This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json) Hash identifier: U4P+viCNWU6s8lBJaEl5Jo2km9fKuFNOqPS5ySxVhTo= Subject key identifier: 7F:40:40:BA:B0:B5:7E:99:FF:72:4F:4E:51:41:9C:91:5D:36:CE:4E Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0D27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft Manifest number: 0D18 Signing time: Sat 20 Dec 2025 17:42:33 +0000 Manifest this update: Sat 20 Dec 2025 17:42:33 +0000 Manifest next update: Sat 27 Dec 2025 17:42:33 +0000 Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: JhIAdf5EpLkmA+yWy/qAPNosV8dhY4umSukcZJ83UuU=) 2: 97834674B8C511F0A874F663C4F9AE02.roa (hash: ccWVBhFOcENM09AuDRyLIP93A/dh9M6+1AU3r2Fkb/c=) 3: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: hN5uWTMLKihaDnB2GMrlEkHThQZGD2la1832Pp7TIb4=) 4: 0A7CA184B8C611F0B55B8B4EC4F9AE02.roa (hash: h1zv5buc+Cn7JuifmG3cLQTCbFRzAjARZCrKCnqaFQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3367 (0xd27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Dec 20 17:42:33 2025 GMT Not After : Dec 27 17:42:33 2025 GMT Subject: CN=6946e009-1d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:15:44:52:50:31:8a:49:84:4f:34:3c:fa:07: f1:1f:41:f1:cf:46:fb:dd:bf:fb:46:4f:be:3c:b5: 96:f2:90:8f:00:18:21:26:95:a9:10:37:e2:c5:83: 3d:40:d3:9a:09:36:e4:ea:dc:70:1a:1e:a3:7a:3e: 98:f9:a5:14:b4:ca:41:56:92:fb:47:e8:d5:09:f8: f7:00:23:7a:00:07:75:77:55:df:91:30:52:a9:0e: ad:68:42:dc:2f:75:47:5e:2a:84:ef:eb:cb:a2:1c: 29:d9:61:0d:c3:c5:c1:5c:57:20:59:98:ee:a1:1a: 95:a7:3b:05:df:00:0a:89:6f:75:6d:7f:20:4c:5d: 25:71:5b:25:03:42:1d:ec:20:f0:46:11:ad:1c:33: 68:d0:84:5d:3c:0f:2a:8b:30:c3:0e:24:81:db:01: 7f:50:a9:ae:d1:98:bb:aa:1b:6a:db:af:bc:4c:d3: 2d:eb:26:eb:93:a0:ec:eb:9b:b8:52:9c:9d:86:3a: 0e:4d:bd:bf:1e:55:ae:aa:4f:68:e0:bd:52:0b:76: 73:bb:ee:72:b5:24:c4:f5:f9:00:bc:1a:ce:7a:ae: 90:59:fe:d2:4e:9f:3f:53:0b:3c:39:35:eb:84:6a: 09:18:b3:c6:a5:44:96:eb:d7:f2:91:97:60:6b:57: d4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:40:40:BA:B0:B5:7E:99:FF:72:4F:4E:51:41:9C:91:5D:36:CE:4E X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:89:3c:dd:b2:b3:b5:81:53:4f:b7:dc:89:91:f5:e9:b9:0d: 0b:04:b3:59:bf:0d:26:f4:f5:c0:38:17:48:29:e2:b1:71:74: fa:ff:10:84:ab:38:7f:c6:01:65:73:c5:c8:f0:ab:f2:38:a9: f2:b6:d3:b0:bd:13:83:9d:4f:06:42:27:a3:6c:6c:4f:60:4e: e1:51:62:15:ce:6a:76:ca:5b:b8:1a:6d:43:ab:c9:b8:35:24: d5:47:9c:20:e5:1b:54:f5:d8:2b:46:74:58:0b:55:42:5c:4e: 28:f4:18:ca:5a:ce:ae:9d:3e:16:4c:bc:44:26:a9:f6:ba:5b: 21:5b:19:9b:1c:1a:cf:77:69:2a:9a:05:6d:b4:14:1f:9e:fb: c8:9c:8f:0b:d4:d6:0a:e0:c5:29:71:50:47:61:4f:36:7c:d4: f8:89:7f:f7:7f:04:2e:66:d8:76:9c:d1:c9:9d:fe:34:67:a7: d3:c1:a2:29:f0:bb:7a:07:7d:5d:5b:c1:45:16:fa:cc:1f:75: 81:3e:9f:55:54:f2:28:f7:af:5d:f8:00:0d:63:48:1d:73:91: 80:cc:81:75:28:b8:c8:da:dc:26:c5:e7:98:8c:9f:f2:a6:15: 0f:eb:25:17:81:e4:a3:fc:00:c2:6c:7a:fc:61:7b:0e:2a:63: 07:48:1f:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjUxMjIwMTc0MjMzWhcNMjUxMjI3MTc0MjMzWjAYMRYwFAYD VQQDDA02OTQ2ZTAwOS0xZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRVEUlAxikmETzQ8+gfxH0Hxz0b73b/7Rk++PLWW8pCPABghJpWpEDfixYM9 QNOaCTbk6txwGh6jej6Y+aUUtMpBVpL7R+jVCfj3ACN6AAd1d1XfkTBSqQ6taELc L3VHXiqE7+vLohwp2WENw8XBXFcgWZjuoRqVpzsF3wAKiW91bX8gTF0lcVslA0Id 7CDwRhGtHDNo0IRdPA8qizDDDiSB2wF/UKmu0Zi7qhtq26+8TNMt6ybrk6Ds65u4 UpydhjoOTb2/HlWuqk9o4L1SC3Zzu+5ytSTE9fkAvBrOeq6QWf7STp8/Uws8OTXr hGoJGLPGpUSW69fykZdga1fUzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9AQLqw tX6Z/3JPTlFBnJFdNs5OMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3 aFFDWC1NYnRoWEhheHhCYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXiTzdsrO1gVNPt9yJkfXpuQ0LBLNZvw0m9PXAOBdIKeKxcXT6/xCE qzh/xgFlc8XI8KvyOKnyttOwvRODnU8GQiejbGxPYE7hUWIVzmp2ylu4Gm1Dq8m4 NSTVR5wg5RtU9dgrRnRYC1VCXE4o9BjKWs6unT4WTLxEJqn2ulshWxmbHBrPd2kq mgVttBQfnvvInI8L1NYK4MUpcVBHYU82fNT4iX/3fwQuZth2nNHJnf40Z6fTwaIp 8Lt6B31dW8FFFvrMH3WBPp9VVPIo969d+AANY0gdc5GAzIF1KLjI2twmxeeYjJ/y phUP6yUXgeSj/ADCbHr8YXsOKmMHSB/Q -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:34 2025 by rpki-client