This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft File: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft (raw, json) Hash identifier: Wjrcly4h6ww+X1oce0qW247ihCB7RI97is38CtDmi5M= Subject key identifier: C1:FA:D5:2B:2F:3E:B6:20:87:69:10:B0:83:55:57:D0:84:D7:8F:0A Authority key identifier: D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 Certificate issuer: /CN=A91311BC/serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft Manifest number: 0134 Signing time: Mon 29 Dec 2025 03:38:26 +0000 Manifest this update: Mon 29 Dec 2025 03:38:25 +0000 Manifest next update: Mon 05 Jan 2026 03:38:25 +0000 Files and hashes: 1: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl (hash: vrKZMeEDbfSIUfmgYBMn58zR7HyIxRo5f7BdMUyWjNM=) 2: 4B0C31680FA511EFA3249B35C4F9AE02.roa (hash: xyAm+OptmLWgEZqD9AH33MZxMqQhEFXVgaoDCMDjmoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 03:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91311BC, serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Validity Not Before: Dec 29 03:38:25 2025 GMT Not After : Jan 5 03:38:25 2026 GMT Subject: CN=6951f7b1-3c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ce:f3:3c:90:f8:2a:ff:bc:28:08:22:a7:fb: 25:00:b8:2d:2a:71:36:37:2d:3b:2c:a4:e5:73:16: 9a:d9:83:ea:41:b1:44:37:2f:c4:6c:42:e0:f5:f5: 2a:87:25:54:93:2e:3f:74:b0:2d:47:3e:ba:57:aa: 9f:d6:a7:e1:90:b3:ac:6d:f7:3d:09:60:c4:85:91: d5:e1:b1:cb:23:03:3f:8e:ce:e7:54:68:80:c4:e0: 37:a0:73:3b:e1:a9:20:50:b0:d3:40:54:af:71:8f: 1f:7e:11:42:bf:2c:4b:9e:7d:95:0a:ab:73:e0:8d: 8d:1e:3d:c2:00:c6:9e:6a:04:4c:e5:fd:d8:c0:1a: 72:dd:22:b2:6a:c6:12:f6:8c:47:3a:93:73:79:cc: ff:7c:f0:bb:a9:1b:db:32:c9:01:18:58:12:28:f1: 40:4a:d1:e9:70:d2:77:a1:b9:3f:28:ed:20:2f:2b: 24:dc:4c:f5:14:43:d1:9f:20:6c:a2:19:6a:77:4f: 16:37:47:7c:5a:a4:c1:30:bf:52:32:4e:98:46:ed: c0:bf:4c:a3:18:fd:6c:f1:48:95:16:90:a6:14:fe: 17:30:25:b7:80:ee:69:37:1d:d8:c7:d2:98:7f:df: aa:18:03:da:a6:dc:1a:a0:82:36:cf:71:ab:57:24: 30:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FA:D5:2B:2F:3E:B6:20:87:69:10:B0:83:55:57:D0:84:D7:8F:0A X509v3 Authority Key Identifier: keyid:D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:ee:d8:42:f0:f5:96:b2:ce:63:e6:3d:bb:d7:6b:a1:ce:0d: e0:99:57:c0:2d:85:9d:aa:a2:3c:a9:47:e8:19:0e:fe:37:56: d0:98:cc:7d:d5:1c:f0:d5:64:44:62:a7:dd:80:0f:00:f5:9a: f0:ad:e8:88:91:cc:30:ab:b5:c9:40:8e:df:03:5e:f1:c8:c7: 18:56:5e:a7:c2:28:46:78:96:03:4d:9e:94:31:fc:72:7e:45: 12:d4:96:a1:16:3e:e7:0d:83:fb:45:4e:ed:c1:34:38:22:45: af:75:b4:55:3c:a0:f2:8a:a0:bf:4d:b9:19:30:68:38:95:29: e0:51:ec:fe:97:80:7f:35:0b:82:c8:81:81:1e:56:37:c2:18: 05:3a:f2:2c:bf:59:11:68:28:41:32:22:0a:30:e4:33:d3:22: 22:ec:4e:a6:3c:05:65:d0:a1:f1:96:67:b7:ca:b6:90:29:5d: 34:1d:27:4d:a8:b7:bf:7e:41:8e:77:d4:00:01:92:9a:f3:75: 63:8e:cd:a2:e5:5d:53:1b:7c:98:30:1b:33:6e:ef:f8:45:de: 1c:99:27:37:dd:2e:5a:b3:44:ac:5c:85:5e:f2:68:5b:c3:7c: 50:1a:35:da:e4:3c:bb:f3:e2:c3:a6:50:ef:6d:02:d7:cd:2c: ad:73:2d:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzExQkMxMTAvBgNVBAUTKEQ0QjFERDNFQjFBMDZGQTI2MkFCNkM1RUJGNEFGNTM2 NzFBQ0QyRjQwHhcNMjUxMjI5MDMzODI1WhcNMjYwMTA1MDMzODI1WjAYMRYwFAYD VQQDDA02OTUxZjdiMS0zYzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9c7zPJD4Kv+8KAgip/slALgtKnE2Ny07LKTlcxaa2YPqQbFENy/EbELg9fUq hyVUky4/dLAtRz66V6qf1qfhkLOsbfc9CWDEhZHV4bHLIwM/js7nVGiAxOA3oHM7 4akgULDTQFSvcY8ffhFCvyxLnn2VCqtz4I2NHj3CAMaeagRM5f3YwBpy3SKyasYS 9oxHOpNzecz/fPC7qRvbMskBGFgSKPFAStHpcNJ3obk/KO0gLysk3Ez1FEPRnyBs ohlqd08WN0d8WqTBML9SMk6YRu3Av0yjGP1s8UiVFpCmFP4XMCW3gO5pNx3Yx9KY f9+qGAPaptwaoII2z3GrVyQwPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMH61Ssv PrYgh2kQsINVV9CE148KMB8GA1UdIwQYMBaAFNSx3T6xoG+iYqtsXr9K9TZxrNL0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTFCQy8wNUVFQUJGQzBG QTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2SmlxMnhldjByMU5uR3Mw dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMSGRQckdnYjZKaXEyeGV2MHIxTm5HczB2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTFCQy8wNUVFQUJGQzBGQTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2 SmlxMnhldjByMU5uR3MwdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX7thC8PWWss5j5j2712uhzg3gmVfALYWdqqI8qUfoGQ7+N1bQmMx9 1Rzw1WREYqfdgA8A9ZrwreiIkcwwq7XJQI7fA17xyMcYVl6nwihGeJYDTZ6UMfxy fkUS1JahFj7nDYP7RU7twTQ4IkWvdbRVPKDyiqC/TbkZMGg4lSngUez+l4B/NQuC yIGBHlY3whgFOvIsv1kRaChBMiIKMOQz0yIi7E6mPAVl0KHxlme3yraQKV00HSdN qLe/fkGOd9QAAZKa83Vjjs2i5V1TG3yYMBszbu/4Rd4cmSc33S5as0SsXIVe8mhb w3xQGjXa5Dy78+LDplDvbQLXzSytcy2B -----END CERTIFICATE-----Generated at Mon Dec 29 06:10:09 2025 by rpki-client