This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft File: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft (raw, json) Hash identifier: 3/N5pHg28bt63TPt50calRAuEn6fiGxumup8pM18sQ4= Subject key identifier: BD:78:80:D5:55:EB:65:4D:49:EB:6F:C1:BD:01:55:C7:3D:3E:0E:A4 Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 Certificate issuer: /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft Manifest number: DA Signing time: Mon 29 Dec 2025 05:12:30 +0000 Manifest this update: Mon 29 Dec 2025 05:12:30 +0000 Manifest next update: Mon 05 Jan 2026 05:12:30 +0000 Files and hashes: 1: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl (hash: Ogh/bd956QNh6r589Wm4RViSiEX/844EqPRkypzJCOY=) 2: 45322DB8BF9111F0B4CD4C4FC4F9AE02.roa (hash: ud1mE3zDUyJoUD45JUyLpu4ly9UG6jF4f8pk2Ff/D/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 05:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Validity Not Before: Dec 29 05:12:30 2025 GMT Not After : Jan 5 05:12:30 2026 GMT Subject: CN=69520dbe-e53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f8:93:fb:97:86:b4:5c:5a:fe:26:88:3f:e9: f5:bb:09:6c:cd:3a:2c:a7:29:9c:9d:36:16:51:b3: 22:71:38:30:ea:3f:29:f8:ea:92:3f:11:ce:d8:60: 28:a1:87:d2:23:a9:a4:a3:ba:d8:ae:45:9c:20:85: ba:f4:3a:0a:f0:7f:76:20:73:e7:8b:5e:02:11:a8: c8:7f:d8:cd:09:2f:c2:e9:3a:36:80:63:ff:97:d7: ff:40:10:2e:5e:2c:50:de:03:9c:d3:47:ee:fb:79: 77:02:fe:2d:84:d5:aa:e8:00:cf:67:c7:f6:2f:43: 5a:f9:af:d5:be:c0:9a:98:34:58:c3:cc:f5:0b:48: d3:f5:f9:72:b9:da:5c:17:7f:46:5d:bd:39:10:af: 5c:95:fe:d6:52:bb:1d:eb:a1:dc:56:cd:c3:67:a8: 58:4c:2f:5f:ae:27:4f:5c:7e:77:09:17:dc:8a:3b: 47:a6:1b:25:39:df:c6:17:96:9b:9a:1e:e9:aa:22: 03:f1:97:99:1e:58:db:83:0d:d3:35:ac:0b:97:ad: 54:52:6a:4e:d4:14:45:61:5a:36:1a:46:cc:47:5a: 77:19:88:fd:d9:2f:47:4a:64:c9:19:d3:c1:59:7e: e0:33:30:e8:69:7b:37:8b:d7:f0:90:a4:88:6d:bc: d0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:78:80:D5:55:EB:65:4D:49:EB:6F:C1:BD:01:55:C7:3D:3E:0E:A4 X509v3 Authority Key Identifier: keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:e7:22:7e:15:70:fe:9b:3d:f4:29:05:12:e8:e8:3d:83:51: 34:85:76:c4:f2:3b:6a:fa:be:0c:86:12:d8:6c:bc:01:7e:c2: b9:88:de:fd:89:04:0e:6e:9c:6a:37:bf:a8:c4:19:7e:3d:b8: 0a:1f:2b:9e:11:db:73:ef:e4:b9:aa:96:ab:7c:0c:16:e1:31: 40:54:88:96:08:d5:f9:91:d0:2c:4e:4c:b4:8b:b1:fe:81:16: 37:10:35:ec:e5:e0:f1:d1:6a:f5:d8:9f:f6:db:51:ed:2f:f6: f7:0f:ff:9f:d6:7f:aa:73:8b:8b:49:af:63:c6:e8:a4:2f:55: 01:fa:43:9a:5f:ea:3a:a4:c3:51:b6:b3:7b:0f:9c:45:b5:6a: 8d:c1:78:a5:32:64:18:8a:22:61:19:20:35:cc:de:76:f2:7f: da:20:20:8e:89:ea:ca:15:b6:d3:d6:1b:c5:56:4b:62:8b:ab: 26:c4:6b:8a:cd:bd:f1:9f:26:91:65:dd:8b:2d:da:ec:7a:d4: b7:15:c8:59:45:dd:d5:1a:fb:d6:7b:69:b4:ec:07:b5:63:37: ca:7a:8b:32:c0:7a:29:cf:59:d2:b6:a7:ff:63:4b:71:16:07: 47:73:3f:6f:9a:77:c2:89:87:e1:ca:5f:47:28:26:49:a3:7f: 76:a3:7f:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZERDkxMTAvBgNVBAUTKDk2N0I5N0Q5RTMxMTI1MEQ4Mjk0MkQyN0U0QzVGOTBE OTgxMzgwNTgwHhcNMjUxMjI5MDUxMjMwWhcNMjYwMTA1MDUxMjMwWjAYMRYwFAYD VQQDDA02OTUyMGRiZS1lNTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PiT+5eGtFxa/iaIP+n1uwlszTospymcnTYWUbMicTgw6j8p+OqSPxHO2GAo oYfSI6mko7rYrkWcIIW69DoK8H92IHPni14CEajIf9jNCS/C6To2gGP/l9f/QBAu XixQ3gOc00fu+3l3Av4thNWq6ADPZ8f2L0Na+a/VvsCamDRYw8z1C0jT9flyudpc F39GXb05EK9clf7WUrsd66HcVs3DZ6hYTC9fridPXH53CRfcijtHphslOd/GF5ab mh7pqiID8ZeZHljbgw3TNawLl61UUmpO1BRFYVo2GkbMR1p3GYj92S9HSmTJGdPB WX7gMzDoaXs3i9fwkKSIbbzQSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL14gNVV 62VNSetvwb0BVcc9Pg6kMB8GA1UdIwQYMBaAFJZ7l9njESUNgpQtJ+TF+Q2YE4BY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkREOS9CNjIyRkE4QUQ2 REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9sbnVYMmVNUkpRMkNsQzBuNU1YNURaZ1Rn RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xudVgyZU1SSlEyQ2xDMG41TVg1RFpnVGdGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkREOS9CNjIyRkE4QUQ2REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9sbnVYMmVNUkpR MkNsQzBuNU1YNURaZ1RnRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm5yJ+FXD+mz30KQUS6Og9g1E0hXbE8jtq+r4MhhLYbLwBfsK5iN79 iQQObpxqN7+oxBl+PbgKHyueEdtz7+S5qparfAwW4TFAVIiWCNX5kdAsTky0i7H+ gRY3EDXs5eDx0Wr12J/221HtL/b3D/+f1n+qc4uLSa9jxuikL1UB+kOaX+o6pMNR trN7D5xFtWqNwXilMmQYiiJhGSA1zN528n/aICCOierKFbbT1hvFVktii6smxGuK zb3xnyaRZd2LLdrsetS3FchZRd3VGvvWe2m07Ae1YzfKeosywHopz1nStqf/Y0tx FgdHcz9vmnfCiYfhyl9HKCZJo392o3/a -----END CERTIFICATE-----Generated at Tue Dec 30 03:19:41 2025 by rpki-client