This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft File: LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft (raw, json) Hash identifier: kIYppH0lZZoa+z0ef7I7J1TxGe6h/82PcDN4EOA/nnY= Subject key identifier: 37:D2:D2:64:39:C9:57:D2:45:60:B5:0B:D3:E6:B3:B9:66:08:DF:02 Authority key identifier: 2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 Certificate issuer: /CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Certificate serial: 0BFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft Manifest number: 0BF5 Signing time: Sun 28 Dec 2025 18:25:12 +0000 Manifest this update: Sun 28 Dec 2025 18:25:11 +0000 Manifest next update: Sun 04 Jan 2026 18:25:11 +0000 Files and hashes: 1: LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl (hash: jt1FD38dX2CtborDDRxBnfzgye2iLUBlypAHU6Ummds=) 2: E40A00021F9311ECAF64925DC4F9AE02.roa (hash: IpF3dE92/TbQ62Lm9/2a1/eIhWDEF6cu9VkkblkvmV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 18:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3071 (0xbff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EBB, serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Validity Not Before: Dec 28 18:25:11 2025 GMT Not After : Jan 4 18:25:11 2026 GMT Subject: CN=69517608-ccad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0d:10:db:1a:95:6e:50:c0:a0:0e:d4:62:f6: e1:5f:f0:18:4e:d9:b9:a3:53:e2:df:0e:96:80:2c: cb:91:c5:fb:2b:b0:49:32:2a:a2:95:d6:0e:54:71: c2:81:40:a6:c5:f4:a1:f2:c0:ce:b3:0e:6f:1c:e5: 60:36:05:c9:9a:89:72:c5:f7:3c:7c:12:3c:f1:8f: 11:8b:d8:bf:ad:e8:17:15:b7:ed:64:c1:a6:8b:4b: dc:56:52:5e:42:1a:4a:58:a0:ba:0f:bc:85:a6:0f: 4b:bf:53:89:1d:c4:34:2e:80:a4:91:f2:39:0e:0d: 84:a0:ff:d6:7d:ee:4a:3d:ac:14:7a:b1:ff:de:8c: 46:f4:67:54:5f:6b:a2:d6:19:bf:61:dc:c8:7d:c3: 5c:b8:c9:86:64:83:60:7f:74:31:a3:83:34:e0:e8: f5:3a:71:82:23:0a:8c:4d:55:41:ea:55:68:c2:5a: a3:4d:37:11:b0:13:c9:50:df:5e:d4:2e:0e:e1:6c: b7:ff:d5:09:26:f5:25:4a:8d:3e:5c:23:02:cf:f7: 0f:a9:d8:06:3b:2c:01:19:2d:cc:62:03:36:ef:cb: 35:15:59:2c:df:77:54:68:d2:98:e5:43:6e:e0:07: 04:c8:8f:47:4d:84:a3:8c:0a:10:2a:32:d5:cb:36: 34:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D2:D2:64:39:C9:57:D2:45:60:B5:0B:D3:E6:B3:B9:66:08:DF:02 X509v3 Authority Key Identifier: keyid:2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:49:6a:2b:ac:fa:14:83:bb:bf:47:76:3a:92:58:ec:1d:d5: c5:25:a4:de:69:94:a4:7b:f2:a7:74:b0:7e:3b:47:49:e8:e8: af:5a:db:1d:e9:40:b9:9a:ef:72:ce:03:3e:ca:f3:2b:0a:bc: c6:f3:67:be:e4:a7:1c:82:53:16:39:58:89:f9:ff:62:97:c9: b1:c2:72:17:7d:1d:5f:7d:54:5a:f4:c9:61:c4:13:b7:b6:f3: 18:40:f3:c5:f9:6d:d6:12:19:09:95:ff:c1:c8:27:ee:36:7b: e5:25:bd:99:61:b2:f2:cf:19:dc:74:41:9c:f9:c5:67:44:5d: 14:4b:c3:b4:e3:19:d1:3d:69:a9:45:3f:4b:3f:88:61:e5:f7: e2:a8:19:b7:6e:9f:e9:a0:ac:69:37:90:b5:26:f3:a9:eb:8c: ca:86:25:df:74:b1:87:33:53:2d:db:74:f7:f5:06:55:98:ee: 90:e2:0c:07:c6:64:d7:ff:f3:97:2f:48:6e:95:12:55:7b:0f: f2:1a:e1:1d:d5:3c:0d:cf:25:ed:9a:76:eb:0d:0c:e0:53:54: 39:1c:bb:bf:40:b7:3b:fa:60:8d:53:d2:0c:ff:8b:1b:8f:02: ad:e1:91:ed:72:b5:89:48:6b:ea:c0:4d:77:ab:08:77:5e:f8: 47:86:b1:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFQkIxMTAvBgNVBAUTKDJENjRGQTM0NzhDOTk0OTE3NjhFNjZFNkU5OTdFOUZB QTk1Q0EyRDMwHhcNMjUxMjI4MTgyNTExWhcNMjYwMTA0MTgyNTExWjAYMRYwFAYD VQQDDA02OTUxNzYwOC1jY2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQ0Q2xqVblDAoA7UYvbhX/AYTtm5o1Pi3w6WgCzLkcX7K7BJMiqildYOVHHC gUCmxfSh8sDOsw5vHOVgNgXJmolyxfc8fBI88Y8Ri9i/regXFbftZMGmi0vcVlJe QhpKWKC6D7yFpg9Lv1OJHcQ0LoCkkfI5Dg2EoP/Wfe5KPawUerH/3oxG9GdUX2ui 1hm/YdzIfcNcuMmGZINgf3Qxo4M04Oj1OnGCIwqMTVVB6lVowlqjTTcRsBPJUN9e 1C4O4Wy3/9UJJvUlSo0+XCMCz/cPqdgGOywBGS3MYgM278s1FVks33dUaNKY5UNu 4AcEyI9HTYSjjAoQKjLVyzY0pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfS0mQ5 yVfSRWC1C9Pms7lmCN8CMB8GA1UdIwQYMBaAFC1k+jR4yZSRdo5m5umX6fqpXKLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVCQi9GOTI2M0QxNjJC MDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxKRjJqbWJtNlpmcC1xbGNv dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXVDZOSGpKbEpGMmptYm02WmZwLXFsY290TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVCQi9GOTI2M0QxNjJCMDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxK RjJqbWJtNlpmcC1xbGNvdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqSWorrPoUg7u/R3Y6kljsHdXFJaTeaZSke/KndLB+O0dJ6OivWtsd 6UC5mu9yzgM+yvMrCrzG82e+5KccglMWOViJ+f9il8mxwnIXfR1ffVRa9MlhxBO3 tvMYQPPF+W3WEhkJlf/ByCfuNnvlJb2ZYbLyzxncdEGc+cVnRF0US8O04xnRPWmp RT9LP4hh5ffiqBm3bp/poKxpN5C1JvOp64zKhiXfdLGHM1Mt23T39QZVmO6Q4gwH xmTX//OXL0hulRJVew/yGuEd1TwNzyXtmnbrDQzgU1Q5HLu/QLc7+mCNU9IM/4sb jwKt4ZHtcrWJSGvqwE13qwh3XvhHhrEA -----END CERTIFICATE-----Generated at Mon Dec 29 14:54:39 2025 by rpki-client