This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft File: LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft (raw, json) Hash identifier: ELSXMaMo2sg5sP+Fx4hv/qWAyY6imguE2I7VDHVX/KE= Subject key identifier: C9:FF:7D:52:E5:53:B8:98:0C:C0:9E:E1:DD:96:4A:93:91:50:A4:57 Authority key identifier: 2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 Certificate issuer: /CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Certificate serial: 048A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft Manifest number: 047F Signing time: Sat 06 Dec 2025 22:48:13 +0000 Manifest this update: Sat 06 Dec 2025 22:48:12 +0000 Manifest next update: Sat 13 Dec 2025 22:48:12 +0000 Files and hashes: 1: LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl (hash: 7xdDJdl9iSH6Es75vCEDg/lnR5IIs0eOCAISkqYQlEg=) 2: A69224164EAE11EDBF0D8256C4F9AE02.roa (hash: tNJLz/05MhN+kNpDsEpSvyxEjiBHI8/Qy5MZGniM9So=) 3: A60006804EAE11EDBF0D8256C4F9AE02.roa (hash: PeSRHrlXLPWq0OR7M6KoyLAqMUZOAeVzYm1KrZ/ISG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1162 (0x48a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABE54, serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Validity Not Before: Dec 6 22:48:12 2025 GMT Not After : Dec 13 22:48:12 2025 GMT Subject: CN=6934b2ad-faaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:22:f0:4e:30:db:f7:3e:84:f1:0c:44:2d:61: e4:1d:70:5a:d4:36:3c:d8:8c:64:17:a6:b2:55:4d: 78:58:60:64:2c:e9:a8:42:97:2c:c1:70:5a:36:62: fc:e3:0a:ad:71:5d:98:4e:52:37:2a:7a:8b:13:13: 09:0e:1d:cf:52:60:5d:0f:8b:a1:5d:b4:d5:f3:07: ff:94:13:ca:28:65:8b:6e:d4:e6:ed:8a:b2:d3:04: f6:66:8e:1c:3c:79:55:a4:93:62:b8:d9:76:3e:59: 1c:12:1f:8d:fc:77:f9:ea:98:ef:67:a2:71:4d:b3: 7a:f8:d4:da:c1:69:e4:c7:7d:0b:34:58:67:f3:80: 3b:2c:53:14:87:f0:03:65:81:97:44:55:df:ee:bd: b2:26:17:30:b7:e5:19:54:80:5d:3e:dd:dc:94:7b: 8e:2a:25:dc:0f:fb:44:d7:bf:32:8c:4c:8a:1f:a2: e7:c3:fb:ee:bc:4c:5d:a6:a8:a0:1e:e4:f4:3f:9c: 6e:35:90:f8:0a:f9:b1:b3:31:8a:39:57:af:60:02: 8a:5f:76:38:3b:a8:f9:e9:a0:25:6b:02:7b:16:d3: b5:05:0a:34:cf:23:6d:66:84:e7:05:ea:f2:ce:dd: 39:c0:52:47:8c:15:9f:44:84:c6:d2:d3:5a:a6:2a: 00:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FF:7D:52:E5:53:B8:98:0C:C0:9E:E1:DD:96:4A:93:91:50:A4:57 X509v3 Authority Key Identifier: keyid:2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:8d:85:5a:c9:ae:a5:ef:80:28:5a:56:09:55:bc:83:ad:db: bb:56:1e:a8:a6:16:06:b3:43:e8:70:25:69:63:37:e5:58:27: 4c:f3:64:d0:77:a5:80:63:92:19:ca:33:d4:34:47:29:b6:46: 0b:f5:e7:37:20:2f:f4:49:a1:3e:0d:44:a0:2f:09:c4:3d:ce: 7c:1f:a1:30:22:ae:34:4e:f8:de:01:95:54:a3:78:7a:64:60: 27:a5:bb:fa:db:2f:66:20:ea:ba:8e:18:8c:4b:09:55:3e:19: dd:25:42:ad:22:24:3c:90:0c:57:ad:21:7b:49:cc:45:01:44: f1:a6:5f:e1:fc:31:97:ef:0b:89:ac:f0:0d:c4:d4:bb:47:5c: e1:c4:f5:c7:98:9e:04:cc:66:29:14:98:98:9b:43:8b:a8:af: 70:97:05:22:66:41:b0:c0:6e:5a:76:c5:49:10:5a:d1:d3:9d: 62:78:71:ab:6a:7f:a3:f1:36:c5:25:ea:3a:38:0a:82:ca:71: 6a:b9:98:22:d9:57:d1:2f:bc:2b:fb:9a:05:6f:d7:7f:40:16: a9:04:73:c1:51:ce:3d:a0:3d:2c:25:c0:71:40:c3:80:4f:34: c3:2e:31:73:ee:0d:f7:7b:b5:2e:fa:bd:51:b1:3b:e3:e4:96: 59:5b:b6:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFNTQxMTAvBgNVBAUTKDJEN0NFOTRGMTNEODJFNTRGODM0MjNDNjFFQjk2MzNB Rjk0MDU5MjQwHhcNMjUxMjA2MjI0ODEyWhcNMjUxMjEzMjI0ODEyWjAYMRYwFAYD VQQDEw02OTM0YjJhZC1mYWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSLwTjDb9z6E8QxELWHkHXBa1DY82IxkF6ayVU14WGBkLOmoQpcswXBaNmL8 4wqtcV2YTlI3KnqLExMJDh3PUmBdD4uhXbTV8wf/lBPKKGWLbtTm7Yqy0wT2Zo4c PHlVpJNiuNl2PlkcEh+N/Hf56pjvZ6JxTbN6+NTawWnkx30LNFhn84A7LFMUh/AD ZYGXRFXf7r2yJhcwt+UZVIBdPt3clHuOKiXcD/tE178yjEyKH6Lnw/vuvExdpqig HuT0P5xuNZD4CvmxszGKOVevYAKKX3Y4O6j56aAlawJ7FtO1BQo0zyNtZoTnBery zt05wFJHjBWfRITG0tNapioAAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMn/fVLl U7iYDMCe4d2WSpORUKRXMB8GA1UdIwQYMBaAFC186U8T2C5U+DQjxh65Yzr5QFkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkU1NC9BNUMxNTBBQzY4 RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxsVDROQ1BHSHJsak92bEFX U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYenBUeFBZTGxUNE5DUEdIcmxqT3ZsQVdTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkU1NC9BNUMxNTBBQzY4RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxs VDROQ1BHSHJsak92bEFXU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbjYVaya6l74AoWlYJVbyDrdu7Vh6ophYGs0PocCVpYzflWCdM82TQ d6WAY5IZyjPUNEcptkYL9ec3IC/0SaE+DUSgLwnEPc58H6EwIq40TvjeAZVUo3h6 ZGAnpbv62y9mIOq6jhiMSwlVPhndJUKtIiQ8kAxXrSF7ScxFAUTxpl/h/DGX7wuJ rPANxNS7R1zhxPXHmJ4EzGYpFJiYm0OLqK9wlwUiZkGwwG5adsVJEFrR051ieHGr an+j8TbFJeo6OAqCynFquZgi2VfRL7wr+5oFb9d/QBapBHPBUc49oD0sJcBxQMOA TzTDLjFz7g33e7Uu+r1RsTvj5JZZW7a0 -----END CERTIFICATE-----Generated at Sun Dec 7 00:59:44 2025 by rpki-client