This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft File: lC4n1lxHr7WXCpr-goCbMXnYtGY.mft (raw, json) Hash identifier: GeUNM1nB/DxqUy02qpHZiQLDtLS6xQtYNqh/YvRi0ws= Subject key identifier: 2C:A1:18:EB:11:0D:ED:0F:56:23:42:18:2C:14:5E:7A:D3:22:46:98 Authority key identifier: 94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66 Certificate issuer: /CN=A91DC33B/serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft Manifest number: 171B Signing time: Thu 18 Dec 2025 16:32:30 +0000 Manifest this update: Thu 18 Dec 2025 16:32:30 +0000 Manifest next update: Thu 25 Dec 2025 16:32:30 +0000 Files and hashes: 1: lC4n1lxHr7WXCpr-goCbMXnYtGY.crl (hash: zHuh2vRIDD0rQ+Pw4IFDFUHv0/8qXGkUTlLogfRAZD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC33B, serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466 Validity Not Before: Dec 18 16:32:30 2025 GMT Not After : Dec 25 16:32:30 2025 GMT Subject: CN=69442c9e-e76b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:97:a2:6e:cc:ae:ae:5c:5b:5e:0e:76:39:97: 92:70:2b:82:a3:8a:d6:92:93:0e:87:0f:62:21:e6: 0d:f5:03:ec:64:78:ef:80:0a:37:60:ff:3d:d9:aa: a6:31:53:b3:32:cf:ca:60:9e:38:41:28:3b:70:12: 83:28:fd:72:6d:0b:ea:7f:fd:4f:a3:4d:20:bd:b4: f8:ca:de:3d:38:67:56:3d:bb:4f:2b:c9:99:bc:5c: b0:2b:db:c3:cd:c5:4b:d2:9d:da:2d:62:2d:66:d0: 08:57:2d:bf:37:a0:e1:2d:cd:3d:de:a0:d2:b0:21: 9c:d7:10:02:da:a2:ab:0a:ee:a1:1f:2f:42:b3:9e: 50:cb:39:7f:19:67:90:73:1f:0b:6a:2c:ad:df:ca: e8:72:25:24:e8:fb:d8:33:31:76:4d:9e:9b:48:60: 1d:5a:94:82:36:a4:5d:fd:a5:44:e9:21:72:68:9e: 25:20:27:58:9e:d6:f4:e1:0a:09:06:5d:8e:94:ef: c6:a6:d0:46:d5:6f:80:83:83:51:2e:be:65:23:5f: b5:c4:7c:f3:e0:96:5a:d8:7a:a7:fe:81:b0:0a:18: 98:d4:b8:3d:9c:11:1a:26:6e:e2:2c:c3:d2:02:1a: 1e:39:e5:b5:bf:09:f5:d6:e9:ad:e3:35:e4:61:fd: 48:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A1:18:EB:11:0D:ED:0F:56:23:42:18:2C:14:5E:7A:D3:22:46:98 X509v3 Authority Key Identifier: keyid:94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:72:ba:2c:ae:fa:4a:03:9f:f1:4a:f8:69:ef:2f:41:53:6e: 41:45:31:84:fb:3c:5f:94:54:59:6f:50:d1:2e:c9:9d:fc:07: f2:63:85:ed:63:57:d8:e1:65:86:64:e7:c3:4b:36:bc:2d:15: 26:3b:03:60:57:ad:50:ec:e3:2e:48:38:41:bb:8d:f0:40:58: 3d:d3:1c:47:ae:55:5b:2f:a5:32:4e:4f:6d:a6:26:8d:12:60: 03:ee:db:54:39:87:93:37:de:99:90:f6:dc:5f:9b:58:42:42: 09:ff:dd:4f:c5:23:f7:26:10:07:3d:73:1f:68:43:c2:75:a3: 6c:a9:51:2b:20:14:84:3e:a8:bc:44:26:68:23:32:9f:a7:53: c6:77:bb:d5:0e:bc:0a:9b:2a:a7:bc:6d:ba:53:95:74:e0:fc: 4f:d0:f5:eb:d7:b1:ef:6c:48:a0:90:0d:84:2a:4a:2b:3e:c0: 0e:9b:69:b2:0d:a0:ad:c5:0b:ba:0d:89:57:d5:a5:52:53:ab: d4:8d:4b:5b:22:70:7f:cd:38:8e:7d:ae:10:f1:8b:57:87:e0: b8:02:b7:af:8f:54:ef:b9:46:42:24:a9:c6:b6:81:70:af:1c: 0d:b9:a8:95:af:c7:06:b0:e1:6a:6a:5d:91:99:30:49:0d:29: 13:42:0d:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QzMzQjExMC8GA1UEBRMoOTQyRTI3RDY1QzQ3QUZCNTk3MEE5QUZFODI4MDlCMzE3 OUQ4QjQ2NjAeFw0yNTEyMTgxNjMyMzBaFw0yNTEyMjUxNjMyMzBaMBgxFjAUBgNV BAMMDTY5NDQyYzllLWU3NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTl6JuzK6uXFteDnY5l5JwK4KjitaSkw6HD2Ih5g31A+xkeO+ACjdg/z3ZqqYx U7Myz8pgnjhBKDtwEoMo/XJtC+p//U+jTSC9tPjK3j04Z1Y9u08ryZm8XLAr28PN xUvSndotYi1m0AhXLb83oOEtzT3eoNKwIZzXEALaoqsK7qEfL0KznlDLOX8ZZ5Bz HwtqLK3fyuhyJSTo+9gzMXZNnptIYB1alII2pF39pUTpIXJoniUgJ1ie1vThCgkG XY6U78am0EbVb4CDg1EuvmUjX7XEfPPgllrYeqf+gbAKGJjUuD2cERombuIsw9IC Gh455bW/CfXW6a3jNeRh/UjhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULKEY6xEN 7Q9WI0IYLBReetMiRpgwHwYDVR0jBBgwFoAUlC4n1lxHr7WXCpr+goCbMXnYtGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDMzNCL0I0QzlGRTkyMDZG NTExRTg5NjE4RjQyRkM0RjlBRTAyL2xDNG4xbHhIcjdXWENwci1nb0NiTVhuWXRH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEM0bjFseEhyN1dYQ3ByLWdvQ2JNWG5ZdEdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD MzNCL0I0QzlGRTkyMDZGNTExRTg5NjE4RjQyRkM0RjlBRTAyL2xDNG4xbHhIcjdX WENwci1nb0NiTVhuWXRHWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFhyuiyu+koDn/FK+GnvL0FTbkFFMYT7PF+UVFlvUNEuyZ38B/Jjhe1j V9jhZYZk58NLNrwtFSY7A2BXrVDs4y5IOEG7jfBAWD3THEeuVVsvpTJOT22mJo0S YAPu21Q5h5M33pmQ9txfm1hCQgn/3U/FI/cmEAc9cx9oQ8J1o2ypUSsgFIQ+qLxE JmgjMp+nU8Z3u9UOvAqbKqe8bbpTlXTg/E/Q9evXse9sSKCQDYQqSis+wA6babIN oK3FC7oNiVfVpVJTq9SNS1sicH/NOI59rhDxi1eH4LgCt6+PVO+5RkIkqca2gXCv HA25qJWvxwaw4WpqXZGZMEkNKRNCDd4= -----END CERTIFICATE-----Generated at Fri Dec 19 19:03:12 2025 by rpki-client