This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft File: LHtdhHIAPPNDas_lth6J7Isa2Ks.mft (raw, json) Hash identifier: v1wV70TD8lrrIG2K3OHqL+49Snp89vUsb7YSVTwOfBk= Subject key identifier: 2B:20:90:CC:D5:FF:ED:8D:D5:40:6A:B5:C9:B1:8B:65:65:97:9A:6F Authority key identifier: 2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB Certificate issuer: /CN=A91E0CA1/serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft Manifest number: E7 Signing time: Sat 06 Dec 2025 18:34:43 +0000 Manifest this update: Sat 06 Dec 2025 18:34:42 +0000 Manifest next update: Sat 13 Dec 2025 18:34:42 +0000 Files and hashes: 1: LHtdhHIAPPNDas_lth6J7Isa2Ks.crl (hash: hC1mW5V1Dao2Zkq/ddTF7JjVY7v01W+VlD28QpzCugk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CA1, serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB Validity Not Before: Dec 6 18:34:42 2025 GMT Not After : Dec 13 18:34:42 2025 GMT Subject: CN=69347742-c4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b7:b0:2d:d2:bf:6d:12:14:97:8f:0d:f1:d0: 62:f7:0b:07:af:99:58:ff:0a:10:09:41:e6:48:c3: 5d:6b:4e:b7:7a:2e:7c:dc:89:f2:db:b7:e0:88:1f: 17:46:6e:e5:8c:23:84:9f:bf:4b:d6:17:9e:2a:41: 6a:0d:55:d8:2d:9a:66:05:a0:81:09:af:aa:c1:b0: de:91:e3:46:fd:d6:ee:12:36:a1:2f:2f:5b:6b:fc: c8:32:ac:37:69:a2:3f:7f:2a:b8:f5:32:73:ca:ec: b7:01:cc:7e:51:3e:40:94:eb:65:b7:b0:c9:37:a1: 42:88:b2:51:33:8a:48:73:a8:e4:2c:d4:b0:8f:97: 6a:f2:75:35:75:e3:e8:63:f6:40:af:60:d2:fc:66: c7:e6:58:1f:50:06:4a:e9:bb:1e:81:37:3d:d3:21: 5e:f9:8d:cf:e8:41:01:0a:30:ea:a3:c4:3a:cf:8d: a8:aa:97:65:c4:2a:e0:76:3f:97:84:99:e9:8a:3f: 35:7b:97:d1:62:d9:c8:6a:71:57:00:5e:e3:ca:53: 3f:11:aa:f2:f2:4f:9d:a9:0e:de:78:fb:e3:5d:22: 6b:93:8b:8b:4f:d8:9d:80:67:9f:91:bc:6e:cd:55: 30:23:14:79:8c:8b:70:7f:03:c9:23:02:d0:03:62: a9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:20:90:CC:D5:FF:ED:8D:D5:40:6A:B5:C9:B1:8B:65:65:97:9A:6F X509v3 Authority Key Identifier: keyid:2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:4a:b2:19:ac:1d:aa:7a:b8:17:8e:c0:79:b3:29:33:80:d8: d6:97:88:8e:c9:a0:67:7d:2d:b0:40:fc:ff:5e:ca:74:06:16: b0:99:be:71:b6:e9:c1:36:a5:ee:02:bf:aa:9a:29:42:23:b8: 03:eb:7b:62:35:e2:4e:81:47:67:c7:02:fd:4a:96:ff:03:cb: 82:6d:4d:66:f2:60:21:48:84:74:0a:30:6b:c4:1c:69:f8:9f: 91:a7:87:57:60:8e:e5:65:b9:f5:9e:80:2e:49:0f:92:bd:f8: 9d:0a:2c:6c:ae:4c:93:1a:ff:99:6b:c5:82:2c:4a:bc:8f:29: 44:5b:55:c3:d7:46:9a:b9:49:d0:6e:b5:1c:25:eb:0a:83:42: 90:05:72:79:13:94:5a:93:d2:7d:ad:ab:aa:56:57:bf:66:7e: 85:11:e1:e6:3f:a6:ea:bc:36:5c:ca:18:71:43:ed:5e:7e:12: 63:59:58:bb:40:dc:e8:e6:f8:ae:cf:b9:d2:0a:4b:31:2a:ae: 06:65:43:cf:4a:e9:71:82:08:a4:07:5b:25:ea:b8:ab:39:67: cc:b8:6c:21:a2:c3:65:8c:33:b4:70:bb:f0:b9:14:57:36:45: c6:99:ee:d2:fd:57:38:38:0b:3e:65:fe:6a:c0:9c:ae:9d:99: ae:5f:65:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDQTExMTAvBgNVBAUTKDJDN0I1RDg0NzIwMDNDRjM0MzZBQ0ZFNUI2MUU4OUVD OEIxQUQ4QUIwHhcNMjUxMjA2MTgzNDQyWhcNMjUxMjEzMTgzNDQyWjAYMRYwFAYD VQQDEw02OTM0Nzc0Mi1jNGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnbewLdK/bRIUl48N8dBi9wsHr5lY/woQCUHmSMNda063ei583Iny27fgiB8X Rm7ljCOEn79L1heeKkFqDVXYLZpmBaCBCa+qwbDekeNG/dbuEjahLy9ba/zIMqw3 aaI/fyq49TJzyuy3Acx+UT5AlOtlt7DJN6FCiLJRM4pIc6jkLNSwj5dq8nU1dePo Y/ZAr2DS/GbH5lgfUAZK6bsegTc90yFe+Y3P6EEBCjDqo8Q6z42oqpdlxCrgdj+X hJnpij81e5fRYtnIanFXAF7jylM/Eary8k+dqQ7eePvjXSJrk4uLT9idgGefkbxu zVUwIxR5jItwfwPJIwLQA2KpuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsgkMzV /+2N1UBqtcmxi2Vll5pvMB8GA1UdIwQYMBaAFCx7XYRyADzzQ2rP5bYeieyLGtir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENBMS80RTExRjRENjcx OTAxMUVGODNDNEJGN0FDNEY5QUUwMi9MSHRkaEhJQVBQTkRhc19sdGg2SjdJc2Ey S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xIdGRoSElBUFBORGFzX2x0aDZKN0lzYTJLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENBMS80RTExRjRENjcxOTAxMUVGODNDNEJGN0FDNEY5QUUwMi9MSHRkaEhJQVBQ TkRhc19sdGg2SjdJc2EyS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3SrIZrB2qergXjsB5sykzgNjWl4iOyaBnfS2wQPz/Xsp0Bhawmb5x tunBNqXuAr+qmilCI7gD63tiNeJOgUdnxwL9Spb/A8uCbU1m8mAhSIR0CjBrxBxp +J+Rp4dXYI7lZbn1noAuSQ+SvfidCixsrkyTGv+Za8WCLEq8jylEW1XD10aauUnQ brUcJesKg0KQBXJ5E5Rak9J9rauqVle/Zn6FEeHmP6bqvDZcyhhxQ+1efhJjWVi7 QNzo5viuz7nSCksxKq4GZUPPSulxggikB1sl6rirOWfMuGwhosNljDO0cLvwuRRX NkXGme7S/Vc4OAs+Zf5qwJyunZmuX2WA -----END CERTIFICATE-----Generated at Sat Dec 6 22:04:20 2025 by rpki-client