This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft File: ljwgt9OATbgByuJXTDHXYNU9M0Q.mft (raw, json) Hash identifier: NJ3xY/wa4fHPdqOwz5ypYYYPGeGxwG/dcParoxURh5I= Subject key identifier: 39:4B:18:07:6F:E5:E2:B4:52:94:46:43:A9:8D:05:DD:D4:54:E6:C4 Authority key identifier: 96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44 Certificate issuer: /CN=A91C6744/serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344 Certificate serial: 087E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft Manifest number: 0877 Signing time: Fri 26 Dec 2025 19:56:56 +0000 Manifest this update: Fri 26 Dec 2025 19:56:56 +0000 Manifest next update: Fri 02 Jan 2026 19:56:56 +0000 Files and hashes: 1: ljwgt9OATbgByuJXTDHXYNU9M0Q.crl (hash: Ftaxn1iXSL3r9yFdzMErZ7VjsUdXfRypqmdcgNZrXVM=) 2: E088B4E8E41B11ED8B0EFC0DC4F9AE02.roa (hash: o6F0EuKwlTrnUOxPf4ItfWLnrfcMDydYUClJAnjBios=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 19:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2174 (0x87e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6744, serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344 Validity Not Before: Dec 26 19:56:56 2025 GMT Not After : Jan 2 19:56:56 2026 GMT Subject: CN=694ee888-a611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ce:b1:8f:0f:f6:93:a4:d2:ee:c0:be:c1:6a: b3:c7:4f:bf:17:5a:c9:62:2a:e0:90:9d:24:aa:ef: 64:47:e4:45:ef:de:c9:39:a8:83:65:30:ac:61:9c: 27:c9:4c:3b:05:4e:6f:e4:65:3d:84:26:21:23:93: 76:ea:ba:bd:32:80:b1:98:58:90:b3:c2:1c:e9:a8: b8:83:7f:bd:39:d2:d0:ca:a8:1f:ac:af:9f:51:b7: c1:12:89:1a:8e:b0:f7:b6:20:eb:50:f7:86:64:e0: bd:41:ed:8f:8c:bf:a6:d6:df:3d:0d:8a:58:eb:22: 35:12:2c:72:8d:9b:db:6a:d9:ca:6e:91:78:d3:5c: 9f:5d:8c:db:73:2c:60:be:95:16:a8:8b:71:cd:3b: 0e:db:96:24:56:fb:f8:e3:9f:2f:c6:6a:b9:61:13: 65:7d:0a:58:47:28:56:ac:f6:a3:8f:57:0c:51:64: 28:63:74:e1:fb:3f:8e:91:9a:2f:d4:eb:32:40:8f: 76:60:e4:ea:e5:0b:c3:79:5f:22:f1:b6:27:59:23: 3e:54:67:11:e0:b4:95:7d:16:2d:c9:b0:60:ac:1d: 79:b6:46:0a:d2:a9:d5:47:96:fa:47:c7:0a:a1:b1: 93:86:8d:94:2d:3e:dc:8a:5b:97:5f:c7:61:b0:84: 23:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4B:18:07:6F:E5:E2:B4:52:94:46:43:A9:8D:05:DD:D4:54:E6:C4 X509v3 Authority Key Identifier: keyid:96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:e7:c0:20:0b:7a:6c:d7:b4:87:b3:96:f8:3c:39:c5:4f:fd: 32:82:14:86:8d:c3:fe:83:b4:e4:b9:6c:74:50:7d:9a:8e:30: a5:bf:9d:72:af:32:20:f4:8f:0d:0a:ec:5d:fb:07:5c:4d:11: a7:4c:52:5d:b1:11:40:df:86:88:ef:9c:30:81:ed:fc:35:15: 18:24:91:d0:8f:66:d0:32:9c:b8:c6:62:87:94:f9:91:37:1f: 5d:34:a1:27:74:23:99:ad:c0:75:0d:d4:ed:c6:4b:d4:c9:5b: d5:67:fe:40:95:7c:e8:ab:c9:53:55:65:dd:9b:5c:51:e6:19: 7c:93:a3:d4:b4:b1:e8:5f:81:71:57:ff:9f:e1:b1:97:b0:af: 77:b9:a6:7d:df:df:00:0f:ae:5f:cb:0f:fe:2d:d5:cc:19:cf: a8:77:c7:c0:ca:0d:d2:7d:c6:a0:08:c9:84:35:5b:8c:65:a3: 03:42:71:a0:51:4b:76:a5:0b:d7:c4:aa:34:93:07:4c:c5:61: f5:82:39:08:f2:81:07:ed:15:36:e4:55:ec:6f:2d:aa:fe:9d: bb:fb:90:be:1d:c3:e5:49:74:96:df:4a:bf:8c:66:5c:36:92: b5:03:a5:6b:80:5a:b2:6d:4b:a6:a3:8e:74:09:8e:49:24:7b: b0:78:47:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY3NDQxMTAvBgNVBAUTKDk2M0MyMEI3RDM4MDREQjgwMUNBRTI1NzRDMzFENzYw RDUzRDMzNDQwHhcNMjUxMjI2MTk1NjU2WhcNMjYwMTAyMTk1NjU2WjAYMRYwFAYD VQQDDA02OTRlZTg4OC1hNjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw86xjw/2k6TS7sC+wWqzx0+/F1rJYirgkJ0kqu9kR+RF797JOaiDZTCsYZwn yUw7BU5v5GU9hCYhI5N26rq9MoCxmFiQs8Ic6ai4g3+9OdLQyqgfrK+fUbfBEoka jrD3tiDrUPeGZOC9Qe2PjL+m1t89DYpY6yI1EixyjZvbatnKbpF401yfXYzbcyxg vpUWqItxzTsO25YkVvv4458vxmq5YRNlfQpYRyhWrPajj1cMUWQoY3Th+z+OkZov 1OsyQI92YOTq5QvDeV8i8bYnWSM+VGcR4LSVfRYtybBgrB15tkYK0qnVR5b6R8cK obGTho2ULT7ciluXX8dhsIQj3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlLGAdv 5eK0UpRGQ6mNBd3UVObEMB8GA1UdIwQYMBaAFJY8ILfTgE24AcriV0wx12DVPTNE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjc0NC8zM0U3OEZBQ0RC QUUxMUVBQUQ5NjY3MjNDNEY5QUUwMi9sandndDlPQVRiZ0J5dUpYVERIWFlOVTlN MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xqd2d0OU9BVGJnQnl1SlhUREhYWU5VOU0wUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Njc0NC8zM0U3OEZBQ0RCQUUxMUVBQUQ5NjY3MjNDNEY5QUUwMi9sandndDlPQVRi Z0J5dUpYVERIWFlOVTlNMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA58AgC3ps17SHs5b4PDnFT/0yghSGjcP+g7TkuWx0UH2ajjClv51y rzIg9I8NCuxd+wdcTRGnTFJdsRFA34aI75wwge38NRUYJJHQj2bQMpy4xmKHlPmR Nx9dNKEndCOZrcB1DdTtxkvUyVvVZ/5AlXzoq8lTVWXdm1xR5hl8k6PUtLHoX4Fx V/+f4bGXsK93uaZ9398AD65fyw/+LdXMGc+od8fAyg3SfcagCMmENVuMZaMDQnGg UUt2pQvXxKo0kwdMxWH1gjkI8oEH7RU25FXsby2q/p27+5C+HcPlSXSW30q/jGZc NpK1A6VrgFqybUumo450CY5JJHuweEfk -----END CERTIFICATE-----Generated at Sun Dec 28 11:24:58 2025 by rpki-client