This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft File: lvw9H4eVvunqoeuV0ppZyKQCc9M.mft (raw, json) Hash identifier: eBwYhyocH6ovo0u191xIiaOWO8WNT1EIGSc0msXjODk= Subject key identifier: 62:3E:C1:A1:9F:C6:69:10:4E:8F:D4:FC:3D:1E:66:3C:8E:28:B9:0F Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 Certificate issuer: /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft Manifest number: 4B Signing time: Sun 21 Dec 2025 06:21:31 +0000 Manifest this update: Sun 21 Dec 2025 06:21:31 +0000 Manifest next update: Sun 28 Dec 2025 06:21:31 +0000 Files and hashes: 1: lvw9H4eVvunqoeuV0ppZyKQCc9M.crl (hash: 8rbmPHMNUFC2111uiP6cTkzDI+Q3U57UXnegFhH4Y3U=) 2: 6CAAA4586C5111F08D82894CC4F9AE02.roa (hash: e0Boz/2zfsZ25NXkwWQ4uGTrNr//Zb/uhgLC2rYh7PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Validity Not Before: Dec 21 06:21:31 2025 GMT Not After : Dec 28 06:21:31 2025 GMT Subject: CN=694791eb-5167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b9:e7:38:5c:e9:c4:d6:f3:c6:a0:67:4d:11: 9d:e4:6a:39:87:cc:b4:4d:1d:05:9d:39:b1:4c:87: 0d:3a:e3:29:73:89:23:06:8a:fb:e7:e8:8c:3c:f6: ae:09:50:5c:91:80:5a:8b:0e:a9:a9:07:45:ad:7d: 2d:0f:ad:0e:6e:49:f5:d6:ab:69:ea:de:73:ff:90: 6d:c3:6e:e7:44:d0:c4:95:86:14:60:98:9b:8e:69: 81:cd:e2:56:c0:66:03:8f:fd:a0:7a:4f:df:ea:53: df:aa:d8:dd:8a:e1:ad:f0:85:c9:77:f5:0a:b9:9b: e9:64:29:c1:9a:7e:e1:99:d9:ea:ec:3f:25:0f:8e: 6e:72:5a:35:bd:43:da:8c:29:d3:09:39:93:8b:91: bb:ea:ff:36:fa:78:be:73:e9:99:63:cd:18:fb:34: 70:c0:fa:16:ed:0c:84:9a:09:bc:bb:a5:a3:b3:f8: ac:79:b4:05:14:5f:ab:af:de:19:b3:b0:4e:8d:02: c3:66:23:59:a7:06:2c:36:42:50:f7:9e:3e:3b:f1: 9f:75:53:38:7f:4c:07:05:a4:58:18:3c:3a:35:e3: 56:ad:7d:0d:3b:a2:8a:23:49:4c:23:27:7f:dd:2d: 47:cd:f9:8e:0e:9c:bc:23:e9:3f:3a:0c:8c:4b:ad: 05:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3E:C1:A1:9F:C6:69:10:4E:8F:D4:FC:3D:1E:66:3C:8E:28:B9:0F X509v3 Authority Key Identifier: keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:85:44:ec:3e:74:44:34:97:17:f5:dd:2b:a2:43:47:6d:80: 46:88:17:3a:da:d9:a1:32:6c:be:22:fb:a4:e7:47:a5:0c:3b: b7:4d:29:b0:27:9d:3b:c0:4a:5c:57:a5:7a:56:bd:72:e6:bc: 78:bc:45:55:07:4a:ce:94:a0:ca:ac:4a:2c:68:e6:cf:6b:4a: 63:c6:3f:fa:45:7d:71:9e:38:86:a6:3b:6c:26:4e:33:7c:f9: e8:38:21:9f:11:a0:c1:64:3a:f5:2d:61:36:d7:86:f3:e7:b2: 7d:75:46:bf:da:6e:d6:29:48:8e:01:58:09:c6:c6:2c:8c:d7: f4:e1:8e:70:c5:95:15:30:da:69:2c:b8:25:8e:28:1a:dc:d8: 2b:47:7b:d3:fb:33:14:de:58:67:65:dd:82:5c:18:19:d4:ea: 02:d7:ad:55:32:ce:28:72:43:e0:70:d3:62:93:e4:86:4c:38: b6:5f:05:c4:03:c3:9b:a8:8a:ad:39:06:d6:81:8b:54:f3:2e: e1:63:fc:e1:fe:ea:a4:de:c0:8a:c0:9f:18:b4:25:64:05:b0: 8a:34:45:7f:e8:bf:e5:9f:31:3a:e8:ae:e3:86:a4:dc:b5:a7: b5:d6:4d:e9:0e:4a:61:8a:46:91:f8:07:fe:4b:be:8a:88:28: 03:d7:39:bb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODQzMjExMC8GA1UEBRMoOTZGQzNEMUY4Nzk1QkVFOUVBQTFFQjk1RDI5QTU5QzhB NDAyNzNEMzAeFw0yNTEyMjEwNjIxMzFaFw0yNTEyMjgwNjIxMzFaMBgxFjAUBgNV BAMMDTY5NDc5MWViLTUxNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyuec4XOnE1vPGoGdNEZ3kajmHzLRNHQWdObFMhw064ylziSMGivvn6Iw89q4J UFyRgFqLDqmpB0WtfS0PrQ5uSfXWq2nq3nP/kG3DbudE0MSVhhRgmJuOaYHN4lbA ZgOP/aB6T9/qU9+q2N2K4a3whcl39Qq5m+lkKcGafuGZ2ersPyUPjm5yWjW9Q9qM KdMJOZOLkbvq/zb6eL5z6ZljzRj7NHDA+hbtDISaCby7paOz+Kx5tAUUX6uv3hmz sE6NAsNmI1mnBiw2QlD3nj478Z91Uzh/TAcFpFgYPDo141atfQ07ooojSUwjJ3/d LUfN+Y4OnLwj6T86DIxLrQVPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYj7BoZ/G aRBOj9T8PR5mPI4ouQ8wHwYDVR0jBBgwFoAUlvw9H4eVvunqoeuV0ppZyKQCc9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NDMyL0ZCNjg1QjFFNkM1 MDExRjA4OTk4MDc0QkM0RjlBRTAyL2x2dzlINGVWdnVucW9ldVYwcHBaeUtRQ2M5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHZ3OUg0ZVZ2dW5xb2V1VjBwcFp5S1FDYzlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NDMyL0ZCNjg1QjFFNkM1MDExRjA4OTk4MDc0QkM0RjlBRTAyL2x2dzlINGVWdnVu cW9ldVYwcHBaeUtRQ2M5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAOFROw+dEQ0lxf13SuiQ0dtgEaIFzra2aEybL4i+6TnR6UMO7dNKbAn nTvASlxXpXpWvXLmvHi8RVUHSs6UoMqsSixo5s9rSmPGP/pFfXGeOIamO2wmTjN8 +eg4IZ8RoMFkOvUtYTbXhvPnsn11Rr/abtYpSI4BWAnGxiyM1/ThjnDFlRUw2mks uCWOKBrc2CtHe9P7MxTeWGdl3YJcGBnU6gLXrVUyzihyQ+Bw02KT5IZMOLZfBcQD w5uoiq05BtaBi1TzLuFj/OH+6qTewIrAnxi0JWQFsIo0RX/ov+WfMTroruOGpNy1 p7XWTekOSmGKRpH4B/5LvoqIKAPXObs= -----END CERTIFICATE-----Generated at Sun Dec 21 12:00:55 2025 by rpki-client