This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft File: Lb_HsoYVsf94189GiGr5ITn_loo.mft (raw, json) Hash identifier: 9uSVGCqwtKTx/RTpubW2+9Ai1DoqfqCvLgeh/kF5aiQ= Subject key identifier: BB:39:7B:DC:33:09:58:38:11:37:F1:DE:A5:D5:AE:90:C5:8E:E8:A9 Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A Certificate issuer: /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft Manifest number: 07 Signing time: Fri 05 Dec 2025 05:52:10 +0000 Manifest this update: Fri 05 Dec 2025 05:52:10 +0000 Manifest next update: Fri 12 Dec 2025 05:52:10 +0000 Files and hashes: 1: Lb_HsoYVsf94189GiGr5ITn_loo.crl (hash: FBJKXeftpXK9R4UoJoBHy00kZHn55fPZmI1J79Tayks=) 2: B90F319AC84211F09A0BE068C4F9AE02.roa (hash: g0+1PT5qez9GcqrDkre9mHd9DAQlXO634JLUgpdLP1M=) 3: B9FD184CC84211F0BF44E068C4F9AE02.roa (hash: vYJPk7KFkk/rKrzwZcbhgjtR/Pi92VUXuzSvIsAoZhg=) 4: B97B11B2C84211F0A053E068C4F9AE02.roa (hash: T8+SUWMp7lLCNyIXktANN5lVZd79pGX/sm4qsAqhCs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Validity Not Before: Dec 5 05:52:10 2025 GMT Not After : Dec 12 05:52:10 2025 GMT Subject: CN=6932730a-478d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fa:ea:c6:23:49:e9:f8:7c:f0:f6:44:71:f2: ec:e9:fa:58:40:ef:c7:ed:4f:2b:2e:9c:0e:4a:28: 91:bd:79:56:68:b3:37:ff:45:a8:3e:91:c3:5c:a0: 0e:49:ae:75:94:28:b1:7d:c1:d0:20:59:44:9c:5a: 52:a6:ad:dd:35:50:0e:ac:8e:d8:fd:45:f1:f8:e8: bb:86:7e:58:cb:f2:07:c5:6f:74:2a:1a:ed:3d:91: ab:c7:3b:a7:33:40:51:c1:93:79:91:31:c8:77:ec: 35:48:50:19:4f:a5:f7:ba:60:aa:4e:01:b3:cc:e3: d8:57:cc:6c:29:bb:8c:c1:63:51:83:ba:7b:bb:2c: ce:8c:d8:29:4c:ef:dd:f7:bd:ad:c9:75:d4:d3:69: 90:7b:b8:c7:6f:b4:f7:9d:55:3e:73:30:74:55:9f: 03:b9:95:b4:0e:3a:ad:52:63:b7:42:aa:95:69:3e: dc:41:9a:ab:f1:b6:fe:24:6b:ff:32:7d:c9:86:1b: 7e:a0:6e:85:7b:3b:35:37:dc:84:2d:08:d5:33:8c: 57:73:7c:48:d1:6c:ca:9c:83:7f:78:72:c1:75:af: ac:ca:a6:09:c9:f2:17:43:ba:de:ef:3a:0d:c1:16: 79:d4:ea:e1:33:71:ae:dc:2a:70:ca:c4:db:11:b3: be:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:39:7B:DC:33:09:58:38:11:37:F1:DE:A5:D5:AE:90:C5:8E:E8:A9 X509v3 Authority Key Identifier: keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:7b:4d:23:49:5c:05:42:89:66:b2:93:95:52:b0:e8:81:a6: 2e:33:9a:01:07:a4:0e:17:aa:48:9d:35:47:97:68:e3:3c:e5: 