This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft File: LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft (raw, json) Hash identifier: /X+B05ZnjXJ0hrMAJr9dIk0fimTmV5VHXOGgkKFdSFE= Subject key identifier: D4:CE:CA:64:73:B0:82:22:43:5A:8E:55:E6:BC:E1:3C:5C:C6:1C:8A Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C Certificate issuer: /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Certificate serial: 13BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft Manifest number: 1362 Signing time: Sat 20 Dec 2025 16:47:00 +0000 Manifest this update: Sat 20 Dec 2025 16:47:00 +0000 Manifest next update: Sat 27 Dec 2025 16:47:00 +0000 Files and hashes: 1: LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl (hash: G0hlrhoJOf8Qp4NEQEwB+pbXa4k64gt8Q5bvxmEc1P4=) 2: 4AC75BA8FFE311EBB4FA4965C4F9AE02.roa (hash: DDS9dZq1rjloyc3jsLCKyVS21s+/yTPTpsQnEoKDOQc=) 3: 0396C48E5E7011EDAD328E21C4F9AE02.roa (hash: vKpj3gtlk/oArus3QVt8qMIl2rVV8ZR8fTIi0bGHkes=) 4: 7302617AC78E11E8BC20B719C4F9AE02.roa (hash: sjn+Ca3CIoVaW6VbJ0cVQY8YczhjL0b0Si8hIFo/7wg=) 5: ED7D926622C511EE8579CC72C4F9AE02.roa (hash: nyv08QSRNJhv3RvW17AH6qbhQ4D5Q9YXzn9YfgnDQT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5052 (0x13bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436, serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Validity Not Before: Dec 20 16:47:00 2025 GMT Not After : Dec 27 16:47:00 2025 GMT Subject: CN=6946d304-1a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:be:f6:e8:fa:0a:fc:8d:d9:2c:86:90:64: 37:e9:09:c9:3d:fe:f4:dd:11:14:bc:da:61:ec:14: 4b:d0:f6:fe:c3:24:74:5c:bc:46:e8:17:25:cd:dd: 99:28:84:e0:0c:77:4a:69:48:4c:9d:e8:bc:45:49: 64:b0:db:63:2f:10:ad:01:7a:21:fe:62:55:22:0c: 18:c4:e3:ea:27:46:81:13:c8:db:5e:83:42:04:22: f2:99:0f:f0:f3:2a:18:f8:40:e3:89:20:40:38:1a: c3:da:d4:22:9a:7a:f8:3b:67:d5:4a:50:45:11:4f: 40:5b:06:a0:5f:0f:f8:2e:a8:a1:bf:cb:49:72:9b: 94:37:c0:00:b4:61:ac:ae:87:34:b5:43:9a:47:0b: b4:35:09:fe:35:d2:65:89:83:8d:2f:89:43:7a:3b: 23:42:fe:a0:13:23:41:08:a5:0a:d5:bc:96:6d:ce: 70:03:4b:e9:c0:b8:bf:52:5c:ab:1c:00:64:dd:41: 76:27:e9:4e:73:9d:90:eb:82:1c:05:ec:76:fd:e4: ce:72:52:11:2e:eb:8d:ae:bf:4d:6a:cc:16:fe:6d: e3:22:be:c1:29:04:bb:24:a7:9c:6b:cf:ba:83:b2: 05:e1:d4:35:5c:67:ce:d2:e5:86:68:04:2e:af:2b: 85:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CE:CA:64:73:B0:82:22:43:5A:8E:55:E6:BC:E1:3C:5C:C6:1C:8A X509v3 Authority Key