This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft File: lRKAntQ1o2QK-bdfCvspKNQWPDE.mft (raw, json) Hash identifier: 7Y0MEPFScTKmJ+QtRpt8SH74OoStsL6HSYlcIuG22BQ= Subject key identifier: 82:B6:73:D0:00:1B:ED:F0:EF:38:3E:CD:8D:01:9A:C9:94:FF:8C:F0 Authority key identifier: 95:12:80:9E:D4:35:A3:64:0A:F9:B7:5F:0A:FB:29:28:D4:16:3C:31 Certificate issuer: /CN=A91B45C0/serialNumber=9512809ED435A3640AF9B75F0AFB2928D4163C31 Certificate serial: 1264 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft Manifest number: 125D Signing time: Sun 28 Dec 2025 23:17:59 +0000 Manifest this update: Sun 28 Dec 2025 23:17:59 +0000 Manifest next update: Sun 04 Jan 2026 23:17:59 +0000 Files and hashes: 1: lRKAntQ1o2QK-bdfCvspKNQWPDE.crl (hash: iQ2loeYPTT6e8Ou5hgXlODWoazPRPPXrv94DFGugE2I=) 2: 703E2BFCE44311F0BEBBBC48726F56BC.roa (hash: nXRuWuZ7MN6qd9Q/8XrV5XccxMLm8fepADdu9JTrNPI=) 3: 50643AB6E44211F09A0E0BE6716F56BC.roa (hash: wQucWFqwXarx0EtYplghpTrsWAGtLg5QxJ8wWkr34yI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.crl rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 23:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4708 (0x1264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B45C0, serialNumber=9512809ED435A3640AF9B75F0AFB2928D4163C31 Validity Not Before: Dec 28 23:17:59 2025 GMT Not After : Jan 4 23:17:59 2026 GMT Subject: CN=6951baa7-079c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:48:be:78:0d:66:ce:97:f2:e4:2b:17:ad:3a: e2:1d:13:a2:4a:d5:57:a3:07:df:95:45:98:e1:ef: 83:31:a2:51:d4:4b:e5:a7:2e:19:38:4b:bd:5c:3e: 03:1c:bd:c0:d5:ce:e6:49:eb:e8:ad:fc:a5:50:6a: 16:ad:ce:e9:8d:29:fd:95:af:9c:a6:a9:db:0f:93: fa:b4:e9:0d:96:5d:76:80:c4:fb:01:cc:71:0e:42: fb:a6:d4:d3:3b:cf:f9:45:26:a1:8d:18:2f:26:50: 0b:66:90:64:5b:60:7a:12:1d:e3:55:30:74:a9:c0: bd:fc:30:01:60:61:12:3e:f0:09:4b:8c:b1:f7:d8: 91:fd:4e:36:c0:7c:9d:10:d8:39:d2:c5:b6:b4:15: 84:d1:9f:2d:08:07:ca:f7:07:72:1a:eb:ec:26:69: 72:27:a3:8a:b5:a8:dc:60:26:57:2a:50:02:b5:ad: 3f:b7:95:6b:26:39:5b:d3:71:be:5a:95:7f:c2:c5: 8f:f3:83:18:12:93:2f:c9:7e:66:cb:b1:3e:1c:dd: 37:8a:eb:91:7e:81:3e:6f:d7:5a:93:02:15:eb:8a: fa:2c:d9:cb:9b:3f:3c:df:c6:c6:89:97:95:b3:6d: ca:30:a3:3d:7b:25:d3:55:03:92:1b:ee:16:93:14: 0c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B6:73:D0:00:1B:ED:F0:EF:38:3E:CD:8D:01:9A:C9:94:FF:8C:F0 X509v3 Authority Key Identifier: