This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft File: lvw9H4eVvunqoeuV0ppZyKQCc9M.mft (raw, json) Hash identifier: 9NAwz+gkJslXaqkOaZQRIVPV7et/67j1KnBZB1wWFtg= Subject key identifier: 1A:7C:FD:C8:CF:A2:90:6E:D6:24:F3:97:D0:6A:F1:2A:25:7C:85:F0 Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 Certificate issuer: /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft Manifest number: 43 Signing time: Fri 05 Dec 2025 05:16:20 +0000 Manifest this update: Fri 05 Dec 2025 05:16:19 +0000 Manifest next update: Fri 12 Dec 2025 05:16:19 +0000 Files and hashes: 1: lvw9H4eVvunqoeuV0ppZyKQCc9M.crl (hash: veAz+SkPnr36/5/79yzS8vwUezLxiSFCAD4oSFqmPxA=) 2: 6CAAA4586C5111F08D82894CC4F9AE02.roa (hash: e0Boz/2zfsZ25NXkwWQ4uGTrNr//Zb/uhgLC2rYh7PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Validity Not Before: Dec 5 05:16:19 2025 GMT Not After : Dec 12 05:16:19 2025 GMT Subject: CN=69326aa4-65e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d7:c3:f6:98:bf:31:71:ac:b0:b2:2b:3c:1a: ae:15:b7:22:89:68:ce:23:48:f5:08:84:f5:2b:fe: 49:f8:e3:1c:ec:fe:7b:a0:07:28:0e:39:06:12:5e: e4:59:e6:74:d7:2c:f5:aa:48:7f:fb:79:76:f3:e8: 7f:01:c6:33:d8:2e:e9:ec:4d:a3:a1:15:6d:c6:00: 2e:88:2b:af:8d:1c:a7:6d:23:b8:41:66:a6:77:ab: ed:ed:cd:d5:d0:33:21:cf:bc:05:11:19:c7:23:70: e3:eb:40:b2:23:03:9b:ed:1e:5d:3e:5b:90:5b:a4: e3:d6:3e:aa:bf:64:3b:35:68:e4:b4:a9:e9:3b:b2: ab:7b:05:de:6c:54:fb:93:3b:eb:01:57:a0:69:66: 59:65:1a:4a:b9:c3:92:b8:e3:56:b4:49:b0:91:25: 86:d4:c9:78:bf:11:33:6e:bc:20:bd:d7:d6:f1:3f: dc:f0:48:2a:64:b1:e3:8a:67:24:05:d3:45:1a:d9: 4a:24:22:9a:fa:bb:bb:ed:86:aa:30:46:e7:b7:ad: 4e:94:71:b5:94:4a:86:45:00:7e:ed:3f:24:76:d3: cd:40:9b:d5:a7:94:0f:6f:98:50:3e:b3:1d:a1:5e: f7:05:86:cb:78:ff:f4:6a:7d:2d:11:08:2c:9c:d7: 2c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7C:FD:C8:CF:A2:90:6E:D6:24:F3:97:D0:6A:F1:2A:25:7C:85:F0 X509v3 Authority Key Identifier: keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:1e:af:c7:b3:d6:4d:f9:99:2b:a6:4c:cf:e0:eb:44:b9:f8: 61:5e:b9:45:6b:ae:0f:19:87:e4:48:02:41:35:db:78:60:d8: 7b:db:02:68:0f:c7:cf:d7:e4:d8:4f:3d:cf:c4:4c:f7:c9:d8: e8:28:29:1b:34:29:9b:bd:de:70:97:ef:26:50:db:08:29:48: 0e:37:dc:2d:1f:25:8f:be:49:f8:ea:17:50:14:50:fa:bf:a2: 13:f9:87:2f:73:5b:df:52:fe:fc:66:65:f4:eb:29:e5:78:c0: 48:6c:34:48:24:68:cc:2f:9e:fc:fe:c1:74:64:86:19:eb:9f: 20:81:80:f1:ba:4a:9c:2f:32:36:17:16:c8:af:a0:cc:bf:94: 79:bc:fa:02:ca:0d:f6:42:00:72:3e:77:29:9a:6b:a9:c8:dd: 1e:46:55:d2:f9:91:a3:fc:9b:29:f7:77:f0:69:36:83:5d:b4: 52:ac:81:5c:8b:8f:b2:6b:58:f3:96:7c:00:46:03:bd:c7:0e: b2:ea:cf:d2:e4:cc:28:81:e2:65:78:de:7d:fd:b1:5c:d7:f1: d7:40:b8:72:b2:73:0f:6d:d3:d3:72:c5:ef:49:a4:4d:8c:ee: 1d:f5:8b:17:54:1e:87:30:1d:15:4b:25:9a:49:54:95:9e:0c: e5:2c:6e:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODQzMjExMC8GA1UEBRMoOTZGQzNEMUY4Nzk1QkVFOUVBQTFFQjk1RDI5QTU5QzhB NDAyNzNEMzAeFw0yNTEyMDUwNTE2MTlaFw0yNTEyMTIwNTE2MTlaMBgxFjAUBgNV BAMTDTY5MzI2YWE0LTY1ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC118P2mL8xcaywsis8Gq4VtyKJaM4jSPUIhPUr/kn44xzs/nugBygOOQYSXuRZ 5nTXLPWqSH/7eXbz6H8BxjPYLunsTaOhFW3GAC6IK6+NHKdtI7hBZqZ3q+3tzdXQ MyHPvAURGccjcOPrQLIjA5vtHl0+W5BbpOPWPqq/ZDs1aOS0qek7sqt7Bd5sVPuT O+sBV6BpZlllGkq5w5K441a0SbCRJYbUyXi/ETNuvCC919bxP9zwSCpkseOKZyQF 00Ua2UokIpr6u7vthqowRue3rU6UcbWUSoZFAH7tPyR2081Am9WnlA9vmFA+sx2h XvcFhst4//RqfS0RCCyc1yzlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGnz9yM+i kG7WJPOX0GrxKiV8hfAwHwYDVR0jBBgwFoAUlvw9H4eVvunqoeuV0ppZyKQCc9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NDMyL0ZCNjg1QjFFNkM1 MDExRjA4OTk4MDc0QkM0RjlBRTAyL2x2dzlINGVWdnVucW9ldVYwcHBaeUtRQ2M5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHZ3OUg0ZVZ2dW5xb2V1VjBwcFp5S1FDYzlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NDMyL0ZCNjg1QjFFNkM1MDExRjA4OTk4MDc0QkM0RjlBRTAyL2x2dzlINGVWdnVu cW9ldVYwcHBaeUtRQ2M5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFger8ez1k35mSumTM/g60S5+GFeuUVrrg8Zh+RIAkE123hg2HvbAmgP x8/X5NhPPc/ETPfJ2OgoKRs0KZu93nCX7yZQ2wgpSA433C0fJY++SfjqF1AUUPq/ ohP5hy9zW99S/vxmZfTrKeV4wEhsNEgkaMwvnvz+wXRkhhnrnyCBgPG6SpwvMjYX FsivoMy/lHm8+gLKDfZCAHI+dymaa6nI3R5GVdL5kaP8myn3d/BpNoNdtFKsgVyL j7JrWPOWfABGA73HDrLqz9LkzCiB4mV43n39sVzX8ddAuHKycw9t09Nyxe9JpE2M 7h31ixdUHocwHRVLJZpJVJWeDOUsbjU= -----END CERTIFICATE-----Generated at Sat Dec 6 22:59:35 2025 by rpki-client