This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json) Hash identifier: otHXsbFJKkTz2HhzheDUzFG9wdWcIigZVB+xITHeyqw= Subject key identifier: 28:07:44:E9:08:1E:45:37:AA:0A:DE:3C:96:BE:77:E2:70:12:49:74 Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Certificate serial: 0BDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft Manifest number: 0BCC Signing time: Sat 20 Dec 2025 18:30:14 +0000 Manifest this update: Sat 20 Dec 2025 18:30:14 +0000 Manifest next update: Sat 27 Dec 2025 18:30:14 +0000 Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: HKC9ZHLGH/BzH8K9nAHzukmwhVOL0VMwuf45ayXsQag=) 2: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: 325+Q5b9bGMNFjpY1dytCT5yzU1HW8KiWlyU6/c5X5o=) 3: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: /nz/1q0UnnUh7/646JLbHcYkN8JqYIJjZYielEh/K48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3037 (0xbdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Validity Not Before: Dec 20 18:30:14 2025 GMT Not After : Dec 27 18:30:14 2025 GMT Subject: CN=6946eb36-1375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:1a:ce:d3:f8:8c:09:d5:79:d9:b7:03:f4: 8b:a6:06:80:52:c9:54:53:6e:61:cc:a8:c1:f4:b3: b0:5d:b4:a4:ea:0b:47:a2:fc:4d:6a:9c:8f:e1:98: 46:1f:03:09:39:af:ce:ed:2a:20:b3:45:0d:94:2f: 88:9f:e5:e0:02:ee:db:bc:09:7a:b7:4d:dc:51:ea: 3d:ba:7c:4f:37:1e:50:ef:c1:24:7b:c3:53:07:bf: b4:12:72:39:14:cd:c7:5a:3d:09:e5:73:e1:2b:a0: 14:2d:46:5a:b2:bf:c8:c4:97:9e:48:a8:e3:c6:57: fa:62:7f:7f:6c:96:7f:5e:df:86:56:a2:e7:35:12: fc:2c:fc:e5:7e:7a:1d:f6:d2:76:19:2e:a0:19:cb: 34:40:cf:0f:00:03:19:f9:a1:e6:6e:9c:2a:e2:4b: c8:cc:81:12:80:61:4d:79:7c:3d:24:aa:07:bb:5e: b3:b3:a8:de:39:38:b4:5b:d6:94:f2:9d:ef:3b:94: 5b:3f:43:8e:47:c0:a0:c6:bb:ed:cb:e4:4c:40:ff: ef:5f:c1:45:f8:38:56:de:de:7f:ff:56:e7:ed:34: 26:b5:88:69:8d:4b:11:8a:34:ad:56:48:66:c6:0d: aa:2f:47:f8:b7:64:8d:34:4d:59:28:f2:e6:e9:52: 4a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:07:44:E9:08:1E:45:37:AA:0A:DE:3C:96:BE:77:E2:70:12:49:74 X509v3 Authority Key Identifier: keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:be:f9:b2:75:16:f6:93:9b:52:cd:79:16:a2:b5:c7:17:28: da:2b:c8:50:28:d6:c7:d9:07:f8:12:72:58:78:49:8f:ed:a4: 2b:f0:e4:d5:91:a5:db:ef:92:23:3d:e9:c0:44:08:71:70:4c: 3c:e2:0e:db:40:80:13:d8:2a:45:5f:c0:75:3b:7d:69:96:0d: a1:d2:8a:00:fb:85:47:39:c7:45:1a:ad:67:e7:d3:d3:67:7f: 70:3a:7e:7b:0e:08:10:86:ab:d2:86:7e:54:6e:96:bf:a7:e4: a2:b8:ed:21:6f:36:3f:27:c0:5a:c4:11:8f:b9:9b:31:8e:e3: db:c2:d4:b4:95:74:f5:7e:ba:10:b7:9f:0b:1e:2b:aa:9b:64: 12:b9:ec:a7:3a:28:7b:92:9c:bd:9d:30:ec:38:ee:23:89:05: e9:b8:2e:e2:e9:1f:a6:e1:73:fb:46:32:c7:67:cf:f0:d9:e3: 1a:e4:b7:c0:25:88:9f:dc:d4:68:d9:aa:a2:0c:07:35:86:92: 74:64:82:bf:10:e2:c8:4c:3c:9e:f1:36:1e:f2:2e:9a:6d:27: 32:12:e3:60:9a:c4:71:c3:39:4e:c5:53:83:d6:d1:ac:06:aa: 29:c7:4b:9e:16:c2:0c:c3:bf:40:b3:02:17:dd:63:fc:1f:f3: 17:b0:59:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDQTYxMTAvBgNVBAUTKDk2RjgxN0JENDA3MEI1Q0MxOUEwQjUzOTNENTVCRTc3 Mzk4MEE4MTAwHhcNMjUxMjIwMTgzMDE0WhcNMjUxMjI3MTgzMDE0WjAYMRYwFAYD VQQDDA02OTQ2ZWIzNi0xMzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMAaztP4jAnVedm3A/SLpgaAUslUU25hzKjB9LOwXbSk6gtHovxNapyP4ZhG HwMJOa/O7Sogs0UNlC+In+XgAu7bvAl6t03cUeo9unxPNx5Q78Eke8NTB7+0EnI5 FM3HWj0J5XPhK6AULUZasr/IxJeeSKjjxlf6Yn9/bJZ/Xt+GVqLnNRL8LPzlfnod 9tJ2GS6gGcs0QM8PAAMZ+aHmbpwq4kvIzIESgGFNeXw9JKoHu16zs6jeOTi0W9aU 8p3vO5RbP0OOR8Cgxrvty+RMQP/vX8FF+DhW3t5//1bn7TQmtYhpjUsRijStVkhm xg2qL0f4t2SNNE1ZKPLm6VJKHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgHROkI HkU3qgrePJa+d+JwEkl0MB8GA1UdIwQYMBaAFJb4F71AcLXMGaC1OT1Vvnc5gKgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOENBNi85QkQ2NDA1NjMy MDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rjd1pvTFU1UFZXLWR6bUFx QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2Z1h2VUJ3dGN3Wm9MVTVQVlctZHptQXFCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OENBNi85QkQ2NDA1NjMyMDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rj d1pvTFU1UFZXLWR6bUFxQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnvvmydRb2k5tSzXkWorXHFyjaK8hQKNbH2Qf4EnJYeEmP7aQr8OTV kaXb75IjPenARAhxcEw84g7bQIAT2CpFX8B1O31plg2h0ooA+4VHOcdFGq1n59PT Z39wOn57DggQhqvShn5Ubpa/p+SiuO0hbzY/J8BaxBGPuZsxjuPbwtS0lXT1froQ t58LHiuqm2QSueynOih7kpy9nTDsOO4jiQXpuC7i6R+m4XP7RjLHZ8/w2eMa5LfA JYif3NRo2aqiDAc1hpJ0ZIK/EOLITDye8TYe8i6abScyEuNgmsRxwzlOxVOD1tGs Bqopx0ueFsIMw79AswIX3WP8H/MXsFnF -----END CERTIFICATE-----Generated at Mon Dec 22 14:32:38 2025 by rpki-client