This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft File: lFlKrsbtZqaAoVv-tc2leC1MLYg.mft (raw, json) Hash identifier: sA3rjRAR39Ew1TZLOR9e/A/mn3OSkZ7DLmBfUeMsKRU= Subject key identifier: 07:3C:BB:10:4E:9B:EA:8C:3D:CA:01:01:A7:4E:3D:03:BD:10:E5:CD Authority key identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 Certificate issuer: /CN=A91E2EF9/serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft Manifest number: FF Signing time: Sun 21 Dec 2025 04:21:30 +0000 Manifest this update: Sun 21 Dec 2025 04:21:30 +0000 Manifest next update: Sun 28 Dec 2025 04:21:30 +0000 Files and hashes: 1: lFlKrsbtZqaAoVv-tc2leC1MLYg.crl (hash: Atgc9NyUZwWASlIP90VDq1PGHV3SzC8HIg8D33LjAH8=) 2: E7C7DBF8A0E411EF98A7340EC4F9AE02.roa (hash: 7jEw+cOkWTAknu5PcBj2MNehVkDO0rbITl2EdNIaO7o=) 3: 5D3D752CDBEB11F0A1AC385A536F56BC.roa (hash: uYeNFOSniBkkb6Cc56Cb53aZvEwuRUlCfEZxR4PFQpI=) 4: D926DBDA605211EF90C2C621C4F9AE02.roa (hash: Cl2PJo7826qehYKKSG2/VdHV6kV/QSQl5KdRQS87oS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EF9, serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Validity Not Before: Dec 21 04:21:30 2025 GMT Not After : Dec 28 04:21:30 2025 GMT Subject: CN=694775ca-7423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:47:63:97:bd:16:82:12:56:fd:97:89:a6:d5: 09:36:c4:f3:cd:cc:5d:70:e1:37:9d:14:97:ec:b5: af:28:65:21:88:77:64:b4:a2:90:17:bb:f3:e6:d7: 11:e3:b3:9d:9a:6a:ed:8d:1c:93:fc:64:65:17:81: 62:fb:0d:89:ca:87:62:6e:e5:4b:66:ee:46:a3:b0: a0:bf:9e:d8:f7:a7:48:17:fc:43:72:87:ab:9b:ec: 37:17:31:90:4f:c9:62:11:10:1c:a0:3c:d9:8a:29: 5a:d9:4a:a4:78:93:95:2c:cb:e5:20:9f:47:8d:ea: 2b:8b:77:aa:cd:be:9b:b5:fc:96:fe:74:17:6b:fe: 66:53:e0:f7:20:89:62:72:39:26:b9:35:08:1e:77: 27:47:53:fd:f4:23:31:1a:7b:46:b5:19:f3:9b:d1: 6c:2d:8e:9b:02:b5:25:e2:30:a9:10:84:73:00:1a: 6b:a9:4e:7a:3a:a0:00:dd:40:1f:a7:7b:55:04:5c: ee:29:05:a2:78:ca:b4:71:7d:aa:73:9e:2e:a0:78: 8b:04:29:a2:4b:ed:43:88:ef:cf:ab:02:b0:a4:4a: 64:d3:b3:88:1a:ce:47:73:72:fe:52:e9:d7:89:4b: 52:31:04:ce:3d:1d:8c:3d:18:a4:cd:35:0e:ab:35: 5c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3C:BB:10:4E:9B:EA:8C:3D:CA:01:01:A7:4E:3D:03:BD:10:E5:CD X509v3 Authority Key Identifier: keyid:94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:28:f0:17:2c:78:67:17:4c:b9:58:81:72:5a:b2:26:dc:87: 