This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft File: LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft (raw, json) Hash identifier: e5fUQ0qAVGZDr5EQlRyT3kIpdn0Ia1CY25cOfE9jQRU= Subject key identifier: 2C:62:8D:72:1A:83:77:92:B9:22:39:36:16:1B:9C:98:59:ED:CD:00 Authority key identifier: 2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2 Certificate issuer: /CN=A91FF94F/serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft Manifest number: 016F Signing time: Fri 19 Dec 2025 03:02:45 +0000 Manifest this update: Fri 19 Dec 2025 03:02:44 +0000 Manifest next update: Fri 26 Dec 2025 03:02:44 +0000 Files and hashes: 1: LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl (hash: xne/NiJevefF6PUOx02CTEYeOfPaQwrK8jGnaJUIiM0=) 2: F41E4608AD1511EE8FBA3458C4F9AE02.roa (hash: njsFK1qFbRu1CveVfyk+stg89vXjnCGuvbUS6fMSxUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF94F, serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2 Validity Not Before: Dec 19 03:02:44 2025 GMT Not After : Dec 26 03:02:44 2025 GMT Subject: CN=6944c055-e6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:51:f2:17:c2:74:a5:99:47:47:cf:2a:28:b0: bc:b0:4a:91:f5:b1:b0:10:a4:ac:cf:e7:cb:03:35: 9b:43:9b:4b:45:6c:32:37:76:68:59:ca:32:a3:16: 63:d0:ab:56:1f:4b:b5:df:c8:07:74:0d:5b:07:cc: 57:58:c0:7e:1d:d0:e0:41:ea:a3:c2:14:14:6d:82: e6:d8:70:3c:a3:3e:7b:aa:92:f5:57:3d:04:82:8b: 74:3f:3c:da:44:7c:79:99:ab:fa:6e:ed:5f:37:36: 7a:a1:61:1b:74:58:29:29:d3:49:73:9a:dc:5c:94: 6c:c8:77:d8:47:91:8e:18:3e:c4:01:54:97:eb:49: d4:d2:32:10:21:0b:52:78:99:e4:47:c9:3b:b3:a1: 3a:1f:37:d0:ed:e7:3a:56:9d:a5:35:6d:5f:15:f6: af:4d:2d:7e:c7:e3:e8:00:1f:34:cf:f5:ea:bb:74: b7:71:9a:b2:a1:e8:eb:2c:96:02:03:fe:82:dc:18: 18:20:3c:31:b3:25:c3:8a:cb:df:78:3b:66:02:c8: 50:56:f8:fc:5b:d7:9d:3b:f2:6a:0c:d4:3c:90:76: cd:02:d9:08:87:70:15:b2:2f:27:b4:77:b9:29:62: 17:4c:cf:3f:fd:e7:8e:8f:29:29:0c:04:c9:d2:31: f3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:62:8D:72:1A:83:77:92:B9:22:39:36:16:1B:9C:98:59:ED:CD:00 X509v3 Authority Key Identifier: keyid:2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:6a:ef:f1:b8:a6:3c:f7:c7:4e:8b:7c:bb:c1:b5:2d:d3:9d: a3:1a:5a:7a:24:ff:4e:c4:a8:05:2b:a0:5c:8b:52:fd:f2:14: 8e:0d:f4:81:34:dd:80:f3:6c:47:ce:68:ea:5f:9d:7e:46:68: 45:aa:2d:31:a1:47:0e:85:ee:08:b6:d2:1d:10:f5:b9:dc:5e: 5b:f9:2d:32:3b:27:e5:2c:e9:9f:d7:57:97:ab:12:ec:8f:f9: 21:64:9e:62:86:62:bc:8c:e6:a3:22:46:06:0b:c8:ab:d6:55: 30:cf:18:e8:fa:ce:f7:bd:c8:20:0d:ee:90:33:7b:f1:85:e4: 42:cc:81:53:44:ea:d6:e6:5d:e5:48:0b:bd:70:50:36:26:14: 5d:e1:ee:df:95:1f:ea:8b:d0:ca:57:10:75:21:2e:22:d2:8a: fb:b5:58:bd:c9:2e:b0:05:fc:61:28:81:53:b3:d4:fc:99:c7: f1:b8:b5:03:34:82:16:48:b8:82:bc:75:e5:c3:0c:5d:0e:d9: 44:7a:f4:8b:6b:a1:2a:48:10:0d:c9:30:df:3f:a3:46:1c:49: db:bd:70:a2:ba:ef:e7:f4:d2:56:b9:8b:ad:eb:65:f5:38:81: ee:c6:80:ea:e0:a8:b0:54:c8:81:86:dd:bc:76:16:06:6a:3c: 0e:9e:20:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY5NEYxMTAvBgNVBAUTKDJFQTYyOEFCNTVEMTgxNzQzRUYyOTBFRjgyNDk5ODBE NjI5OUFGQTIwHhcNMjUxMjE5MDMwMjQ0WhcNMjUxMjI2MDMwMjQ0WjAYMRYwFAYD VQQDDA02OTQ0YzA1NS1lNmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1HyF8J0pZlHR88qKLC8sEqR9bGwEKSsz+fLAzWbQ5tLRWwyN3ZoWcoyoxZj 0KtWH0u138gHdA1bB8xXWMB+HdDgQeqjwhQUbYLm2HA8oz57qpL1Vz0Egot0Pzza RHx5mav6bu1fNzZ6oWEbdFgpKdNJc5rcXJRsyHfYR5GOGD7EAVSX60nU0jIQIQtS eJnkR8k7s6E6HzfQ7ec6Vp2lNW1fFfavTS1+x+PoAB80z/Xqu3S3cZqyoejrLJYC A/6C3BgYIDwxsyXDisvfeDtmAshQVvj8W9edO/JqDNQ8kHbNAtkIh3AVsi8ntHe5 KWIXTM8//eeOjykpDATJ0jHz/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxijXIa g3eSuSI5NhYbnJhZ7c0AMB8GA1UdIwQYMBaAFC6mKKtV0YF0PvKQ74JJmA1ima+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjk0Ri9EMzQ4RjJEMEFE MTQxMUVFQjBCODExMzlDNEY5QUUwMi9McVlvcTFYUmdYUS04cER2Z2ttWURXS1py NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxWW9xMVhSZ1hRLThwRHZna21ZRFdLWnI2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjk0Ri9EMzQ4RjJEMEFEMTQxMUVFQjBCODExMzlDNEY5QUUwMi9McVlvcTFYUmdY US04cER2Z2ttWURXS1pyNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmau/xuKY898dOi3y7wbUt052jGlp6JP9OxKgFK6Bci1L98hSODfSB NN2A82xHzmjqX51+RmhFqi0xoUcOhe4IttIdEPW53F5b+S0yOyflLOmf11eXqxLs j/khZJ5ihmK8jOajIkYGC8ir1lUwzxjo+s73vcggDe6QM3vxheRCzIFTROrW5l3l SAu9cFA2JhRd4e7flR/qi9DKVxB1IS4i0or7tVi9yS6wBfxhKIFTs9T8mcfxuLUD NIIWSLiCvHXlwwxdDtlEevSLa6EqSBANyTDfP6NGHEnbvXCiuu/n9NJWuYut62X1 OIHuxoDq4KiwVMiBht28dhYGajwOniBK -----END CERTIFICATE-----Generated at Fri Dec 19 23:56:22 2025 by rpki-client