This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft File: lvQuGfadWWoDGJIVkKF91TIz5ZU.mft (raw, json) Hash identifier: oSyh1sI+MwvyNjAJG5eyX/RSUDAWWEs5XmTMevKnnqw= Subject key identifier: 27:7D:6B:90:14:D0:91:29:B2:C9:69:2D:B4:60:64:F6:34:48:07:6A Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Certificate serial: 089F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft Manifest number: 0860 Signing time: Thu 18 Dec 2025 20:30:15 +0000 Manifest this update: Thu 18 Dec 2025 20:30:15 +0000 Manifest next update: Thu 25 Dec 2025 20:30:15 +0000 Files and hashes: 1: lvQuGfadWWoDGJIVkKF91TIz5ZU.crl (hash: D9QIe+iQXej1cXISKx8IvBD1yZnDuGSgp0mpChzN+AY=) 2: D10AEBE6DBCE11F0AEB5E93D54641951.roa (hash: esV8OZlbi9/XWvfZfCSKXoyyriYIl4zeyIirsBlh8qo=) 3: BC38A630AFB511F0912BFF37C4F9AE02.roa (hash: yYq9FUi9QUL8JQHPDpyePLTnQdBwLv7qNIB4oZOqa8Y=) 4: F539311C7DA011F08A71610EC4F9AE02.roa (hash: +UcOfQZU0ZJQOGOAjEM3uGGCRkyEmhxcs6uXu75xsP8=) 5: 746DFE7C37CE11F0A4C19C85C4F9AE02.roa (hash: UUEsJz/WQSBHmwrRY/8iQ6JdsqT1T0sucZ71LaxIHRw=) 6: D34D9A72BBEB11EC83BEA22AC4F9AE02.roa (hash: c/n6DX8r7nJjVUXwPVxV5kzEZ7bIPC1UqZ86XGA9if0=) 7: C2D9F4BCD24311EF92066413C4F9AE02.roa (hash: ytUICka7R3sUiUv+nGbD8m7xL4LEtJjOERqtgUBd29c=) 8: ABC4A34EAFB511F0815FDC37C4F9AE02.roa (hash: Rz/l4cwIWK/gcFPFzENAaQQtEAacYXl5yCLeBdnkcaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2207 (0x89f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Validity Not Before: Dec 18 20:30:15 2025 GMT Not After : Dec 25 20:30:15 2025 GMT Subject: CN=69446457-7078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:37:27:e5:9b:26:1f:7a:9d:82:cf:15:f8:36: 4a:1c:31:38:52:2e:48:9d:95:50:f7:e7:66:3e:df: 06:cd:f7:3e:28:d0:9c:70:7a:c1:83:82:74:b6:27: 72:7b:a1:6e:03:47:97:bd:d3:87:00:20:d3:53:df: 48:dd:9f:d2:71:e4:d4:56:e4:ca:d6:f7:3c:33:15: c2:48:a6:f1:9d:14:5a:79:08:af:7e:f8:b0:9c:1f: a3:3d:13:d2:a8:7c:24:e1:db:4a:0a:5b:21:03:e4: 36:89:e6:86:ef:40:bd:12:1c:b0:72:1e:b7:43:af: 82:ba:3a:a1:00:9f:9a:5b:b8:7b:8c:47:27:85:44: 7c:9e:c9:5a:c8:7a:48:ad:29:bf:b1:c2:cc:fc:5f: fe:dc:f1:da:b6:c2:54:fc:06:90:4a:bf:6f:67:a0: 42:0b:09:72:8c:e7:80:dc:57:b3:e2:8f:be:c1:5e: e0:58:b3:b8:70:83:09:e3:54:69:d1:25:18:ac:91: 41:0c:ce:5f:00:64:b0:73:8c:a4:6c:b3:b1:28:5c: 3a:8e:73:44:a4:ad:d2:cc:b4:bd:51:c8:4e:17:67: 98:4c:df:9e:03:c9:bf:b1:7d:ae:f5:a9:81:50:25: 