This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft File: LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json) Hash identifier: fWaeFeqDETcGzyKEKYexJtVgeDolQ59eq/DFM2UBGvQ= Subject key identifier: ED:1D:C0:30:09:F0:02:76:22:C6:E3:1C:94:7B:1A:63:7D:94:AB:F2 Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Certificate serial: 03B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft Manifest number: 0397 Signing time: Fri 19 Dec 2025 00:02:50 +0000 Manifest this update: Fri 19 Dec 2025 00:02:49 +0000 Manifest next update: Fri 26 Dec 2025 00:02:49 +0000 Files and hashes: 1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: D1JEspCaqgcxExo/upwPm1DnUJfIIjQiO/Wq6wkvDp0=) 2: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: OEjS5qz+Y094b9NXZxpyHneMicv8/wejwLKQ2tC/qNg=) 3: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: ltQE1ACHFxJalS/0k3q+Ig8nBgWVEoOtVPpdjQ0C1JE=) 4: E5E533CA7EB111F0AD0B186BC4F9AE02.roa (hash: ZWFeBQWegvf7qjSa6jsoNEGGn0IO7ig3HT5bMFUTusg=) 5: 2870E2347EB211F09B907A6BC4F9AE02.roa (hash: M3qPmduTKgomQOiC6svBksITDFFBnsH7ow1jxrTPAmo=) 6: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: ch9EflhL7C1jP+s1ylPiL9Gffg36ErkYooxoRNvgmEE=) 7: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: 30Bcwfo746beL6TG9snvEW7O1ZgFuTW1IVMwb8hxmH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 948 (0x3b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Validity Not Before: Dec 19 00:02:49 2025 GMT Not After : Dec 26 00:02:49 2025 GMT Subject: CN=6944962a-0b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:14:0c:27:a8:17:25:6e:9e:88:fc:b6:95:89: d0:14:06:93:17:d0:36:b9:94:0a:06:24:53:f4:42: f3:10:29:b4:28:74:de:7d:d9:bd:63:02:8a:79:22: e0:c4:3b:a3:eb:f4:29:b0:49:cb:d7:5b:94:79:a8: 46:5c:17:5d:0d:40:b0:6b:44:b8:10:1d:a8:d7:04: 11:c0:10:4c:ee:06:cb:88:13:23:68:d0:86:d0:4f: 32:71:31:b9:59:46:f1:db:2b:94:f1:e8:dd:bf:8f: fe:19:e9:9c:5e:a4:df:3f:71:88:6b:aa:c1:d2:d9: 1a:ba:19:d1:73:2c:9b:d9:b6:a6:c8:38:cc:8c:74: b7:a4:e0:ef:f8:d7:1e:7d:fc:57:19:73:5b:35:00: 6d:5c:d7:31:be:54:de:a8:f9:09:6a:d5:d4:f8:69: 4c:bd:18:5e:a6:6a:08:a3:cf:4f:80:1e:78:f2:aa: 71:92:14:11:ef:aa:db:a6:64:d7:74:12:2d:41:91: 75:92:89:d5:2b:d7:a6:d0:d3:aa:64:82:2f:29:c2: 9f:ea:cb:26:46:e2:d3:b5:2f:ab:c8:f3:8f:c5:2f: 17:8e:1d:07:6a:26:53:cb:fb:5b:5a:5a:41:a1:a2: a9:16:70:ad:b6:f2:08:96:41:0d:45:fa:96:ca:19: ab:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1D:C0:30:09:F0:02:76:22:C6:E3:1C:94:7B:1A:63:7D:94:AB:F2 