This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft File: LCxcmnhfLqc0B5wUDjpHGbOG04M.mft (raw, json) Hash identifier: njiAf82xEr7AzNMX+jIwu3JDtyustZyuS0ESBzv4h0w= Subject key identifier: 62:B8:93:0E:8A:A5:E4:B1:40:04:E0:39:0C:C5:DD:15:EE:55:2C:2F Authority key identifier: 2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 Certificate issuer: /CN=A91BA1D4/serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft Manifest number: 0178 Signing time: Sun 21 Dec 2025 03:03:14 +0000 Manifest this update: Sun 21 Dec 2025 03:03:13 +0000 Manifest next update: Sun 28 Dec 2025 03:03:13 +0000 Files and hashes: 1: LCxcmnhfLqc0B5wUDjpHGbOG04M.crl (hash: 8K8U9PEtulJlDESFQEYG0a+MYgqZ2U+BDfo2g7KPX5s=) 2: 28FC424AA93711EE91871F0AC4F9AE02.roa (hash: h17F13GZBIK4FM47wPFrZdY+qaPJuMpd5+gqXSgpxek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1D4, serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383 Validity Not Before: Dec 21 03:03:13 2025 GMT Not After : Dec 28 03:03:13 2025 GMT Subject: CN=69476371-02df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:07:08:89:58:6d:e3:6f:50:11:d0:b7:77:40: df:fe:33:19:c3:3f:57:9b:f2:4a:21:48:fc:ba:3c: f2:57:a7:9a:05:37:48:d9:0a:0c:b2:1e:68:93:62: 4d:62:f1:af:7a:f6:d1:e8:4a:0e:53:4a:a4:19:23: 8e:65:be:13:fa:20:0d:29:29:a2:b9:b5:5f:2a:31: 78:74:1f:c4:76:25:24:0c:98:1e:95:98:7e:14:b0: 57:63:38:d9:ac:1f:9d:0c:02:94:d8:22:e2:f6:61: c3:fd:da:ee:13:3a:4a:20:e1:ee:ab:34:72:71:d7: 5e:ec:59:57:4c:52:d7:c3:56:dc:45:95:b4:0f:2e: b7:b6:0e:14:6b:23:43:d2:6f:de:a2:2e:52:6c:a0: 41:13:c4:9c:7f:17:67:75:d1:41:53:d1:7d:46:2c: fa:2a:c5:42:44:67:0a:e6:aa:ab:ed:d6:9d:89:a1: 4e:bb:cf:4d:85:66:12:03:79:f3:08:8d:e2:1c:b5: 3d:de:7a:98:7f:7c:5a:e0:15:9c:3b:3d:ad:36:fa: 20:d0:03:68:c0:b7:70:8f:fc:5b:28:68:ee:4a:0d: 95:fd:45:6d:2e:04:5c:93:df:24:63:34:af:1a:30: 8a:cb:7d:f5:21:8f:29:41:50:fa:12:1d:84:fd:8b: c3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B8:93:0E:8A:A5:E4:B1:40:04:E0:39:0C:C5:DD:15:EE:55:2C:2F X509v3 Authority Key Identifier: keyid:2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:7d:bd:e3:77:2d:6d:5d:86:66:37:7a:df:cf:66:58:6f:f1: 00:fd:2d:e5:f5:a9:63:7b:ff:fc:a1:7c:c8:d0:7e:66:c0:fd: 59:16:63:35:f0:be:79:3a:47:95:0e:44:5b:78:a6:52:0c:1c: 0e:ac:dc:f0:c5:a1:ba:7c:e3:b3:f2:4f:d0:ff:9d:56:98:1e: 70:3a:2f:ee:cc:1f:3f:f3:0c:f4:98:03:98:e3:69:48:f3:cc: a9:6b:82:66:4d:d9:bf:d3:3d:4f:80:c6:8a:7c:fb:26:74:8d: d5:09:0c:6c:64:a9:bf:e6:1d:43:5a:2f:93:f5:2d:ce:c2:5d: bd:60:ac:59:82:30:e7:bb:34:2d:61:cc:30:ae:24:7d:97:b8: e9:06:88:e2:7c:ea:00:d7:4e:44:15:2c:15:45:b6:73:17:b3: 57:1c:e8:f6:b3:b2:5b:ee:e6:d6:ce:2a:9c:e6:04:2f:81:b0: 12:6b:f7:f6:13:79:4d:51:15:a5:65:e8:57:a6:7b:69:e9:e2: 32:74:b7:44:1a:0d:3c:08:3f:6c:99:c3:67:25:b2:5e:45:d4: 9d:12:02:45:7c:ca:84:9b:31:ca:1f:2b:e7:f5:7a:52:4e:cf: cd:68:72:05:5f:69:2f:a5:26:4c:c0:60:e2:53:4b:9e:29:3a: b4:c5:54:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExRDQxMTAvBgNVBAUTKDJDMkM1QzlBNzg1RjJFQTczNDA3OUMxNDBFM0E0NzE5 QjM4NkQzODMwHhcNMjUxMjIxMDMwMzEzWhcNMjUxMjI4MDMwMzEzWjAYMRYwFAYD VQQDDA02OTQ3NjM3MS0wMmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9QcIiVht429QEdC3d0Df/jMZwz9Xm/JKIUj8ujzyV6eaBTdI2QoMsh5ok2JN YvGvevbR6EoOU0qkGSOOZb4T+iANKSmiubVfKjF4dB/EdiUkDJgelZh+FLBXYzjZ rB+dDAKU2CLi9mHD/druEzpKIOHuqzRycdde7FlXTFLXw1bcRZW0Dy63tg4UayND 0m/eoi5SbKBBE8ScfxdnddFBU9F9Riz6KsVCRGcK5qqr7dadiaFOu89NhWYSA3nz CI3iHLU93nqYf3xa4BWcOz2tNvog0ANowLdwj/xbKGjuSg2V/UVtLgRck98kYzSv GjCKy331IY8pQVD6Eh2E/YvDzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGK4kw6K peSxQATgOQzF3RXuVSwvMB8GA1UdIwQYMBaAFCwsXJp4Xy6nNAecFA46RxmzhtOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFENC81NTQ1RTIxQ0E5 MzYxMUVFODg0QUIxNTlDNEY5QUUwMi9MQ3hjbW5oZkxxYzBCNXdVRGpwSEdiT0cw NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xDeGNtbmhmTHFjMEI1d1VEanBIR2JPRzA0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFENC81NTQ1RTIxQ0E5MzYxMUVFODg0QUIxNTlDNEY5QUUwMi9MQ3hjbW5oZkxx YzBCNXdVRGpwSEdiT0cwNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtfb3jdy1tXYZmN3rfz2ZYb/EA/S3l9alje//8oXzI0H5mwP1ZFmM1 8L55OkeVDkRbeKZSDBwOrNzwxaG6fOOz8k/Q/51WmB5wOi/uzB8/8wz0mAOY42lI 88ypa4JmTdm/0z1PgMaKfPsmdI3VCQxsZKm/5h1DWi+T9S3Owl29YKxZgjDnuzQt YcwwriR9l7jpBojifOoA105EFSwVRbZzF7NXHOj2s7Jb7ubWziqc5gQvgbASa/f2 E3lNURWlZehXpntp6eIydLdEGg08CD9smcNnJbJeRdSdEgJFfMqEmzHKHyvn9XpS Ts/NaHIFX2kvpSZMwGDiU0ueKTq0xVTK -----END CERTIFICATE-----Generated at Sun Dec 21 11:15:22 2025 by rpki-client