This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft File: LtTacwW1lNyVt6BBDZrLKN4pIL8.mft (raw, json) Hash identifier: GSNVTdFx/kDu8Gvxw54Z9loeSHIWkulshZP4kAG5oxM= Subject key identifier: D1:49:40:66:6F:A1:B3:7C:1E:FD:35:D9:81:BB:CF:BE:70:3A:A9:A1 Authority key identifier: 2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF Certificate issuer: /CN=A91454E4/serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF Certificate serial: 04F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft Manifest number: 04E8 Signing time: Thu 18 Dec 2025 23:06:26 +0000 Manifest this update: Thu 18 Dec 2025 23:06:26 +0000 Manifest next update: Thu 25 Dec 2025 23:06:26 +0000 Files and hashes: 1: LtTacwW1lNyVt6BBDZrLKN4pIL8.crl (hash: I4QxOB/XuEqiOnoq/k9tgO5Ejca8Ce6Uz3VwjFvsc8Q=) 2: A88BB9A01CA011EFB3F91015C4F9AE02.roa (hash: XmiVLeP2/s1DW27hoy1zX73fTUJ6HYcFrkZxidVKlRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1266 (0x4f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454E4, serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF Validity Not Before: Dec 18 23:06:26 2025 GMT Not After : Dec 25 23:06:26 2025 GMT Subject: CN=694488f2-8af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e7:7d:f0:e5:5f:2f:f0:b6:2b:59:2d:ee:a8: 9b:1f:61:5b:66:1b:c0:ed:55:14:61:64:4e:75:be: de:e1:19:64:c2:78:f7:5a:6c:dd:45:a2:ec:f6:fe: 6b:04:45:38:ee:6b:61:12:b8:05:b5:c8:24:52:4f: 3e:a9:c1:be:74:5b:87:c5:e9:e7:4c:3a:1c:ca:d8: fb:1d:cb:33:95:58:e4:36:b2:8d:c6:18:17:8d:da: 5e:46:a9:86:78:db:0b:83:78:ed:37:73:b5:b1:2c: ef:69:71:8f:7e:00:6d:5d:c0:b9:41:8b:ef:f4:a5: 02:aa:76:56:a1:27:49:16:bc:8c:eb:0b:ad:8e:99: 3c:4e:1e:b8:88:7d:19:59:3a:b2:89:42:af:53:80: 83:9b:dd:d1:23:30:ce:a2:e6:8c:b5:ff:3b:a5:ba: fd:9a:30:01:00:f4:cb:d3:8a:93:c5:d3:e3:09:97: cd:ff:52:5d:03:8f:69:bd:d0:65:97:49:5d:62:e5: 23:ca:21:41:23:a4:49:a0:d0:06:c0:7c:c4:bc:98: e8:78:d2:ca:3c:f2:73:4c:c9:7d:9b:30:04:a9:3e: 5f:88:b3:74:57:02:aa:cc:1f:c5:5a:53:a4:d7:a6: b8:52:67:41:6f:02:0f:87:51:3f:78:2e:c1:0f:5a: 11:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:49:40:66:6F:A1:B3:7C:1E:FD:35:D9:81:BB:CF:BE:70:3A:A9:A1 X509v3 Authority Key Identifier: keyid:2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:be:9e:88:c0:36:40:00:7f:ee:bf:bb:91:d8:fe:3f:2b:49: 87:73:ee:26:55:30:75:a1:94:77:16:d2:63:61:a4:32:93:fa: 0f:a4:a1:26:ef:bf:08:3e:c6:62:b1:ea:45:eb:13:c9:a1:19: 8e:f6:27:70:79:03:5d:fc:fb:35:5a:40:17:d8:7d:49:ee:e5: 4a:78:1b:bb:81:b1:29:a5:8f:f6:12:21:10:fd:0b:d2:77:bc: 04:11:37:33:01:d4:34:14:40:4d:f9:5f:09:26:45:8f:12:34: a3:b5:a0:05:76:73:49:ce:e2:9c:ee:8b:18:50:ae:26:5f:a6: 3c:b2:00:38:e6:3a:36:c9:67:2b:fa:33:25:29:ef:b6:c1:c9: 75:2a:1b:09:c1:f5:9e:aa:fa:5a:04:70:2a:8d:30:95:fa:2d: 9e:3f:a0:6c:5d:26:e7:7e:a0:3d:a8:c2:03:ee:16:97:f2:c6: 69:4e:51:d9:bc:9a:56:5a:09:8d:1d:55:4d:4b:42:b2:73:97: b4:46:8f:01:3f:4a:fa:58:22:78:6a:ea:6a:a2:d3:4c:80:66: 82:5c:a0:8c:02:ac:7f:1e:05:82:66:2b:a4:06:30:db:aa:91: 38:6b:bb:de:58:c5:f6:19:a4:13:a6:58:46:ed:79:1a:12:d4: cf:2f:ce:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0RTQxMTAvBgNVBAUTKDJFRDREQTczMDVCNTk0REM5NUI3QTA0MTBEOUFDQjI4 REUyOTIwQkYwHhcNMjUxMjE4MjMwNjI2WhcNMjUxMjI1MjMwNjI2WjAYMRYwFAYD VQQDDA02OTQ0ODhmMi04YWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+d98OVfL/C2K1kt7qibH2FbZhvA7VUUYWROdb7e4Rlkwnj3WmzdRaLs9v5r BEU47mthErgFtcgkUk8+qcG+dFuHxennTDocytj7HcszlVjkNrKNxhgXjdpeRqmG eNsLg3jtN3O1sSzvaXGPfgBtXcC5QYvv9KUCqnZWoSdJFryM6wutjpk8Th64iH0Z WTqyiUKvU4CDm93RIzDOouaMtf87pbr9mjABAPTL04qTxdPjCZfN/1JdA49pvdBl l0ldYuUjyiFBI6RJoNAGwHzEvJjoeNLKPPJzTMl9mzAEqT5fiLN0VwKqzB/FWlOk 16a4UmdBbwIPh1E/eC7BD1oRNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFJQGZv obN8Hv012YG7z75wOqmhMB8GA1UdIwQYMBaAFC7U2nMFtZTclbegQQ2ayyjeKSC/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRFNC83NzE0QzY3QTQz ODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxOeVZ0NkJCRFpyTEtONHBJ TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x0VGFjd1cxbE55VnQ2QkJEWnJMS040cElMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRFNC83NzE0QzY3QTQzODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxO eVZ0NkJCRFpyTEtONHBJTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvvp6IwDZAAH/uv7uR2P4/K0mHc+4mVTB1oZR3FtJjYaQyk/oPpKEm 778IPsZisepF6xPJoRmO9idweQNd/Ps1WkAX2H1J7uVKeBu7gbEppY/2EiEQ/QvS d7wEETczAdQ0FEBN+V8JJkWPEjSjtaAFdnNJzuKc7osYUK4mX6Y8sgA45jo2yWcr +jMlKe+2wcl1KhsJwfWeqvpaBHAqjTCV+i2eP6BsXSbnfqA9qMID7haX8sZpTlHZ vJpWWgmNHVVNS0Kyc5e0Ro8BP0r6WCJ4aupqotNMgGaCXKCMAqx/HgWCZiukBjDb qpE4a7veWMX2GaQTplhG7XkaEtTPL85S -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:51 2025 by rpki-client