56:9e:1f:4a:90:09:15:8d:25:a6:a1:43:66:31:0a:6e:39:c6: e8:f3:03:05:67:a3:33:21:80:6d:a5:a5:b9:68:9f:9d:89:15: b4:0d:0c:2d:f4:28:37:8d:5f:e1:ad:1d:6f:19:97:23:76:16: ed:94:08:91:c0:6a:54:d4:8d:d3:24:9a:35:56:4e:69:59:2c: dc:b3:32:91:37:04:6a:c7:fd:9c:d2:76:d2:b1:03:e4:cb:f1: c6:5d:fe:fb:4f:36:04:a7:95:64:0c:9d:e2:bf:c7:93:05:d6: 55:60:52:cf:ed:cb:00:30:fa:4c:33:65:65:5b:da:db:fc:97: 84:e1:3d:3b:48:46:33:0c:fd:d7:8d:f8:cc:6c:4f:a2:59:09: f6:35:37:63:1e:6b:c6:b4:b8:9b:27:c3:a7:c6:12:93:0c:4f: d6:7b:ae:5a:2c:7a:1b:48:82:81:bc:8b:e8:ac:ad:8f:0b:f1: c3:ec:46:ca:40:e4:d1:69:58:58:65:43:74:10:53:d2:3a:60: 58:da:f0:15:92:6f:22:61:01:e2:26:7d:82:73:14:c1:d3:f2: a8:e1:41:f6:a4:7e:fa:54:e5:ad:d6:56:30:63:d2:0e:9f:24: 29:a1:0f:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRjkxMTAvBgNVBAUTKDk0NTk0QUFFQzZFRDY2QTY4MEExNUJGRUI1Q0RBNTc4 MkQ0QzJEODgwHhcNMjUxMjIxMDQyMTMwWhcNMjUxMjI4MDQyMTMwWjAYMRYwFAYD VQQDDA02OTQ3NzVjYS03NDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEdjl70WghJW/ZeJptUJNsTzzcxdcOE3nRSX7LWvKGUhiHdktKKQF7vz5tcR 47OdmmrtjRyT/GRlF4Fi+w2JyodibuVLZu5Go7Cgv57Y96dIF/xDcoerm+w3FzGQ T8liERAcoDzZiila2UqkeJOVLMvlIJ9Hjeori3eqzb6btfyW/nQXa/5mU+D3IIli cjkmuTUIHncnR1P99CMxGntGtRnzm9FsLY6bArUl4jCpEIRzABprqU56OqAA3UAf p3tVBFzuKQWieMq0cX2qc54uoHiLBCmiS+1DiO/PqwKwpEpk07OIGs5Hc3L+UunX iUtSMQTOPR2MPRikzTUOqzVcSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAc8uxBO m+qMPcoBAadOPQO9EOXNMB8GA1UdIwQYMBaAFJRZSq7G7WamgKFb/rXNpXgtTC2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGOS84MDRENkJGMDYw NTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpxYUFvVnYtdGMybGVDMU1M WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbEtyc2J0WnFhQW9Wdi10YzJsZUMxTUxZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGOS84MDRENkJGMDYwNTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpx YUFvVnYtdGMybGVDMU1MWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+KPAXLHhnF0y5WIFyWrIm3IdWnh9KkAkVjSWmoUNmMQpuOcbo8wMF Z6MzIYBtpaW5aJ+diRW0DQwt9Cg3jV/hrR1vGZcjdhbtlAiRwGpU1I3TJJo1Vk5p WSzcszKRNwRqx/2c0nbSsQPky/HGXf77TzYEp5VkDJ3iv8eTBdZVYFLP7csAMPpM M2VlW9rb/JeE4T07SEYzDP3XjfjMbE+iWQn2NTdjHmvGtLibJ8OnxhKTDE/We65a LHobSIKBvIvorK2PC/HD7EbKQOTRaVhYZUN0EFPSOmBY2vAVkm8iYQHiJn2CcxTB 0/Ko4UH2pH76VOWt1lYwY9IOnyQpoQ/d -----END CERTIFICATE-----Generated at Sun Dec 21 07:58:41 2025 by rpki-client