This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft File: LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft (raw, json) Hash identifier: 53Ge6QqyOG9+HGx6nEdzRa8/PZ5iDru7pNLoF2Gd4oM= Subject key identifier: D1:1E:B4:40:5B:03:8A:3D:AA:89:2C:99:34:C1:9F:4C:A2:60:1E:66 Authority key identifier: 2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25 Certificate issuer: /CN=A914B462/serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft Manifest number: 70 Signing time: Fri 19 Dec 2025 05:54:10 +0000 Manifest this update: Fri 19 Dec 2025 05:54:09 +0000 Manifest next update: Fri 26 Dec 2025 05:54:09 +0000 Files and hashes: 1: LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl (hash: eEXiugbOQz3XZ3bCQvYDd4xo/WLPqAvkhDTxZ/VyskQ=) 2: 5176F30C330911F0B6109345C4F9AE02.roa (hash: 2CjDcwjgwp6gOmqeOjKh58gY5ezLWgyuFkjz5k3OnLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B462, serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525 Validity Not Before: Dec 19 05:54:09 2025 GMT Not After : Dec 26 05:54:09 2025 GMT Subject: CN=6944e882-5d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bd:31:df:34:46:ed:c7:c2:df:7c:e4:93:b7: 79:51:de:95:56:84:3b:67:e7:65:02:40:9e:11:14: 02:b5:71:19:62:bc:61:51:de:a8:0a:9b:09:da:50: 13:f1:69:40:f8:c9:27:92:5d:a2:90:d0:88:38:9b: d6:4c:22:73:2a:65:f1:6c:71:e7:b9:90:32:c6:fe: 67:de:2e:da:50:e9:83:4a:42:9b:3d:39:22:f2:74: a9:f4:6c:8e:65:be:19:1d:76:4d:7f:4f:62:ac:3a: 62:51:fd:01:cf:eb:cd:49:ec:37:15:32:c3:a4:09: 77:8e:8f:1b:07:e0:46:fc:86:de:e9:3f:75:62:c4: 4a:5b:f7:ad:c9:ef:c2:86:9c:9a:22:2d:36:85:bf: e8:f4:21:50:c9:50:ed:58:58:e0:de:15:f1:82:e1: 6a:01:7c:50:aa:14:4a:4b:f7:0d:01:b9:7c:6a:bc: 28:90:fb:9a:70:e4:33:6a:98:ac:12:df:89:4c:6d: 10:a8:dc:9a:68:db:b8:a9:a3:31:72:13:a5:46:af: 78:ab:a3:9a:9e:c1:30:34:25:44:3b:07:dc:8e:82: ba:7c:78:47:39:6f:e3:9d:2d:5e:e5:2a:57:8a:6b: 90:be:e9:72:6a:d6:17:2b:f6:f2:be:d3:e9:5d:64: 11:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1E:B4:40:5B:03:8A:3D:AA:89:2C:99:34:C1:9F:4C:A2:60:1E:66 X509v3 Authority Key Identifier: keyid:2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5e:a0:68:38:4a:21:1b:b7:c9:5c:85:82:e8:a8:ab:a8:3b: 3f:4a:2d:47:43:1f:81:2a:a7:d8:5e:05:54:0f:e3:11:d6:9d: 75:97:f9:a7:5d:d9:1c:32:06:a8:7c:9d:1a:56:6a:47:ee:d2: 64:2b:eb:22:0e:1b:7b:14:54:40:9c:9d:9f:07:b7:7e:cc:4a: 8b:4b:10:a8:c6:54:29:ab:47:f7:3b:f8:56:c8:60:0c:e4:63: d3:b0:36:d9:0f:30:ea:e9:22:99:24:52:2a:be:01:f0:49:d6: ab:d2:fe:8d:e9:22:89:ae:71:bd:4b:db:16:68:68:51:4b:d2: 27:78:a6:eb:0f:27:05:d2:99:7b:23:24:0d:0e:a4:78:0c:e7: 63:f8:57:43:be:21:c0:d6:c4:a7:bd:36:fa:02:25:e1:16:e5: bc:5d:d6:83:dc:1d:d5:ac:49:07:16:e6:28:7b:df:3f:b1:7d: 3a:c4:f9:6d:1f:82:c7:c3:73:e8:e6:93:b3:74:f6:60:b1:37: 1d:57:16:45:b4:76:97:b8:50:82:7b:3a:8f:cc:a7:a8:52:60: 26:ad:9b:c0:98:4a:89:8a:48:e0:03:5f:86:f9:4b:c5:c5:45: 46:a9:b7:96:2c:fb:9d:78:3a:89:fb:56:f5:62:70:c9:75:d8: f2:40:4b:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjQ2MjExMC8GA1UEBRMoMkQ3RDVDNUY3NkNBM0E2OEY2NDk4MDJDOUQ4QjY2QTdG MjZGNjUyNTAeFw0yNTEyMTkwNTU0MDlaFw0yNTEyMjYwNTU0MDlaMBgxFjAUBgNV BAMMDTY5NDRlODgyLTVkNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQvTHfNEbtx8LffOSTt3lR3pVWhDtn52UCQJ4RFAK1cRlivGFR3qgKmwnaUBPx aUD4ySeSXaKQ0Ig4m9ZMInMqZfFscee5kDLG/mfeLtpQ6YNKQps9OSLydKn0bI5l vhkddk1/T2KsOmJR/QHP681J7DcVMsOkCXeOjxsH4Eb8ht7pP3VixEpb963J78KG nJoiLTaFv+j0IVDJUO1YWODeFfGC4WoBfFCqFEpL9w0BuXxqvCiQ+5pw5DNqmKwS 34lMbRCo3Jpo27ipozFyE6VGr3iro5qewTA0JUQ7B9yOgrp8eEc5b+OdLV7lKleK a5C+6XJq1hcr9vK+0+ldZBEvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0R60QFsD ij2qiSyZNMGfTKJgHmYwHwYDVR0jBBgwFoAULX1cX3bKOmj2SYAsnYtmp/JvZSUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNDYyL0EyN0NDM0U0MzJG RjExRjA4NTlCNUEyREM0RjlBRTAyL0xYMWNYM2JLT21qMlNZQXNuWXRtcF9KdlpT VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFgxY1gzYktPbWoyU1lBc25ZdG1wX0p2WlNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC NDYyL0EyN0NDM0U0MzJGRjExRjA4NTlCNUEyREM0RjlBRTAyL0xYMWNYM2JLT21q MlNZQXNuWXRtcF9KdlpTVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA9eoGg4SiEbt8lchYLoqKuoOz9KLUdDH4Eqp9heBVQP4xHWnXWX+add 2RwyBqh8nRpWakfu0mQr6yIOG3sUVECcnZ8Ht37MSotLEKjGVCmrR/c7+FbIYAzk Y9OwNtkPMOrpIpkkUiq+AfBJ1qvS/o3pIomucb1L2xZoaFFL0id4pusPJwXSmXsj JA0OpHgM52P4V0O+IcDWxKe9NvoCJeEW5bxd1oPcHdWsSQcW5ih73z+xfTrE+W0f gsfDc+jmk7N09mCxNx1XFkW0dpe4UIJ7Oo/Mp6hSYCatm8CYSomKSOADX4b5S8XF RUapt5Ys+514Oon7VvVicMl12PJASyk= -----END CERTIFICATE-----Generated at Sat Dec 20 00:59:06 2025 by rpki-client