This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft File: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json) Hash identifier: alsI1PQCV4+sFw4UyxaG92AZrQIgP0Ia2gzme/q4rQw= Subject key identifier: 9D:F9:3D:07:8D:87:55:7B:98:15:21:1D:0C:4E:B5:C4:99:85:4B:AA Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76 Certificate issuer: /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376 Certificate serial: 0825 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft Manifest number: 0816 Signing time: Tue 30 Dec 2025 20:25:02 +0000 Manifest this update: Tue 30 Dec 2025 20:25:01 +0000 Manifest next update: Tue 06 Jan 2026 20:25:01 +0000 Files and hashes: 1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: JV9humKLZ1/q0LFfDBFuGUKWmK2+ea+fmvKOA3yBBiY=) 2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: wkWuHS/W7zmGTEYBssypeNIzyloTQsz7o6sC1nnuJqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 20:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2085 (0x825) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEDF7, serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376 Validity Not Before: Dec 30 20:25:01 2025 GMT Not After : Jan 6 20:25:01 2026 GMT Subject: CN=6954351d-918e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ad:9f:1e:1f:e2:98:02:8a:9e:41:f2:66:2b: 06:e0:1c:72:cc:b8:8c:ad:6a:d7:02:e6:63:2c:31: cf:e3:5b:22:f2:01:db:09:ff:1b:b3:bc:fd:ad:ee: 67:41:a1:d9:97:8d:d5:1b:b4:04:79:02:9b:a2:a0: 9b:be:fb:25:05:22:89:75:81:bc:9c:91:b9:bc:07: 4a:6e:f8:aa:24:3d:82:7b:09:55:af:ae:41:15:f4: 6a:64:a2:42:02:df:87:e6:3d:87:36:c8:48:08:1c: fe:b7:7f:e9:5d:1a:17:21:b0:53:18:fa:79:36:db: e0:f2:a4:6d:86:85:e8:b2:6f:b8:c1:ea:95:e8:b2: ec:07:87:1c:db:d7:f4:fc:6a:f9:7d:00:fd:55:01: 55:6a:0a:08:99:12:c3:f7:d7:df:87:56:08:ac:ac: 45:f5:45:1a:5e:97:94:a7:7e:3e:68:f9:68:ec:80: cb:d1:ef:99:fb:4a:84:0f:ec:db:8b:03:3b:f9:af: cc:f7:d9:7b:71:c3:16:77:1f:fc:6b:f2:a7:77:f0: f1:e0:36:9e:32:f7:97:91:78:8f:a8:ee:1a:13:b8: 19:68:c3:d9:81:a4:5d:7a:78:56:a0:df:82:0a:b1: 75:fa:54:1a:6b:2e:10:73:ff:47:2c:a9:31:48:a5: 3d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F9:3D:07:8D:87:55:7B:98:15:21:1D:0C:4E:B5:C4:99:85:4B:AA X509v3 Authority Key Identifier: keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:63:86:cd:a2:3d:48:54:db:0b:d9:a4:72:fb:81:3a:86:b1: 9b:12:ac:b0:f3:a0:91:85:34:77:78:c9:5f:7e:fb:a3:74:a3: 01:ae:50:9f:dd:66:58:09:7d:c1:6d:09:3d:8a:ac:b4:a2:74: d3:ef:f4:30:92:db:c9:f3:bc:90:da:b8:95:3e:8e:71:96:6c: 00:78:98:51:ee:74:67:ca:9a:f0:51:63:d0:7d:6e:5d:a7:4c: e7:fe:ad:56:bd:d5:1b:58:41:b6:a7:dd:6a:0e:de:fe:1d:72: 37:09:89:7b:93:b7:42:27:ae:22:6a:e1:be:fe:8a:90:a3:07: ca:21:ee:d1:ff:ba:35:5b:50:87:d4:d9:d0:5f:f0:7a:de:98: 53:c1:fd:d3:44:d2:0c:9f:e3:2a:b5:b1:26:a6:28:d4:e0:af: 68:fe:6c:c5:4f:11:e5:59:9a:07:ef:29:0b:a9:f8:0f:74:65: ec:be:b3:25:78:f8:9a:cb:4d:55:90:d6:c9:5e:43:1b:39:54: 38:41:60:66:d8:e1:7d:4b:d4:a6:d8:a7:b8:53:91:2b:5a:5e: 79:b2:91:d8:c2:7f:fa:f6:96:f9:8f:99:eb:c3:a8:71:17:d7: f8:35:68:3b:0a:ff:6e:17:24:80:f6:f7:58:7d:9f:c6:a7:18: 46:55:51:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVERjcxMTAvBgNVBAUTKDk2OTZDNjU5MkMwMkI1MDNGNDg4RDQ0MzdDRDBBQzgy QzE3NkIzNzYwHhcNMjUxMjMwMjAyNTAxWhcNMjYwMTA2MjAyNTAxWjAYMRYwFAYD VQQDDA02OTU0MzUxZC05MThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAva2fHh/imAKKnkHyZisG4BxyzLiMrWrXAuZjLDHP41si8gHbCf8bs7z9re5n QaHZl43VG7QEeQKboqCbvvslBSKJdYG8nJG5vAdKbviqJD2CewlVr65BFfRqZKJC At+H5j2HNshICBz+t3/pXRoXIbBTGPp5Ntvg8qRthoXosm+4weqV6LLsB4cc29f0 /Gr5fQD9VQFVagoImRLD99ffh1YIrKxF9UUaXpeUp34+aPlo7IDL0e+Z+0qED+zb iwM7+a/M99l7ccMWdx/8a/Knd/Dx4DaeMveXkXiPqO4aE7gZaMPZgaRdenhWoN+C CrF1+lQaay4Qc/9HLKkxSKU9vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ35PQeN h1V7mBUhHQxOtcSZhUuqMB8GA1UdIwQYMBaAFJaWxlksArUD9IjUQ3zQrILBdrN2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRURGNy9ERUUyRDA3QzA5 MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RRUDBpTlJEZk5Dc2dzRjJz M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xwYkdXU3dDdFFQMGlOUkRmTkNzZ3NGMnMzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RURGNy9ERUUyRDA3QzA5MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RR UDBpTlJEZk5Dc2dzRjJzM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwY4bNoj1IVNsL2aRy+4E6hrGbEqyw86CRhTR3eMlffvujdKMBrlCf 3WZYCX3BbQk9iqy0onTT7/QwktvJ87yQ2riVPo5xlmwAeJhR7nRnyprwUWPQfW5d p0zn/q1WvdUbWEG2p91qDt7+HXI3CYl7k7dCJ64iauG+/oqQowfKIe7R/7o1W1CH 1NnQX/B63phTwf3TRNIMn+MqtbEmpijU4K9o/mzFTxHlWZoH7ykLqfgPdGXsvrMl ePiay01VkNbJXkMbOVQ4QWBm2OF9S9Sm2Ke4U5ErWl55spHYwn/69pb5j5nrw6hx F9f4NWg7Cv9uFySA9vdYfZ/GpxhGVVH7 -----END CERTIFICATE-----Generated at Wed Dec 31 00:22:39 2025 by rpki-client