This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft File: LPsM720W1mdu6iEWQ-yOhcJc8v8.mft (raw, json) Hash identifier: lhFb1JouB54pKOxWFv14CeESkME2NUU28YJ1/QNynck= Subject key identifier: 38:95:0B:C7:67:94:AF:EB:B9:3A:83:FE:22:4C:A1:9E:5C:3B:CD:43 Authority key identifier: 2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF Certificate issuer: /CN=A91D6C1B/serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft Manifest number: CF Signing time: Fri 05 Dec 2025 03:45:35 +0000 Manifest this update: Fri 05 Dec 2025 03:45:34 +0000 Manifest next update: Fri 12 Dec 2025 03:45:34 +0000 Files and hashes: 1: LPsM720W1mdu6iEWQ-yOhcJc8v8.crl (hash: 0pbDmW+7vIO0mlzPSOE1ejS8cch+oplBW9JfTALvfuU=) 2: 9549EE609A7311EF8A9F432EC4F9AE02.roa (hash: rmLzWyNdWKY0XtIRa8zpHc0j9dgfJvXq9eWmRerS2EI=) 3: 6E491F58A79211EFABD45B2BC4F9AE02.roa (hash: 4yChjAOymmSkEPhh7M5JKpyE3kPRApCvS6UuytNeeUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C1B, serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF Validity Not Before: Dec 5 03:45:34 2025 GMT Not After : Dec 12 03:45:34 2025 GMT Subject: CN=6932555e-a976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:46:52:01:cd:36:e0:de:c9:57:61:d8:b6: e8:05:63:6b:82:00:0e:58:e9:f8:0f:f0:25:1f:7f: a6:b9:9a:b6:0a:f8:1c:04:f7:04:b1:75:fb:af:64: a3:8a:af:a3:e7:62:62:ae:7d:9d:0c:36:4f:2e:71: 40:46:bc:a6:d4:f8:85:ba:0d:da:66:bb:7d:80:b1: 34:59:42:80:16:c6:69:a4:ee:26:3c:f4:9b:47:41: da:3b:e9:c6:d5:1a:14:45:ce:63:0c:64:c2:02:6a: 66:3c:d1:b2:34:3d:fd:60:24:68:65:9c:f2:89:ef: f2:43:68:22:96:7a:5b:c0:6f:1a:39:58:d3:d4:3e: 2f:69:51:9a:73:fb:4b:ae:d7:3a:34:df:80:8f:82: 6e:4b:66:d7:d6:2b:b9:7b:87:39:a3:bb:5b:aa:c7: f3:97:80:f0:6e:28:fc:6e:6b:81:75:52:a6:e7:86: 6e:54:2a:bb:97:d1:cd:c7:ae:67:5b:10:de:cf:79: af:bd:51:c8:e1:98:7d:01:3d:5e:93:0c:89:07:7c: 35:d7:a3:e7:fb:e1:db:36:1a:64:cb:e3:44:b5:42: a5:f1:c3:4f:fc:fc:d7:79:dc:1d:09:39:74:86:29: b1:84:dd:4b:5d:8f:d4:68:b5:0b:d6:47:12:8a:70: 59:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:95:0B:C7:67:94:AF:EB:B9:3A:83:FE:22:4C:A1:9E:5C:3B:CD:43 X509v3 Authority Key Identifier: keyid:2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:9a:32:19:17:6b:82:76:84:54:20:08:84:dc:a8:18:b2:7b: d5:16:10:9d:1d:89:9a:75:78:fa:17:70:ce:82:3d:69:64:b1: 