This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft File: LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json) Hash identifier: dnPlPrB9B65AaLkDh6oqAJHiOrBohMfHt783JCVlBoI= Subject key identifier: 49:C5:B9:51:20:06:5B:A3:70:85:4F:78:AB:D8:FB:A2:83:19:07:84 Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Certificate serial: 09C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft Manifest number: 0997 Signing time: Sat 20 Dec 2025 19:33:14 +0000 Manifest this update: Sat 20 Dec 2025 19:33:13 +0000 Manifest next update: Sat 27 Dec 2025 19:33:13 +0000 Files and hashes: 1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: CLbFPGxqpH4yWXgk4dRZD/PyciHp+VIrye8Rb/5SYlU=) 2: E206DC460DEA11F0A924CF5CC4F9AE02.roa (hash: VB8lXHaRWCgJbChk21N3X1tByJzueb4oQFsyi3R2FSI=) 3: 570B25FA305111F0BED81784C4F9AE02.roa (hash: HRghPtYyJF7KhObZGzOSLoHVq6GqZy5jEHbcGyo6zuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2500 (0x9c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Validity Not Before: Dec 20 19:33:13 2025 GMT Not After : Dec 27 19:33:13 2025 GMT Subject: CN=6946f9fa-ad1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4a:7c:41:86:4a:08:f9:1e:30:66:50:5d:5e: 6c:79:ff:85:8f:64:ee:08:60:bb:45:0b:35:7a:f0: 0c:86:31:9a:19:a1:5c:2d:ec:04:eb:a1:30:e4:57: 56:e7:97:45:a6:88:99:c8:c4:ca:2c:38:56:bb:c6: 91:ee:62:33:92:85:db:18:97:3e:92:de:4f:a8:75: 56:16:30:dd:20:96:e5:ba:ce:4c:3e:86:65:ec:3e: 74:c6:29:80:6a:d6:4f:41:6c:ae:4d:1f:04:b0:d0: 04:fe:f4:86:1f:6a:f3:79:60:e5:ae:21:b4:69:05: fb:bb:c9:e9:24:7e:5c:f4:bd:a7:32:00:ea:bc:6f: 93:7f:22:9e:ad:8b:19:21:f7:dd:2c:c2:c1:1a:30: e7:5b:d6:43:79:26:3a:30:08:3e:18:b5:6d:c1:6f: c2:bb:75:3f:e9:82:d9:68:fc:21:a1:38:d9:24:25: fd:51:89:0b:34:35:85:00:ba:05:57:54:3f:1b:64: 7a:45:f6:71:00:50:40:2f:88:8e:08:d8:35:84:62: 4f:1f:70:c6:0d:5f:38:06:25:ff:c1:5a:92:5d:20: 22:e0:f2:d8:05:22:34:de:54:ae:28:96:c1:36:1c: f9:79:e5:50:dd:37:a0:73:71:9a:29:e0:a7:d8:4e: a5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C5:B9:51:20:06:5B:A3:70:85:4F:78:AB:D8:FB:A2:83:19:07:84 X509v3 Authority Key Identifier: keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:48:27:2b:d9:0a:be:51:ef:a5:34:1e:d6:24:19:03:2d:ea: 5d:70:a9:8d:36:5c:6a:0d:7b:bb:b5:ee:e2:94:dc:54:f9:17: 32:b7:e1:bc:e2:e1:41:eb:81:8f:72:b4:9e:33:fe:44:4b:93: 4f:b6:dc:de:a2:97:8a:0f:07:b6:0c:b0:3f:69:df:67:b6:f8: 17:31:4e:ac:48:bd:e8:8b:8b:70:15:f6:3d:bd:c7:6d:9b:7b: 1c:aa:24:58:e2:27:c0:8c:f2:1a:b7:62:c6:32:3e:54:5c:b9: 6d:98:78:00:06:52:4a:9c:21:16:29:5b:0d:df:7e:d5:cd:a7: 96:99:1c:e3:52:6c:17:64:0c:91:95:d2:28:70:8d:c5:8f:2e: 40:09:86:a4:b7:ea:9e:e0:0f:84:0d:25:68:91:3a:92:52:2a: 05:21:06:0d:cb:3d:b5:2d:bf:02:bb:1f:6d:7d:62:7e:6b:5a: 66:d1:8a:c6:cb:b9:be:f9:16:a5:c9:8d:42:37:6d:ce:42:6b: 37:bb:ec:7e:10:7b:54:8f:7d:7a:d8:70:b0:76:56:f2:a7:75: eb:7e:46:f1:09:19:00:a9:73:f4:3f:13:9e:a6:98:45:d5:a2: 2e:8e:a5:e5:db:52:e8:29:10:98:e0:36:4a:87:b8:ce:93:f3: ed:7e:eb:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0ODYxMTAvBgNVBAUTKDJFMzA0QTNEOTI0OTlEOUQ3RDMzOEEzRUEwMkY3QzUz NDg0MjVCMTcwHhcNMjUxMjIwMTkzMzEzWhcNMjUxMjI3MTkzMzEzWjAYMRYwFAYD VQQDDA02OTQ2ZjlmYS1hZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0p8QYZKCPkeMGZQXV5sef+Fj2TuCGC7RQs1evAMhjGaGaFcLewE66Ew5FdW 55dFpoiZyMTKLDhWu8aR7mIzkoXbGJc+kt5PqHVWFjDdIJblus5MPoZl7D50ximA atZPQWyuTR8EsNAE/vSGH2rzeWDlriG0aQX7u8npJH5c9L2nMgDqvG+TfyKerYsZ IffdLMLBGjDnW9ZDeSY6MAg+GLVtwW/Cu3U/6YLZaPwhoTjZJCX9UYkLNDWFALoF V1Q/G2R6RfZxAFBAL4iOCNg1hGJPH3DGDV84BiX/wVqSXSAi4PLYBSI03lSuKJbB Nhz5eeVQ3Tegc3GaKeCn2E6lwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnFuVEg BlujcIVPeKvY+6KDGQeEMB8GA1UdIwQYMBaAFC4wSj2SSZ2dfTOKPqAvfFNIQlsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQ4Ni84NTZBMjQ5Q0E5 ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5aMTlNNG8tb0M5OFUwaENX eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xqQktQWkpKbloxOU00by1vQzk4VTBoQ1d4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQ4Ni84NTZBMjQ5Q0E5ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5a MTlNNG8tb0M5OFUwaENXeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARSCcr2Qq+Ue+lNB7WJBkDLepdcKmNNlxqDXu7te7ilNxU+Rcyt+G8 4uFB64GPcrSeM/5ES5NPttzeopeKDwe2DLA/ad9ntvgXMU6sSL3oi4twFfY9vcdt m3scqiRY4ifAjPIat2LGMj5UXLltmHgABlJKnCEWKVsN337VzaeWmRzjUmwXZAyR ldIocI3Fjy5ACYakt+qe4A+EDSVokTqSUioFIQYNyz21Lb8Cux9tfWJ+a1pm0YrG y7m++RalyY1CN23OQms3u+x+EHtUj3162HCwdlbyp3XrfkbxCRkAqXP0PxOepphF 1aIujqXl21LoKRCY4DZKh7jOk/Ptfuvy -----END CERTIFICATE-----Generated at Sun Dec 21 02:11:15 2025 by rpki-client