This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft File: LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft (raw, json) Hash identifier: Rh+/Vw2Kzt2s6eKmeu5qc/3OyZXBkeCMWZc08fD+sLk= Subject key identifier: C6:3A:A9:61:6E:20:BA:EC:3D:17:0E:EE:BB:DE:A4:D3:9D:9D:86:91 Authority key identifier: 2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2 Certificate issuer: /CN=A91FF94F/serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2 Certificate serial: 0176 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft Manifest number: 0172 Signing time: Thu 25 Dec 2025 02:56:06 +0000 Manifest this update: Thu 25 Dec 2025 02:56:06 +0000 Manifest next update: Thu 01 Jan 2026 02:56:06 +0000 Files and hashes: 1: LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl (hash: JSDNjrJCKaGuFade4YYtQDGV7TnlpZ1zNTM8og48jzY=) 2: F41E4608AD1511EE8FBA3458C4F9AE02.roa (hash: njsFK1qFbRu1CveVfyk+stg89vXjnCGuvbUS6fMSxUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 02:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF94F, serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2 Validity Not Before: Dec 25 02:56:06 2025 GMT Not After : Jan 1 02:56:06 2026 GMT Subject: CN=694ca7c6-6d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3b:0e:ad:5c:e2:f4:9e:7d:88:34:88:e9:49: 6f:69:c7:12:c4:54:cf:4d:f2:4b:31:bb:ab:63:2f: d9:d6:60:b1:15:1a:33:c1:ca:02:ad:bb:db:fb:fd: 2e:2c:2a:02:b6:c1:d1:c1:72:69:78:7e:bc:6d:70: 41:31:2c:9e:84:3f:eb:d7:f1:c5:ff:25:25:67:77: 8c:56:e2:63:29:f0:f8:8a:80:0f:5f:f6:64:94:dc: be:d1:61:64:b6:2e:42:12:47:39:b4:77:29:a7:2c: 58:46:51:97:6a:91:ac:97:ce:11:94:74:08:38:3c: ed:64:7d:4e:5a:21:0b:07:b9:58:35:a6:4f:7c:8a: e2:7b:07:5a:4b:0f:e7:2a:cf:fa:2c:91:7d:da:3e: 20:2b:29:46:a5:4b:14:ea:33:07:ce:63:65:c9:22: 23:73:64:4f:b8:99:8b:55:64:b5:49:2a:e1:aa:5f: 3d:73:77:ab:c0:75:db:37:60:3e:20:6d:4f:de:cf: e6:bc:c4:a2:75:29:0e:55:e5:f7:5a:7d:e1:02:53: ba:fd:70:ee:5a:ea:20:b7:a8:a2:7b:b6:39:3f:0c: 20:38:58:b2:06:2e:9d:55:25:c5:4a:ff:01:99:da: 2a:58:37:a7:9e:85:5f:3e:b0:89:fc:d9:0c:69:98: c9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3A:A9:61:6E:20:BA:EC:3D:17:0E:EE:BB:DE:A4:D3:9D:9D:86:91 X509v3 Authority Key Identifier: keyid:2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:e7:c9:24:b7:9b:cf:4a:d6:13:70:8f:6c:97:41:f1:de:4c: 1d:e0:d6:99:65:2c:de:43:e5:40:df:5e:d1:32:e3:4c:f8:94: 54:0b:cc:56:c3:a0:77:15:d0:02:39:dc:04:25:3d:2f:87:7b: 7f:94:dc:e5:bb:07:67:33:1f:ec:1b:0a:73:dd:ae:4a:54:d0: 84:fc:12:7a:d1:18:18:09:11:9d:2f:92:cc:85:1f:25:ac:f3: 54:fb:f6:09:7b:cb:fd:54:c2:60:00:c0:9a:9e:18:7c:94:34: 31:f5:44:86:ce:17:83:9c:1f:8d:7b:fa:85:b1:9a:08:8a:1f: 10:bc:1b:ce:39:0b:27:23:88:72:38:d2:5e:99:c3:d1:41:1b: b1:d0:f9:c0:ea:dd:06:74:e9:34:c7:fc:12:f6:e7:94:ad:92: 33:37:90:6c:96:7b:c0:5e:f1:60:cf:a4:00:93:bf:6e:ca:7c: 81:28:92:c2:54:9d:03:b2:d3:06:1a:c4:0a:72:e9:bb:6b:76: 4d:86:3b:a9:cd:e7:98:54:11:76:21:21:68:ed:05:84:5e:b8: db:2d:8e:12:f3:bd:cc:7d:77:0f:9e:6d:28:4d:fd:62:12:e3: 64:c9:66:c4:db:80:69:5a:f2:ae:f1:c3:e9:b7:89:b0:c3:98: 48:5c:f8:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY5NEYxMTAvBgNVBAUTKDJFQTYyOEFCNTVEMTgxNzQzRUYyOTBFRjgyNDk5ODBE NjI5OUFGQTIwHhcNMjUxMjI1MDI1NjA2WhcNMjYwMTAxMDI1NjA2WjAYMRYwFAYD VQQDDA02OTRjYTdjNi02ZDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zsOrVzi9J59iDSI6UlvaccSxFTPTfJLMburYy/Z1mCxFRozwcoCrbvb+/0u LCoCtsHRwXJpeH68bXBBMSyehD/r1/HF/yUlZ3eMVuJjKfD4ioAPX/ZklNy+0WFk ti5CEkc5tHcppyxYRlGXapGsl84RlHQIODztZH1OWiELB7lYNaZPfIriewdaSw/n Ks/6LJF92j4gKylGpUsU6jMHzmNlySIjc2RPuJmLVWS1SSrhql89c3erwHXbN2A+ IG1P3s/mvMSidSkOVeX3Wn3hAlO6/XDuWuogt6iie7Y5PwwgOFiyBi6dVSXFSv8B mdoqWDennoVfPrCJ/NkMaZjJoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMY6qWFu ILrsPRcO7rvepNOdnYaRMB8GA1UdIwQYMBaAFC6mKKtV0YF0PvKQ74JJmA1ima+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjk0Ri9EMzQ4RjJEMEFE MTQxMUVFQjBCODExMzlDNEY5QUUwMi9McVlvcTFYUmdYUS04cER2Z2ttWURXS1py NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxWW9xMVhSZ1hRLThwRHZna21ZRFdLWnI2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjk0Ri9EMzQ4RjJEMEFEMTQxMUVFQjBCODExMzlDNEY5QUUwMi9McVlvcTFYUmdY US04cER2Z2ttWURXS1pyNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY58kkt5vPStYTcI9sl0Hx3kwd4NaZZSzeQ+VA317RMuNM+JRUC8xW w6B3FdACOdwEJT0vh3t/lNzluwdnMx/sGwpz3a5KVNCE/BJ60RgYCRGdL5LMhR8l rPNU+/YJe8v9VMJgAMCanhh8lDQx9USGzheDnB+Ne/qFsZoIih8QvBvOOQsnI4hy ONJemcPRQRux0PnA6t0GdOk0x/wS9ueUrZIzN5BslnvAXvFgz6QAk79uynyBKJLC VJ0DstMGGsQKcum7a3ZNhjupzeeYVBF2ISFo7QWEXrjbLY4S873MfXcPnm0oTf1i EuNkyWbE24BpWvKu8cPpt4mww5hIXPgJ -----END CERTIFICATE-----Generated at Sat Dec 27 02:18:09 2025 by rpki-client