E:93:DB:2C:E1:AD:23:B6:F2:53:1D:80:00:18 Authority key identifier: 2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D Certificate issuer: /CN=A9194093/serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft Manifest number: 0D Signing time: Sun 07 Dec 2025 06:00:38 +0000 Manifest this update: Sun 07 Dec 2025 06:00:38 +0000 Manifest next update: Sun 14 Dec 2025 06:00:38 +0000 Files and hashes: 1: LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl (hash: /dJOihcRcWoCK6F1rLosb00KKtpjSmSl/ViwTRR/YuY=) 2: 3102D984C7A511F0AB2B8524C4F9AE02.roa (hash: OQj87ghxS5TbGdxIkx5R4cZ4gUWCAYoEWtR9bN5TBkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 06:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194093, serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D Validity Not Before: Dec 7 06:00:38 2025 GMT Not After : Dec 14 06:00:38 2025 GMT Subject: CN=69351806-ea83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1e:72:4f:33:ea:b5:1f:fc:68:17:2b:ce:79: a1:34:e3:89:6f:9b:21:c6:57:90:e0:3b:64:8a:c0: 39:4b:bf:59:e3:be:85:f4:a3:3a:25:3e:0b:68:99: c8:a2:7b:3b:2a:60:f6:62:95:98:cb:08:83:23:0e: 7f:6b:1d:34:f0:2e:cf:aa:90:f1:b1:c7:b8:87:74: 37:a0:3d:92:84:a8:68:ce:c5:50:0c:1c:18:cf:1b: 03:9d:b2:ce:66:b5:5b:d9:c0:06:a7:a5:cd:b7:bb: 2d:f8:4c:f7:d8:9d:6f:20:03:b1:6f:30:43:48:fc: bc:61:e0:79:5b:7a:d1:5b:11:0c:53:e0:80:6b:03: c9:f2:1c:e2:33:c2:50:6b:1f:f1:70:a5:93:66:b1: c8:54:36:9c:1a:ae:7f:3e:d2:9b:5e:e2:02:31:8d: 51:4c:9d:8e:d0:38:4c:57:4f:65:80:2e:67:c0:78: ed:dd:88:16:cd:f4:8c:9b:61:46:42:7b:77:a6:79: 62:0d:ee:c4:91:cb:ed:f7:68:b1:fd:eb:ab:93:4a: f7:dd:a9:2f:06:83:b5:e1:da:9d:8d:e0:87:5f:7c: f8:3a:01:db:c4:9b:55:91:81:e2:44:09:c1:4f:7f: 04:d3:29:1c:11:c5:b8:ad:fd:a9:6a:3c:ba:59:19: 24:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:ED:44:66:8B:C2:5E:93:DB:2C:E1:AD:23:B6:F2:53:1D:80:00:18 X509v3 Authority Key Identifier: keyid:2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:fd:4e:3c:99:69:ed:97:5a:26:1f:88:88:33:05:1c:6b:0d: b3:e0:e6:b2:46:0a:bc:c3:40:78:a2:2c:49:5d:ad:1d:a9:ba: 9f:50:91:03:4d:c9:1c:10:38:80:63:4e:0e:16:83:82:f9:d8: a7:4a:3c:e7:ff:8a:30:a3:d3:2f:93:71:e7:62:c1:1b:a9:93: e6:de:26:9b:20:ed:f3:d6:fb:43:8a:f6:ca:1c:19:ee:5e:9d: de:6a:11:5b:74:86:8d:92:28:80:70:32:39:8f:93:3a:1d:90: 4b:95:bf:0d:c1:80:70:fc:63:b1:33:a5:b6:ed:64:43:5e:fb: 14:e4:35:2f:2d:05:ac:ed:cf:8b:43:61:a4:ac:b8:d8:4e:1b: 8b:0f:85:f5:3f:fb:15:0c:a8:b6:52:95:2f:66:e7:69:00:43: 30:05:f7:7f:c7:a5:12:52:83:eb:e1:1a:41:b6:8b:22:4f:c3: c2:84:2d:5b:f2:f3:25:01:a9:78:3c:53:9f:9c:bb:ab:6c:68: 95:e4:88:a3:40:50:5b:d1:d7:77:eb:f6:1c:a8:b3:dd:d3:2f: 8d:6d:07:e5:e4:c8:2f:53:24:7f:d0:e4:b0:1d:a4:45:29:1f: 91:a8:d9:00:e8:6e:c4:1f:68:e8:14:e6:9b:73:d3:19:a2:1e: 4d:c1:e6:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NDA5MzExMC8GA1UEBRMoMkQ3MzU2REExNzFCRkQ2NDAzQ0Q5RjMzRTNEQjk1QjQ0 Q0I0QkYxRDAeFw0yNTEyMDcwNjAwMzhaFw0yNTEyMTQwNjAwMzhaMBgxFjAUBgNV BAMTDTY5MzUxODA2LWVhODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIHnJPM+q1H/xoFyvOeaE044lvmyHGV5DgO2SKwDlLv1njvoX0ozolPgtomcii ezsqYPZilZjLCIMjDn9rHTTwLs+qkPGxx7iHdDegPZKEqGjOxVAMHBjPGwOdss5m tVvZwAanpc23uy34TPfYnW8gA7FvMENI/Lxh4HlbetFbEQxT4IBrA8nyHOIzwlBr H/FwpZNmschUNpwarn8+0pte4gIxjVFMnY7QOExXT2WALmfAeO3diBbN9IybYUZC e3emeWIN7sSRy+33aLH966uTSvfdqS8Gg7Xh2p2N4IdffPg6AdvEm1WRgeJECcFP fwTTKRwRxbit/alqPLpZGSQnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPO1EZovC XpPbLOGtI7byUx2AABgwHwYDVR0jBBgwFoAULXNW2hcb/WQDzZ8z49uVtEy0vx0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0MDkzL0NGQTBGOTkyQzdB MzExRjA4NzE5MDEyMkM0RjlBRTAyL0xYTlcyaGNiX1dRRHpaOHo0OXVWdEV5MHZ4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFhOVzJoY2JfV1FEelo4ejQ5dVZ0RXkwdngwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 MDkzL0NGQTBGOTkyQzdBMzExRjA4NzE5MDEyMkM0RjlBRTAyL0xYTlcyaGNiX1dR RHpaOHo0OXVWdEV5MHZ4MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACT9TjyZae2XWiYfiIgzBRxrDbPg5rJGCrzDQHiiLEldrR2pup9QkQNN yRwQOIBjTg4Wg4L52KdKPOf/ijCj0y+TcediwRupk+beJpsg7fPW+0OK9socGe5e nd5qEVt0ho2SKIBwMjmPkzodkEuVvw3BgHD8Y7EzpbbtZENe+xTkNS8tBaztz4tD YaSsuNhOG4sPhfU/+xUMqLZSlS9m52kAQzAF93/HpRJSg+vhGkG2iyJPw8KELVvy 8yUBqXg8U5+cu6tsaJXkiKNAUFvR13fr9hyos93TL41tB+XkyC9TJH/Q5LAdpEUp H5Go2QDobsQfaOgU5ptz0xmiHk3B5ng= -----END CERTIFICATE-----Generated at Mon Dec 8 17:16:59 2025 by rpki-client