This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft File: LHMz280_ygeHgDg3tsuuMawMS2U.mft (raw, json) Hash identifier: U5aV9yWTu5sITwicwA1dsXQagUTIH9lf8Bx1kpV1SBI= Subject key identifier: 41:4C:8A:46:A3:09:F6:2C:55:14:36:94:CC:6A:DC:2F:93:3B:9D:71 Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 Certificate issuer: /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Certificate serial: 0DC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft Manifest number: 0DB2 Signing time: Sun 28 Dec 2025 17:33:37 +0000 Manifest this update: Sun 28 Dec 2025 17:33:37 +0000 Manifest next update: Sun 04 Jan 2026 17:33:37 +0000 Files and hashes: 1: LHMz280_ygeHgDg3tsuuMawMS2U.crl (hash: HAiF9/qvvI9wg2IISB6pxRCcGJK+e071h4A/dq15AGI=) 2: 62BA539C48ED11EDBC251337C4F9AE02.roa (hash: +juOaIxrjQ6IhGwMB3Bm9h5unXUiB8xR+dHj1D1njhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 17:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3522 (0xdc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3FD3, serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Validity Not Before: Dec 28 17:33:37 2025 GMT Not After : Jan 4 17:33:37 2026 GMT Subject: CN=695169f1-33f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:4c:09:7b:47:72:69:95:2a:59:f8:9e:6f:ef: 1c:e5:c2:7a:b6:64:fc:ab:5d:1f:3c:55:8f:0e:9e: 51:21:34:22:28:e0:bc:19:75:04:7b:b1:c0:b3:b5: 11:18:73:f1:f1:58:8f:a9:e8:db:8b:e0:ee:32:ec: 0c:0c:c5:41:60:5c:97:e3:c4:fa:8b:df:4e:7d:06: 03:5e:19:33:7a:f6:db:83:19:a8:53:a4:d8:21:e3: 55:a7:1b:6e:c6:21:16:7b:82:d8:13:ec:ee:54:ca: ee:61:f0:50:0b:8d:f7:f6:75:6a:47:1b:e0:52:0c: b5:bf:86:63:8b:7d:cb:8a:d1:6b:48:70:ca:d8:ad: 08:fa:ad:c3:6c:91:36:b5:9c:c7:64:97:c3:7a:4a: 1b:01:02:d6:b0:88:c6:a6:75:f3:1f:92:96:e4:56: 49:82:ed:91:cc:2b:78:40:30:8c:27:9c:26:d0:e3: 18:d8:fd:31:06:cc:32:95:2d:8f:8e:eb:64:93:b1: 5c:ac:e8:1a:03:93:c3:90:b2:af:d0:0a:22:3f:78: 95:05:8f:c3:0f:c0:79:31:75:e5:11:7b:e8:95:09: bd:19:f6:e5:e6:9b:12:1f:8f:0a:03:52:46:82:48: 73:67:b9:b4:67:5a:dd:42:08:da:77:23:b4:45:e2: 18:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4C:8A:46:A3:09:F6:2C:55:14:36:94:CC:6A:DC:2F:93:3B:9D:71 X509v3 Authority Key Identifier: keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:80:70:c4:d9:7c:f4:ee:e6:f0:c5:65:b6:eb:d6:0a:9d:d3: bf:10:64:0f:4d:9e:28:73:1e:e5:4b:0e:c3:8c:ad:fc:bc:92: bb:e2:55:be:3a:e1:e3:ed:8a:e5:7e:e6:33:d2:74:69:84:5d: a0:dc:66:ca:18:21:16:9f:dc:e0:c7:40:98:32:c3:61:9d:91: 11:dd:8f:67:ca:03:63:c5:16:43:34:87:0b:2e:22:b2:62:be: e0:3e:f0:46:32:45:42:b1:fd:97:33:3c:ae:fe:da:2e:92:01: 19:80:5b:0c:6f:37:88:78:ed:af:7b:4c:69:86:a0:78:a4:1d: dd:27:0c:21:40:9b:c7:ab:74:cb:2d:ff:2f:9e:7d:d6:2b:4b: 23:97:ca:c7:71:6a:51:f1:0d:5e:d4:26:a3:a7:62:4b:7b:ba: 2b:29:38:27:5a:31:60:74:45:51:d8:58:52:b8:65:f5:57:a6: c2:ec:88:3c:aa:42:08:b6:fb:39:3b:10:36:e8:60:72:38:0f: 70:f3:0b:b1:00:21:44:a0:09:8f:b4:f1:93:84:6d:98:37:b6: c6:06:3b:5e:8f:d4:1b:a2:b0:15:06:11:c2:2f:0e:ef:bb:bd: 90:49:20:39:7d:5d:98:ab:fd:62:69:70:67:3d:b1:43:14:97: 60:af:6a:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGRDMxMTAvBgNVBAUTKDJDNzMzM0RCQ0QzRkNBMDc4NzgwMzgzN0I2Q0JBRTMx QUMwQzRCNjUwHhcNMjUxMjI4MTczMzM3WhcNMjYwMTA0MTczMzM3WjAYMRYwFAYD VQQDDA02OTUxNjlmMS0zM2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8kwJe0dyaZUqWfieb+8c5cJ6tmT8q10fPFWPDp5RITQiKOC8GXUEe7HAs7UR GHPx8ViPqejbi+DuMuwMDMVBYFyX48T6i99OfQYDXhkzevbbgxmoU6TYIeNVpxtu xiEWe4LYE+zuVMruYfBQC4339nVqRxvgUgy1v4Zji33LitFrSHDK2K0I+q3DbJE2 tZzHZJfDekobAQLWsIjGpnXzH5KW5FZJgu2RzCt4QDCMJ5wm0OMY2P0xBswylS2P jutkk7FcrOgaA5PDkLKv0AoiP3iVBY/DD8B5MXXlEXvolQm9Gfbl5psSH48KA1JG gkhzZ7m0Z1rdQgjadyO0ReIY9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFMikaj CfYsVRQ2lMxq3C+TO51xMB8GA1UdIwQYMBaAFCxzM9vNP8oHh4A4N7bLrjGsDEtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0ZEMy8yMURFNUI5QUQ0 OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3lnZUhnRGczdHN1dU1hd01T MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xITXoyODBfeWdlSGdEZzN0c3V1TWF3TVMyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0ZEMy8yMURFNUI5QUQ0OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3ln ZUhnRGczdHN1dU1hd01TMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTgHDE2Xz07ubwxWW269YKndO/EGQPTZ4ocx7lSw7DjK38vJK74lW+ OuHj7YrlfuYz0nRphF2g3GbKGCEWn9zgx0CYMsNhnZER3Y9nygNjxRZDNIcLLiKy Yr7gPvBGMkVCsf2XMzyu/toukgEZgFsMbzeIeO2ve0xphqB4pB3dJwwhQJvHq3TL Lf8vnn3WK0sjl8rHcWpR8Q1e1Cajp2JLe7orKTgnWjFgdEVR2FhSuGX1V6bC7Ig8 qkIItvs5OxA26GByOA9w8wuxACFEoAmPtPGThG2YN7bGBjtej9QborAVBhHCLw7v u72QSSA5fV2Yq/1iaXBnPbFDFJdgr2rx -----END CERTIFICATE-----Generated at Tue Dec 30 00:24:57 2025 by rpki-client