This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft File: LHMz280_ygeHgDg3tsuuMawMS2U.mft (raw, json) Hash identifier: x7CEcZQ4GXlpodGIJrqqIFaWRT6HI8QDZ2VJRf5z9LU= Subject key identifier: 5E:89:3D:12:F2:7E:97:9F:86:3C:AE:15:48:69:B8:86:91:99:45:AF Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 Certificate issuer: /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Certificate serial: 0DBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft Manifest number: 0DAE Signing time: Sat 20 Dec 2025 17:35:37 +0000 Manifest this update: Sat 20 Dec 2025 17:35:37 +0000 Manifest next update: Sat 27 Dec 2025 17:35:37 +0000 Files and hashes: 1: LHMz280_ygeHgDg3tsuuMawMS2U.crl (hash: AhnqFidq+xsaiHuFfvYI3emOVPQ7YSuWF8GkAJrlNL8=) 2: 62BA539C48ED11EDBC251337C4F9AE02.roa (hash: +juOaIxrjQ6IhGwMB3Bm9h5unXUiB8xR+dHj1D1njhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3518 (0xdbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3FD3, serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Validity Not Before: Dec 20 17:35:37 2025 GMT Not After : Dec 27 17:35:37 2025 GMT Subject: CN=6946de69-f933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e7:fd:32:d9:4c:6a:65:30:2a:77:df:d1:4c: 81:cf:a2:cb:8f:7e:20:0a:bc:b8:e3:55:cd:cc:53: e6:f1:d1:eb:5d:d2:c4:09:4e:b5:02:a7:d4:48:64: 87:fa:51:9f:08:a1:8d:0d:11:1c:c1:8b:47:e8:63: ef:9a:8d:fc:16:ed:a6:ee:c0:c1:d9:e0:2a:ec:61: 68:10:ea:4b:f4:0f:aa:2c:98:19:d1:56:7b:7d:2f: 61:c5:ed:1a:2a:35:0c:d8:d0:44:59:4c:13:c8:66: 3e:c5:54:83:eb:48:3e:10:40:47:d4:7f:1a:58:b4: 58:0b:54:af:cc:21:6c:ce:5f:d1:96:1b:c2:19:f0: 85:c4:c9:6d:81:de:c8:41:30:d7:12:49:a9:f4:05: 41:37:fc:fe:dc:b6:e3:49:aa:06:8a:e3:9b:9d:a7: b9:88:6d:71:02:95:cd:44:74:b5:9a:a0:06:fd:e0: 83:94:09:a6:8e:42:0d:37:77:74:51:06:42:51:ae: 08:f6:fd:95:50:f8:71:0e:58:4c:01:58:00:11:5b: 6f:0f:e8:08:4a:c7:b4:d2:45:49:96:71:be:77:7f: 88:47:a0:7f:38:9c:bf:50:0b:df:7f:67:f6:07:c9: 27:69:41:b2:29:0f:7c:3d:8b:d9:d4:1b:b7:2c:b7: c5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:89:3D:12:F2:7E:97:9F:86:3C:AE:15:48:69:B8:86:91:99:45:AF X509v3 Authority Key Identifier: keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:32:01:94:c6:3c:98:0f:49:dd:32:aa:23:33:e0:e6:7c:5b: 21:66:98:71:4a:dd:7e:bd:e6:b2:8a:90:06:b3:da:7d:cc:a2: 0e:af:f9:4f:8a:94:32:0b:2c:27:31:e3:64:cc:79:66:9a:d2: a4:6c:47:b9:fc:b9:ef:46:94:79:8e:c0:d6:87:7f:fc:f3:0e: 83:5e:0a:bb:60:45:c5:b4:54:15:b1:33:89:f3:4f:82:0f:ec: d6:a3:d0:37:e0:85:22:26:c3:2c:4d:fa:4a:16:1a:c7:9a:84: 0d:a6:86:53:ca:18:70:63:93:aa:7e:ad:10:25:95:0e:a9:1b: e1:11:5d:27:aa:d4:af:ea:f0:26:75:27:dc:6b:83:7a:e3:93: f6:bb:3f:b2:9a:fe:f9:61:06:cf:9c:b5:4c:cd:bd:c1:d3:8b: f4:37:cd:5e:8f:b4:d8:72:c7:10:93:45:33:4f:24:84:e4:97: b5:7d:43:24:0a:81:50:9c:5e:ee:3a:4a:7d:7f:38:da:e2:e6: e4:7d:51:09:c6:27:11:8d:9c:be:f8:85:2f:0f:4e:65:f6:56: ac:03:4b:ad:8e:97:06:11:a9:68:aa:57:43:db:ca:fd:16:b8: 41:c7:e9:a0:2b:c7:26:ae:fe:70:d6:99:ba:03:2a:c4:c9:3a: 3a:81:08:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGRDMxMTAvBgNVBAUTKDJDNzMzM0RCQ0QzRkNBMDc4NzgwMzgzN0I2Q0JBRTMx QUMwQzRCNjUwHhcNMjUxMjIwMTczNTM3WhcNMjUxMjI3MTczNTM3WjAYMRYwFAYD VQQDDA02OTQ2ZGU2OS1mOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+f9MtlMamUwKnff0UyBz6LLj34gCry441XNzFPm8dHrXdLECU61AqfUSGSH +lGfCKGNDREcwYtH6GPvmo38Fu2m7sDB2eAq7GFoEOpL9A+qLJgZ0VZ7fS9hxe0a KjUM2NBEWUwTyGY+xVSD60g+EEBH1H8aWLRYC1SvzCFszl/RlhvCGfCFxMltgd7I QTDXEkmp9AVBN/z+3LbjSaoGiuObnae5iG1xApXNRHS1mqAG/eCDlAmmjkINN3d0 UQZCUa4I9v2VUPhxDlhMAVgAEVtvD+gISse00kVJlnG+d3+IR6B/OJy/UAvff2f2 B8knaUGyKQ98PYvZ1Bu3LLfFVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6JPRLy fpefhjyuFUhpuIaRmUWvMB8GA1UdIwQYMBaAFCxzM9vNP8oHh4A4N7bLrjGsDEtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0ZEMy8yMURFNUI5QUQ0 OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3lnZUhnRGczdHN1dU1hd01T MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xITXoyODBfeWdlSGdEZzN0c3V1TWF3TVMyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0ZEMy8yMURFNUI5QUQ0OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3ln ZUhnRGczdHN1dU1hd01TMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWMgGUxjyYD0ndMqojM+DmfFshZphxSt1+veayipAGs9p9zKIOr/lP ipQyCywnMeNkzHlmmtKkbEe5/LnvRpR5jsDWh3/88w6DXgq7YEXFtFQVsTOJ80+C D+zWo9A34IUiJsMsTfpKFhrHmoQNpoZTyhhwY5Oqfq0QJZUOqRvhEV0nqtSv6vAm dSfca4N645P2uz+ymv75YQbPnLVMzb3B04v0N81ej7TYcscQk0UzTySE5Je1fUMk CoFQnF7uOkp9fzja4ubkfVEJxicRjZy++IUvD05l9lasA0utjpcGEaloqldD28r9 FrhBx+mgK8cmrv5w1pm6AyrEyTo6gQjV -----END CERTIFICATE-----Generated at Sun Dec 21 12:50:06 2025 by rpki-client