This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json) Hash identifier: jNowxx4gmWnVcRx3VPMGwCVe7fB/doyltKhYN/oVxPM= Subject key identifier: 9F:FB:16:3F:58:7F:F6:8C:BE:25:96:B5:23:18:4B:3A:57:79:95:92 Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft Manifest number: 0103 Signing time: Thu 25 Dec 2025 04:05:46 +0000 Manifest this update: Thu 25 Dec 2025 04:05:45 +0000 Manifest next update: Thu 01 Jan 2026 04:05:45 +0000 Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: zswZTmUjFKIwK4HzZYSXcj25HfWlNOy5jar5HMEYxWw=) 2: 11763FC8648D11F0950AB94BC4F9AE02.roa (hash: 86Rvuv44s2BQaDBbytq/QrAOdGP+XaqCHubjdpDvCpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 04:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Validity Not Before: Dec 25 04:05:45 2025 GMT Not After : Jan 1 04:05:45 2026 GMT Subject: CN=694cb819-4a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:66:e6:b1:e6:4a:5d:a1:03:a5:90:04:a2: 3c:12:2d:74:61:af:26:16:24:72:8b:9d:6f:c0:14: 65:6c:19:65:74:2b:d5:c0:5f:69:c9:55:2f:07:d0: fc:16:b2:51:2d:b0:7b:e9:48:7b:df:d2:53:c1:2c: 98:e7:b1:43:3a:91:60:1c:46:02:d5:4e:67:7d:fe: 0f:d4:fd:f1:72:96:cb:35:87:e2:79:3b:c7:0e:4f: a6:10:9f:5c:16:04:5c:3f:d2:86:29:67:58:82:07: 40:bc:0e:8f:5c:cf:e9:47:27:8e:54:00:1c:f5:5f: fa:4f:2e:2c:59:c8:55:bf:9d:e7:9f:2a:9e:db:f4: 03:23:76:ea:c3:72:e7:c8:4b:e4:5f:90:e4:b7:e9: 75:94:72:c0:86:5a:bf:25:eb:e5:87:bb:aa:58:ba: 2e:11:e6:86:f8:76:af:f7:4f:2a:a9:c2:52:c9:3a: eb:31:fd:dd:85:7f:ce:49:97:04:bc:11:54:8e:ed: 2d:73:ac:e4:53:1e:c0:32:b7:3e:8a:7a:94:3b:e7: ee:da:13:c0:e9:48:5b:a7:d0:cb:29:74:3f:3b:41: 10:ad:0d:e0:63:ac:69:79:4f:cc:83:44:05:5d:28: c8:be:ce:52:0c:0c:58:6a:68:1c:f6:c9:bf:4c:4e: 34:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FB:16:3F:58:7F:F6:8C:BE:25:96:B5:23:18:4B:3A:57:79:95:92 X509v3 Authority Key Identifier: keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:d3:be:1d:a3:d6:ae:26:b2:3c:77:61:e6:1a:d7:9c:27:0c: 9d:b8:67:26:25:88:d0:ff:35:90:73:73:52:fa:db:c4:1a:77: 41:0e:57:33:60:37:b1:f1:97:8e:26:eb:d9:35:7d:fe:98:e9: 32:d7:a8:b4:74:97:a6:91:55:18:d7:3c:1a:71:64:03:28:79: a3:ca:44:ae:73:81:ff:6c:94:1d:fd:ca:39:92:92:41:e7:5e: 5a:ef:6b:d3:07:b8:65:a6:32:a8:55:cc:a2:37:d7:9b:35:67: 85:0f:4e:97:d6:d3:fb:5b:46:93:f3:e5:39:12:3c:2f:31:6b: cc:a2:b5:13:c2:81:1b:09:57:f5:2a:9f:9c:f9:f7:3b:47:57: 45:84:61:e3:c4:e4:56:e3:55:9f:9a:e1:eb:bb:07:41:da:46: 1c:06:fd:ae:01:38:58:8c:64:93:7c:3f:cc:1f:39:c1:a2:6f: 92:61:6b:1c:f6:28:0c:b3:b8:60:4a:18:fa:ec:dc:a7:0b:ad: 0b:3e:16:58:6b:90:89:44:c4:e9:b0:0d:ac:80:f1:9c:23:cb: d8:13:58:40:b0:ad:8c:e5:92:71:1b:12:b5:29:ac:d3:12:40: b8:d1:4b:7a:43:6b:79:26:d7:05:e3:65:51:8e:7e:be:cf:1b: 8d:38:d2:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKDk3MDZCRjEyMTkzNTREMDE4QzE1ODU4Q0U5NzY3OUZF NDNFNkIzMTIwHhcNMjUxMjI1MDQwNTQ1WhcNMjYwMTAxMDQwNTQ1WjAYMRYwFAYD VQQDDA02OTRjYjgxOS00YTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1lm5rHmSl2hA6WQBKI8Ei10Ya8mFiRyi51vwBRlbBlldCvVwF9pyVUvB9D8 FrJRLbB76Uh739JTwSyY57FDOpFgHEYC1U5nff4P1P3xcpbLNYfieTvHDk+mEJ9c FgRcP9KGKWdYggdAvA6PXM/pRyeOVAAc9V/6Ty4sWchVv53nnyqe2/QDI3bqw3Ln yEvkX5Dkt+l1lHLAhlq/Jevlh7uqWLouEeaG+Hav908qqcJSyTrrMf3dhX/OSZcE vBFUju0tc6zkUx7AMrc+inqUO+fu2hPA6Uhbp9DLKXQ/O0EQrQ3gY6xpeU/Mg0QF XSjIvs5SDAxYamgc9sm/TE40nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/7Fj9Y f/aMviWWtSMYSzpXeZWSMB8GA1UdIwQYMBaAFJcGvxIZNU0BjBWFjOl2ef5D5rMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9DMTJFODQyQzU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRRR01GWVdNNlhaNV9rUG1z eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9DMTJFODQyQzU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRR R01GWVdNNlhaNV9rUG1zeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2074do9auJrI8d2HmGtecJwyduGcmJYjQ/zWQc3NS+tvEGndBDlcz YDex8ZeOJuvZNX3+mOky16i0dJemkVUY1zwacWQDKHmjykSuc4H/bJQd/co5kpJB 515a72vTB7hlpjKoVcyiN9ebNWeFD06X1tP7W0aT8+U5EjwvMWvMorUTwoEbCVf1 Kp+c+fc7R1dFhGHjxORW41WfmuHruwdB2kYcBv2uAThYjGSTfD/MHznBom+SYWsc 9igMs7hgShj67NynC60LPhZYa5CJRMTpsA2sgPGcI8vYE1hAsK2M5ZJxGxK1KazT EkC40Ut6Q2t5JtcF42VRjn6+zxuNONLw -----END CERTIFICATE-----Generated at Thu Dec 25 16:03:45 2025 by rpki-client