This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft File: LURD4dwv1QJlAbu5nX1p2vpgvxc.mft (raw, json) Hash identifier: xnjhi9wWQ9XNNMI+SXPZycUTn4C+Hb0Y+ZPcWnt9yDk= Subject key identifier: 3F:2C:28:7A:CA:81:C5:69:4E:00:45:E9:35:90:83:33:57:F7:B0:67 Authority key identifier: 2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 Certificate issuer: /CN=A91361B4/serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft Manifest number: 01D7 Signing time: Fri 19 Dec 2025 01:57:03 +0000 Manifest this update: Fri 19 Dec 2025 01:57:03 +0000 Manifest next update: Fri 26 Dec 2025 01:57:03 +0000 Files and hashes: 1: LURD4dwv1QJlAbu5nX1p2vpgvxc.crl (hash: Mq+ItHDEGNFD6w4j6ERag5huk/6El5LgD+lOyNqBzJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91361B4, serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Validity Not Before: Dec 19 01:57:03 2025 GMT Not After : Dec 26 01:57:03 2025 GMT Subject: CN=6944b0ef-9acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8a:41:c7:99:2a:7a:3d:69:85:e5:bf:fa:14: ed:3a:2d:32:b1:a8:2d:22:5a:f9:c6:54:1f:ed:a1: ef:04:ac:1a:8b:07:31:8f:e6:cd:22:16:df:1b:88: 04:39:6b:5a:8d:ef:c4:4b:31:20:04:45:c8:c5:65: b1:86:05:a8:2d:57:d3:ec:77:53:fd:57:1a:f8:6d: 01:02:47:51:f6:5d:66:ce:d5:86:8e:60:80:41:95: 94:68:92:ca:87:41:9d:a1:df:96:68:53:ea:0d:ec: d8:92:5b:5c:4c:ed:f3:e7:f5:61:fd:82:f8:c9:3e: 2b:33:e0:16:cf:75:2d:8e:c0:f9:0e:60:c1:9f:e0: 2e:92:c6:35:f7:eb:1b:16:fb:f7:28:48:86:6d:80: c6:ef:0c:3e:0d:f5:c1:46:e4:a1:2a:9b:1e:64:03: 63:28:4a:a9:6e:56:62:4f:d2:fd:95:b1:94:0d:73: 45:db:64:34:ec:b5:65:a5:55:00:f0:83:95:89:41: 9e:31:95:8f:e4:14:b0:63:e5:57:66:aa:24:35:b1: 37:e8:4f:3e:96:1e:27:55:7d:66:25:38:35:5c:da: 50:bb:e6:8b:51:cf:89:2b:f4:8f:ef:ca:be:77:3f: 56:7f:4c:3d:1d:f0:63:b5:f6:30:23:f3:2c:55:ab: cf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2C:28:7A:CA:81:C5:69:4E:00:45:E9:35:90:83:33:57:F7:B0:67 X509v3 Authority Key Identifier: keyid:2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:db:79:f6:41:49:26:5d:4b:96:f8:77:44:35:15:6d:fd:bf: c1:50:60:f1:f0:14:64:94:5e:8b:64:91:cb:40:d6:5c:70:17: 48:f9:ad:e9:91:81:c1:21:1a:d4:ef:bb:95:21:d9:5d:01:ca: fb:79:e7:97:0b:2b:c9:98:33:f3:ce:1c:5f:c8:8b:58:2c:0d: d5:ea:2c:65:63:fa:13:e1:be:7e:4d:4b:28:6a:56:93:12:af: a8:d9:3f:f1:1e:d9:38:da:25:4a:e1:da:a4:7e:e7:c3:48:9b: 94:72:6f:f1:5f:b5:1c:58:27:3d:a7:ac:21:b9:ef:bb:c8:a8: 05:e7:d3:f2:21:11:22:01:d4:2f:44:c3:0a:c9:33:da:02:93: 21:07:ee:dc:83:19:3a:80:bf:84:f7:78:fa:c8:80:d2:3f:07: 3e:f3:fc:0b:cf:bf:e9:79:88:de:51:ab:a4:35:a2:4b:6b:53: c3:a9:b1:a1:52:c9:4e:1b:ea:64:b1:d6:79:05:f5:26:98:6e: bb:1b:c1:83:0f:8a:bb:bd:cc:94:24:33:11:49:a9:8f:c2:3f: e6:ed:ef:3e:ae:0c:f8:a1:e9:b5:18:df:4c:f0:5c:39:cd:53: 44:be:29:d8:fa:49:19:01:da:1a:8c:b9:fe:26:af:db:ca:97: 70:95:b8:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxQjQxMTAvBgNVBAUTKDJENDQ0M0UxREMyRkQ1MDI2NTAxQkJCOTlEN0Q2OURB RkE2MEJGMTcwHhcNMjUxMjE5MDE1NzAzWhcNMjUxMjI2MDE1NzAzWjAYMRYwFAYD VQQDDA02OTQ0YjBlZi05YWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYpBx5kqej1pheW/+hTtOi0ysagtIlr5xlQf7aHvBKwaiwcxj+bNIhbfG4gE OWtaje/ESzEgBEXIxWWxhgWoLVfT7HdT/Vca+G0BAkdR9l1mztWGjmCAQZWUaJLK h0Gdod+WaFPqDezYkltcTO3z5/Vh/YL4yT4rM+AWz3UtjsD5DmDBn+AuksY19+sb Fvv3KEiGbYDG7ww+DfXBRuShKpseZANjKEqpblZiT9L9lbGUDXNF22Q07LVlpVUA 8IOViUGeMZWP5BSwY+VXZqokNbE36E8+lh4nVX1mJTg1XNpQu+aLUc+JK/SP78q+ dz9Wf0w9HfBjtfYwI/MsVavPJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8sKHrK gcVpTgBF6TWQgzNX97BnMB8GA1UdIwQYMBaAFC1EQ+HcL9UCZQG7uZ19adr6YL8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjFCNC83Q0QxMUZBMjA1 RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFRSmxBYnU1blgxcDJ2cGd2 eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVUkQ0ZHd2MVFKbEFidTVuWDFwMnZwZ3Z4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjFCNC83Q0QxMUZBMjA1RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFR SmxBYnU1blgxcDJ2cGd2eGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDD23n2QUkmXUuW+HdENRVt/b/BUGDx8BRklF6LZJHLQNZccBdI+a3p kYHBIRrU77uVIdldAcr7eeeXCyvJmDPzzhxfyItYLA3V6ixlY/oT4b5+TUsoalaT Eq+o2T/xHtk42iVK4dqkfufDSJuUcm/xX7UcWCc9p6whue+7yKgF59PyIREiAdQv RMMKyTPaApMhB+7cgxk6gL+E93j6yIDSPwc+8/wLz7/peYjeUaukNaJLa1PDqbGh UslOG+pksdZ5BfUmmG67G8GDD4q7vcyUJDMRSamPwj/m7e8+rgz4oem1GN9M8Fw5 zVNEvinY+kkZAdoajLn+Jq/bypdwlbi+ -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:27 2025 by rpki-client