This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft File: lddEZYkqyDm6JHn6BHVqXjBfJjw.mft (raw, json) Hash identifier: qbiY+kiEV+sRFh7xQlys9yoT3QW2zHg0mQMrqi3YgKY= Subject key identifier: 29:52:03:B3:78:8E:EB:FF:EA:CB:90:FD:B1:7E:54:6F:45:A6:67:49 Authority key identifier: 95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C Certificate issuer: /CN=A91557F2/serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft Manifest number: 01B4 Signing time: Tue 02 Dec 2025 20:55:48 +0000 Manifest this update: Tue 02 Dec 2025 20:55:48 +0000 Manifest next update: Tue 09 Dec 2025 20:55:48 +0000 Files and hashes: 1: lddEZYkqyDm6JHn6BHVqXjBfJjw.crl (hash: p/0DAfzVKgptMkJIBVlngbn61S93jwT8o26hmb97uyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 20:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F2, serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Validity Not Before: Dec 2 20:55:48 2025 GMT Not After : Dec 9 20:55:48 2025 GMT Subject: CN=692f5254-b651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0f:d4:b7:9f:39:aa:7b:96:c3:e2:85:bc:10: 11:8a:cc:7a:77:b5:fe:84:33:2e:ac:d5:51:62:0f: 7a:09:8a:0b:f9:01:6b:1e:77:40:1f:43:42:dc:67: f7:be:59:8e:de:2d:53:f7:50:07:95:8d:fd:b6:3d: 8c:37:26:a7:c3:42:c6:37:53:8a:19:5e:09:95:02: 64:f5:09:88:57:d3:2e:01:2d:67:68:71:03:7d:20: b2:9e:49:f6:a5:83:6d:18:2c:35:86:26:9d:d2:78: 22:9f:8e:9f:99:f0:68:0b:4e:8b:11:e2:91:a5:49: 5a:52:29:13:12:6d:f1:02:5e:f1:2f:49:6e:5d:51: 29:05:2f:97:55:b1:10:de:38:6f:20:3e:07:4a:53: 5b:b8:e8:dc:59:db:62:cf:93:5b:06:fd:aa:f0:0d: f5:0b:78:75:9a:a4:e9:a9:29:98:03:f2:2d:5b:4e: 65:59:23:cf:8f:c1:ac:45:bb:4a:47:c1:c0:3f:8d: b7:fa:1a:7f:80:66:a5:ce:ef:c3:d0:37:6f:33:da: 37:9c:dc:c6:84:6a:91:f6:2d:38:db:d5:2b:c3:2f: 99:2d:38:d5:67:80:8b:18:ed:cc:bf:c9:f3:8f:cc: 51:44:e4:d5:77:93:86:84:07:ff:e4:0d:8a:3e:f4: 57:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:52:03:B3:78:8E:EB:FF:EA:CB:90:FD:B1:7E:54:6F:45:A6:67:49 X509v3 Authority Key Identifier: keyid:95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:8b:11:69:b3:b2:af:25:1c:a5:4f:7e:81:64:3b:e3:7a:49: fc:2b:7c:26:1c:5a:e5:23:41:68:e1:77:21:f0:0e:bb:2e:3f: 19:3c:a1:a2:9b:a3:78:13:d1:c1:10:b8:b2:b1:44:09:cf:b7: 14:ad:c9:0f:6e:e3:82:4d:7d:7a:14:85:1f:56:07:bc:ab:5f: 4a:b7:4e:40:cb:c5:01:64:84:7c:4e:04:52:8c:ba:0a:22:b4: ea:1c:3a:1e:cf:5f:3d:af:80:95:87:9f:73:6c:ca:f7:3b:1e: a5:fa:c6:f0:89:6e:fe:e1:de:c5:75:6c:11:4b:91:c2:13:40: e5:b2:17:8c:09:5c:9d:78:4e:ba:c1:32:66:8e:11:46:6a:c8: da:ff:d3:8d:f6:7d:80:14:90:7f:94:6b:57:77:b9:ea:38:05: fe:d2:02:a0:b8:8f:16:01:a4:27:c9:9e:7b:8c:a0:34:ba:e8: 72:40:71:f6:91:7e:79:1c:ce:a7:1b:cb:2a:cc:65:93:33:ff: 52:24:33:8a:df:57:ce:46:e6:81:73:34:80:85:4a:ba:a5:d3: 2a:2f:11:24:82:fd:39:b5:d4:2a:5a:06:b9:35:77:17:26:58: 00:9d:96:65:68:2e:01:ca:01:c1:c8:98:e1:88:d2:86:ac:7a: 89:f8:92:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjIxMTAvBgNVBAUTKDk1RDc0NDY1ODkyQUM4MzlCQTI0NzlGQTA0NzU2QTVF MzA1RjI2M0MwHhcNMjUxMjAyMjA1NTQ4WhcNMjUxMjA5MjA1NTQ4WjAYMRYwFAYD VQQDEw02OTJmNTI1NC1iNjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoA/Ut585qnuWw+KFvBARisx6d7X+hDMurNVRYg96CYoL+QFrHndAH0NC3Gf3 vlmO3i1T91AHlY39tj2MNyanw0LGN1OKGV4JlQJk9QmIV9MuAS1naHEDfSCynkn2 pYNtGCw1hiad0ngin46fmfBoC06LEeKRpUlaUikTEm3xAl7xL0luXVEpBS+XVbEQ 3jhvID4HSlNbuOjcWdtiz5NbBv2q8A31C3h1mqTpqSmYA/ItW05lWSPPj8GsRbtK R8HAP423+hp/gGalzu/D0DdvM9o3nNzGhGqR9i0429Urwy+ZLTjVZ4CLGO3Mv8nz j8xRROTVd5OGhAf/5A2KPvRXrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClSA7N4 juv/6suQ/bF+VG9FpmdJMB8GA1UdIwQYMBaAFJXXRGWJKsg5uiR5+gR1al4wXyY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGMi9CRjI3RkQ0NjQy RTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlEbTZKSG42QkhWcVhqQmZK ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xkZEVaWWtxeURtNkpIbjZCSFZxWGpCZkpqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGMi9CRjI3RkQ0NjQyRTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlE bTZKSG42QkhWcVhqQmZKancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLixFps7KvJRylT36BZDvjekn8K3wmHFrlI0Fo4Xch8A67Lj8ZPKGi m6N4E9HBELiysUQJz7cUrckPbuOCTX16FIUfVge8q19Kt05Ay8UBZIR8TgRSjLoK IrTqHDoez189r4CVh59zbMr3Ox6l+sbwiW7+4d7FdWwRS5HCE0DlsheMCVydeE66 wTJmjhFGasja/9ON9n2AFJB/lGtXd7nqOAX+0gKguI8WAaQnyZ57jKA0uuhyQHH2 kX55HM6nG8sqzGWTM/9SJDOK31fORuaBczSAhUq6pdMqLxEkgv05tdQqWga5NXcX JlgAnZZlaC4BygHByJjhiNKGrHqJ+JJj -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:56 2025 by rpki-client