This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json) Hash identifier: 97OmSTs3TgR2knhTh1paWOHA+ocU6Umpdkxpnf3A8VE= Subject key identifier: D2:80:9D:CE:FC:20:C0:F2:A8:16:08:49:88:44:11:DE:B5:41:0E:83 Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0B9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft Manifest number: 0B84 Signing time: Thu 18 Dec 2025 18:45:59 +0000 Manifest this update: Thu 18 Dec 2025 18:45:58 +0000 Manifest next update: Thu 25 Dec 2025 18:45:58 +0000 Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: LegXw5SppJhnBtUV/Oo3FkTz8SupLMlK9YkPC05bMu0=) 2: 6DEA717805F811F0833EAC2FC4F9AE02.roa (hash: CCycuwjR/zG8JMtLvZuunOXdbHVwvFPn+/QALmHYm1I=) 3: A2055C2E57D911F0BD42DB6DC4F9AE02.roa (hash: TqYpv2WwUkuRYuB5QyDoQVNiTgsmONzJzREbUEtpPrE=) 4: E64F585A060111F0BCBC7237C4F9AE02.roa (hash: vpWpUnXP3M0kRZXRJe9IPBkx6ZqY5gGfHE6hnKUPIZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2974 (0xb9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Dec 18 18:45:58 2025 GMT Not After : Dec 25 18:45:58 2025 GMT Subject: CN=69444be6-5607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c9:ec:36:c7:7b:6d:23:49:a5:d1:de:ee:87: c1:34:49:0a:f7:f9:f3:83:4c:fd:89:e4:52:d5:f5: 35:5e:4f:ae:85:25:e5:3f:1d:1c:df:7a:1a:34:be: bc:45:57:b5:a0:46:22:0c:9c:0f:c5:be:d2:22:ec: 0c:a6:c3:b6:34:29:a1:85:dd:5d:6f:f7:28:e1:25: 56:97:54:0f:88:62:89:ca:c3:f2:30:46:6d:8a:21: 4f:32:dc:e3:d9:65:09:1e:58:7d:0f:02:f9:b3:4b: 55:14:76:dc:6d:e9:e3:0c:eb:f4:58:c7:c7:3e:85: 4d:68:6d:4b:8a:72:af:88:4f:47:3b:59:6b:e5:93: e3:59:05:d6:12:cd:84:60:94:93:3b:b7:0f:a2:a6: 91:f0:d5:ef:af:b2:e5:f8:c3:ff:4c:de:c8:66:36: 37:d2:0e:59:9b:7b:87:1a:18:5d:1a:fa:52:0f:5d: b9:29:fa:77:03:43:7f:57:4f:4e:a4:48:d5:81:85: cb:b3:f1:46:f9:69:0a:96:71:c3:8d:b8:69:29:84: 4d:0f:99:70:75:40:60:cb:2b:c7:42:77:42:a8:bd: 72:98:5e:f8:73:eb:fb:c6:8b:2b:c4:83:0c:ce:ca: 9d:1f:99:3e:b9:d3:6b:8d:5e:66:d4:fa:81:0a:80: 29:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:80:9D:CE:FC:20:C0:F2:A8:16:08:49:88:44:11:DE:B5:41:0E:83 X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:50:2f:6b:4b:7c:ab:b0:57:83:6d:71:8e:0d:cf:a4:6a:5b: e5:f1:7b:11:9b:a3:9d:e8:ef:e7:21:a4:93:14:3b:40:12:94: 38:6f:e6:65:4a:92:d8:f5:d8:47:d7:e1:da:47:20:3b:e4:09: 81:8b:95:39:57:15:82:01:92:ec:50:99:f8:a2:df:4b:e9:c4: 21:5e:15:c4:81:06:b9:27:b6:68:31:7e:00:f6:7d:fd:ff:ff: de:29:b0:44:6a:7d:07:25:18:26:71:1a:21:f3:80:b9:bf:bc: b7:87:0c:b3:f9:82:28:d3:67:43:b2:e3:ba:30:d1:80:b7:0c: f5:53:0b:0b:43:5d:1a:20:88:36:65:77:92:cd:0a:98:65:06: 08:14:12:5e:39:1b:ef:6c:e2:2d:64:7d:e5:fb:3e:af:86:0a: 6a:d7:cc:c6:73:3f:ee:48:0d:46:40:03:68:72:9e:e5:56:1c: 38:37:14:38:e2:fd:02:ad:92:13:1c:41:48:10:02:a0:e5:d3: fb:5f:7b:d0:11:58:34:02:ad:3a:06:c6:3c:fa:bb:de:a0:5c: 63:17:1d:0a:b6:1a:24:1f:fd:44:90:fe:5c:f7:06:5f:f4:ad: 10:36:47:b6:5b:08:41:32:ab:2d:1c:e8:6d:d9:9d:b3:80:e8: 97:2c:76:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjUxMjE4MTg0NTU4WhcNMjUxMjI1MTg0NTU4WjAYMRYwFAYD VQQDDA02OTQ0NGJlNi01NjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsnsNsd7bSNJpdHe7ofBNEkK9/nzg0z9ieRS1fU1Xk+uhSXlPx0c33oaNL68 RVe1oEYiDJwPxb7SIuwMpsO2NCmhhd1db/co4SVWl1QPiGKJysPyMEZtiiFPMtzj 2WUJHlh9DwL5s0tVFHbcbenjDOv0WMfHPoVNaG1LinKviE9HO1lr5ZPjWQXWEs2E YJSTO7cPoqaR8NXvr7Ll+MP/TN7IZjY30g5Zm3uHGhhdGvpSD125Kfp3A0N/V09O pEjVgYXLs/FG+WkKlnHDjbhpKYRND5lwdUBgyyvHQndCqL1ymF74c+v7xosrxIMM zsqdH5k+udNrjV5m1PqBCoApFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKAnc78 IMDyqBYISYhEEd61QQ6DMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkI1Qi8yOURFNzQ4QTQxOUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3 dC1YeG56elU4N1VOX2ZZdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuUC9rS3yrsFeDbXGODc+kalvl8XsRm6Od6O/nIaSTFDtAEpQ4b+Zl SpLY9dhH1+HaRyA75AmBi5U5VxWCAZLsUJn4ot9L6cQhXhXEgQa5J7ZoMX4A9n39 ///eKbBEan0HJRgmcRoh84C5v7y3hwyz+YIo02dDsuO6MNGAtwz1UwsLQ10aIIg2 ZXeSzQqYZQYIFBJeORvvbOItZH3l+z6vhgpq18zGcz/uSA1GQANocp7lVhw4NxQ4 4v0CrZITHEFIEAKg5dP7X3vQEVg0Aq06BsY8+rveoFxjFx0KthokH/1EkP5c9wZf 9K0QNke2WwhBMqstHOht2Z2zgOiXLHZa -----END CERTIFICATE-----Generated at Fri Dec 19 20:15:41 2025 by rpki-client