01:13:34:86:21:13:e5:8c:73:bc:21:c1:92:82:5c: 9f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7D:6B:90:14:D0:91:29:B2:C9:69:2D:B4:60:64:F6:34:48:07:6A X509v3 Authority Key Identifier: keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:f7:29:e3:c8:56:64:5d:14:87:4f:1f:34:47:ee:7c:c5:8b: a4:df:fb:42:bd:44:40:6f:f5:86:f6:77:f8:06:a3:f0:75:18: 14:1c:c9:38:4c:b4:11:db:e5:b8:fb:e7:c4:12:49:dd:0a:8d: a4:c3:f1:12:66:05:0c:4d:7c:85:5a:6f:65:0d:d7:3c:68:9f: ab:c5:35:c1:c1:cb:cd:d8:af:8f:fa:bc:ff:0c:b6:a6:45:53: c6:2c:89:c2:9d:03:2d:c5:8e:8f:90:31:57:b7:08:3a:1e:25: ae:44:20:b0:b4:db:e4:a5:b5:d9:51:71:ca:c3:da:ff:9c:dc: 34:8a:db:34:71:4c:af:48:a5:6a:21:7a:c1:42:60:0e:c9:e0: a7:88:91:ac:b7:33:29:3d:eb:d9:52:34:d5:7e:8a:74:52:76: 55:0e:c3:19:c8:28:c0:5a:b3:20:a0:9d:5a:db:a5:1f:1d:e9: cf:34:c7:5c:47:de:70:bb:33:6b:d0:74:27:43:0d:33:51:21: 87:d1:1c:bb:15:03:77:de:fb:16:f3:75:f8:37:1e:56:9b:83: a8:c4:40:22:cb:b7:84:3a:79:28:2a:00:79:e0:22:ab:9b:a6: 74:6d:b8:4c:fd:1c:11:9d:ec:73:0c:99:08:f7:ef:3f:7d:37: 8b:8b:8b:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1 MzIzM0U1OTUwHhcNMjUxMjE4MjAzMDE1WhcNMjUxMjI1MjAzMDE1WjAYMRYwFAYD VQQDDA02OTQ0NjQ1Ny03MDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzcn5ZsmH3qdgs8V+DZKHDE4Ui5InZVQ9+dmPt8Gzfc+KNCccHrBg4J0tidy e6FuA0eXvdOHACDTU99I3Z/SceTUVuTK1vc8MxXCSKbxnRRaeQivfviwnB+jPRPS qHwk4dtKClshA+Q2ieaG70C9Ehywch63Q6+CujqhAJ+aW7h7jEcnhUR8nslayHpI rSm/scLM/F/+3PHatsJU/AaQSr9vZ6BCCwlyjOeA3Fez4o++wV7gWLO4cIMJ41Rp 0SUYrJFBDM5fAGSwc4ykbLOxKFw6jnNEpK3SzLS9UchOF2eYTN+eA8m/sX2u9amB UCUBEzSGIRPljHO8IcGSglyfaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCd9a5AU 0JEpsslpLbRgZPY0SAdqMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2 QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTc2RC85M0QxN0NEMDA2QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdX b0RHSklWa0tGOTFUSXo1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC59ynjyFZkXRSHTx80R+58xYuk3/tCvURAb/WG9nf4BqPwdRgUHMk4 TLQR2+W4++fEEkndCo2kw/ESZgUMTXyFWm9lDdc8aJ+rxTXBwcvN2K+P+rz/DLam RVPGLInCnQMtxY6PkDFXtwg6HiWuRCCwtNvkpbXZUXHKw9r/nNw0its0cUyvSKVq IXrBQmAOyeCniJGstzMpPevZUjTVfop0UnZVDsMZyCjAWrMgoJ1a26UfHenPNMdc R95wuzNr0HQnQw0zUSGH0Ry7FQN33vsW83X4Nx5Wm4OoxEAiy7eEOnkoKgB54CKr m6Z0bbhM/RwRnexzDJkI9+8/fTeLi4v6 -----END CERTIFICATE-----Generated at Fri Dec 19 05:10:24 2025 by rpki-client