This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft File: LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft (raw, json) Hash identifier: pjD+NRPMcqWQ2fU9cQmqflrPf7xvaQpDaLT9LJHbvvI= Subject key identifier: 99:B2:ED:0C:24:2A:B5:C2:BE:48:E0:AB:60:37:C5:2A:67:DB:8C:B6 Authority key identifier: 2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F Certificate issuer: /CN=A91B50D2/serialNumber=2E825CDF248AC20A39C058E238FA92614924FA0F Certificate serial: 0658 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft Manifest number: 0658 Signing time: Sat 06 Dec 2025 21:29:03 +0000 Manifest this update: Sat 06 Dec 2025 21:29:02 +0000 Manifest next update: Sat 13 Dec 2025 21:29:02 +0000 Files and hashes: 1: LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl (hash: 92NsVp1bVU9LRIg91s+BjElyTp6NTZMWdnYJooYciL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1624 (0x658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B50D2, serialNumber=2E825CDF248AC20A39C058E238FA92614924FA0F Validity Not Before: Dec 6 21:29:02 2025 GMT Not After : Dec 13 21:29:02 2025 GMT Subject: CN=6934a01f-4f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a4:a5:86:4a:c5:66:ac:45:55:a9:41:ae:15: 49:bc:6f:dc:94:e0:ce:1a:c2:1a:41:d2:26:db:65: 6c:d0:58:df:dd:9d:4a:c6:32:07:ef:4f:18:5f:75: 1b:0c:c2:b3:1f:bf:27:f1:34:64:38:c5:38:91:90: 80:73:42:18:8f:31:9c:3d:94:b1:5b:b6:83:ac:4a: 40:36:30:6c:f8:69:d8:00:ca:33:19:22:e7:e0:78: 9a:e8:1e:66:ca:5d:bb:1a:8c:2b:94:12:72:54:7e: 53:03:49:1d:d6:54:1d:9e:1c:84:19:1f:26:6a:77: 42:10:93:ef:3e:34:db:08:1c:65:4a:ed:b0:45:18: b6:85:7d:6c:02:25:87:97:15:98:c7:66:8d:c6:e7: 2f:6f:70:30:5a:b7:3a:94:de:98:7e:f1:02:0a:6a: 0f:8d:71:95:8a:8e:5c:65:fb:c4:ca:a7:6c:a3:20: 25:06:19:5e:0a:f1:98:1c:e1:4d:e7:a2:cc:f9:f5: 92:dd:15:31:ea:ff:d4:ee:d8:b0:a5:60:21:3c:90: ae:be:a6:d4:c8:16:60:d6:2d:da:f7:2d:05:b8:0e: 0a:1f:15:04:fa:e1:50:64:20:a5:79:ab:9b:5f:0a: d9:6e:4d:c2:a7:e7:ea:57:37:a7:75:47:62:d8:36: 74:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B2:ED:0C:24:2A:B5:C2:BE:48:E0:AB:60:37:C5:2A:67:DB:8C:B6 X509v3 Authority Key Identifier: keyid:2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:4e:36:9f:8a:b1:96:82:33:c3:7b:50:6d:46:58:ac:35:96: c2:1c:df:4e:ef:8f:f7:ad:31:2f:d4:31:70:ad:fc:50:b8:12: 49:c0:25:b3:9e:cb:ba:53:bf:7d:83:a9:fe:d0:71:72:7a:61: 2b:b8:6f:3c:ce:d8:3b:9f:20:20:e7:2c:0b:e3:75:31:d8:6c: 2d:1f:9b:30:20:72:dc:86:71:74:8d:0d:d6:bb:93:e8:c8:70: 9c:dd:8c:ba:1b:16:8c:74:db:bb:91:97:57:b7:4a:8a:65:43: fb:0e:8c:d5:7c:19:4a:e2:41:35:5e:63:26:56:be:fe:c0:1a: 25:90:23:94:9b:66:e3:e3:5a:4d:e7:8d:35:4b:be:e6:b8:34: 1c:96:d2:0e:54:15:40:3b:4e:a7:98:45:f1:7d:d0:87:69:db: 72:ee:e0:be:84:93:e8:c3:17:d8:f9:ee:ec:03:b3:06:fd:75: 4c:02:07:22:09:6f:d0:03:b8:f9:86:e2:5d:af:ac:b2:88:d7: aa:7e:d7:6b:f7:9e:19:80:b4:b0:14:30:0c:0b:d2:9c:09:6c: c2:ba:68:bf:c6:d7:ed:f6:ff:b2:ee:9e:8a:1c:58:9e:e2:65: 42:70:84:f7:e5:54:b8:34:95:49:48:69:d0:9b:ea:56:dd:c3: 6d:d4:bb:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwRDIxMTAvBgNVBAUTKDJFODI1Q0RGMjQ4QUMyMEEzOUMwNThFMjM4RkE5MjYx NDkyNEZBMEYwHhcNMjUxMjA2MjEyOTAyWhcNMjUxMjEzMjEyOTAyWjAYMRYwFAYD VQQDEw02OTM0YTAxZi00Zjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaSlhkrFZqxFValBrhVJvG/clODOGsIaQdIm22Vs0Fjf3Z1KxjIH708YX3Ub DMKzH78n8TRkOMU4kZCAc0IYjzGcPZSxW7aDrEpANjBs+GnYAMozGSLn4Hia6B5m yl27GowrlBJyVH5TA0kd1lQdnhyEGR8mandCEJPvPjTbCBxlSu2wRRi2hX1sAiWH lxWYx2aNxucvb3AwWrc6lN6YfvECCmoPjXGVio5cZfvEyqdsoyAlBhleCvGYHOFN 56LM+fWS3RUx6v/U7tiwpWAhPJCuvqbUyBZg1i3a9y0FuA4KHxUE+uFQZCCleaub XwrZbk3Cp+fqVzendUdi2DZ05wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmy7Qwk KrXCvkjgq2A3xSpn24y2MB8GA1UdIwQYMBaAFC6CXN8kisIKOcBY4jj6kmFJJPoP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTBEMi82RkExMjFBQUE5 QUExMUVCODU0MDc5NDNDNEY5QUUwMi9Mb0pjM3lTS3dnbzV3RmppT1BxU1lVa2st ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xvSmMzeVNLd2dvNXdGamlPUHFTWVVray1nOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTBEMi82RkExMjFBQUE5QUExMUVCODU0MDc5NDNDNEY5QUUwMi9Mb0pjM3lTS3dn bzV3RmppT1BxU1lVa2stZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzTjafirGWgjPDe1BtRlisNZbCHN9O74/3rTEv1DFwrfxQuBJJwCWz nsu6U799g6n+0HFyemEruG88ztg7nyAg5ywL43Ux2GwtH5swIHLchnF0jQ3Wu5Po yHCc3Yy6GxaMdNu7kZdXt0qKZUP7DozVfBlK4kE1XmMmVr7+wBolkCOUm2bj41pN 5401S77muDQcltIOVBVAO06nmEXxfdCHadty7uC+hJPowxfY+e7sA7MG/XVMAgci CW/QA7j5huJdr6yyiNeqftdr954ZgLSwFDAMC9KcCWzCumi/xtft9v+y7p6KHFie 4mVCcIT35VS4NJVJSGnQm+pW3cNt1LuI -----END CERTIFICATE-----Generated at Sun Dec 7 01:12:01 2025 by rpki-client