This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft File: LHMz280_ygeHgDg3tsuuMawMS2U.mft (raw, json) Hash identifier: mEXEndPplGSY6eOZfhSKu4bCTcwmxQO+pKLaDCD99XA= Subject key identifier: EA:71:B7:D8:38:B4:E7:84:A8:28:F5:CD:27:B9:14:8A:E9:BD:E1:64 Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 Certificate issuer: /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Certificate serial: 0DB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft Manifest number: 0DA7 Signing time: Sat 06 Dec 2025 17:20:40 +0000 Manifest this update: Sat 06 Dec 2025 17:20:40 +0000 Manifest next update: Sat 13 Dec 2025 17:20:40 +0000 Files and hashes: 1: LHMz280_ygeHgDg3tsuuMawMS2U.crl (hash: UI/j4yrEjB1v/c0/dAoV707aVfhG551YYBRvkLgghPE=) 2: 62BA539C48ED11EDBC251337C4F9AE02.roa (hash: +juOaIxrjQ6IhGwMB3Bm9h5unXUiB8xR+dHj1D1njhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3511 (0xdb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3FD3, serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Validity Not Before: Dec 6 17:20:40 2025 GMT Not After : Dec 13 17:20:40 2025 GMT Subject: CN=693465e8-92ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:18:d7:85:6f:79:09:5a:8b:13:f5:c8:6b:a9: bf:a3:19:98:b4:0a:d8:05:1b:a8:3c:4a:a9:b5:92: 71:3f:7d:7b:59:68:65:dd:ac:11:5a:33:fb:51:fe: f2:b2:30:45:79:d5:10:21:c0:ee:8a:b1:8c:4e:8d: 5a:a7:32:54:ce:1b:18:44:74:07:77:ce:f4:f9:60: da:ec:a7:9b:31:e8:cd:8f:d0:2f:5d:67:6a:11:1d: e2:16:d7:84:87:8e:36:07:47:2b:3f:fb:57:61:6d: 50:7b:9d:10:b7:e7:83:02:fc:a3:2a:fb:ce:69:f8: be:30:f7:12:8e:e9:73:8b:a4:b3:f2:1f:1e:e0:87: c0:e8:5a:ef:41:fd:a3:77:fb:1d:59:97:00:26:b0: 74:7a:24:91:52:dd:e3:eb:b3:df:a9:78:9d:1f:8d: c3:e3:5b:36:c3:de:8e:5d:d2:a6:ae:e1:58:94:49: be:7c:c1:4b:f6:e8:55:a1:09:61:da:b4:b6:62:d7: 74:8b:92:45:89:f9:3e:d8:50:c0:d6:de:22:83:05: 24:ed:d5:65:21:e6:39:53:64:01:c4:07:a7:a1:dc: d3:96:c0:8b:db:f6:97:ea:2b:6e:9c:70:95:ce:c0: fc:80:0e:16:10:e6:fd:4d:de:3b:da:01:21:f7:84: e2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:71:B7:D8:38:B4:E7:84:A8:28:F5:CD:27:B9:14:8A:E9:BD:E1:64 X509v3 Authority Key Identifier: keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:1a:2f:86:0f:a4:e6:b7:99:c1:69:98:ee:16:e4:d1:4e:b9: 3b:b4:d7:5e:21:c1:3e:ee:c3:4e:65:e2:3c:04:41:af:a0:8f: 85:04:58:b6:d4:c3:a2:fe:64:c4:43:c3:71:41:8e:fb:f6:14: ce:1f:2c:4f:53:cf:22:63:52:ed:8f:3d:4e:02:11:4d:06:0d: c5:c1:db:dc:6d:d8:73:3e:77:8a:d3:d0:0c:92:aa:33:a9:6c: 0a:a8:4c:89:eb:2b:82:39:96:1c:18:f9:52:64:bd:b3:50:1b: 40:e9:89:01:37:5e:4c:9e:5e:2b:e7:2c:ca:b1:fd:3a:44:dc: 2f:19:23:55:6f:47:f8:9e:88:d5:f5:61:6c:a1:df:09:6d:ce: d8:77:25:3b:6b:6a:1d:39:9d:de:d8:f0:51:06:5a:58:b4:24: 2e:fd:8d:2d:b0:26:bf:85:03:7c:13:76:10:bf:28:27:ca:23: 15:e5:be:09:7e:86:5a:e9:94:3a:b5:b7:da:16:05:95:08:99: 92:d1:37:d9:30:6f:8e:5b:1a:4f:c3:9e:a8:07:66:fa:ec:c0: f9:2c:15:e8:e5:9c:52:d0:58:1d:3b:f7:e6:c7:cb:f9:04:d0: d8:b9:fa:e2:4a:3c:f9:fa:64:ab:51:4f:f2:92:17:da:17:aa: 57:a7:84:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGRDMxMTAvBgNVBAUTKDJDNzMzM0RCQ0QzRkNBMDc4NzgwMzgzN0I2Q0JBRTMx QUMwQzRCNjUwHhcNMjUxMjA2MTcyMDQwWhcNMjUxMjEzMTcyMDQwWjAYMRYwFAYD VQQDEw02OTM0NjVlOC05MmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3BjXhW95CVqLE/XIa6m/oxmYtArYBRuoPEqptZJxP317WWhl3awRWjP7Uf7y sjBFedUQIcDuirGMTo1apzJUzhsYRHQHd870+WDa7KebMejNj9AvXWdqER3iFteE h442B0crP/tXYW1Qe50Qt+eDAvyjKvvOafi+MPcSjulzi6Sz8h8e4IfA6FrvQf2j d/sdWZcAJrB0eiSRUt3j67PfqXidH43D41s2w96OXdKmruFYlEm+fMFL9uhVoQlh 2rS2Ytd0i5JFifk+2FDA1t4igwUk7dVlIeY5U2QBxAenodzTlsCL2/aX6itunHCV zsD8gA4WEOb9Td472gEh94TiUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpxt9g4 tOeEqCj1zSe5FIrpveFkMB8GA1UdIwQYMBaAFCxzM9vNP8oHh4A4N7bLrjGsDEtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0ZEMy8yMURFNUI5QUQ0 OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3lnZUhnRGczdHN1dU1hd01T MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xITXoyODBfeWdlSGdEZzN0c3V1TWF3TVMyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0ZEMy8yMURFNUI5QUQ0OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3ln ZUhnRGczdHN1dU1hd01TMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEGi+GD6Tmt5nBaZjuFuTRTrk7tNdeIcE+7sNOZeI8BEGvoI+FBFi2 1MOi/mTEQ8NxQY779hTOHyxPU88iY1Ltjz1OAhFNBg3FwdvcbdhzPneK09AMkqoz qWwKqEyJ6yuCOZYcGPlSZL2zUBtA6YkBN15Mnl4r5yzKsf06RNwvGSNVb0f4nojV 9WFsod8Jbc7YdyU7a2odOZ3e2PBRBlpYtCQu/Y0tsCa/hQN8E3YQvygnyiMV5b4J foZa6ZQ6tbfaFgWVCJmS0TfZMG+OWxpPw56oB2b67MD5LBXo5ZxS0FgdO/fmx8v5 BNDYufriSjz5+mSrUU/ykhfaF6pXp4TT -----END CERTIFICATE-----Generated at Sun Dec 7 00:39:52 2025 by rpki-client