This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json) Hash identifier: FjjzdXLGJdjp9dCwvY2/uxBX7lqqmQ6RyP8STXbgIuw= Subject key identifier: 07:42:4A:94:C1:42:5C:6B:31:D9:54:6F:90:27:DD:A2:4C:80:A2:7E Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Certificate serial: 3588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft Manifest number: 3520 Signing time: Sat 20 Dec 2025 14:24:14 +0000 Manifest this update: Sat 20 Dec 2025 14:24:13 +0000 Manifest next update: Sat 27 Dec 2025 14:24:13 +0000 Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: U6LaQ+jThzGNA3YndR5d4xMi4r94gkGi4ndFj3Ky8ZY=) 2: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: YWkTzReKkMMdzbtmiqQAlufg4yqGT8wGaWwSjyH8UQU=) 3: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: 09BDBOytkmEsvq3chH7xH+oSFPASpWtzKwiSSf1dkjk=) 4: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: JORxewwx6epIIvoPj1HNMB15dSN3/on46q8DR6+zkdE=) 5: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: P+6IlyX7VPwDe0x7wL0hnumsPRthTqu2byNn+pYjd1M=) 6: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: WS7qE/pmTb3s7efjgZ9MQ/XN8lRAGnQgtcmGI2f/wOc=) 7: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: 6fMWG8p+t3jXmQNCgytCBBdQRqCMMDHwzJOzM4imWAI=) 8: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: eRgieV4wC53bW4ulApr2XQpnijZHP7/22lsGRcHPpKc=) 9: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: IhLv/pNjKD3PinOrK86Sl1K1DLr48lFEyVWbMF9DO7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13704 (0x3588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Validity Not Before: Dec 20 14:24:13 2025 GMT Not After : Dec 27 14:24:13 2025 GMT Subject: CN=6946b18e-c0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a6:aa:b1:6d:aa:fe:fe:ad:70:7d:24:d2:a7: 89:ba:3a:d2:11:bc:e7:e2:08:52:e0:c8:70:66:83: ca:31:7e:09:a2:40:dd:05:6d:c7:45:83:9d:8c:1c: 82:73:ae:4a:fc:af:cf:21:78:a0:46:73:16:5c:d3: ba:a9:aa:0b:31:ee:9e:97:09:d2:de:10:b3:2c:59: b4:80:ab:5f:ff:08:e6:9e:4e:58:b1:7b:6f:e7:ee: a9:ef:47:e7:c4:47:51:1e:9b:21:12:9a:ff:3a:89: 7e:6a:48:6f:b0:56:89:88:7a:58:23:53:52:51:f7: ec:ec:71:72:25:30:71:82:80:3f:71:d0:db:18:90: e6:a1:5b:5e:aa:0d:86:c2:32:04:aa:4f:98:fc:6b: 90:44:98:1c:4e:af:3a:4e:e1:3a:49:5c:43:64:d2: 16:4a:d1:42:fc:0d:83:c6:5f:23:28:6a:c5:64:5e: 4d:d3:56:ba:d4:0b:d4:ca:4c:d6:46:ad:41:bd:f8: 6a:0b:ad:52:a4:18:2c:d1:70:97:36:c7:c3:1e:34: ae:f9:cc:12:d4:73:91:3e:0b:41:5a:f5:4a:05:30: 4f:16:e1:52:6b:55:8d:ae:9d:1f:36:12:3c:3a:57: 63:75:52:2f:7b:8a:89:6a:7c:01:07:e7:53:dd:f3: e5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:42:4A:94:C1:42:5C:6B:31:D9:54:6F:90:27:DD:A2:4C:80:A2:7E X509v3 Authority Key Identifier: keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:c8:b9:7c:93:69:3e:aa:6f:89:44:85:4e:a3:d6:52:25:61: 83:c2:73:f2:8d:a4:5e:a5:b9:ca:4b:aa:bb:78:87:0d:6f:75: a8:59:4b:aa:35:2a:b4:51:d6:28:23:7b:9c:dd:eb:3a:79:1a: 36:c9:ff:12:0b:76:ef:5b:59:6e:0a:51:68:ac:fc:26:f1:21: 93:54:14:d0:e8:c1:de:47:56:fc:c2:60:76:b1:78:2f:f9:cc: 3b:ad:16:d4:39:a8:ac:d5:46:41:de:00:0b:bb:d7:50:46:55: b6:38:74:bf:fe:55:00:2d:bd:60:c1:84:76:21:b7:ac:59:07: 8e:e3:db:d1:c3:52:bb:f3:fb:84:be:9f:bf:af:61:df:70:c6: 64:ee:cc:6e:85:9b:08:63:99:0a:41:47:b2:0f:d4:5e:4c:ed: 8a:83:18:ef:d9:e7:f8:f0:13:63:59:14:d3:01:c6:7c:5a:d8: 4a:b5:f9:19:dd:35:02:01:7f:51:18:55:75:8b:bb:ee:b6:0a: e5:25:8c:87:d5:fa:41:c5:2c:44:bc:e2:a7:bc:75:ef:dd:52: 34:e0:73:e7:7e:7e:74:63:fd:22:66:aa:59:0d:33:25:60:1a: 63:fe:6a:a4:a4:6a:a4:51:bd:60:68:36:f2:37:94:9f:c2:e8: e8:25:83:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz RTY0NzMyQjIwHhcNMjUxMjIwMTQyNDEzWhcNMjUxMjI3MTQyNDEzWjAYMRYwFAYD VQQDDA02OTQ2YjE4ZS1jMGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36aqsW2q/v6tcH0k0qeJujrSEbzn4ghS4MhwZoPKMX4JokDdBW3HRYOdjByC c65K/K/PIXigRnMWXNO6qaoLMe6elwnS3hCzLFm0gKtf/wjmnk5YsXtv5+6p70fn xEdRHpshEpr/Ool+akhvsFaJiHpYI1NSUffs7HFyJTBxgoA/cdDbGJDmoVteqg2G wjIEqk+Y/GuQRJgcTq86TuE6SVxDZNIWStFC/A2Dxl8jKGrFZF5N01a61AvUykzW Rq1BvfhqC61SpBgs0XCXNsfDHjSu+cwS1HORPgtBWvVKBTBPFuFSa1WNrp0fNhI8 OldjdVIve4qJanwBB+dT3fPl5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdCSpTB QlxrMdlUb5An3aJMgKJ+MB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z RmFaZFpaOG5RYlEtWkhNckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTyLl8k2k+qm+JRIVOo9ZSJWGDwnPyjaRepbnKS6q7eIcNb3WoWUuq NSq0UdYoI3uc3es6eRo2yf8SC3bvW1luClForPwm8SGTVBTQ6MHeR1b8wmB2sXgv +cw7rRbUOais1UZB3gALu9dQRlW2OHS//lUALb1gwYR2IbesWQeO49vRw1K78/uE vp+/r2HfcMZk7sxuhZsIY5kKQUeyD9ReTO2Kgxjv2ef48BNjWRTTAcZ8WthKtfkZ 3TUCAX9RGFV1i7vutgrlJYyH1fpBxSxEvOKnvHXv3VI04HPnfn50Y/0iZqpZDTMl YBpj/mqkpGqkUb1gaDbyN5SfwujoJYPY -----END CERTIFICATE-----Generated at Sun Dec 21 19:24:53 2025 by rpki-client