This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft File: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json) Hash identifier: UzQjzfN+kBP8/h+9r5eDcB0Vrwla3HIWRwEaVlg6MGw= Subject key identifier: 03:48:F8:A5:84:65:F4:20:E1:53:6E:EE:2F:A0:31:DE:3A:B3:0E:5F Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 Certificate issuer: /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Certificate serial: 0334 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft Manifest number: 032E Signing time: Thu 25 Dec 2025 00:09:37 +0000 Manifest this update: Thu 25 Dec 2025 00:09:37 +0000 Manifest next update: Thu 01 Jan 2026 00:09:37 +0000 Files and hashes: 1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: rQvRhl84sRFNwN2SslaeHBRqvRn+vRxiiHZoOKLmKWg=) 2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: qa15tYjyvK+v+9+dFGqhDZRxQn9RFba+Z/+v8OfQMJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 00:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF83, serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Validity Not Before: Dec 25 00:09:37 2025 GMT Not After : Jan 1 00:09:37 2026 GMT Subject: CN=694c80c1-681c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7d:49:c1:78:f3:cf:c8:8b:b4:4d:22:a3:c1: df:e0:6b:39:1f:1f:04:fe:87:e8:52:22:60:5f:8b: ad:89:4b:8f:c6:8e:2c:44:64:64:c1:7a:c9:ec:ea: 78:a8:e1:fa:6a:6f:11:46:7b:73:55:3d:68:3c:06: 70:9f:c0:91:88:29:4a:0b:1d:ee:9c:9b:74:99:72: 2f:68:43:f1:94:8a:81:4f:fa:f7:9e:20:dc:25:7f: c7:13:c8:71:77:8a:45:14:50:ff:9e:0d:ee:b3:18: 77:48:29:29:66:6d:d4:4b:75:5f:5a:10:16:68:6c: ac:8a:59:a9:a5:fa:53:e0:f8:a4:e6:d2:ba:19:b5: d6:18:84:a7:39:d2:29:b5:1f:5b:ef:8a:5f:57:8d: 95:2b:5c:e6:94:7a:49:d0:80:ae:43:08:98:73:33: 12:74:b8:4c:40:ed:a1:52:f9:36:9a:fb:7d:a5:70: b2:82:6c:b5:a1:8a:13:84:7c:a4:7a:32:8f:d6:04: ea:29:a1:23:8f:14:5d:41:1e:06:e1:e0:d7:8c:43: 9d:45:ee:c6:b1:58:40:57:7b:2e:46:a8:47:49:8e: dd:bb:f2:81:79:d3:d4:0d:dd:4c:d6:4e:3b:27:a8: 9d:ec:fa:3e:82:da:7e:56:98:77:1d:38:70:21:1f: 38:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:48:F8:A5:84:65:F4:20:E1:53:6E:EE:2F:A0:31:DE:3A:B3:0E:5F X509v3 Authority Key Identifier: keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:45:f0:5e:06:76:55:31:46:1d:84:a1:f9:d3:f8:06:c9:c5: 75:04:19:3f:32:56:80:91:e1:37:55:32:a9:9c:b1:e1:7c:32: 54:79:bc:ac:e3:ee:6d:0d:00:01:ff:d3:05:d9:ed:bd:fd:e6: e9:dd:f2:73:65:a7:ef:11:88:c0:40:e5:5e:fc:15:be:6d:31: 9e:e4:32:8a:cc:e2:f6:73:37:bc:bb:a9:24:d8:c8:e4:e7:4c: 9e:ed:dd:ce:e6:34:86:78:7f:6f:cd:be:b2:8c:0a:37:e3:59: a5:8f:b0:e5:e6:2d:66:b4:bf:69:3a:d3:4b:cf:66:70:bb:f9: 3c:a6:e8:d1:53:24:41:eb:39:13:d3:3c:37:8f:d7:a8:f0:7c: 82:23:28:94:ae:96:94:cd:35:5a:a3:cd:c6:ca:39:8d:73:64: 03:10:6c:7b:d0:53:40:82:88:61:54:43:05:1f:23:77:b7:f9: 0e:e3:86:57:37:b9:51:0c:2a:3c:be:10:4a:9b:8a:c0:16:44: c5:1e:c8:aa:c3:6d:9a:ff:5d:93:38:43:81:35:ae:04:cb:8a: c9:9e:b2:46:ca:50:4a:b7:21:ee:88:87:f2:35:f5:a2:84:23: 11:92:37:57:56:24:06:26:ea:85:15:fb:96:45:0a:1e:3e:18: 11:3e:db:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGODMxMTAvBgNVBAUTKDJFRjg3NkE2NjRFNUQ4QjZDREUwMUNGMDg0MTBEQkFE OTZCQzQ5OTgwHhcNMjUxMjI1MDAwOTM3WhcNMjYwMTAxMDAwOTM3WjAYMRYwFAYD VQQDDA02OTRjODBjMS02ODFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz31JwXjzz8iLtE0io8Hf4Gs5Hx8E/ofoUiJgX4utiUuPxo4sRGRkwXrJ7Op4 qOH6am8RRntzVT1oPAZwn8CRiClKCx3unJt0mXIvaEPxlIqBT/r3niDcJX/HE8hx d4pFFFD/ng3usxh3SCkpZm3US3VfWhAWaGysilmppfpT4Pik5tK6GbXWGISnOdIp tR9b74pfV42VK1zmlHpJ0ICuQwiYczMSdLhMQO2hUvk2mvt9pXCygmy1oYoThHyk ejKP1gTqKaEjjxRdQR4G4eDXjEOdRe7GsVhAV3suRqhHSY7du/KBedPUDd1M1k47 J6id7Po+gtp+Vph3HThwIR84KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANI+KWE ZfQg4VNu7i+gMd46sw5fMB8GA1UdIwQYMBaAFC74dqZk5di2zeAc8IQQ262WvEmY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREY4My9FMkFFM0IwQUYx MzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJMYk40Qnp3aEJEYnJaYThT WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x2aDJwbVRsMkxiTjRCendoQkRiclphOFNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REY4My9FMkFFM0IwQUYxMzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJM Yk40Qnp3aEJEYnJaYThTWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmRfBeBnZVMUYdhKH50/gGycV1BBk/MlaAkeE3VTKpnLHhfDJUebys 4+5tDQAB/9MF2e29/ebp3fJzZafvEYjAQOVe/BW+bTGe5DKKzOL2cze8u6kk2Mjk 50ye7d3O5jSGeH9vzb6yjAo341mlj7Dl5i1mtL9pOtNLz2Zwu/k8pujRUyRB6zkT 0zw3j9eo8HyCIyiUrpaUzTVao83GyjmNc2QDEGx70FNAgohhVEMFHyN3t/kO44ZX N7lRDCo8vhBKm4rAFkTFHsiqw22a/12TOEOBNa4Ey4rJnrJGylBKtyHuiIfyNfWi hCMRkjdXViQGJuqFFfuWRQoePhgRPtvT -----END CERTIFICATE-----Generated at Fri Dec 26 01:28:16 2025 by rpki-client