This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
File: LDTzNZTMO-PAfo54N2v8QzJjFUg.mft (raw, json)
Hash identifier: xvv7LgeVTqwhES5TmlHbkD0NSFa98zddTN1z/7VjcJU=
Subject key identifier: 98:ED:62:97:04:34:43:4E:92:DB:31:7B:A5:1E:EC:00:F3:3A:4A:F5
Authority key identifier: 2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48
Certificate issuer: /CN=A914ADD8/serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548
Certificate serial: 34EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
Manifest number: 34EE
Signing time: Mon 22 Dec 2025 14:27:38 +0000
Manifest this update: Mon 22 Dec 2025 14:27:38 +0000
Manifest next update: Mon 29 Dec 2025 14:27:38 +0000
Files and hashes: 1: LDTzNZTMO-PAfo54N2v8QzJjFUg.crl (hash: djKPnXvbdmNNpR9y08CglZbEcTJSIyea+99DYdA/Ua0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl
rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 14:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13551 (0x34ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914ADD8, serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548
Validity
Not Before: Dec 22 14:27:38 2025 GMT
Not After : Dec 29 14:27:38 2025 GMT
Subject: CN=6949555a-da8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:34:53:41:3a:00:3b:d3:6c:d3:bc:85:b8:
69:7a:ef:e9:5a:ae:02:52:3b:1c:89:0f:fe:fc:52:
00:6f:62:bc:69:b4:b2:c2:03:76:93:cc:2c:5c:9d:
15:90:21:cc:70:d7:a9:0e:80:3a:c7:8e:95:b3:6f:
55:36:a5:10:c1:8a:78:f7:b4:a3:1a:ad:ef:fc:1c:
0c:55:4a:cc:54:e3:07:5f:ee:f8:e2:20:81:a7:6b:
a0:0b:53:f2:e2:70:03:f3:ad:30:f8:3a:ab:38:bb:
86:5d:de:be:8c:5e:82:71:bf:e2:0a:c2:95:d0:4e:
8c:ae:9a:23:61:05:ea:44:a5:fb:37:33:ee:45:9e:
42:87:46:21:91:8d:96:ac:1c:e7:14:a1:8e:82:23:
d6:ac:69:d1:6c:a6:9c:45:b6:2c:8b:bf:1d:f7:99:
b5:c3:34:40:7b:50:ad:0e:15:63:26:9d:34:6f:cf:
fe:e2:b1:36:c5:a1:24:d5:bf:d0:c4:35:a3:15:e4:
01:49:9a:19:82:46:7c:a9:31:62:fa:49:9c:17:ce:
57:ee:0e:69:9c:47:a6:ce:7f:4f:c8:06:1f:0a:aa:
f5:a0:3d:f6:02:c6:62:1c:a6:08:f5:0b:c0:22:d2:
04:e2:ea:2e:3d:4f:2b:c5:05:3a:68:d3:72:8a:96:
56:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:ED:62:97:04:34:43:4E:92:DB:31:7B:A5:1E:EC:00:F3:3A:4A:F5
X509v3 Authority Key Identifier:
keyid:2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:76:e8:34:ec:ea:26:1f:76:a5:ad:3d:4d:0d:98:33:2e:27:
94:2d:d8:89:ef:43:97:b3:2a:33:d9:e3:71:c9:3f:4d:78:e8:
5d:66:79:16:cc:3c:db:13:64:c9:0e:76:31:a1:fa:7e:87:af:
59:34:95:98:ab:1d:0d:96:18:ee:17:26:c5:71:f7:d5:86:84:
3d:d5:8c:5f:1e:3c:b3:51:ad:39:60:84:18:a6:19:f5:b2:b7:
7a:01:17:9a:60:f4:fd:65:b4:09:d3:18:e4:9b:48:e1:46:1c:
c6:01:86:4a:2f:79:89:1f:d2:e2:c4:d5:af:df:30:c0:d0:ab:
6f:47:dd:fa:8d:5a:54:12:18:50:0b:1b:fd:d2:01:b0:7a:6c:
0c:1a:1f:56:53:eb:56:fc:fd:e6:01:d4:f8:77:40:f1:69:be:
98:7e:8d:e4:8a:1e:ca:5e:96:13:54:ee:6a:3c:a9:cb:11:c1:
c9:e4:75:92:59:f7:20:2e:c0:30:20:de:5c:5d:68:47:90:44:
7b:5c:fc:fd:25:76:b2:bc:c2:e0:b0:1e:3c:8a:e5:a5:f4:3c:
22:01:5a:d0:39:b7:c5:50:fe:00:a8:21:26:81:a3:c1:e4:a9:
b7:56:81:70:b2:c4:c7:68:67:ee:da:ed:eb:00:89:69:2b:bc:
17:2c:d9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:58 2025 by rpki-client