This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft File: lRaRgJV2AETnT6qlSX0GcwraXzI.mft (raw, json) Hash identifier: fhEb+E7LnEq0kVps33/E3hKE6cfbyvFIR0a81sNchlU= Subject key identifier: F5:9B:A8:B3:E3:AE:52:97:3F:6F:45:A7:06:B7:ED:41:11:3E:DF:D0 Authority key identifier: 95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 Certificate issuer: /CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Certificate serial: 06C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft Manifest number: 06BE Signing time: Thu 18 Dec 2025 21:36:06 +0000 Manifest this update: Thu 18 Dec 2025 21:36:06 +0000 Manifest next update: Thu 25 Dec 2025 21:36:06 +0000 Files and hashes: 1: lRaRgJV2AETnT6qlSX0GcwraXzI.crl (hash: 0/Yxh9ZFvsbGQutPufZrAKzKc+k/0Rd7ynSC30rJnkU=) 2: 589FBEDC860311EBAFE18309C4F9AE02.roa (hash: QPlmMaSOgFDznMyc1xMqSWCG5G0RLk70r7GmVWThnas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1733 (0x6c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B334D, serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Validity Not Before: Dec 18 21:36:06 2025 GMT Not After : Dec 25 21:36:06 2025 GMT Subject: CN=694473c6-f4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:de:70:7b:f1:e1:5f:b9:50:12:da:86:48: 06:ba:b2:db:10:10:04:d9:8f:25:c3:2c:88:7a:bb: 5c:ba:73:ac:b9:0d:55:b9:2d:37:c2:9a:a7:b7:5f: f5:b2:be:ed:7f:ff:3f:83:9e:59:7c:1b:54:60:f1: db:e7:3b:0e:20:03:6b:c2:1c:08:b4:4b:ed:e8:57: 93:51:97:0a:b1:55:29:12:6e:8f:2f:b9:09:25:9d: a6:db:6d:bc:c5:30:6a:f5:dd:0a:d6:4a:b0:04:4b: e0:ad:1c:6c:6e:17:21:4e:b6:e7:38:94:54:57:f0: 0e:2f:14:f2:fa:25:8b:b4:fb:ce:4c:20:37:de:c8: e2:9f:1a:9d:08:0e:04:b8:8d:18:49:b7:60:66:45: 0e:4d:14:9c:e6:72:cf:8e:eb:17:55:83:97:41:66: f9:3a:e2:02:c7:1f:29:9c:4f:78:e0:10:d8:28:00: 65:28:f9:74:a2:f7:1f:83:da:2c:0b:92:df:45:99: bd:e7:3b:69:80:9f:6d:d3:09:0a:f2:f2:7c:d6:a1: 4f:0a:20:f3:ec:b1:da:00:f1:a5:4c:66:a0:4b:14: 41:06:90:db:7a:92:a6:c6:93:aa:8f:c4:34:99:17: 30:e6:43:43:20:5c:05:de:02:dc:3e:67:d7:a9:1a: 11:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9B:A8:B3:E3:AE:52:97:3F:6F:45:A7:06:B7:ED:41:11:3E:DF:D0 X509v3 Authority Key Identifier: keyid:95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:47:ba:9a:48:ac:9c:62:ec:6f:b7:8d:44:aa:46:9d:7a:e9: 84:f5:52:c2:21:4d:4a:5f:cd:da:80:28:a7:cb:ba:5c:2b:2e: a1:0f:92:8f:66:3e:d2:b8:b9:2e:7a:8a:2c:80:68:3a:72:df: 08:ba:7f:e9:9d:cb:91:a4:f8:7f:d8:9b:5a:d8:5c:3f:12:a7: 47:77:00:02:2c:97:84:8c:9b:b7:2d:0a:95:2e:da:de:94:34: 73:fa:57:b1:13:40:14:eb:6c:30:e4:67:d0:16:8f:ac:69:be: 6f:4e:9b:18:c9:4c:b8:de:6a:ec:4b:ed:67:af:f8:9d:09:00: e7:fc:6b:61:11:ef:64:ec:dd:c1:78:0f:68:d2:d2:3a:50:aa: aa:d5:42:52:08:98:5e:a1:16:34:1b:c8:53:97:3a:ed:42:18: 3c:56:35:47:a6:c8:16:a5:bf:bd:00:f7:0a:aa:bd:a3:fb:9e: ef:53:a8:a9:08:ee:45:91:57:f0:c8:99:84:b6:bb:3c:19:74: ec:31:44:b2:06:6f:32:44:d2:d8:7b:ed:4c:b0:c3:05:cc:57: 7a:c1:b5:f3:ae:04:c6:84:67:99:80:08:14:b7:a8:8a:d2:95: 3f:27:a0:7e:f3:67:37:3a:94:8e:9c:c5:f8:57:27:96:b2:11: 4d:10:5b:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMzNEQxMTAvBgNVBAUTKDk1MTY5MTgwOTU3NjAwNDRFNzRGQUFBNTQ5N0QwNjcz MEFEQTVGMzIwHhcNMjUxMjE4MjEzNjA2WhcNMjUxMjI1MjEzNjA2WjAYMRYwFAYD VQQDDA02OTQ0NzNjNi1mNGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqfecHvx4V+5UBLahkgGurLbEBAE2Y8lwyyIertcunOsuQ1VuS03wpqnt1/1 sr7tf/8/g55ZfBtUYPHb5zsOIANrwhwItEvt6FeTUZcKsVUpEm6PL7kJJZ2m2228 xTBq9d0K1kqwBEvgrRxsbhchTrbnOJRUV/AOLxTy+iWLtPvOTCA33sjinxqdCA4E uI0YSbdgZkUOTRSc5nLPjusXVYOXQWb5OuICxx8pnE944BDYKABlKPl0ovcfg9os C5LfRZm95ztpgJ9t0wkK8vJ81qFPCiDz7LHaAPGlTGagSxRBBpDbepKmxpOqj8Q0 mRcw5kNDIFwF3gLcPmfXqRoRbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWbqLPj rlKXP29Fpwa37UERPt/QMB8GA1UdIwQYMBaAFJUWkYCVdgBE50+qpUl9BnMK2l8y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzM0RC8yN0U4NjFEODg1 RjcxMUVCOTIwODE3MTFDNEY5QUUwMi9sUmFSZ0pWMkFFVG5UNnFsU1gwR2N3cmFY ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSYVJnSlYyQUVUblQ2cWxTWDBHY3dyYVh6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzM0RC8yN0U4NjFEODg1RjcxMUVCOTIwODE3MTFDNEY5QUUwMi9sUmFSZ0pWMkFF VG5UNnFsU1gwR2N3cmFYekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5R7qaSKycYuxvt41EqkadeumE9VLCIU1KX83agCiny7pcKy6hD5KP Zj7SuLkueoosgGg6ct8Iun/pncuRpPh/2Jta2Fw/EqdHdwACLJeEjJu3LQqVLtre lDRz+lexE0AU62ww5GfQFo+sab5vTpsYyUy43mrsS+1nr/idCQDn/GthEe9k7N3B eA9o0tI6UKqq1UJSCJheoRY0G8hTlzrtQhg8VjVHpsgWpb+9APcKqr2j+57vU6ip CO5FkVfwyJmEtrs8GXTsMUSyBm8yRNLYe+1MsMMFzFd6wbXzrgTGhGeZgAgUt6iK 0pU/J6B+82c3OpSOnMX4VyeWshFNEFuH -----END CERTIFICATE-----Generated at Fri Dec 19 22:01:48 2025 by rpki-client