90:a9:03:9b:a9:b3:55:72:7d:e9:a7:b7:f7:a6:e4:74:00:c9: 95:da:2d:d1:5f:1c:b2:05:21:21:1b:b2:07:e9:9d:54:0e:4d: 9a:fa:d4:f0:51:6b:e1:8d:07:01:9d:d5:a0:a4:1a:68:8e:72: fb:0b:43:45:40:56:67:f4:9f:49:b1:01:d7:d1:32:03:86:27: a6:d2:34:1b:3e:b2:23:ce:bb:f8:d2:79:3e:45:d3:6d:89:87: 08:25:54:6e:99:fd:cc:81:cf:7c:20:8d:64:c7:57:6b:e0:97: 1b:27:2f:b7:eb:67:5a:95:58:15:49:94:51:b4:2a:d4:62:6a: d1:7f:3d:91:28:40:d4:66:43:7a:a3:36:a4:a8:4d:7b:ca:f3: 09:a8:6a:29:99:1c:a1:e1:4d:6a:64:1b:59:29:75:f9:00:d6: 8b:e4:83:da:5a:a7:bf:b2:b5:aa:90:08:f6:54:b2:ad:43:f0: 46:06:c3:9a:bc:68:02:f0:ad:34:5a:6f:1d:48:79:c1:f0:70: a2:3c:d5:96:b6:19:35:4f:07:48:47:fd:38:71:92:18:5f:de: 46:40:93:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZDMUIxMTAvBgNVBAUTKDJDRkIwQ0VGNkQxNkQ2Njc2RUVBMjExNjQzRUM4RTg1 QzI1Q0YyRkYwHhcNMjUxMjA1MDM0NTM0WhcNMjUxMjEyMDM0NTM0WjAYMRYwFAYD VQQDEw02OTMyNTU1ZS1hOTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArm1GUgHNNuDeyVdh2LboBWNrggAOWOn4D/AlH3+muZq2CvgcBPcEsXX7r2Sj iq+j52Jirn2dDDZPLnFARrym1PiFug3aZrt9gLE0WUKAFsZppO4mPPSbR0HaO+nG 1RoURc5jDGTCAmpmPNGyND39YCRoZZzyie/yQ2gilnpbwG8aOVjT1D4vaVGac/tL rtc6NN+Aj4JuS2bX1iu5e4c5o7tbqsfzl4Dwbij8bmuBdVKm54ZuVCq7l9HNx65n WxDez3mvvVHI4Zh9AT1ekwyJB3w116Pn++HbNhpky+NEtUKl8cNP/PzXedwdCTl0 himxhN1LXY/UaLUL1kcSinBZkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDiVC8dn lK/ruTqD/iJMoZ5cO81DMB8GA1UdIwQYMBaAFCz7DO9tFtZnbuohFkPsjoXCXPL/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkMxQi9FNTczMDZDQTlB NzIxMUVGOEVCNDE2MkRDNEY5QUUwMi9MUHNNNzIwVzFtZHU2aUVXUS15T2hjSmM4 djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xQc003MjBXMW1kdTZpRVdRLXlPaGNKYzh2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkMxQi9FNTczMDZDQTlBNzIxMUVGOEVCNDE2MkRDNEY5QUUwMi9MUHNNNzIwVzFt ZHU2aUVXUS15T2hjSmM4djgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnmjIZF2uCdoRUIAiE3KgYsnvVFhCdHYmadXj6F3DOgj1pZLGQqQOb qbNVcn3pp7f3puR0AMmV2i3RXxyyBSEhG7IH6Z1UDk2a+tTwUWvhjQcBndWgpBpo jnL7C0NFQFZn9J9JsQHX0TIDhiem0jQbPrIjzrv40nk+RdNtiYcIJVRumf3Mgc98 II1kx1dr4JcbJy+362dalVgVSZRRtCrUYmrRfz2RKEDUZkN6ozakqE17yvMJqGop mRyh4U1qZBtZKXX5ANaL5IPaWqe/srWqkAj2VLKtQ/BGBsOavGgC8K00Wm8dSHnB 8HCiPNWWthk1TwdIR/04cZIYX95GQJOe -----END CERTIFICATE-----Generated at Sun Dec 7 00:37:49 2025 by rpki-client