This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json) Hash identifier: 8iOv1E9y+cE/Wx4CtJrMWij0w7MMmB+QNGt8U+zJuYE= Subject key identifier: 29:4A:B1:E5:8E:FB:9D:B7:E0:89:25:82:83:7E:91:C0:49:3C:46:B3 Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Certificate serial: 02A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft Manifest number: 029C Signing time: Sun 21 Dec 2025 00:44:15 +0000 Manifest this update: Sun 21 Dec 2025 00:44:14 +0000 Manifest next update: Sun 28 Dec 2025 00:44:14 +0000 Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: gcD+n5E70ftImSbEEvHvdjcukBHxYrgIjLLUEmUB5ZM=) 2: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: S7ZRwjfMRdXYDsbLwG2JwWob+OsTSSbwbMXmMEzGwj4=) 3: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: /QZn6eJNp1QkpQ2tx9f8l2ROi+aoRJ31N2B9Wc759hU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 676 (0x2a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Validity Not Before: Dec 21 00:44:14 2025 GMT Not After : Dec 28 00:44:14 2025 GMT Subject: CN=694742de-1ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0b:b8:be:13:ee:49:77:20:ea:e6:d7:78:1f: 28:88:fa:b8:40:2f:57:58:45:c7:a9:11:39:af:4c: c4:5d:81:25:0e:80:b0:fd:4f:87:2e:54:29:29:32: c3:ee:36:72:60:c5:13:21:cc:1f:4b:fc:e6:72:38: e3:9f:9c:80:00:40:f2:bb:59:c4:02:0c:bf:fa:46: bd:a3:45:f4:65:92:78:b0:f7:83:8f:cc:15:c3:4f: fe:e9:08:53:de:e2:5e:5e:5c:68:15:43:f9:9d:26: e5:c1:e5:9d:75:70:be:f4:56:cc:a8:5f:0e:07:ce: ed:00:d9:5e:0a:90:5f:fc:ce:0c:57:21:42:69:92: 5d:f9:0a:a4:60:7f:28:8c:bf:6d:6d:65:f2:0a:fe: 3c:f2:a6:50:77:8e:57:e5:55:06:4a:05:ba:50:31: 66:66:92:08:a9:1f:81:31:60:eb:fa:39:3e:1a:f5: 71:f5:07:cc:8b:5d:51:87:f0:92:a8:dc:f1:39:70: 1b:38:6b:49:9f:b2:0f:70:f6:83:ae:b7:44:09:8f: 75:ad:ca:22:80:32:b6:61:6c:1a:f9:8c:41:c9:89: da:72:6e:79:45:f4:c6:08:7b:4c:53:06:62:8e:71: b0:13:24:94:21:9b:2b:df:15:5b:71:e5:ad:14:6d: 37:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4A:B1:E5:8E:FB:9D:B7:E0:89:25:82:83:7E:91:C0:49:3C:46:B3 X509v3 Authority Key Identifier: keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:80:a1:24:ca:b9:45:11:8e:6d:8b:de:58:82:8b:b3:77:56: df:3e:84:a8:7a:9e:c9:21:d2:8a:7a:62:82:8f:97:78:75:e9: 7e:f4:1a:8d:91:b1:8d:d2:d5:b8:fd:9e:42:11:ba:b9:de:aa: a3:cf:5e:db:47:a2:3e:fb:cc:f1:f0:1d:45:73:7d:72:0a:e4: ea:67:c2:b7:38:67:44:3d:67:c3:2f:8b:cf:2e:81:b7:95:de: 3b:63:6d:b3:83:0d:c4:f0:66:04:e1:79:f1:27:d0:58:cd:d9: 11:4f:6a:20:0b:f5:e6:dd:93:1e:fa:f5:08:5d:b9:20:2f:77: 4d:b2:b5:da:5a:52:60:28:ce:34:8b:d8:93:45:46:78:14:71: 50:17:99:2c:e9:e0:e8:30:f7:f9:8b:6a:21:f7:91:3e:e5:e5: eb:be:ea:b6:a0:4b:fc:f2:fa:1c:66:de:63:aa:d5:80:38:e9: 6d:62:26:09:e6:90:d7:c3:d8:4e:2d:09:ff:2e:29:7e:e5:8c: 49:65:b1:2b:98:ca:f8:51:f5:27:f9:20:e2:3c:c5:15:66:b2: ee:90:ce:13:1e:84:6c:d5:38:23:42:8c:32:6f:d4:0f:ec:77: 1b:08:e0:d5:9f:1c:fa:7b:17:a4:f5:d2:d0:d2:ef:67:99:06: 46:e4:8e:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4RTExMTAvBgNVBAUTKDJEMENCMEU5OEY1NjJFOTM2NkQ1QTk5NUZCMjZGNjY2 QThDMEE5NUEwHhcNMjUxMjIxMDA0NDE0WhcNMjUxMjI4MDA0NDE0WjAYMRYwFAYD VQQDDA02OTQ3NDJkZS0xYWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAu4vhPuSXcg6ubXeB8oiPq4QC9XWEXHqRE5r0zEXYElDoCw/U+HLlQpKTLD 7jZyYMUTIcwfS/zmcjjjn5yAAEDyu1nEAgy/+ka9o0X0ZZJ4sPeDj8wVw0/+6QhT 3uJeXlxoFUP5nSblweWddXC+9FbMqF8OB87tANleCpBf/M4MVyFCaZJd+QqkYH8o jL9tbWXyCv488qZQd45X5VUGSgW6UDFmZpIIqR+BMWDr+jk+GvVx9QfMi11Rh/CS qNzxOXAbOGtJn7IPcPaDrrdECY91rcoigDK2YWwa+YxByYnacm55RfTGCHtMUwZi jnGwEySUIZsr3xVbceWtFG03EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClKseWO +5234IklgoN+kcBJPEazMB8GA1UdIwQYMBaAFC0MsOmPVi6TZtWplfsm9maowKla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThFMS8xMTMxNjYyQzI4 NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xwTm0xYW1WLXliMlpxakFx Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xReXc2WTlXTHBObTFhbVYteWIyWnFqQXFWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MThFMS8xMTMxNjYyQzI4NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xw Tm0xYW1WLXliMlpxakFxVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOgKEkyrlFEY5ti95Ygouzd1bfPoSoep7JIdKKemKCj5d4del+9BqN kbGN0tW4/Z5CEbq53qqjz17bR6I++8zx8B1Fc31yCuTqZ8K3OGdEPWfDL4vPLoG3 ld47Y22zgw3E8GYE4XnxJ9BYzdkRT2ogC/Xm3ZMe+vUIXbkgL3dNsrXaWlJgKM40 i9iTRUZ4FHFQF5ks6eDoMPf5i2oh95E+5eXrvuq2oEv88vocZt5jqtWAOOltYiYJ 5pDXw9hOLQn/Lil+5YxJZbErmMr4UfUn+SDiPMUVZrLukM4THoRs1TgjQowyb9QP 7HcbCODVnxz6exek9dLQ0u9nmQZG5I4C -----END CERTIFICATE-----Generated at Sun Dec 21 18:07:52 2025 by rpki-client