Identifier: keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:d3:e4:a4:03:2c:19:83:52:5e:d4:d8:d5:75:8a:d8:74:1b: 1b:ba:cc:b2:dc:45:56:3a:e8:62:c6:e6:f9:a4:59:60:fe:37: 2a:78:97:1b:c7:4e:10:d4:c8:eb:83:e5:1e:7c:cc:fe:d6:86: 35:6f:67:a7:99:0e:bf:97:ae:01:dd:04:52:03:e1:0d:16:f4: 86:4c:b5:06:35:63:96:d0:78:7a:97:39:73:92:93:2b:93:5b: 5e:7c:7f:5b:9d:28:06:a4:b1:eb:c7:c4:88:b4:0a:e7:97:35: 6d:1d:3c:33:4b:fe:2e:b7:aa:da:b8:79:02:7e:36:6e:23:1f: 92:6b:1f:ba:09:b0:5a:a4:8d:28:c3:2a:66:1c:71:67:92:6a: ee:3e:ac:8d:51:46:5d:d5:a7:ad:ce:a1:f4:88:7b:fa:55:8d: 17:44:6e:79:88:41:5c:3f:85:47:c7:b2:24:d3:8c:0c:9b:17: cf:0d:b3:79:c7:df:b8:69:5c:5d:59:bc:9b:c1:3f:c0:f4:f5: 68:ac:63:08:f8:04:fb:9a:76:d1:c2:92:42:57:d7:79:44:48: 31:70:61:39:3c:c8:71:79:29:dd:6e:41:10:c3:7a:c0:30:89: f5:06:a9:ca:cb:56:0b:ac:80:74:30:c0:3e:eb:4e:89:85:b0: 76:c1:93:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKDJEQTI1MUMxMUFDNjg4MTRGNTI3RjIyRTU1REU5QUM4 QzU3RkQ2NkMwHhcNMjUxMjIwMTY0NzAwWhcNMjUxMjI3MTY0NzAwWjAYMRYwFAYD VQQDDA02OTQ2ZDMwNC0xYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCu+9uj6CvyN2SyGkGQ36QnJPf703REUvNph7BRL0Pb+wyR0XLxG6Bclzd2Z KITgDHdKaUhMnei8RUlksNtjLxCtAXoh/mJVIgwYxOPqJ0aBE8jbXoNCBCLymQ/w 8yoY+EDjiSBAOBrD2tQimnr4O2fVSlBFEU9AWwagXw/4Lqihv8tJcpuUN8AAtGGs roc0tUOaRwu0NQn+NdJliYONL4lDejsjQv6gEyNBCKUK1byWbc5wA0vpwLi/Ulyr HABk3UF2J+lOc52Q64IcBex2/eTOclIRLuuNrr9NaswW/m3jIr7BKQS7JKeca8+6 g7IF4dQ1XGfO0uWGaAQuryuFyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTOymRz sIIiQ1qOVea84TxcxhyKMB8GA1UdIwQYMBaAFC2iUcEaxogU9SfyLlXemsjFf9Zs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BQUI4MDJFOEM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lCVDFKX0l1VmQ2YXlNVl8x bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhSlJ3UnJHaUJUMUpfSXVWZDZheU1WXzFtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTQzNi9BQUI4MDJFOEM3OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lC VDFKX0l1VmQ2YXlNVl8xbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk0+SkAywZg1Je1NjVdYrYdBsbusyy3EVWOuhixub5pFlg/jcqeJcb x04Q1Mjrg+UefMz+1oY1b2enmQ6/l64B3QRSA+ENFvSGTLUGNWOW0Hh6lzlzkpMr k1tefH9bnSgGpLHrx8SItArnlzVtHTwzS/4ut6rauHkCfjZuIx+Sax+6CbBapI0o wypmHHFnkmruPqyNUUZd1aetzqH0iHv6VY0XRG55iEFcP4VHx7Ik04wMmxfPDbN5 x9+4aVxdWbybwT/A9PVorGMI+AT7mnbRwpJCV9d5REgxcGE5PMhxeSndbkEQw3rA MIn1BqnKy1YLrIB0MMA+606JhbB2wZPh -----END CERTIFICATE-----Generated at Sat Dec 20 20:04:09 2025 by rpki-client