This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft File: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft (raw, json) Hash identifier: 0WiKWkFsutXWbXf/Yu46vo142L0NV28Tgd/l6mm1qu0= Subject key identifier: AE:90:1E:9C:72:EA:1D:9A:D6:13:10:B5:62:08:A0:6B:35:0C:ED:E6 Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F Certificate issuer: /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F Certificate serial: 0BFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft Manifest number: 0BD4 Signing time: Sat 20 Dec 2025 18:30:21 +0000 Manifest this update: Sat 20 Dec 2025 18:30:20 +0000 Manifest next update: Sat 27 Dec 2025 18:30:20 +0000 Files and hashes: 1: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl (hash: ZGrrcjqu9mH0681HEG8fhwlFH8YCQxQXXdBLFhloh14=) 2: D7D5B86859E811ED85614349C4F9AE02.roa (hash: ToUAACqSoKf4DVOKi8qBNbQLxDQKu5PGsZOisylfuaw=) 3: 933DE524C2B811EEAA1FD486C4F9AE02.roa (hash: tyjFJevU8AODc6eNF2UQBkVwZ0moxe8IcDHkpfRnepA=) 4: F8088528E65D11EDB5112931C4F9AE02.roa (hash: 2Y1qjCmLTaBuW+PY4V12Zh62AUY0iuAkYOwDBibrsjY=) 5: D9173AE459E811ED85614349C4F9AE02.roa (hash: 1x/xZd5ESf0eokaSQgyIvd0x7KIP8tNAt27myAiJemw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3067 (0xbfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F Validity Not Before: Dec 20 18:30:20 2025 GMT Not After : Dec 27 18:30:20 2025 GMT Subject: CN=6946eb3c-b913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:93:6f:2d:0f:bc:40:63:4a:09:7c:24:dc:28: d0:05:8d:d5:df:ae:d7:e2:05:d9:2f:65:6f:63:b5: 67:47:00:22:17:c4:d9:2b:92:08:75:1d:6c:d3:45: dd:5f:7e:af:f7:dd:86:0a:fd:d7:c4:e6:5b:e1:8b: a7:87:79:73:8c:e4:36:66:1b:7c:4e:69:32:af:15: 85:98:6b:d0:11:1c:c0:68:c0:c0:81:7a:30:51:41: 80:66:4c:41:ea:40:3a:c8:64:c6:c5:5e:32:bd:09: 84:cf:9d:7e:7f:bd:24:d6:4c:8e:ad:03:c9:1d:4a: f1:de:29:93:47:71:22:27:a5:3a:52:40:06:29:9f: c0:71:18:7f:e4:8a:c8:99:d8:ce:49:72:30:1f:44: 83:97:99:9e:40:bb:e7:f6:08:76:f9:20:3a:e8:c4: 98:20:5f:bb:68:2d:6e:d9:33:10:45:f1:3b:72:8d: 08:8a:84:e0:70:4f:f9:9a:25:36:18:f8:1f:f0:d0: 90:f1:4d:b8:47:f4:a9:0f:4e:93:bf:53:7c:7f:64: 90:65:4b:ca:9f:61:53:0b:41:ae:d7:95:fa:a4:e0: 4a:a6:1a:26:b9:13:97:55:1a:29:07:99:6d:0b:b5: 02:7d:53:76:a6:39:a5:09:da:7e:1c:31:39:3f:55: a3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:90:1E:9C:72:EA:1D:9A:D6:13:10:B5:62:08:A0:6B:35:0C:ED:E6 X509v3 Authority Key Identifier: keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:c0:73:d3:f9:1f:29:b4:18:8f:56:22:16:03:c0:70:19:a8: 76:56:86:10:34:6f:f2:83:2c:8a:3c:57:8a:7a:b8:0b:5b:94: de:cf:a3:0f:fd:a7:05:2a:0d:d4:dd:d0:1c:17:1a:8a:38:4a: 51:4f:c5:a0:df:c2:41:bd:bb:94:27:28:a1:03:53:1e:2f:42: e4:cb:7a:61:b9:fc:85:89:cc:f4:cf:68:40:d9:a1:37:e2:76: 6a:8c:c5:d9:00:e9:15:e3:8c:d1:6f:19:18:43:cb:04:18:d7: a8:dc:4a:da:04:1f:5d:bc:9d:0c:fc:f1:d3:0c:0e:ca:25:db: 9c:c1:67:d1:34:e9:36:03:10:5e:5b:0f:48:f0:50:fe:37:e6: df:36:39:8c:5d:95:e7:9b:1a:f2:24:83:4d:df:33:0e:b6:f8: 85:93:8b:83:75:2f:4c:f6:5e:a6:ab:ed:0e:fb:43:f5:d2:3f: df:7c:a8:e4:a9:d8:a0:45:ca:7d:d1:5c:bb:a2:42:e4:49:38: 9b:40:cb:f5:1f:ee:e9:65:ef:1e:08:53:93:d0:ed:24:97:63: 45:15:a9:d7:e9:49:4f:e7:68:fa:9a:7e:63:fd:ea:a9:9f:d0: ba:08:08:74:0c:99:1a:52:3f:57:b4:70:b0:00:ac:43:ba:32: fe:cb:7c:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0MDUxMTAvBgNVBAUTKDJEOUVEM0QyNkU2MzVGN0NGRkU0QkJGNTIwODcxNTBC N0E0MjE4OEYwHhcNMjUxMjIwMTgzMDIwWhcNMjUxMjI3MTgzMDIwWjAYMRYwFAYD VQQDDA02OTQ2ZWIzYy1iOTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5NvLQ+8QGNKCXwk3CjQBY3V367X4gXZL2VvY7VnRwAiF8TZK5IIdR1s00Xd X36v992GCv3XxOZb4Yunh3lzjOQ2Zht8TmkyrxWFmGvQERzAaMDAgXowUUGAZkxB 6kA6yGTGxV4yvQmEz51+f70k1kyOrQPJHUrx3imTR3EiJ6U6UkAGKZ/AcRh/5IrI mdjOSXIwH0SDl5meQLvn9gh2+SA66MSYIF+7aC1u2TMQRfE7co0IioTgcE/5miU2 GPgf8NCQ8U24R/SpD06Tv1N8f2SQZUvKn2FTC0Gu15X6pOBKphomuROXVRopB5lt C7UCfVN2pjmlCdp+HDE5P1WjnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6QHpxy 6h2a1hMQtWIIoGs1DO3mMB8GA1UdIwQYMBaAFC2e09JuY198/+S79SCHFQt6QhiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwNS9GOUMxOTY5NjMy MTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algzel81THYxSUljVkMzcENH STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xaN1QwbTVqWDN6XzVMdjFJSWNWQzNwQ0dJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQwNS9GOUMxOTY5NjMyMTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algz el81THYxSUljVkMzcENHSTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCowHPT+R8ptBiPViIWA8BwGah2VoYQNG/ygyyKPFeKergLW5Tez6MP /acFKg3U3dAcFxqKOEpRT8Wg38JBvbuUJyihA1MeL0Lky3phufyFicz0z2hA2aE3 4nZqjMXZAOkV44zRbxkYQ8sEGNeo3EraBB9dvJ0M/PHTDA7KJducwWfRNOk2AxBe Ww9I8FD+N+bfNjmMXZXnmxryJINN3zMOtviFk4uDdS9M9l6mq+0O+0P10j/ffKjk qdigRcp90Vy7okLkSTibQMv1H+7pZe8eCFOT0O0kl2NFFanX6UlP52j6mn5j/eqp n9C6CAh0DJkaUj9XtHCwAKxDujL+y3yl -----END CERTIFICATE-----Generated at Sun Dec 21 21:29:02 2025 by rpki-client