This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft File: LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft (raw, json) Hash identifier: DnO+waJd3/6JlvEtc/ACyHXbFxCA1Wm67ZkbHxTkXes= Subject key identifier: A0:6D:53:6F:7B:27:21:E9:9A:EC:72:A1:A8:D6:DD:36:FF:AC:29:6A Authority key identifier: 2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D Certificate issuer: /CN=A9194093/serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft Manifest number: 13 Signing time: Fri 19 Dec 2025 06:52:41 +0000 Manifest this update: Fri 19 Dec 2025 06:52:40 +0000 Manifest next update: Fri 26 Dec 2025 06:52:40 +0000 Files and hashes: 1: LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl (hash: SjDO1tTsOEr17nnk69WdCfqzsqnHm+kBpLhEi9NyCwc=) 2: 3102D984C7A511F0AB2B8524C4F9AE02.roa (hash: OQj87ghxS5TbGdxIkx5R4cZ4gUWCAYoEWtR9bN5TBkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194093, serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D Validity Not Before: Dec 19 06:52:40 2025 GMT Not After : Dec 26 06:52:40 2025 GMT Subject: CN=6944f639-8760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:15:a3:77:c3:ce:ce:d4:5d:48:1d:d9:40:ac: 25:da:b0:94:28:a2:80:32:3d:f5:6a:73:f2:cb:17: b0:87:0f:3f:0a:05:78:47:f6:4c:62:e2:f9:ce:da: 6a:02:2d:a1:72:b2:c2:aa:78:e7:7f:31:b8:86:06: 93:0f:d8:4c:7b:69:b5:17:c6:c4:d5:2f:af:5f:55: 30:8a:30:d5:a4:f3:35:37:b6:07:10:f3:ae:b5:a8: be:d8:cd:48:39:2a:51:62:d1:31:ec:c3:3a:cf:73: 80:4b:33:40:3b:44:58:04:94:da:af:c4:bb:5c:fb: 88:d5:29:19:a2:3c:6a:55:74:ab:39:e0:96:e2:e2: 87:3d:74:80:cf:95:97:8c:f3:d9:fa:76:5a:07:b3: 93:79:b4:a3:bf:db:f5:0d:a6:3e:90:09:5d:66:c6: 94:1e:82:68:25:62:26:d2:54:60:61:58:f9:39:0f: 2f:fd:e1:9d:de:d4:77:d8:ee:8c:d7:f6:b0:22:81: 7e:8b:ef:03:f2:42:af:3b:ec:c4:46:a5:dc:d6:29: 10:d2:f0:c0:57:19:de:cd:2e:5e:54:85:43:47:0c: ea:ab:8e:8e:1e:3d:d2:db:a9:2f:6e:47:87:7d:24: 61:db:54:62:a4:52:30:b6:71:85:2f:64:6e:09:3d: 4c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6D:53:6F:7B:27:21:E9:9A:EC:72:A1:A8:D6:DD:36:FF:AC:29:6A X509v3 Authority Key Identifier: keyid:2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:13:ba:63:b4:17:45:bc:b3:68:02:7a:0e:b7:5e:f0:d9:12: 8b:da:9b:73:0d:47:4b:7e:83:6d:a7:59:57:99:35:24:32:49: 91:99:6f:45:cc:c8:d4:96:05:42:7a:35:9d:11:c9:a7:25:9f: 5d:87:78:36:ac:f4:56:c9:fc:7b:52:7f:f0:fb:92:3a:e0:ac: c7:fe:ea:5b:85:35:07:bb:54:ae:e5:db:9b:f7:34:d1:54:0a: ec:cf:28:3f:46:f8:ee:37:35:15:ab:d5:98:3b:9a:a8:88:d3: 07:c6:3b:6b:b7:8f:a7:0e:21:d3:79:44:f8:50:85:67:fb:82: 12:09:11:fb:91:e5:4c:36:80:18:27:74:53:59:37:06:ff:80: cc:f4:d5:56:5e:85:e5:76:21:b6:de:3a:b4:4d:00:ba:cd:af: 0b:ce:3f:a7:a9:7a:7d:2d:84:93:11:7b:0b:98:99:15:49:9a: 13:79:8f:9d:d9:5d:dc:21:19:9f:0e:e9:38:38:07:a8:bd:86: 3b:80:15:23:49:37:f4:e9:1b:60:fd:3a:da:c9:51:07:a1:08: 56:01:be:94:91:79:e6:33:a6:b2:0b:ba:d4:87:fe:63:48:a7: b2:b9:24:fa:a0:aa:be:d6:c2:54:6a:f1:c7:89:7a:1d:69:3a: 36:d0:22:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NDA5MzExMC8GA1UEBRMoMkQ3MzU2REExNzFCRkQ2NDAzQ0Q5RjMzRTNEQjk1QjQ0 Q0I0QkYxRDAeFw0yNTEyMTkwNjUyNDBaFw0yNTEyMjYwNjUyNDBaMBgxFjAUBgNV BAMMDTY5NDRmNjM5LTg3NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7FaN3w87O1F1IHdlArCXasJQoooAyPfVqc/LLF7CHDz8KBXhH9kxi4vnO2moC LaFyssKqeOd/MbiGBpMP2Ex7abUXxsTVL69fVTCKMNWk8zU3tgcQ8661qL7YzUg5 KlFi0THswzrPc4BLM0A7RFgElNqvxLtc+4jVKRmiPGpVdKs54Jbi4oc9dIDPlZeM 89n6dloHs5N5tKO/2/UNpj6QCV1mxpQegmglYibSVGBhWPk5Dy/94Z3e1HfY7ozX 9rAigX6L7wPyQq877MRGpdzWKRDS8MBXGd7NLl5UhUNHDOqrjo4ePdLbqS9uR4d9 JGHbVGKkUjC2cYUvZG4JPUy9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoG1Tb3sn Iema7HKhqNbdNv+sKWowHwYDVR0jBBgwFoAULXNW2hcb/WQDzZ8z49uVtEy0vx0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0MDkzL0NGQTBGOTkyQzdB MzExRjA4NzE5MDEyMkM0RjlBRTAyL0xYTlcyaGNiX1dRRHpaOHo0OXVWdEV5MHZ4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFhOVzJoY2JfV1FEelo4ejQ5dVZ0RXkwdngwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 MDkzL0NGQTBGOTkyQzdBMzExRjA4NzE5MDEyMkM0RjlBRTAyL0xYTlcyaGNiX1dR RHpaOHo0OXVWdEV5MHZ4MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGUTumO0F0W8s2gCeg63XvDZEovam3MNR0t+g22nWVeZNSQySZGZb0XM yNSWBUJ6NZ0Ryacln12HeDas9FbJ/HtSf/D7kjrgrMf+6luFNQe7VK7l25v3NNFU CuzPKD9G+O43NRWr1Zg7mqiI0wfGO2u3j6cOIdN5RPhQhWf7ghIJEfuR5Uw2gBgn dFNZNwb/gMz01VZeheV2IbbeOrRNALrNrwvOP6epen0thJMRewuYmRVJmhN5j53Z XdwhGZ8O6Tg4B6i9hjuAFSNJN/TpG2D9OtrJUQehCFYBvpSReeYzprILutSH/mNI p7K5JPqgqr7WwlRq8ceJeh1pOjbQIqk= -----END CERTIFICATE-----Generated at Fri Dec 19 18:59:24 2025 by rpki-client