This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json) Hash identifier: fG4p+cgWDGmoFH6/Qa9+mBJUEx8/prKok/1jCWlvUcQ= Subject key identifier: FE:F3:97:49:D2:83:34:93:B2:82:8A:7B:06:4F:A5:6F:AA:21:9B:25 Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0B98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft Manifest number: 0B7E Signing time: Sat 06 Dec 2025 18:23:38 +0000 Manifest this update: Sat 06 Dec 2025 18:23:38 +0000 Manifest next update: Sat 13 Dec 2025 18:23:38 +0000 Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: kVyZFTyr6FlT25qJsEZ1dIxgGMLm/MlSTGezMGB1FDw=) 2: A2055C2E57D911F0BD42DB6DC4F9AE02.roa (hash: TqYpv2WwUkuRYuB5QyDoQVNiTgsmONzJzREbUEtpPrE=) 3: E64F585A060111F0BCBC7237C4F9AE02.roa (hash: vpWpUnXP3M0kRZXRJe9IPBkx6ZqY5gGfHE6hnKUPIZE=) 4: 6DEA717805F811F0833EAC2FC4F9AE02.roa (hash: CCycuwjR/zG8JMtLvZuunOXdbHVwvFPn+/QALmHYm1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2968 (0xb98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Dec 6 18:23:38 2025 GMT Not After : Dec 13 18:23:38 2025 GMT Subject: CN=693474aa-7009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b4:98:54:62:4b:76:2d:73:1f:fd:32:ba:bd: 3a:22:51:a5:e7:69:36:e8:c1:62:14:8d:75:8a:c9: dc:cc:b9:0c:bf:ba:80:ba:a9:4e:48:bc:e4:72:c6: 1c:06:ab:67:c7:19:23:53:3f:23:35:4d:20:08:8b: bc:1f:36:9c:11:8a:80:27:15:fe:36:bb:bf:82:a5: c8:5d:6d:c9:1c:30:46:8e:28:14:a3:34:2a:7e:f8: 09:e5:27:5c:ef:ff:44:92:18:78:a9:fa:a8:2a:79: 4c:09:cd:a1:21:7f:01:03:a5:6c:4a:33:02:15:96: 55:f2:b5:1f:2f:49:09:c7:8f:a1:e7:5b:c7:e1:7f: 0e:e8:ce:9d:2b:10:2b:0a:87:3b:60:22:88:8b:04: be:16:66:10:85:14:03:44:3e:17:2f:ba:4d:74:c3: 02:28:49:a1:d5:28:69:57:c1:6b:3f:2f:84:39:b1: d0:f1:c0:0f:45:3e:1d:0f:05:6d:d9:53:7a:82:ec: cf:aa:bf:f4:71:5f:0d:b0:c0:fc:01:41:c1:97:2f: 51:d7:63:9c:c4:53:81:fd:1e:54:96:fe:35:26:16: 1a:4e:ae:f6:77:61:83:86:c2:1a:d8:2a:16:2a:d5: 7c:b5:20:8d:f1:ee:ad:e9:e6:7e:d7:31:13:de:ab: 21:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F3:97:49:D2:83:34:93:B2:82:8A:7B:06:4F:A5:6F:AA:21:9B:25 X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:5f:72:2d:3c:ad:b1:1d:5c:bc:6a:20:0e:18:6c:22:b4:cd: 73:e8:3b:f2:f1:2d:84:3e:d6:aa:db:c7:af:0f:42:00:e4:0b: d8:15:9d:3f:bc:d4:64:ec:55:fc:a8:e4:d6:0e:87:50:70:f8: 90:8c:09:89:6f:26:e1:ce:37:ad:b0:de:e3:d1:c3:62:68:ad: 2f:9b:f2:93:1d:e8:37:8b:a9:68:91:ba:7b:aa:0c:a7:7a:de: c3:c7:43:03:c9:ec:a4:46:5e:08:e7:be:49:12:26:95:7b:dc: e4:6f:4a:84:85:17:d3:bc:26:c4:3a:49:b3:e0:01:c4:b0:1d: 7c:8e:62:87:67:65:86:ef:46:81:6e:53:0a:40:5e:e7:1e:43: 77:5a:4d:fb:9f:d0:8e:04:a1:40:98:91:81:0a:24:1c:f7:c5: c4:e8:80:c4:3a:a0:e7:a5:02:48:02:31:10:ff:b8:39:16:a5: 1e:83:4a:22:c1:93:94:73:63:39:a2:33:9f:a0:f7:55:b6:cc: 3d:d1:02:53:2e:e0:a3:5f:7f:59:3a:7d:ce:93:a0:d6:76:8b: de:e4:11:0b:25:20:f2:bd:d0:f5:e9:54:4f:78:81:01:dc:4b: f1:b6:9f:f3:04:1a:05:4f:97:3e:bc:5a:32:00:bd:df:6d:25: 6d:25:ba:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjUxMjA2MTgyMzM4WhcNMjUxMjEzMTgyMzM4WjAYMRYwFAYD VQQDEw02OTM0NzRhYS03MDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bSYVGJLdi1zH/0yur06IlGl52k26MFiFI11isnczLkMv7qAuqlOSLzkcsYc BqtnxxkjUz8jNU0gCIu8HzacEYqAJxX+Nru/gqXIXW3JHDBGjigUozQqfvgJ5Sdc 7/9Ekhh4qfqoKnlMCc2hIX8BA6VsSjMCFZZV8rUfL0kJx4+h51vH4X8O6M6dKxAr Coc7YCKIiwS+FmYQhRQDRD4XL7pNdMMCKEmh1ShpV8FrPy+EObHQ8cAPRT4dDwVt 2VN6guzPqr/0cV8NsMD8AUHBly9R12OcxFOB/R5Ulv41JhYaTq72d2GDhsIa2CoW KtV8tSCN8e6t6eZ+1zET3qshTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7zl0nS gzSTsoKKewZPpW+qIZslMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkI1Qi8yOURFNzQ4QTQxOUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3 dC1YeG56elU4N1VOX2ZZdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9X3ItPK2xHVy8aiAOGGwitM1z6Dvy8S2EPtaq28evD0IA5AvYFZ0/ vNRk7FX8qOTWDodQcPiQjAmJbybhzjetsN7j0cNiaK0vm/KTHeg3i6lokbp7qgyn et7Dx0MDyeykRl4I575JEiaVe9zkb0qEhRfTvCbEOkmz4AHEsB18jmKHZ2WG70aB blMKQF7nHkN3Wk37n9COBKFAmJGBCiQc98XE6IDEOqDnpQJIAjEQ/7g5FqUeg0oi wZOUc2M5ojOfoPdVtsw90QJTLuCjX39ZOn3Ok6DWdove5BELJSDyvdD16VRPeIEB 3Evxtp/zBBoFT5c+vFoyAL3fbSVtJbo4 -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:12 2025 by rpki-client