This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft File: ltMlORFGzztdo_4Uaf7BKLS2jEk.mft (raw, json) Hash identifier: WWBcrPTbAfiwLv2X6QyTG0HF196AAf2kpdZnAgrDERw= Subject key identifier: 12:19:54:B6:5C:A9:3E:6B:2D:1B:A5:26:39:82:77:1C:8D:82:CD:CD Authority key identifier: 96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49 Certificate issuer: /CN=A91E63E7/serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft Manifest number: D7 Signing time: Fri 05 Dec 2025 03:37:21 +0000 Manifest this update: Fri 05 Dec 2025 03:37:20 +0000 Manifest next update: Fri 12 Dec 2025 03:37:20 +0000 Files and hashes: 1: ltMlORFGzztdo_4Uaf7BKLS2jEk.crl (hash: VUzj25SIW2ErZ0hphtEtTukMJb2fmP0EPe2MaPDEELQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7, serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49 Validity Not Before: Dec 5 03:37:20 2025 GMT Not After : Dec 12 03:37:20 2025 GMT Subject: CN=69325370-5aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:04:5a:39:19:3f:f6:36:82:d4:fb:1a:76:54: 07:e3:76:dc:f4:5b:67:92:a6:21:a9:56:c7:6f:f6: 82:02:f1:d3:94:8e:56:f6:4c:77:bb:07:2d:c5:73: 3a:a9:6c:bb:5f:35:5d:ea:8b:ad:b2:1d:12:bd:06: d5:80:e9:bb:05:fa:22:40:20:82:63:61:d2:0d:97: 92:3b:b3:9c:a2:f0:7d:02:ee:bd:b9:27:17:73:51: ea:60:98:13:47:1e:1a:6f:f1:0e:f6:a7:89:cb:0e: 57:00:3a:4c:78:7b:e5:70:ea:7c:64:82:1e:17:15: b6:ab:ef:b0:06:4c:9a:49:a2:07:52:4a:6f:d1:77: d9:85:ee:94:cd:7c:87:91:e4:3d:9d:fa:0d:6d:68: f7:c5:6b:a5:25:c6:c1:89:20:f3:12:97:be:4a:d3: 62:70:87:c7:86:46:b9:d2:94:2f:cf:96:03:ec:12: f9:b7:45:a5:30:8b:eb:37:b5:b7:ee:b8:a7:c6:aa: 98:b9:61:4e:d3:a7:b5:5a:24:3e:14:1e:e7:73:de: a0:00:8d:c1:92:7f:29:34:2c:be:c0:98:79:70:8e: b3:f9:a2:9a:23:bf:74:13:cb:b3:c9:89:2a:24:41: 6a:cc:bc:f6:4c:2c:da:4f:82:4c:06:9f:b3:d7:c8: 5e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:19:54:B6:5C:A9:3E:6B:2D:1B:A5:26:39:82:77:1C:8D:82:CD:CD X509v3 Authority Key Identifier: keyid:96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:02:5a:6a:ca:cf:74:ae:a5:7e:c2:5c:5d:34:d8:32:08:2b: 00:e3:3a:ca:8a:54:04:a2:32:05:40:2a:06:f2:d6:3f:54:0e: 78:74:49:11:89:24:1e:67:19:54:d2:de:cd:c3:44:28:b7:e0: a1:e1:91:ef:ca:c5:60:bd:ee:16:35:bf:80:a9:8a:62:7a:cf: df:63:e2:fb:84:75:ef:03:5a:9f:51:02:bf:19:ef:fe:41:84: 90:f7:4c:fe:32:bf:96:a9:40:ba:1a:39:da:6b:a7:cd:91:18: 07:d9:15:bc:2c:49:09:e3:fc:cb:5c:01:d8:1c:91:07:dc:86: f9:39:70:f5:2f:43:0e:16:1e:51:70:7f:4c:38:a1:83:2b:0f: 8a:93:a4:82:db:b9:3a:6c:32:3d:91:88:2d:70:29:85:52:92: e1:b7:91:3e:9c:35:5f:96:60:20:a8:49:cf:5e:3b:66:03:02: 59:da:74:5d:43:83:e1:8d:df:3d:ea:5c:76:bb:51:d2:9d:82: a9:4e:01:c4:65:ff:f3:fc:af:ae:16:d5:b9:72:61:f5:7e:6b: af:41:15:d4:ae:55:79:20:75:f2:83:09:52:d4:80:57:d7:28: 29:58:03:b1:c2:21:a3:2e:e7:aa:68:b4:0c:26:09:fc:25:2d: 3a:03:e4:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzRTcxMTAvBgNVBAUTKDk2RDMyNTM5MTE0NkNGM0I1REEzRkUxNDY5RkVDMTI4 QjRCNjhDNDkwHhcNMjUxMjA1MDMzNzIwWhcNMjUxMjEyMDMzNzIwWjAYMRYwFAYD VQQDEw02OTMyNTM3MC01YWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxARaORk/9jaC1PsadlQH43bc9FtnkqYhqVbHb/aCAvHTlI5W9kx3uwctxXM6 qWy7XzVd6outsh0SvQbVgOm7BfoiQCCCY2HSDZeSO7OcovB9Au69uScXc1HqYJgT Rx4ab/EO9qeJyw5XADpMeHvlcOp8ZIIeFxW2q++wBkyaSaIHUkpv0XfZhe6UzXyH keQ9nfoNbWj3xWulJcbBiSDzEpe+StNicIfHhka50pQvz5YD7BL5t0WlMIvrN7W3 7rinxqqYuWFO06e1WiQ+FB7nc96gAI3Bkn8pNCy+wJh5cI6z+aKaI790E8uzyYkq JEFqzLz2TCzaT4JMBp+z18heHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIZVLZc qT5rLRulJjmCdxyNgs3NMB8GA1UdIwQYMBaAFJbTJTkRRs87XaP+FGn+wSi0toxJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjNFNy80QUNCOEJGMDg4 NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9sdE1sT1JGR3p6dGRvXzRVYWY3QktMUzJq RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x0TWxPUkZHenp0ZG9fNFVhZjdCS0xTMmpFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjNFNy80QUNCOEJGMDg4NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9sdE1sT1JGR3p6 dGRvXzRVYWY3QktMUzJqRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2Alpqys90rqV+wlxdNNgyCCsA4zrKilQEojIFQCoG8tY/VA54dEkR iSQeZxlU0t7Nw0Qot+Ch4ZHvysVgve4WNb+AqYpies/fY+L7hHXvA1qfUQK/Ge/+ QYSQ90z+Mr+WqUC6Gjnaa6fNkRgH2RW8LEkJ4/zLXAHYHJEH3Ib5OXD1L0MOFh5R cH9MOKGDKw+Kk6SC27k6bDI9kYgtcCmFUpLht5E+nDVflmAgqEnPXjtmAwJZ2nRd Q4Phjd896lx2u1HSnYKpTgHEZf/z/K+uFtW5cmH1fmuvQRXUrlV5IHXygwlS1IBX 1ygpWAOxwiGjLueqaLQMJgn8JS06A+R8 -----END CERTIFICATE-----Generated at Sat Dec 6 19:04:39 2025 by rpki-client