This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: ZIaodiAw1agV9I51Ymu0TilOymNLWbQgD+pi9hnuv5Q= Subject key identifier: 23:92:02:E8:23:1B:63:B2:83:C1:D2:01:8E:E5:5C:8E:4C:13:52:3E Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: 0112 Signing time: Fri 19 Dec 2025 04:00:51 +0000 Manifest this update: Fri 19 Dec 2025 04:00:51 +0000 Manifest next update: Fri 26 Dec 2025 04:00:51 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: 62OTDx+CG5puY7dqx2dtE1Wip0J6NGl/c1H6+hEJyKQ=) 2: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: XWY3Z0PrjeVbgUGRkkonKlE66Ol3xZjgkZ/1G2BNmmU=) 3: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: clF6JNb3xxwZ4+TvE/qZQW2JPLeVEQfwTMXzv7FMnBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Dec 19 04:00:51 2025 GMT Not After : Dec 26 04:00:51 2025 GMT Subject: CN=6944cdf3-513e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0a:fd:b8:29:13:2f:a9:66:b2:cc:95:55:3f: c2:4d:0e:65:b6:21:64:37:d1:25:6a:9b:83:97:5f: f3:d1:c6:a1:a4:5f:f9:41:df:55:4b:02:3d:5b:d2: 4f:e5:37:d0:48:67:e4:17:f6:1e:e1:f5:80:1f:56: 6e:f7:4c:a6:9b:92:c9:8b:75:44:55:7a:24:92:82: 80:c9:db:e7:85:6d:b1:bb:5f:af:5e:99:f8:17:ee: d4:17:5f:df:2f:ca:d0:68:fb:69:31:c2:a8:59:37: 8c:3b:b4:a8:f0:bc:14:22:63:5f:b4:24:e8:e1:e9: 5f:4a:bc:2a:89:b3:3c:ac:6c:4f:4f:3e:7e:10:40: f3:d5:b2:66:66:8c:be:a9:2f:e6:93:aa:9c:f0:06: 73:1d:8e:06:97:3c:0c:14:05:95:ba:ce:a8:68:2d: 28:9d:a0:0b:d0:bf:a7:41:7d:50:86:d5:b1:80:b2: 74:c3:03:87:f6:c6:09:4d:2d:31:0b:49:ad:71:5a: 3d:63:3c:f8:e2:c3:40:40:b2:38:2d:63:54:34:fe: 4f:b5:5e:1e:e9:3a:96:25:67:2c:e0:96:b4:17:55: a3:79:eb:d3:71:44:68:01:f1:55:18:63:b4:6a:01: 80:1f:77:77:2c:65:b9:9f:4b:99:87:5f:bd:4b:65: 43:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:92:02:E8:23:1B:63:B2:83:C1:D2:01:8E:E5:5C:8E:4C:13:52:3E X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:67:dc:91:2c:65:5a:93:40:80:91:9a:bd:66:90:f0:b3:63: e4:a6:31:b4:77:13:db:b0:e5:ec:54:8c:0d:cc:54:6d:d1:2a: f1:aa:58:74:01:26:63:fc:74:39:a7:44:b5:08:7a:1a:af:6a: 29:ce:dc:e1:4c:b6:1f:ae:56:c4:8e:f5:b8:7b:b5:1d:35:5e: bb:af:89:e8:4b:33:82:56:bf:f2:95:ed:0d:91:a5:22:ce:ee: 14:9f:15:02:32:a6:8f:bc:7d:88:03:06:13:8d:92:b6:2c:45: d5:4c:d7:51:5a:bb:1f:3a:e2:91:fb:ac:12:ab:a7:32:40:8b: 65:7d:43:64:ac:c0:ae:da:5b:69:c6:3a:b0:e4:fd:8f:99:b3: 44:73:b0:68:be:20:66:d5:74:31:db:f5:2f:d5:98:3c:55:bb: 7b:75:14:95:e6:6c:d0:a7:57:08:6c:d9:87:34:56:32:2f:ee: d8:0c:ce:68:f8:30:cb:dd:d2:ee:e6:38:4d:5b:79:99:61:16: 14:2a:c4:53:d2:b7:4e:24:e1:bf:51:46:78:6c:03:4c:b1:20: af:bd:8b:ac:3c:48:7d:4e:cd:0c:16:d8:98:4e:5d:3e:3d:24: 85:6e:0d:84:b5:71:e6:cc:c5:be:9a:bf:5b:83:0d:cc:37:ff: 50:df:46:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx OTM3RjlGOUMwHhcNMjUxMjE5MDQwMDUxWhcNMjUxMjI2MDQwMDUxWjAYMRYwFAYD VQQDDA02OTQ0Y2RmMy01MTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQr9uCkTL6lmssyVVT/CTQ5ltiFkN9ElapuDl1/z0cahpF/5Qd9VSwI9W9JP 5TfQSGfkF/Ye4fWAH1Zu90ymm5LJi3VEVXokkoKAydvnhW2xu1+vXpn4F+7UF1/f L8rQaPtpMcKoWTeMO7So8LwUImNftCTo4elfSrwqibM8rGxPTz5+EEDz1bJmZoy+ qS/mk6qc8AZzHY4GlzwMFAWVus6oaC0onaAL0L+nQX1QhtWxgLJ0wwOH9sYJTS0x C0mtcVo9Yzz44sNAQLI4LWNUNP5PtV4e6TqWJWcs4Ja0F1WjeevTcURoAfFVGGO0 agGAH3d3LGW5n0uZh1+9S2VDCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOSAugj G2Oyg8HSAY7lXI5ME1I+MB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t bEJBRkh2VTdlLWNaTl9uNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeZ9yRLGVak0CAkZq9ZpDws2PkpjG0dxPbsOXsVIwNzFRt0Srxqlh0 ASZj/HQ5p0S1CHoar2opztzhTLYfrlbEjvW4e7UdNV67r4noSzOCVr/yle0NkaUi zu4UnxUCMqaPvH2IAwYTjZK2LEXVTNdRWrsfOuKR+6wSq6cyQItlfUNkrMCu2ltp xjqw5P2PmbNEc7BoviBm1XQx2/Uv1Zg8Vbt7dRSV5mzQp1cIbNmHNFYyL+7YDM5o +DDL3dLu5jhNW3mZYRYUKsRT0rdOJOG/UUZ4bANMsSCvvYusPEh9Ts0MFtiYTl0+ PSSFbg2EtXHmzMW+mr9bgw3MN/9Q30Za -----END CERTIFICATE-----Generated at Sat Dec 20 00:56:19 2025 by rpki-client