This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft File: LPsM720W1mdu6iEWQ-yOhcJc8v8.mft (raw, json) Hash identifier: BNA9qDMkYKUa7q1ezPwOthEHn/Xdv8ZrfE8n+10CM9A= Subject key identifier: 0A:68:9D:D2:D0:95:8E:E3:F6:ED:34:50:89:C2:DB:44:F3:24:BD:3B Authority key identifier: 2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF Certificate issuer: /CN=A91D6C1B/serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft Manifest number: DD Signing time: Thu 01 Jan 2026 05:08:51 +0000 Manifest this update: Thu 01 Jan 2026 05:08:51 +0000 Manifest next update: Thu 08 Jan 2026 05:08:51 +0000 Files and hashes: 1: LPsM720W1mdu6iEWQ-yOhcJc8v8.crl (hash: 7hoj5F8nh7sDkKkO3bapHycFTvwvf8rY3offpwgKuQg=) 2: 9549EE609A7311EF8A9F432EC4F9AE02.roa (hash: rmLzWyNdWKY0XtIRa8zpHc0j9dgfJvXq9eWmRerS2EI=) 3: 6E491F58A79211EFABD45B2BC4F9AE02.roa (hash: 4yChjAOymmSkEPhh7M5JKpyE3kPRApCvS6UuytNeeUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 05:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C1B, serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF Validity Not Before: Jan 1 05:08:51 2026 GMT Not After : Jan 8 05:08:51 2026 GMT Subject: CN=69560163-9c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5a:1c:63:83:43:9b:83:cc:01:db:b8:13:2e: 8a:2b:e3:b0:c1:a9:7e:68:66:c8:09:6c:ad:d3:1b: 1f:d5:86:4f:a5:be:bc:6a:9d:b8:64:29:22:53:e8: d5:a5:6f:ea:b1:e6:01:e4:61:16:76:c3:4c:96:e9: c1:17:b0:79:b7:7f:5c:d3:20:4e:74:b2:63:44:9d: 84:21:21:15:38:4d:6a:82:5c:ea:ec:b9:3c:d4:30: 50:17:9f:04:85:c0:01:5e:88:b6:28:81:6f:91:32: 7c:f3:8d:88:8b:ee:b9:fe:bd:a3:f5:c6:c8:51:ca: 8d:13:6e:9c:26:9a:07:2c:eb:b0:12:af:bd:c8:95: d8:1e:d2:e5:e8:4d:62:b4:42:3a:23:c1:48:26:98: 93:a1:cb:51:31:76:27:2e:6e:64:95:62:d5:f4:24: 24:b3:f3:e7:87:23:fa:71:34:64:9d:a4:1e:b0:4d: 94:17:75:96:ba:52:2c:bb:f3:34:a8:a0:0d:46:03: d9:3c:93:4f:18:63:fa:87:74:a9:26:77:75:e7:85: d0:47:06:be:8d:da:fd:d8:b6:26:7a:74:77:54:8f: 19:4c:55:b4:99:2a:8c:28:cf:f5:64:72:91:83:15: 97:61:4c:11:e5:6f:07:c5:9e:27:6d:94:b0:17:82: c3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:68:9D:D2:D0:95:8E:E3:F6:ED:34:50:89:C2:DB:44:F3:24:BD:3B X509v3 Authority Key Identifier: keyid:2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:25:1f:a5:52:48:12:ec:b8:37:cb:6b:cb:5d:95:b9:e7:ae: 