This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft File: lAjp17bOuDTKkJAeRXhgEMBpwys.mft (raw, json) Hash identifier: +Wrc49vm0Q9aQUc8c2nuJaeTABbCPEJBE+QOBQWUHj8= Subject key identifier: 23:B7:DA:52:E5:FE:2F:27:83:48:05:E5:C3:B2:D4:E5:9B:31:A9:C4 Authority key identifier: 94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B Certificate issuer: /CN=A91A394B/serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft Manifest number: 01A1 Signing time: Tue 23 Dec 2025 02:20:00 +0000 Manifest this update: Tue 23 Dec 2025 02:19:59 +0000 Manifest next update: Tue 30 Dec 2025 02:19:59 +0000 Files and hashes: 1: lAjp17bOuDTKkJAeRXhgEMBpwys.crl (hash: a0Hxn3Wn3UvWstbkke4pjKUsFmhmncxEn1U8uKUtkVU=) 2: 6015E82861B411EEBAA6AD59C4F9AE02.roa (hash: LwGVKFP/xTdHf/wYi8eVp6yJDAuRI5jefu1jxHK93RU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A394B, serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B Validity Not Before: Dec 23 02:19:59 2025 GMT Not After : Dec 30 02:19:59 2025 GMT Subject: CN=6949fc4f-6389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:25:87:02:05:59:9a:53:e8:80:0c:24:ad:fd: 32:86:a7:01:14:1b:68:36:04:2b:70:c5:c2:97:48: 5a:27:35:37:3e:23:3b:0b:08:4c:38:d5:8d:01:d5: a2:7d:32:bf:3f:5d:1b:5f:6d:8e:a8:ca:ec:f4:4b: 14:70:55:7e:c9:cc:47:60:40:1c:43:3f:c3:51:66: 6e:b3:f2:78:19:fe:cd:02:64:c0:4a:88:23:bd:9c: 61:9d:da:7f:81:6a:85:70:ae:e5:20:ff:18:c9:0d: 58:64:fa:dc:fe:07:37:11:1d:d6:4c:d2:f7:18:68: f1:7d:fa:21:92:8a:c1:30:ff:02:1f:2d:70:e6:e8: 3d:fe:58:58:cf:6f:2e:ab:e5:23:96:63:0f:a6:98: c6:93:41:7f:f2:41:6c:20:4b:34:46:55:ae:5d:b8: 61:52:42:5a:19:65:69:bd:37:52:04:d2:38:12:d7: 9a:82:12:d3:ce:1d:e7:8c:da:21:bc:fa:3d:bf:49: ee:f6:ac:02:f7:b4:3d:44:97:22:85:fb:d1:6c:f4: 5f:04:1a:ed:c1:c3:a9:aa:81:ae:44:07:dc:f5:ff: 42:26:ee:03:49:47:91:e3:a1:da:5f:c2:94:a6:a6: 75:3e:1a:de:30:cc:38:48:c9:67:70:1e:21:9a:e5: b5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B7:DA:52:E5:FE:2F:27:83:48:05:E5:C3:B2:D4:E5:9B:31:A9:C4 X509v3 Authority Key Identifier: keyid:94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ef:d8:04:cf:af:6c:17:25:48:d9:2f:8e:0d:29:72:93:a6: 17:66:43:3e:a3:2c:bf:6c:c7:56:e0:91:04:59:1d:d1:c9:05: 26:dd:ab:3c:67:f4:78:60:4c:e9:f2:b1:74:e4:e6:fb:60:90: df:1d:f9:1d:55:26:07:79:03:46:57:9e:db:a9:01:5c:4a:d7: f1:de:2d:1e:b3:10:27:59:f5:3f:e8:da:c4:2f:91:62:de:5b: 3a:da:24:89:bd:12:e7:08:20:83:cd:29:71:02:d6:19:6f:cb: 2f:19:d7:79:ab:6d:69:c8:59:43:6e:7c:52:0e:8b:5d:51:66: 0c:8c:c9:1f:9a:d8:44:f3:82:88:dc:ec:78:94:4d:8e:81:0b: ee:ee:3d:6b:fb:dc:71:80:d8:8c:9d:1c:59:f0:d4:9e:2e:ec: 37:f3:55:3d:c7:45:7e:87:ec:43:69:81:e4:af:7b:39:58:b7: 34:d4:15:bc:9b:ab:0a:f1:af:86:b6:2a:e4:77:33:a2:9a:5d: a0:38:35:62:46:8a:7b:18:dc:f8:84:1f:c5:59:90:08:20:91: 67:30:f6:82:ab:fb:59:4c:a0:11:54:ef:aa:74:15:17:1c:b8: bd:f8:61:5d:06:72:73:05:d2:d2:f8:fe:7c:af:38:33:48:e7: da:59:50:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM5NEIxMTAvBgNVBAUTKDk0MDhFOUQ3QjZDRUI4MzRDQTkwOTAxRTQ1Nzg2MDEw QzA2OUMzMkIwHhcNMjUxMjIzMDIxOTU5WhcNMjUxMjMwMDIxOTU5WjAYMRYwFAYD VQQDDA02OTQ5ZmM0Zi02Mzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyWHAgVZmlPogAwkrf0yhqcBFBtoNgQrcMXCl0haJzU3PiM7CwhMONWNAdWi fTK/P10bX22OqMrs9EsUcFV+ycxHYEAcQz/DUWZus/J4Gf7NAmTASogjvZxhndp/ gWqFcK7lIP8YyQ1YZPrc/gc3ER3WTNL3GGjxffohkorBMP8CHy1w5ug9/lhYz28u q+UjlmMPppjGk0F/8kFsIEs0RlWuXbhhUkJaGWVpvTdSBNI4EteaghLTzh3njNoh vPo9v0nu9qwC97Q9RJcihfvRbPRfBBrtwcOpqoGuRAfc9f9CJu4DSUeR46HaX8KU pqZ1PhreMMw4SMlncB4hmuW1OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCO32lLl /i8ng0gF5cOy1OWbManEMB8GA1UdIwQYMBaAFJQI6de2zrg0ypCQHkV4YBDAacMr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk0Qi8xMEFDQUIwQTYx QjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VEVEtrSkFlUlhoZ0VNQnB3 eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBanAxN2JPdURUS2tKQWVSWGhnRU1CcHd5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzk0Qi8xMEFDQUIwQTYxQjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VE VEtrSkFlUlhoZ0VNQnB3eXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj79gEz69sFyVI2S+ODSlyk6YXZkM+oyy/bMdW4JEEWR3RyQUm3as8 Z/R4YEzp8rF05Ob7YJDfHfkdVSYHeQNGV57bqQFcStfx3i0esxAnWfU/6NrEL5Fi 3ls62iSJvRLnCCCDzSlxAtYZb8svGdd5q21pyFlDbnxSDotdUWYMjMkfmthE84KI 3Ox4lE2OgQvu7j1r+9xxgNiMnRxZ8NSeLuw381U9x0V+h+xDaYHkr3s5WLc01BW8 m6sK8a+GtirkdzOiml2gODViRop7GNz4hB/FWZAIIJFnMPaCq/tZTKARVO+qdBUX HLi9+GFdBnJzBdLS+P58rzgzSOfaWVAn -----END CERTIFICATE-----Generated at Wed Dec 24 10:34:51 2025 by rpki-client