0a:f0:97:cb:c6:94:5d:ca:70:ce:ca:51:d9:62:7b:17:e8:ee: 04:be:a5:00:55:28:bf:b8:39:21:cc:c1:01:4c:ed:00:a3:6f: e9:46:ea:0d:5d:48:4f:33:29:03:ea:11:a4:fb:1c:a5:ff:ac: e8:ba:45:d9:23:70:32:a1:56:5f:b5:81:32:8c:1b:58:95:64: 4f:d6:d3:01:4a:37:f2:20:a6:27:bb:9c:20:0c:ff:ff:32:a5: f8:f3:a1:fa:48:ac:25:0c:48:d8:b2:3e:46:e3:62:80:c9:ea: 01:5c:48:88:a7:bf:c2:2e:4d:b2:a3:76:fe:c2:3d:01:55:7a: ee:f9:57:f3:3f:68:d7:ed:a8:9a:d0:1d:b6:c2:05:f6:76:1d: 6f:05:f8:f3:10:e8:e9:92:97:92:ef:d2:69:d3:9c:16:78:33: 8d:10:dc:e2:c0:7b:c4:dd:38:16:be:ae:3f:43:74:dd:81:b1: 94:0e:54:38:16:74:88:06:2b:c2:fb:c6:5e:37:66:3e:90:4b: 3f:a5:f5:c9:25:c4:9b:51:f4:55:96:04:30:12:20:5f:73:0e: 5a:16:6d:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0RBRTExMC8GA1UEBRMoMkRCRkM3QjI4NjE1QjFGRjc4RDdDRjQ2ODg2QUY5MjEz OUZGOTY4QTAeFw0yNTEyMDUwNTUyMTBaFw0yNTEyMTIwNTUyMTBaMBgxFjAUBgNV BAMTDTY5MzI3MzBhLTQ3OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDw+urGI0np+Hzw9kRx8uzp+lhA78ftTysunA5KKJG9eVZoszf/Rag+kcNcoA5J rnWUKLF9wdAgWUScWlKmrd01UA6sjtj9RfH46LuGfljL8gfFb3QqGu09kavHO6cz QFHBk3mRMch37DVIUBlPpfe6YKpOAbPM49hXzGwpu4zBY1GDunu7LM6M2ClM7933 va3JddTTaZB7uMdvtPedVT5zMHRVnwO5lbQOOq1SY7dCqpVpPtxBmqvxtv4ka/8y fcmGG36gboV7OzU33IQtCNUzjFdzfEjRbMqcg394csF1r6zKpgnJ8hdDut7vOg3B FnnU6uEzca7cKnDKxNsRs757AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuzl73DMJ WDgRN/HepdWukMWO6KkwHwYDVR0jBBgwFoAULb/HsoYVsf94189GiGr5ITn/loow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDREFFLzJGQkVBNDAyQzg0 MjExRjBBMzNFOUE3RUM0RjlBRTAyL0xiX0hzb1lWc2Y5NDE4OUdpR3I1SVRuX2xv by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvTGJfSHNvWVZzZjk0MTg5R2lHcjVJVG5fbG9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND REFFLzJGQkVBNDAyQzg0MjExRjBBMzNFOUE3RUM0RjlBRTAyL0xiX0hzb1lWc2Y5 NDE4OUdpR3I1SVRuX2xvby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADd7TSNJXAVCiWayk5VSsOiBpi4zmgEHpA4XqkidNUeXaOM85Qrwl8vG lF3KcM7KUdliexfo7gS+pQBVKL+4OSHMwQFM7QCjb+lG6g1dSE8zKQPqEaT7HKX/ rOi6RdkjcDKhVl+1gTKMG1iVZE/W0wFKN/Igpie7nCAM//8ypfjzofpIrCUMSNiy PkbjYoDJ6gFcSIinv8IuTbKjdv7CPQFVeu75V/M/aNftqJrQHbbCBfZ2HW8F+PMQ 6OmSl5Lv0mnTnBZ4M40Q3OLAe8TdOBa+rj9DdN2BsZQOVDgWdIgGK8L7xl43Zj6Q Sz+l9cklxJtR9FWWBDASIF9zDloWbZk= -----END CERTIFICATE-----Generated at Sat Dec 6 23:26:10 2025 by rpki-client