21:15:18:f5:cd:65:3f:10:7a:df:4a:aa:20:63:a5:a6:b2:63: b0:59:a3:cf:ba:06:ca:2b:bb:61:34:e0:c6:e4:f8:b5:0f:f4: ef:29:d6:8f:49:e7:01:32:b6:36:d2:03:d6:eb:71:10:f4:31: 35:be:ed:4b:f1:c9:0c:0c:74:db:5d:3f:67:33:8b:4b:05:20: 5a:1d:6f:53:4a:aa:4a:7f:dc:db:f9:a5:8f:c4:35:85:1a:5a: ca:70:b8:1d:dc:57:f2:a6:5e:05:88:91:23:3b:e6:dd:f8:85: d0:07:47:8b:cb:84:58:35:e2:89:15:c3:59:e4:c4:8d:c4:e1: 07:ff:89:7e:fd:60:1e:b4:20:fc:89:78:30:93:c8:9e:8e:b2: 40:da:50:cc:9d:2d:96:59:84:1a:5a:c1:12:6d:f9:e9:c0:f0: 3e:3b:36:b7:30:f8:5e:f9:44:48:05:9e:ba:b7:77:de:81:7f: 97:44:ae:ec:f0:c8:74:64:a7:ba:1b:ae:24:22:c5:83:90:6e: 39:5d:f2:54:dd:ba:42:7e:0b:76:6f:82:f9:5a:0b:27:20:f1: 10:64:79:77:f5:f5:2f:10:46:3c:a8:e3:fa:0d:8d:99:c5:1c: 27:aa:8e:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZDMUIxMTAvBgNVBAUTKDJDRkIwQ0VGNkQxNkQ2Njc2RUVBMjExNjQzRUM4RTg1 QzI1Q0YyRkYwHhcNMjYwMTAxMDUwODUxWhcNMjYwMTA4MDUwODUxWjAYMRYwFAYD VQQDDA02OTU2MDE2My05YzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVocY4NDm4PMAdu4Ey6KK+Owwal+aGbICWyt0xsf1YZPpb68ap24ZCkiU+jV pW/qseYB5GEWdsNMlunBF7B5t39c0yBOdLJjRJ2EISEVOE1qglzq7Lk81DBQF58E hcABXoi2KIFvkTJ8842Ii+65/r2j9cbIUcqNE26cJpoHLOuwEq+9yJXYHtLl6E1i tEI6I8FIJpiToctRMXYnLm5klWLV9CQks/PnhyP6cTRknaQesE2UF3WWulIsu/M0 qKANRgPZPJNPGGP6h3SpJnd154XQRwa+jdr92LYmenR3VI8ZTFW0mSqMKM/1ZHKR gxWXYUwR5W8HxZ4nbZSwF4LDAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApondLQ lY7j9u00UInC20TzJL07MB8GA1UdIwQYMBaAFCz7DO9tFtZnbuohFkPsjoXCXPL/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkMxQi9FNTczMDZDQTlB NzIxMUVGOEVCNDE2MkRDNEY5QUUwMi9MUHNNNzIwVzFtZHU2aUVXUS15T2hjSmM4 djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xQc003MjBXMW1kdTZpRVdRLXlPaGNKYzh2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkMxQi9FNTczMDZDQTlBNzIxMUVGOEVCNDE2MkRDNEY5QUUwMi9MUHNNNzIwVzFt ZHU2aUVXUS15T2hjSmM4djgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIJR+lUkgS7Lg3y2vLXZW5564hFRj1zWU/EHrfSqogY6WmsmOwWaPP ugbKK7thNODG5Pi1D/TvKdaPSecBMrY20gPW63EQ9DE1vu1L8ckMDHTbXT9nM4tL BSBaHW9TSqpKf9zb+aWPxDWFGlrKcLgd3Ffypl4FiJEjO+bd+IXQB0eLy4RYNeKJ FcNZ5MSNxOEH/4l+/WAetCD8iXgwk8iejrJA2lDMnS2WWYQaWsESbfnpwPA+Oza3 MPhe+URIBZ66t3fegX+XRK7s8Mh0ZKe6G64kIsWDkG45XfJU3bpCfgt2b4L5Wgsn IPEQZHl39fUvEEY8qOP6DY2ZxRwnqo7E -----END CERTIFICATE-----Generated at Thu Jan 1 19:53:10 2026 by rpki-client