This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft File: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft (raw, json) Hash identifier: HAXWfKmoqwot8pIs3xclXZCAgvW0FIsPWpI5kHKRMis= Subject key identifier: 58:F7:19:87:D0:B5:60:92:0F:3A:23:20:9B:D6:98:3D:05:C5:F5:53 Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F Certificate issuer: /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F Certificate serial: 0BF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft Manifest number: 0BCD Signing time: Sat 06 Dec 2025 18:14:35 +0000 Manifest this update: Sat 06 Dec 2025 18:14:35 +0000 Manifest next update: Sat 13 Dec 2025 18:14:35 +0000 Files and hashes: 1: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl (hash: xToQgoRJ8A9F4WlLuiaUv59ADk59yxERdaAI27CVUxA=) 2: 933DE524C2B811EEAA1FD486C4F9AE02.roa (hash: tyjFJevU8AODc6eNF2UQBkVwZ0moxe8IcDHkpfRnepA=) 3: F8088528E65D11EDB5112931C4F9AE02.roa (hash: 2Y1qjCmLTaBuW+PY4V12Zh62AUY0iuAkYOwDBibrsjY=) 4: D9173AE459E811ED85614349C4F9AE02.roa (hash: 1x/xZd5ESf0eokaSQgyIvd0x7KIP8tNAt27myAiJemw=) 5: D7D5B86859E811ED85614349C4F9AE02.roa (hash: ToUAACqSoKf4DVOKi8qBNbQLxDQKu5PGsZOisylfuaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3060 (0xbf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F Validity Not Before: Dec 6 18:14:35 2025 GMT Not After : Dec 13 18:14:35 2025 GMT Subject: CN=6934728b-2ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:75:79:14:4b:0d:61:7d:32:5a:f8:6e:e3: bd:7f:bc:41:4a:51:cc:d8:f0:cc:fe:c0:44:e4:58: 06:5d:39:d9:be:f3:bc:ed:88:f8:2f:0a:38:5a:fa: 24:40:33:6d:1d:41:cf:c2:ca:77:ed:78:10:be:a7: a9:d3:31:bc:3b:c6:e6:3c:d5:d3:f1:55:b1:6e:2b: b6:bc:6c:bb:aa:37:6e:c6:d5:7d:02:d4:84:07:0a: 5f:01:e0:88:58:4e:35:94:c4:ae:f2:7b:96:a0:b7: 47:fe:a0:23:4c:a7:cc:a2:03:06:44:f0:ff:e0:bd: 36:53:57:60:55:bd:92:fe:a1:9a:36:77:25:0b:3b: ee:76:23:15:35:a1:e6:fe:c3:f4:19:88:e8:50:a3: a0:9a:17:1d:77:97:37:c8:27:c2:bf:bb:0b:a2:cb: 64:70:8e:0b:4b:7c:f6:10:74:88:86:9b:cd:15:87: bb:cd:ad:03:dd:52:d2:17:75:6b:3b:11:47:3d:18: fe:a8:a3:b0:bf:db:84:45:5d:42:25:be:c8:cd:39: 03:c7:7f:68:12:f5:b5:02:51:90:8a:e1:2c:29:33: f0:f4:f4:4b:c7:db:46:b4:36:41:6d:6a:d7:b7:64: b3:3a:14:62:f5:21:05:06:33:b6:3b:a2:80:ac:d8: 37:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F7:19:87:D0:B5:60:92:0F:3A:23:20:9B:D6:98:3D:05:C5:F5:53 X509v3 Authority Key Identifier: keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:6f:65:84:46:d4:9c:94:64:80:3e:99:63:a8:16:b9:b2:4c: a4:05:1b:4a:3c:7d:bf:e6:10:2e:73:5d:7c:ad:93:f6:c1:c3: 47:55:9c:87:d4:74:dd:5c:61:9d:f5:4c:d4:9c:85:0d:95:77: c1:99:ad:b8:dc:af:af:63:34:0b:d5:13:5d:56:4f:aa:3d:c4: 9e:8e:c6:c2:32:60:f5:88:87:0c:fb:92:02:86:72:1e:6a:a3: eb:04:54:74:3b:b0:9a:6f:20:11:d0:dd:21:9b:b9:05:2c:63: a0:2d:39:10:cd:f2:cf:bd:a9:58:4d:94:26:86:5b:0a:b9:86: 3e:08:d4:f4:bb:4e:78:14:1b:7e:b5:29:7f:a4:db:c2:45:a8: 35:8d:68:b6:a6:d4:dc:1f:df:e2:2e:d8:cf:2a:b7:3c:dc:3f: e8:fe:16:f3:95:46:65:67:4c:d9:7e:84:a2:06:f9:bc:09:15: e6:1f:fb:89:cb:a0:30:db:af:5e:60:08:7d:7b:56:28:e3:f9: e4:5d:c7:6b:91:04:e5:58:17:b5:65:9a:0d:88:63:9c:82:14: f3:31:9f:f4:8f:05:5e:03:6a:2b:14:ec:a6:a7:7a:01:c4:d2: e6:72:20:93:88:b3:a5:7c:38:93:c0:ce:d7:d3:1b:d6:4d:0e: 71:23:85:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0MDUxMTAvBgNVBAUTKDJEOUVEM0QyNkU2MzVGN0NGRkU0QkJGNTIwODcxNTBC N0E0MjE4OEYwHhcNMjUxMjA2MTgxNDM1WhcNMjUxMjEzMTgxNDM1WjAYMRYwFAYD VQQDEw02OTM0NzI4Yi0yZWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+l1eRRLDWF9Mlr4buO9f7xBSlHM2PDM/sBE5FgGXTnZvvO87Yj4Lwo4Wvok QDNtHUHPwsp37XgQvqep0zG8O8bmPNXT8VWxbiu2vGy7qjduxtV9AtSEBwpfAeCI WE41lMSu8nuWoLdH/qAjTKfMogMGRPD/4L02U1dgVb2S/qGaNnclCzvudiMVNaHm /sP0GYjoUKOgmhcdd5c3yCfCv7sLostkcI4LS3z2EHSIhpvNFYe7za0D3VLSF3Vr OxFHPRj+qKOwv9uERV1CJb7IzTkDx39oEvW1AlGQiuEsKTPw9PRLx9tGtDZBbWrX t2SzOhRi9SEFBjO2O6KArNg3nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFj3GYfQ tWCSDzojIJvWmD0FxfVTMB8GA1UdIwQYMBaAFC2e09JuY198/+S79SCHFQt6QhiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwNS9GOUMxOTY5NjMy MTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algzel81THYxSUljVkMzcENH STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xaN1QwbTVqWDN6XzVMdjFJSWNWQzNwQ0dJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQwNS9GOUMxOTY5NjMyMTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algz el81THYxSUljVkMzcENHSTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFb2WERtSclGSAPpljqBa5skykBRtKPH2/5hAuc118rZP2wcNHVZyH 1HTdXGGd9UzUnIUNlXfBma243K+vYzQL1RNdVk+qPcSejsbCMmD1iIcM+5IChnIe aqPrBFR0O7CabyAR0N0hm7kFLGOgLTkQzfLPvalYTZQmhlsKuYY+CNT0u054FBt+ tSl/pNvCRag1jWi2ptTcH9/iLtjPKrc83D/o/hbzlUZlZ0zZfoSiBvm8CRXmH/uJ y6Aw269eYAh9e1Yo4/nkXcdrkQTlWBe1ZZoNiGOcghTzMZ/0jwVeA2orFOymp3oB xNLmciCTiLOlfDiTwM7X0xvWTQ5xI4Vm -----END CERTIFICATE-----Generated at Sun Dec 7 01:35:06 2025 by rpki-client