This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json) Hash identifier: rFgU6mK0XxQP1huFlU1FsK/aDFa2QfFAeYOX7tV95Y8= Subject key identifier: 2F:36:17:5D:2B:A3:08:A3:43:62:FD:C9:FA:9F:E1:27:9A:75:C1:20 Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Certificate serial: 3581 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft Manifest number: 3519 Signing time: Sat 06 Dec 2025 14:23:19 +0000 Manifest this update: Sat 06 Dec 2025 14:23:18 +0000 Manifest next update: Sat 13 Dec 2025 14:23:18 +0000 Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: nA78GFAhtXOy2h9vVWOPgV+cmNBriFu+rr4DeV8LCAg=) 2: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: IhLv/pNjKD3PinOrK86Sl1K1DLr48lFEyVWbMF9DO7E=) 3: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: P+6IlyX7VPwDe0x7wL0hnumsPRthTqu2byNn+pYjd1M=) 4: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: JORxewwx6epIIvoPj1HNMB15dSN3/on46q8DR6+zkdE=) 5: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: 09BDBOytkmEsvq3chH7xH+oSFPASpWtzKwiSSf1dkjk=) 6: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: 6fMWG8p+t3jXmQNCgytCBBdQRqCMMDHwzJOzM4imWAI=) 7: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: eRgieV4wC53bW4ulApr2XQpnijZHP7/22lsGRcHPpKc=) 8: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: WS7qE/pmTb3s7efjgZ9MQ/XN8lRAGnQgtcmGI2f/wOc=) 9: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: YWkTzReKkMMdzbtmiqQAlufg4yqGT8wGaWwSjyH8UQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13697 (0x3581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Validity Not Before: Dec 6 14:23:18 2025 GMT Not After : Dec 13 14:23:18 2025 GMT Subject: CN=69343c57-d1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:67:37:18:91:1f:d7:90:10:54:7a:02:ec:95: bb:43:5c:c7:ae:d9:67:7d:f6:9d:b2:09:43:55:82: a5:59:39:46:bb:01:49:ca:9d:3d:57:d7:b3:68:fa: f2:56:d7:60:58:8a:93:85:75:ff:bd:d5:2e:97:09: 42:9c:5d:84:b5:b1:6e:3f:cd:46:51:2c:38:4c:d6: f6:06:3b:e4:a6:17:eb:95:a9:6d:28:ea:e8:b6:32: c5:f9:7a:18:1f:5c:71:8b:5f:5a:0c:ec:f3:b3:ac: af:6e:71:d0:7c:e6:a8:fd:2b:ff:aa:a9:29:6b:d1: e8:b9:5c:c5:fa:47:1d:8d:4e:41:36:1a:a9:61:cf: bc:70:78:c2:b0:b6:6f:5d:29:24:ee:78:7b:d8:12: ec:3a:39:30:03:ea:01:af:c4:d0:b2:c3:43:c5:e9: bc:af:fb:e0:84:49:34:55:b9:63:6c:72:0d:30:30: 76:0e:03:3a:ca:93:17:0d:fc:b6:c6:45:ac:97:3b: e3:af:65:77:18:66:22:f9:bf:c3:88:6d:e6:94:12: 3d:e6:63:04:5a:bf:b8:1c:76:ca:6d:8f:a2:f4:ac: c6:77:0d:ea:75:46:b9:6c:4d:73:52:f5:6d:92:08: 02:67:ac:66:4f:bd:2a:19:e0:bc:71:6a:ab:9a:03: 23:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:36:17:5D:2B:A3:08:A3:43:62:FD:C9:FA:9F:E1:27:9A:75:C1:20 X509v3 Authority Key Identifier: keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:fc:3b:98:2b:af:ae:f5:20:bb:c1:ff:33:1c:fa:68:80:90: 6f:bd:23:0a:12:d1:2e:7e:f3:74:b6:66:90:07:af:4f:b2:8d: f7:ae:6b:74:62:25:54:d9:04:93:53:be:21:df:68:4e:a1:d5: c8:36:b7:6f:5d:79:63:1f:d0:5f:cf:49:4a:7e:fe:ca:01:66: b2:1f:b1:9a:e1:39:98:82:56:de:7c:ee:95:00:15:6a:d7:33: 5c:aa:15:02:cd:47:4d:98:14:8f:03:34:5a:06:a4:f4:eb:ab: 77:1b:5f:5e:04:d0:f3:64:25:17:9e:0f:c4:46:d5:d0:ca:84: 63:70:9e:1d:3f:30:05:f5:c5:32:53:ac:99:24:60:44:04:ad: bb:89:80:e2:da:78:da:7a:62:d7:54:d2:3f:0b:c8:76:52:3a: 59:92:93:20:cc:ad:55:c4:a1:b7:3c:78:b6:fc:04:e3:d6:7a: 2b:72:59:57:4b:8c:04:a1:4b:ba:e2:9f:a1:ad:b3:79:08:a7: 5e:0f:0d:9a:97:00:bd:6b:66:62:b2:ae:90:18:cd:68:3d:02: 01:7b:ae:98:ff:d7:c3:7b:6d:58:e7:4e:de:ab:1d:dc:26:03: 06:08:6a:bf:c6:58:22:cd:43:cd:89:0f:e5:f0:ac:f5:2e:3a: c4:56:c0:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz RTY0NzMyQjIwHhcNMjUxMjA2MTQyMzE4WhcNMjUxMjEzMTQyMzE4WjAYMRYwFAYD VQQDEw02OTM0M2M1Ny1kMWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGc3GJEf15AQVHoC7JW7Q1zHrtlnffadsglDVYKlWTlGuwFJyp09V9ezaPry VtdgWIqThXX/vdUulwlCnF2EtbFuP81GUSw4TNb2BjvkphfrlaltKOrotjLF+XoY H1xxi19aDOzzs6yvbnHQfOao/Sv/qqkpa9HouVzF+kcdjU5BNhqpYc+8cHjCsLZv XSkk7nh72BLsOjkwA+oBr8TQssNDxem8r/vghEk0VbljbHINMDB2DgM6ypMXDfy2 xkWslzvjr2V3GGYi+b/DiG3mlBI95mMEWr+4HHbKbY+i9KzGdw3qdUa5bE1zUvVt kggCZ6xmT70qGeC8cWqrmgMj3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC82F10r owijQ2L9yfqf4SeadcEgMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z RmFaZFpaOG5RYlEtWkhNckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR/DuYK6+u9SC7wf8zHPpogJBvvSMKEtEufvN0tmaQB69Pso33rmt0 YiVU2QSTU74h32hOodXINrdvXXljH9Bfz0lKfv7KAWayH7Ga4TmYglbefO6VABVq 1zNcqhUCzUdNmBSPAzRaBqT066t3G19eBNDzZCUXng/ERtXQyoRjcJ4dPzAF9cUy U6yZJGBEBK27iYDi2njaemLXVNI/C8h2UjpZkpMgzK1VxKG3PHi2/ATj1norcllX S4wEoUu64p+hrbN5CKdeDw2alwC9a2Zisq6QGM1oPQIBe66Y/9fDe21Y507eqx3c JgMGCGq/xlgizUPNiQ/l8Kz1LjrEVsC0 -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:59 2025 by rpki-client