This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft File: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json) Hash identifier: 8c07uNCmGDfrW3fkojRIX4mvcH0bWnJxBHDKXzXHmbI= Subject key identifier: BB:3A:A8:E0:22:AD:83:E0:1E:19:EF:20:E6:45:31:3D:96:CA:4C:22 Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76 Certificate issuer: /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376 Certificate serial: 0820 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft Manifest number: 0811 Signing time: Sat 20 Dec 2025 20:25:54 +0000 Manifest this update: Sat 20 Dec 2025 20:25:54 +0000 Manifest next update: Sat 27 Dec 2025 20:25:54 +0000 Files and hashes: 1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: 2cFD9S3e0uMTjigs6TqhhW5422Qgn86DSym1M8N32Ww=) 2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: wkWuHS/W7zmGTEYBssypeNIzyloTQsz7o6sC1nnuJqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2080 (0x820) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEDF7, serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376 Validity Not Before: Dec 20 20:25:54 2025 GMT Not After : Dec 27 20:25:54 2025 GMT Subject: CN=69470652-4564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:93:22:15:0f:10:7f:12:2b:c7:19:b4:d0:6c: 09:b4:e1:8b:58:5a:1f:81:df:cf:e2:22:fe:aa:c9: 30:e4:6d:f2:a8:35:73:ea:f5:19:af:88:6f:14:20: 24:da:4d:a5:80:af:a4:12:bd:bc:45:d7:6d:4a:73: 6c:02:22:66:13:9b:40:98:75:8e:11:78:c3:97:fc: c6:83:d6:ce:2f:b9:3f:7a:a7:5d:c6:95:93:f9:ad: 37:e7:8f:26:9e:be:cf:92:59:72:56:e8:99:4f:a3: e0:b1:86:6d:0f:d7:ac:25:de:5f:94:be:b0:e7:b0: cc:ed:9a:c7:74:cc:fe:be:12:31:e9:e9:e6:10:c7: 4f:13:fd:9c:f4:7f:e7:05:77:08:33:98:e3:71:d7: 3e:30:67:59:4d:d5:74:4d:cd:ca:d9:5b:9e:54:4d: 0d:9e:a3:64:77:c6:5f:c0:1f:77:b2:ef:84:7c:e8: d9:fb:1b:f5:5a:0c:b6:2c:fd:71:cc:d7:69:2d:02: 67:1c:3c:bb:5e:ca:af:29:25:ba:1a:77:24:8f:89: 19:d4:99:d6:7e:96:2b:e4:85:84:4a:2c:a0:0a:c0: 0c:6d:33:f6:74:19:08:de:d8:02:0f:cb:0b:a6:d9: 31:78:6c:be:d2:20:65:b2:ea:6d:c0:65:be:ed:68: 4b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3A:A8:E0:22:AD:83:E0:1E:19:EF:20:E6:45:31:3D:96:CA:4C:22 X509v3 Authority Key Identifier: keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:01:16:49:39:c8:46:5c:1b:16:6f:d9:1c:84:bd:42:93:b8: 02:8f:41:d0:f9:4b:15:71:c9:98:32:79:b6:b7:7d:75:92:56: 3d:cb:49:4a:b3:76:27:ec:b5:ca:1d:94:3a:dd:48:3a:be:93: 91:53:39:69:8f:8f:5c:42:d3:b7:55:d8:a2:48:21:22:39:bd: 67:ad:44:e2:a1:0e:dd:ad:77:df:51:f1:90:40:a0:53:da:8d: 22:3a:7f:d5:62:d2:77:86:6d:d0:15:58:50:b0:ef:d9:0e:b0: 6b:51:48:a2:89:db:7f:35:0f:3d:f9:74:32:31:ff:9f:2e:5e: 5c:b7:bc:2a:89:f6:fa:da:72:5f:25:bc:2f:1d:83:9b:0a:1a: c1:22:ec:bf:9c:8e:85:dd:25:a0:db:69:19:24:57:c6:fc:15: f8:82:c3:b5:e3:c0:eb:19:8b:22:67:a9:40:99:a4:89:e6:fa: e5:45:2a:6a:80:68:85:c1:db:5a:06:46:e3:6f:c8:76:48:01: 2f:ca:6e:68:5b:f4:91:1b:58:d9:bb:2f:89:e5:35:18:11:ad: 11:5f:b7:d0:c6:8e:c9:3e:2d:93:0b:2d:c4:6e:16:fc:d0:ee: 6e:28:a9:a3:7d:20:57:23:f9:d1:af:5c:79:a2:49:d5:5f:2e: 4c:2d:3f:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVERjcxMTAvBgNVBAUTKDk2OTZDNjU5MkMwMkI1MDNGNDg4RDQ0MzdDRDBBQzgy QzE3NkIzNzYwHhcNMjUxMjIwMjAyNTU0WhcNMjUxMjI3MjAyNTU0WjAYMRYwFAYD VQQDDA02OTQ3MDY1Mi00NTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5MiFQ8QfxIrxxm00GwJtOGLWFofgd/P4iL+qskw5G3yqDVz6vUZr4hvFCAk 2k2lgK+kEr28RddtSnNsAiJmE5tAmHWOEXjDl/zGg9bOL7k/eqddxpWT+a03548m nr7PkllyVuiZT6PgsYZtD9esJd5flL6w57DM7ZrHdMz+vhIx6enmEMdPE/2c9H/n BXcIM5jjcdc+MGdZTdV0Tc3K2VueVE0NnqNkd8ZfwB93su+EfOjZ+xv1Wgy2LP1x zNdpLQJnHDy7XsqvKSW6Gnckj4kZ1JnWfpYr5IWESiygCsAMbTP2dBkI3tgCD8sL ptkxeGy+0iBlsuptwGW+7WhLPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLs6qOAi rYPgHhnvIOZFMT2WykwiMB8GA1UdIwQYMBaAFJaWxlksArUD9IjUQ3zQrILBdrN2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRURGNy9ERUUyRDA3QzA5 MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RRUDBpTlJEZk5Dc2dzRjJz M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xwYkdXU3dDdFFQMGlOUkRmTkNzZ3NGMnMzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RURGNy9ERUUyRDA3QzA5MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RR UDBpTlJEZk5Dc2dzRjJzM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeARZJOchGXBsWb9kchL1Ck7gCj0HQ+UsVccmYMnm2t311klY9y0lK s3Yn7LXKHZQ63Ug6vpORUzlpj49cQtO3VdiiSCEiOb1nrUTioQ7drXffUfGQQKBT 2o0iOn/VYtJ3hm3QFVhQsO/ZDrBrUUiiidt/NQ89+XQyMf+fLl5ct7wqifb62nJf JbwvHYObChrBIuy/nI6F3SWg22kZJFfG/BX4gsO148DrGYsiZ6lAmaSJ5vrlRSpq gGiFwdtaBkbjb8h2SAEvym5oW/SRG1jZuy+J5TUYEa0RX7fQxo7JPi2TCy3Ebhb8 0O5uKKmjfSBXI/nRr1x5oknVXy5MLT8r -----END CERTIFICATE-----Generated at Sun Dec 21 06:07:09 2025 by rpki-client