keyid:95:12:80:9E:D4:35:A3:64:0A:F9:B7:5F:0A:FB:29:28:D4:16:3C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:a3:55:6d:c9:b3:a8:84:cf:17:a2:30:da:a4:32:d4:55:82: 91:90:98:d1:c5:69:41:bb:2b:ee:6c:ea:97:98:bb:30:1c:c4: f6:d9:04:6c:7f:3a:e3:3e:3d:58:f9:46:b1:9f:ab:7c:f1:9c: e3:eb:f9:4f:c1:fe:cb:e0:cf:11:a6:39:65:83:ba:94:12:96: 19:cc:d8:24:f9:8d:e8:23:db:5b:ab:40:31:90:38:3c:a0:33: 4d:fa:0b:fd:86:d5:b9:97:a2:27:da:ae:1f:38:cd:d2:66:d6: 75:01:5e:bc:16:8b:08:70:a0:ae:1c:32:13:22:18:52:c7:84: 8e:2f:d0:2d:09:9f:c4:bf:e3:54:02:20:f3:fb:39:ec:38:ad: a6:e3:58:d7:ae:9a:59:76:ae:98:9b:dc:4f:d4:48:59:25:7f: aa:bf:01:dc:74:20:8f:a6:46:89:6d:ad:12:77:ac:71:e5:ac: de:d2:55:0c:54:6c:b7:b3:bb:fa:ce:ca:14:b0:9a:e8:b2:b3: f0:2d:b5:24:bb:67:32:d6:a0:84:40:03:04:b9:43:28:b8:37: 77:a2:43:4a:d6:6c:24:eb:f4:d5:26:b8:22:84:7b:31:fd:c9: b4:d6:bc:0d:8c:ef:9a:55:bf:bd:f2:7d:94:31:6a:bc:9c:55: ab:ce:f5:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ1QzAxMTAvBgNVBAUTKDk1MTI4MDlFRDQzNUEzNjQwQUY5Qjc1RjBBRkIyOTI4 RDQxNjNDMzEwHhcNMjUxMjI4MjMxNzU5WhcNMjYwMTA0MjMxNzU5WjAYMRYwFAYD VQQDDA02OTUxYmFhNy0wNzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmki+eA1mzpfy5CsXrTriHROiStVXowfflUWY4e+DMaJR1Evlpy4ZOEu9XD4D HL3A1c7mSevorfylUGoWrc7pjSn9la+cpqnbD5P6tOkNll12gMT7AcxxDkL7ptTT O8/5RSahjRgvJlALZpBkW2B6Eh3jVTB0qcC9/DABYGESPvAJS4yx99iR/U42wHyd ENg50sW2tBWE0Z8tCAfK9wdyGuvsJmlyJ6OKtajcYCZXKlACta0/t5VrJjlb03G+ WpV/wsWP84MYEpMvyX5my7E+HN03iuuRfoE+b9dakwIV64r6LNnLmz8838bGiZeV s23KMKM9eyXTVQOSG+4WkxQMSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIK2c9AA G+3w7zg+zY0BmsmU/4zwMB8GA1UdIwQYMBaAFJUSgJ7UNaNkCvm3Xwr7KSjUFjwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDVDMC9CREVFNzI5QUU2 RDkxMUU4OEI4QkY3N0NDNEY5QUUwMi9sUktBbnRRMW8yUUstYmRmQ3ZzcEtOUVdQ REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSS0FudFExbzJRSy1iZGZDdnNwS05RV1BERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDVDMC9CREVFNzI5QUU2RDkxMUU4OEI4QkY3N0NDNEY5QUUwMi9sUktBbnRRMW8y UUstYmRmQ3ZzcEtOUVdQREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1o1VtybOohM8XojDapDLUVYKRkJjRxWlBuyvubOqXmLswHMT22QRs fzrjPj1Y+Uaxn6t88Zzj6/lPwf7L4M8Rpjllg7qUEpYZzNgk+Y3oI9tbq0AxkDg8 oDNN+gv9htW5l6In2q4fOM3SZtZ1AV68FosIcKCuHDITIhhSx4SOL9AtCZ/Ev+NU AiDz+znsOK2m41jXrppZdq6Ym9xP1EhZJX+qvwHcdCCPpkaJba0Sd6xx5aze0lUM VGy3s7v6zsoUsJrosrPwLbUku2cy1qCEQAMEuUMouDd3okNK1mwk6/TVJrgihHsx /cm01rwNjO+aVb+98n2UMWq8nFWrzvUh -----END CERTIFICATE-----Generated at Mon Dec 29 07:39:26 2025 by rpki-client