This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft File: ljwgt9OATbgByuJXTDHXYNU9M0Q.mft (raw, json) Hash identifier: jodwTPxGoTH41lMUU8RBvE0UKMVe0v+CWX+B/PolPWE= Subject key identifier: 01:1E:7D:FC:7A:E4:8A:35:84:1A:8D:A0:E0:B0:0D:11:2F:68:75:9E Authority key identifier: 96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44 Certificate issuer: /CN=A91C6744/serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344 Certificate serial: 0874 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft Manifest number: 086D Signing time: Sat 06 Dec 2025 19:44:50 +0000 Manifest this update: Sat 06 Dec 2025 19:44:49 +0000 Manifest next update: Sat 13 Dec 2025 19:44:49 +0000 Files and hashes: 1: ljwgt9OATbgByuJXTDHXYNU9M0Q.crl (hash: ouw6R79TW5ld/dr/U3zGdECpOEZ+ZJxQdQr4ZpM4llk=) 2: E088B4E8E41B11ED8B0EFC0DC4F9AE02.roa (hash: o6F0EuKwlTrnUOxPf4ItfWLnrfcMDydYUClJAnjBios=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2164 (0x874) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6744, serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344 Validity Not Before: Dec 6 19:44:49 2025 GMT Not After : Dec 13 19:44:49 2025 GMT Subject: CN=693487b1-d48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:f3:a4:5d:d7:74:12:bd:95:fc:e7:83:a5: 92:b6:b8:c1:03:e9:78:0f:84:e2:4e:f7:5f:bc:65: e3:6e:3c:c0:1c:6c:f8:88:2a:b5:e3:ad:2f:04:ea: 74:b3:00:9f:51:c5:1c:aa:fa:cf:80:21:c5:9f:15: 5e:1e:66:02:c9:73:7d:17:cd:11:9c:92:cb:fe:ad: 82:cb:14:c1:6e:94:ce:17:38:ca:ec:38:19:ae:a4: ff:c0:1b:35:eb:04:72:57:32:a4:fe:9d:ef:c3:5c: f6:56:15:72:64:78:23:ae:f3:26:e1:94:eb:cf:15: 48:93:2c:0e:b5:7a:6a:4e:e7:f6:9a:44:e6:c5:9c: 16:a2:f9:9e:8a:fb:e6:20:ae:39:d9:a6:f6:28:3d: 74:8a:dd:51:08:8c:ed:43:08:06:e3:d6:2e:9b:23: ae:78:34:7d:0e:37:1e:db:8f:b5:ce:ce:bd:9e:77: f4:65:4f:ab:25:fd:96:1e:80:9b:41:1f:bc:92:d2: b6:05:61:7f:26:e8:5e:1e:8f:d2:4d:53:1e:de:2d: 71:6b:21:a2:ed:d9:de:c4:ae:0e:1a:61:02:41:d6: 56:f4:49:e1:8d:5c:9c:60:9b:a4:3f:04:c6:ef:53: 41:a4:aa:eb:cb:a5:5a:a4:91:f7:31:3b:c3:91:11: 3d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1E:7D:FC:7A:E4:8A:35:84:1A:8D:A0:E0:B0:0D:11:2F:68:75:9E X509v3 Authority Key Identifier: keyid:96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d9:80:30:f9:1e:dd:c2:35:5c:8e:17:7c:aa:cf:c2:85:8d: e0:c5:e3:1a:20:b6:10:c7:15:9d:89:55:9a:38:df:87:e6:c7: 06:da:c8:d7:86:15:ab:18:7f:3d:5c:4f:9d:87:bb:1e:38:0b: 44:91:05:47:94:81:5a:2a:62:b1:14:46:47:4f:dc:85:1b:93: c1:7f:a0:49:34:07:8b:ae:c3:d1:66:f9:b6:98:9a:54:cf:e6: d3:4d:83:bc:95:83:19:f5:e4:87:20:64:82:56:d9:65:36:85: 91:1c:f9:41:97:15:34:fb:6a:81:86:b1:97:13:8a:2a:4d:97: 00:45:30:f0:51:17:ba:95:08:95:97:42:71:d3:e5:5d:e2:49: 08:fe:6b:7d:40:81:18:58:50:3f:97:1b:da:8d:86:c5:13:e7: 16:02:75:44:81:3e:18:03:64:b9:85:3f:95:8d:58:39:6b:e3: b0:5f:d8:f8:b5:b6:c4:e5:5f:72:8d:b9:58:1a:b1:85:23:21: 00:04:ca:de:e8:15:70:d4:5c:13:47:cf:3f:73:72:d4:2a:96: e0:50:96:82:fa:31:b7:24:03:f8:71:7a:24:08:11:51:76:d9: ff:f9:7f:51:83:ea:b0:2f:b9:07:fd:2e:b4:29:26:99:9f:22: d4:a3:d3:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY3NDQxMTAvBgNVBAUTKDk2M0MyMEI3RDM4MDREQjgwMUNBRTI1NzRDMzFENzYw RDUzRDMzNDQwHhcNMjUxMjA2MTk0NDQ5WhcNMjUxMjEzMTk0NDQ5WjAYMRYwFAYD VQQDEw02OTM0ODdiMS1kNDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTbzpF3XdBK9lfzng6WStrjBA+l4D4TiTvdfvGXjbjzAHGz4iCq1460vBOp0 swCfUcUcqvrPgCHFnxVeHmYCyXN9F80RnJLL/q2CyxTBbpTOFzjK7DgZrqT/wBs1 6wRyVzKk/p3vw1z2VhVyZHgjrvMm4ZTrzxVIkywOtXpqTuf2mkTmxZwWovmeivvm IK452ab2KD10it1RCIztQwgG49YumyOueDR9Djce24+1zs69nnf0ZU+rJf2WHoCb QR+8ktK2BWF/JuheHo/STVMe3i1xayGi7dnexK4OGmECQdZW9EnhjVycYJukPwTG 71NBpKrry6VapJH3MTvDkRE9RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEeffx6 5Io1hBqNoOCwDREvaHWeMB8GA1UdIwQYMBaAFJY8ILfTgE24AcriV0wx12DVPTNE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjc0NC8zM0U3OEZBQ0RC QUUxMUVBQUQ5NjY3MjNDNEY5QUUwMi9sandndDlPQVRiZ0J5dUpYVERIWFlOVTlN MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xqd2d0OU9BVGJnQnl1SlhUREhYWU5VOU0wUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Njc0NC8zM0U3OEZBQ0RCQUUxMUVBQUQ5NjY3MjNDNEY5QUUwMi9sandndDlPQVRi Z0J5dUpYVERIWFlOVTlNMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA2YAw+R7dwjVcjhd8qs/ChY3gxeMaILYQxxWdiVWaON+H5scG2sjX hhWrGH89XE+dh7seOAtEkQVHlIFaKmKxFEZHT9yFG5PBf6BJNAeLrsPRZvm2mJpU z+bTTYO8lYMZ9eSHIGSCVtllNoWRHPlBlxU0+2qBhrGXE4oqTZcARTDwURe6lQiV l0Jx0+Vd4kkI/mt9QIEYWFA/lxvajYbFE+cWAnVEgT4YA2S5hT+VjVg5a+OwX9j4 tbbE5V9yjblYGrGFIyEABMre6BVw1FwTR88/c3LUKpbgUJaC+jG3JAP4cXokCBFR dtn/+X9Rg+qwL7kH/S60KSaZnyLUo9Pu -----END CERTIFICATE-----Generated at Sun Dec 7 03:39:50 2025 by rpki-client