This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft File: lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json) Hash identifier: cxpRO6rGh0xNezEBdRFhxraqFSl54MdxGIst9wyNtO4= Subject key identifier: 54:BE:1E:EC:21:7B:CE:97:42:B1:E2:11:C5:E4:47:37:0A:94:6C:44 Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22 Certificate issuer: /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft Manifest number: 99 Signing time: Mon 29 Dec 2025 05:38:24 +0000 Manifest this update: Mon 29 Dec 2025 05:38:24 +0000 Manifest next update: Mon 05 Jan 2026 05:38:24 +0000 Files and hashes: 1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: G5kNFkUuYgPLTXRktrMBQ2Yoq5beV/F5imQS519jgNY=) 2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: wfDreRJEGF1JW5W3fjwvAomrv9lvr6AoS+ZjgINTuCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 05:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922 Validity Not Before: Dec 29 05:38:24 2025 GMT Not After : Jan 5 05:38:24 2026 GMT Subject: CN=695213d0-8424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c6:26:32:5c:d4:36:d7:b6:15:13:d2:75:c1: 7b:42:56:f9:1c:02:38:3b:c1:55:d3:29:3c:a1:bc: b9:53:db:86:c3:5a:e2:6a:7f:f9:90:c7:9f:be:a8: da:38:79:57:9a:8e:c9:d0:49:ba:9d:2c:d6:2b:ea: ad:c3:4d:04:2d:25:35:5a:fd:a0:71:c8:c8:7c:95: fe:a7:bf:c6:4a:d7:a9:70:b8:15:89:58:01:ac:ba: 1d:9b:6e:74:cd:da:40:d8:b4:c4:64:1c:8c:ae:7e: d5:d0:50:16:84:dd:0f:02:a7:de:cc:23:cc:8a:e0: f8:ef:09:ff:8a:3c:04:3b:b1:7f:a1:0c:90:67:6b: 74:d9:38:e9:33:41:0b:54:df:c1:ed:a1:89:55:4f: 7d:09:3b:f7:ff:4c:41:e9:07:73:2b:31:ec:b3:81: 2a:83:71:bc:44:88:dc:41:99:84:9a:d3:c4:d0:73: 1c:60:4f:3b:dc:6c:5e:5b:8f:31:b5:20:5c:f7:94: fa:79:90:3d:be:d5:d5:cf:e3:78:62:8f:6f:a0:5f: 5c:c3:41:d0:31:23:1f:75:87:f9:bb:90:df:c9:c5: ea:d2:7d:e4:51:c3:e0:01:6b:f1:85:8f:7c:65:f2: cb:e0:e2:bd:7d:90:57:35:5c:81:fd:42:99:f6:d4: 3e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BE:1E:EC:21:7B:CE:97:42:B1:E2:11:C5:E4:47:37:0A:94:6C:44 X509v3 Authority Key Identifier: keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:0a:2f:0f:37:42:ad:61:e2:16:4c:30:a8:de:00:5b:bb:2d: 33:1f:5b:ec:ea:d3:8d:ac:34:c6:8c:3c:87:d5:cb:ba:09:a0: 0a:f1:37:ce:ae:42:d0:e9:cf:4a:7a:04:0e:c2:e5:49:d5:89: 12:5b:a6:58:65:ad:f8:61:0d:73:11:83:12:ed:e2:f2:a9:1f: 8b:4d:45:fe:cb:a5:0e:a0:4b:70:34:2c:a9:71:06:d3:ee:f1: b1:3b:6f:6e:72:73:c9:a9:31:db:ee:8a:8e:db:a6:a2:40:50: ab:4c:65:1e:54:ed:b4:90:26:02:49:4d:11:bf:75:c5:fb:d2: 92:55:fe:f1:6b:16:c8:4d:4d:87:46:30:f7:8a:df:6e:ce:a4: 2e:38:06:b9:a5:13:4c:9e:26:0b:6d:6f:33:6a:01:fc:b0:9d: ed:93:61:44:22:87:bc:f9:b0:f6:23:c7:48:1d:5f:a4:49:e6: e6:dc:9d:dd:0e:21:e7:3e:bb:f7:91:1c:c8:59:9b:bd:82:cf: 27:b6:83:f1:97:da:16:35:12:37:f9:21:3d:f0:ab:40:1d:cd: 06:61:34:e8:90:4e:bb:99:d7:7c:61:f0:1d:4b:fe:f6:93:87: 5a:0b:d8:10:6f:66:d4:7f:3f:2a:cd:66:50:b2:2e:13:b2:2c: b8:a8:eb:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0QzkxMTAvBgNVBAUTKDk1NzQ1MjkzQzg4QTI3MjZFMTBBNTdENThGNDJDQzMx NjlCN0M5MjIwHhcNMjUxMjI5MDUzODI0WhcNMjYwMTA1MDUzODI0WjAYMRYwFAYD VQQDDA02OTUyMTNkMC04NDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMYmMlzUNte2FRPSdcF7Qlb5HAI4O8FV0yk8oby5U9uGw1rian/5kMefvqja OHlXmo7J0Em6nSzWK+qtw00ELSU1Wv2gccjIfJX+p7/GStepcLgViVgBrLodm250 zdpA2LTEZByMrn7V0FAWhN0PAqfezCPMiuD47wn/ijwEO7F/oQyQZ2t02TjpM0EL VN/B7aGJVU99CTv3/0xB6QdzKzHss4Eqg3G8RIjcQZmEmtPE0HMcYE873GxeW48x tSBc95T6eZA9vtXVz+N4Yo9voF9cw0HQMSMfdYf5u5DfycXq0n3kUcPgAWvxhY98 ZfLL4OK9fZBXNVyB/UKZ9tQ+0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFS+Huwh e86XQrHiEcXkRzcKlGxEMB8GA1UdIwQYMBaAFJV0UpPIiicm4QpX1Y9CzDFpt8ki MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRDOS84NDJGOTg5NDBF QzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9sWFJTazhpS0p5YmhDbGZWajBMTU1XbTN5 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xYUlNrOGlLSnliaENsZlZqMExNTVdtM3lTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDRDOS84NDJGOTg5NDBFQzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9sWFJTazhpS0p5 YmhDbGZWajBMTU1XbTN5U0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5Ci8PN0KtYeIWTDCo3gBbuy0zH1vs6tONrDTGjDyH1cu6CaAK8TfO rkLQ6c9KegQOwuVJ1YkSW6ZYZa34YQ1zEYMS7eLyqR+LTUX+y6UOoEtwNCypcQbT 7vGxO29ucnPJqTHb7oqO26aiQFCrTGUeVO20kCYCSU0Rv3XF+9KSVf7xaxbITU2H RjD3it9uzqQuOAa5pRNMniYLbW8zagH8sJ3tk2FEIoe8+bD2I8dIHV+kSebm3J3d DiHnPrv3kRzIWZu9gs8ntoPxl9oWNRI3+SE98KtAHc0GYTTokE67mdd8YfAdS/72 k4daC9gQb2bUfz8qzWZQsi4Tsiy4qOtl -----END CERTIFICATE-----Generated at Mon Dec 29 16:23:57 2025 by rpki-client