This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft File: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft (raw, json) Hash identifier: cqmBjRtlU6Dy3Hy+4V7Qj3tGZoW7EeL+Jc5wqk17Lic= Subject key identifier: 84:B5:1D:7B:B3:23:B4:DA:20:1F:A8:EF:82:63:17:48:2A:68:92:BC Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 Certificate issuer: /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Certificate serial: 0236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft Manifest number: 022E Signing time: Sun 07 Dec 2025 00:34:51 +0000 Manifest this update: Sun 07 Dec 2025 00:34:50 +0000 Manifest next update: Sun 14 Dec 2025 00:34:50 +0000 Files and hashes: 1: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl (hash: 3qz2HBrU5ew2dVOK+x/gAycvX+qP3niZ3bo4pUMn0s0=) 2: F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (hash: 9OZz5jF3wKw1CoZp9fYy/VeudY7hWDh1XxJPduifOg0=) 3: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (hash: SRGoWxChP7e+9DgNFVadV9cBgB/2tWGPBAWl8n31NII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Validity Not Before: Dec 7 00:34:50 2025 GMT Not After : Dec 14 00:34:50 2025 GMT Subject: CN=6934cbaa-babd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:db:0b:d5:b5:5e:9c:02:ce:10:ed:a4:d2:50: e4:e0:10:46:14:d5:53:18:fa:5d:7f:5c:53:12:1d: 82:fe:ed:eb:d3:de:ba:8c:89:f5:f3:55:2c:68:56: ff:0d:50:60:59:8f:9c:c8:d0:81:f2:03:3c:6a:85: 3f:d2:04:2e:ba:f0:4e:64:ce:bd:2e:af:c7:9d:0e: 0f:28:73:84:24:cf:1c:ac:e9:e5:28:34:4e:e8:e7: df:40:35:4f:d0:ac:21:1f:68:11:bf:dd:03:a8:27: 9a:0b:2c:73:2d:be:d3:86:55:b1:48:86:14:d8:61: 67:33:63:50:94:f2:d7:70:8d:e7:85:31:e6:cb:66: af:95:20:96:76:f3:ec:b7:e4:18:a5:59:0d:aa:d4: 02:e0:0d:e2:b0:1f:06:65:3d:70:46:87:ec:25:b3: bf:c6:94:95:17:d8:0e:ee:2c:a2:d0:79:ba:1b:91: ad:a1:67:60:60:9b:02:98:ec:7a:91:0c:86:b1:d4: f1:0b:f6:ce:19:8b:39:5c:ee:d1:27:1e:d9:08:30: b0:28:6c:48:74:08:70:67:c2:8d:4e:cf:4e:84:33: 6b:53:9f:58:2e:d6:06:d5:a2:c0:20:2a:80:72:9d: b8:8a:04:df:a2:ed:80:d3:99:39:7f:a2:bf:d2:06: 2d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B5:1D:7B:B3:23:B4:DA:20:1F:A8:EF:82:63:17:48:2A:68:92:BC X509v3 Authority Key Identifier: keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:98:1b:bf:62:d7:fb:df:e9:5b:03:f4:81:91:95:7d:5c:2d: 48:3e:6e:a7:c2:2b:86:fc:31:e9:16:db:fc:3c:9f:09:1f:f3: 4a:d5:bf:27:ba:42:49:da:8f:2e:d9:a4:95:8b:90:de:a6:6c: 8c:8e:87:5b:62:1a:35:1c:26:db:56:9a:cb:a3:14:b3:35:b0: d2:af:99:a3:c9:ac:cd:62:c3:c8:c2:f5:34:ab:2e:6c:c2:f2: d7:21:10:b1:be:01:4d:e1:59:3f:3d:ef:15:6b:a3:19:38:61: 04:fa:a3:ff:8e:2d:e9:a2:b8:2f:e9:85:57:10:75:a3:61:95: bf:62:7c:59:f3:bc:e1:bf:25:ce:e2:b7:89:e4:cb:fd:f0:7e: 30:f7:65:95:4e:1a:0a:5f:6b:5d:bf:d0:a0:cf:cf:be:af:6d: 5c:65:9c:a6:fe:b9:1c:0e:98:40:1a:0f:5e:a7:fa:30:db:c7: bf:29:d2:84:b9:7e:8b:85:37:76:87:09:b5:13:5b:3f:6b:c2: 99:67:75:48:92:a0:f3:b1:41:67:3b:c4:3a:35:95:74:dc:24: eb:7b:ca:03:f3:c3:6b:e8:76:e2:2a:7d:8e:0b:69:37:95:fa: 24:3a:0f:b3:cd:98:a2:77:30:e3:75:aa:f2:ce:d1:60:ba:3d: 1f:4f:89:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VDM0IxMTAvBgNVBAUTKDJERENEMDVEQ0UyQzU4MDM3RkUwMkY5NUUxQThCRkNC RDNFMEUzMjUwHhcNMjUxMjA3MDAzNDUwWhcNMjUxMjE0MDAzNDUwWjAYMRYwFAYD VQQDEw02OTM0Y2JhYS1iYWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodsL1bVenALOEO2k0lDk4BBGFNVTGPpdf1xTEh2C/u3r0966jIn181UsaFb/ DVBgWY+cyNCB8gM8aoU/0gQuuvBOZM69Lq/HnQ4PKHOEJM8crOnlKDRO6OffQDVP 0KwhH2gRv90DqCeaCyxzLb7ThlWxSIYU2GFnM2NQlPLXcI3nhTHmy2avlSCWdvPs t+QYpVkNqtQC4A3isB8GZT1wRofsJbO/xpSVF9gO7iyi0Hm6G5GtoWdgYJsCmOx6 kQyGsdTxC/bOGYs5XO7RJx7ZCDCwKGxIdAhwZ8KNTs9OhDNrU59YLtYG1aLAICqA cp24igTfou2A05k5f6K/0gYtewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIS1HXuz I7TaIB+o74JjF0gqaJK8MB8GA1UdIwQYMBaAFC3c0F3OLFgDf+AvleGov8vT4OMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUMzQi9ERjRBNDM3MjdE RTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dBTl80Qy1WNGFpX3k5UGc0 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xkelFYYzRzV0FOXzRDLVY0YWlfeTlQZzR5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUMzQi9ERjRBNDM3MjdERTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dB Tl80Qy1WNGFpX3k5UGc0eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAymBu/Ytf73+lbA/SBkZV9XC1IPm6nwiuG/DHpFtv8PJ8JH/NK1b8n ukJJ2o8u2aSVi5DepmyMjodbYho1HCbbVprLoxSzNbDSr5mjyazNYsPIwvU0qy5s wvLXIRCxvgFN4Vk/Pe8Va6MZOGEE+qP/ji3porgv6YVXEHWjYZW/YnxZ87zhvyXO 4reJ5Mv98H4w92WVThoKX2tdv9Cgz8++r21cZZym/rkcDphAGg9ep/ow28e/KdKE uX6LhTd2hwm1E1s/a8KZZ3VIkqDzsUFnO8Q6NZV03CTre8oD88Nr6HbiKn2OC2k3 lfokOg+zzZiidzDjdaryztFguj0fT4lA -----END CERTIFICATE-----Generated at Mon Dec 8 06:56:55 2025 by rpki-client