X509v3 Authority Key Identifier: keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6f:f3:cf:5d:58:60:c6:f6:1f:e0:cd:43:11:f2:ef:9f:a3: d7:8d:19:dd:e5:8f:f3:d1:ed:99:a4:02:17:75:fd:54:6b:4c: 69:70:a3:c9:98:ec:03:76:19:45:03:09:d9:bf:bf:6c:c5:64: f3:ca:15:73:5d:c3:8f:55:08:70:da:be:82:d8:db:73:15:f1: 8a:43:f5:31:f3:e1:3a:53:00:2d:8e:ed:68:56:c6:8a:a5:d3: a8:cd:39:69:6a:c5:98:1f:19:92:fc:94:3b:f8:78:9f:f2:12: 6a:c4:2a:83:85:5d:1a:f9:2e:e1:45:09:90:f6:ad:a7:b3:31: 83:d7:11:01:ea:7d:38:61:47:18:64:99:3b:44:e5:af:8f:35: 28:d0:4f:87:b5:33:8b:54:b6:b3:e9:cb:27:e0:77:f5:ce:a6: 91:82:fb:3c:00:4e:c1:de:cd:70:3e:91:66:d4:25:f7:44:98: db:07:e6:38:c7:92:01:97:3b:f8:96:d6:b9:c9:b1:10:e0:39: b1:8a:92:5c:08:c7:58:ca:c4:ee:df:0f:ba:de:ee:e6:87:c2: 8c:09:a8:6f:21:71:8f:ed:9d:85:ef:4f:f1:66:6a:a3:3f:6d: 1f:10:b9:8a:01:e3:12:2d:36:35:96:63:e1:d6:1c:b3:36:e7: 3f:48:d9:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFBNDQxMTAvBgNVBAUTKDJDQzMzRkJDQjg2NDA4NDAyMDg5NEE3MkREMDg4NTA1 QUY5QkI2NkQwHhcNMjUxMjE5MDAwMjQ5WhcNMjUxMjI2MDAwMjQ5WjAYMRYwFAYD VQQDDA02OTQ0OTYyYS0wYjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxQMJ6gXJW6eiPy2lYnQFAaTF9A2uZQKBiRT9ELzECm0KHTefdm9YwKKeSLg xDuj6/QpsEnL11uUeahGXBddDUCwa0S4EB2o1wQRwBBM7gbLiBMjaNCG0E8ycTG5 WUbx2yuU8ejdv4/+GemcXqTfP3GIa6rB0tkauhnRcyyb2bamyDjMjHS3pODv+Nce ffxXGXNbNQBtXNcxvlTeqPkJatXU+GlMvRhepmoIo89PgB548qpxkhQR76rbpmTX dBItQZF1konVK9em0NOqZIIvKcKf6ssmRuLTtS+ryPOPxS8Xjh0HaiZTy/tbWlpB oaKpFnCttvIIlkENRfqWyhmrhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0dwDAJ 8AJ2IsbjHJR7GmN9lKvyMB8GA1UdIwQYMBaAFCzDP7y4ZAhAIIlKct0IhQWvm7Zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUE0NC85Q0MwMEE5Q0M3 RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NFQWdpVXB5M1FpRkJhLWJ0 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNTV92TGhrQ0VBZ2lVcHkzUWlGQmEtYnRtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUE0NC85Q0MwMEE5Q0M3RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NF QWdpVXB5M1FpRkJhLWJ0bTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsb/PPXVhgxvYf4M1DEfLvn6PXjRnd5Y/z0e2ZpAIXdf1Ua0xpcKPJ mOwDdhlFAwnZv79sxWTzyhVzXcOPVQhw2r6C2NtzFfGKQ/Ux8+E6UwAtju1oVsaK pdOozTlpasWYHxmS/JQ7+Hif8hJqxCqDhV0a+S7hRQmQ9q2nszGD1xEB6n04YUcY ZJk7ROWvjzUo0E+HtTOLVLaz6csn4Hf1zqaRgvs8AE7B3s1wPpFm1CX3RJjbB+Y4 x5IBlzv4lta5ybEQ4DmxipJcCMdYysTu3w+63u7mh8KMCahvIXGP7Z2F70/xZmqj P20fELmKAeMSLTY1lmPh1hyzNuc/SNn1 -----END CERTIFICATE-----Generated at Sat Dec 20 05:15:23 2025 by rpki-client