This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft File: lbEEDPO_7AXOhB2vqalQi3CZfxw.mft (raw, json) Hash identifier: gJ5N2TMJ+gLYgVzroed/ScDgeiZanjutHh11NnPfNRM= Subject key identifier: 5B:0F:57:AF:7A:15:6B:7F:F0:58:55:A7:7A:6D:74:F2:13:07:CA:5A Authority key identifier: 95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C Certificate issuer: /CN=A91EB96C/serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft Manifest number: 7A Signing time: Fri 05 Dec 2025 04:40:50 +0000 Manifest this update: Fri 05 Dec 2025 04:40:50 +0000 Manifest next update: Fri 12 Dec 2025 04:40:50 +0000 Files and hashes: 1: lbEEDPO_7AXOhB2vqalQi3CZfxw.crl (hash: CSJdPyIsq4yMEd/cgYXMs/9UscnmMDnpbrxAcf626kw=) 2: 9EDE26C813A211F095A2D46DC4F9AE02.roa (hash: 9+x+gO7VZZ27bFoPVKXDoWm28PjRwAiv38lgAILmn1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB96C, serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C Validity Not Before: Dec 5 04:40:50 2025 GMT Not After : Dec 12 04:40:50 2025 GMT Subject: CN=69326252-0a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:32:8a:b3:a3:f1:ea:e7:57:fa:6c:b1:b7:01: a0:e3:e7:ef:6f:53:e6:28:aa:68:bb:5d:b4:47:c8: 6f:48:d6:2b:bd:9b:4a:ec:0f:c2:1b:6c:94:dd:27: 92:49:e2:10:ce:f0:38:f6:ae:a2:2a:d9:b5:47:cd: 11:42:4a:ba:20:d8:db:39:86:61:ae:e1:11:54:ea: bc:04:e0:3c:a6:9b:3b:87:c9:a5:b9:a5:46:73:c4: 83:0e:30:82:83:39:bd:2a:df:81:26:b7:8d:a5:30: e9:84:95:af:e6:9f:3e:44:dc:78:b5:b9:f8:9f:d3: 06:b1:4f:b2:fa:67:14:9d:4f:8d:13:56:3f:ef:2f: f1:8a:6d:0b:9c:b6:8c:c2:c9:8a:f6:be:23:84:a2: 05:70:fd:6f:80:fd:10:93:02:5f:a4:8b:fd:29:8e: 4b:2e:05:a3:0c:db:44:66:d0:57:78:1b:6e:b7:03: 1e:04:c1:22:90:9e:18:17:38:56:3e:9e:ac:a2:12: e3:ae:42:82:fe:2f:c9:c6:af:63:40:a5:f9:86:1d: d9:ab:13:6f:c6:13:0a:0a:ee:51:7f:32:ff:c4:bd: d0:4b:f6:df:07:23:0e:12:6e:4d:6a:14:19:e8:97: 62:f8:38:c7:07:9a:3f:16:2d:ca:44:04:7e:eb:55: 6b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0F:57:AF:7A:15:6B:7F:F0:58:55:A7:7A:6D:74:F2:13:07:CA:5A X509v3 Authority Key Identifier: keyid:95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:b0:ef:8d:8d:aa:f9:4f:11:4f:a0:c6:85:0f:6a:53:9c:da: 3c:77:03:dc:b3:c3:0a:80:f0:01:e0:6b:81:25:5f:cf:2c:3d: 2e:b8:fc:a7:e8:1f:ad:72:d3:b1:8a:70:2e:80:90:ae:e3:f6: 30:ce:8a:e8:2d:4c:a5:2d:a8:1a:29:af:e8:a9:fe:e0:82:42: f6:38:db:e5:cb:34:80:9e:08:35:38:55:5f:c3:e3:55:40:82: c0:b9:63:b4:8c:62:6f:0e:48:bc:b7:bf:6b:a4:23:e3:f7:6a: 92:10:bf:10:99:bc:62:cf:35:82:d1:11:c3:10:55:c3:a5:ca: 56:21:66:9a:67:80:98:7d:d6:ec:3b:08:26:41:a0:d9:63:25: 52:0a:f9:a2:9c:7c:70:d2:d9:75:ad:dd:d5:26:45:21:20:71: 8c:11:af:0c:46:8a:f9:5f:1e:23:2c:a0:d7:95:c5:0f:88:00: 31:4a:54:8b:45:35:ec:8a:8e:35:25:33:7b:c4:7b:53:86:80: 4d:b1:a9:ca:41:77:0f:33:ca:c0:69:13:5c:fd:e8:44:22:a5: 03:fe:d2:fb:2f:1e:b0:e9:b4:5a:61:83:59:a6:c8:80:99:7c: d7:05:cc:a6:a8:99:36:d1:51:51:5d:95:e3:49:c7:85:4f:53: 94:45:83:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Qjk2QzExMC8GA1UEBRMoOTVCMTA0MENGM0JGRUMwNUNFODQxREFGQTlBOTUwOEI3 MDk5N0YxQzAeFw0yNTEyMDUwNDQwNTBaFw0yNTEyMTIwNDQwNTBaMBgxFjAUBgNV BAMTDTY5MzI2MjUyLTBhODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOMoqzo/Hq51f6bLG3AaDj5+9vU+Yoqmi7XbRHyG9I1iu9m0rsD8IbbJTdJ5JJ 4hDO8Dj2rqIq2bVHzRFCSrog2Ns5hmGu4RFU6rwE4DymmzuHyaW5pUZzxIMOMIKD Ob0q34Emt42lMOmEla/mnz5E3Hi1ufif0waxT7L6ZxSdT40TVj/vL/GKbQuctozC yYr2viOEogVw/W+A/RCTAl+ki/0pjksuBaMM20Rm0Fd4G263Ax4EwSKQnhgXOFY+ nqyiEuOuQoL+L8nGr2NApfmGHdmrE2/GEwoK7lF/Mv/EvdBL9t8HIw4Sbk1qFBno l2L4OMcHmj8WLcpEBH7rVWsZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWw9Xr3oV a3/wWFWnem108hMHylowHwYDVR0jBBgwFoAUlbEEDPO/7AXOhB2vqalQi3CZfxww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCOTZDLzREMkJBOEEwMTNB MjExRjA5MUVCNjM2REM0RjlBRTAyL2xiRUVEUE9fN0FYT2hCMnZxYWxRaTNDWmZ4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbGJFRURQT183QVhPaEIydnFhbFFpM0NaZnh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC OTZDLzREMkJBOEEwMTNBMjExRjA5MUVCNjM2REM0RjlBRTAyL2xiRUVEUE9fN0FY T2hCMnZxYWxRaTNDWmZ4dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJSw742NqvlPEU+gxoUPalOc2jx3A9yzwwqA8AHga4ElX88sPS64/Kfo H61y07GKcC6AkK7j9jDOiugtTKUtqBopr+ip/uCCQvY42+XLNICeCDU4VV/D41VA gsC5Y7SMYm8OSLy3v2ukI+P3apIQvxCZvGLPNYLREcMQVcOlylYhZppngJh91uw7 CCZBoNljJVIK+aKcfHDS2XWt3dUmRSEgcYwRrwxGivlfHiMsoNeVxQ+IADFKVItF NeyKjjUlM3vEe1OGgE2xqcpBdw8zysBpE1z96EQipQP+0vsvHrDptFphg1mmyICZ fNcFzKaomTbRUVFdleNJx4VPU5RFg5c= -----END CERTIFICATE-----Generated at Sat Dec 6 14:43:23 2025 by rpki-client