This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft File: ldziG17K3rBp3IG5JAXUdN5BwgY.mft (raw, json) Hash identifier: 9HQ6Bvl8+KL3Zdfw1Yrt1LFNAbTnk333x7aaOwA/TnE= Subject key identifier: F9:43:57:D3:EF:D6:2F:BC:90:A9:6B:0C:DF:1C:CD:31:31:2E:0A:DB Authority key identifier: 95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 Certificate issuer: /CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Certificate serial: 0C98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft Manifest number: 0C8D Signing time: Mon 22 Dec 2025 18:02:40 +0000 Manifest this update: Mon 22 Dec 2025 18:02:39 +0000 Manifest next update: Mon 29 Dec 2025 18:02:39 +0000 Files and hashes: 1: ldziG17K3rBp3IG5JAXUdN5BwgY.crl (hash: UJLpFryheaB5NwEVrC6bvHY+0nPcKklMlPaei6ap/js=) 2: 54AD60AE0C2E11EABBBFA158C4F9AE02.roa (hash: /1zN6Gwwi0zP2Xs45slEdMpw3TT72EUNYyQ6n/qRBPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3224 (0xc98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD174, serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Validity Not Before: Dec 22 18:02:39 2025 GMT Not After : Dec 29 18:02:39 2025 GMT Subject: CN=694987bf-f86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:91:11:63:d1:b7:36:ff:5d:7a:3f:e3:cf:6b: f8:a0:35:0a:88:34:47:c9:1e:8e:15:75:b5:10:a8: 66:e8:3e:56:4f:a4:96:ce:c4:30:0f:73:92:48:30: 69:77:73:70:8d:5d:7e:a9:b6:09:11:ee:e5:f0:fe: ce:ce:c6:09:29:92:96:be:83:21:2d:b9:56:13:1a: 78:30:b5:81:05:cf:02:20:fc:23:22:67:f9:a9:27: d3:64:37:cb:ca:11:42:db:67:4e:d5:23:31:3c:6b: ea:fc:e3:68:fe:d3:b0:69:e1:97:cf:62:db:1b:51: bc:89:55:ad:dc:1b:57:e8:13:a7:2d:45:4d:db:63: a4:40:d1:a0:2d:77:87:dc:3a:bd:61:87:cd:ef:e1: 89:4c:55:9e:d9:3d:0f:e7:d5:4a:40:d3:3b:3f:46: bc:8b:1b:32:9e:7a:fe:b1:cc:18:6f:cc:51:1d:66: f7:13:1f:09:ea:50:62:de:16:7e:de:3e:4e:6e:61: 23:81:83:b1:a6:6e:c5:38:82:cc:88:07:a8:f4:de: 03:0b:7a:9f:ba:c4:cc:04:8c:f7:d5:b1:84:df:06: 43:95:12:0b:99:07:68:f0:ea:26:28:8a:05:47:8e: a5:31:e6:78:11:fa:23:07:a0:5c:13:88:d0:13:f4: a1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:43:57:D3:EF:D6:2F:BC:90:A9:6B:0C:DF:1C:CD:31:31:2E:0A:DB X509v3 Authority Key Identifier: keyid:95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:7f:fd:f6:6e:9f:a3:51:1e:b4:61:f8:d1:1f:76:16:2c:af: 9f:6a:dd:49:46:d9:c5:f2:34:00:04:06:cb:4a:79:8c:c4:ba: 21:f4:0c:9b:43:d9:8b:c4:da:98:d6:44:2c:e5:88:8c:8d:f6: 4b:bd:a9:32:24:e1:01:77:e7:17:b3:54:1a:a1:7c:44:e0:de: 75:a8:23:dc:44:04:2d:a2:c9:98:aa:97:c4:d1:97:58:0a:5a: 71:0b:2d:b9:61:4f:f1:4e:c0:3d:3f:27:dc:46:88:04:d0:1f: 51:f3:7f:2b:42:7e:a4:ec:03:9e:73:8e:fa:b0:2e:3c:9c:3b: a7:18:35:2a:ee:f1:12:cf:b9:ff:ee:d0:1e:4d:1f:a0:db:0f: 44:a5:25:35:dd:81:bd:1c:03:d6:73:f4:85:4d:13:e8:14:61: b0:18:be:e4:43:cf:9b:9a:1e:f2:df:dc:ec:6a:b6:97:e4:22: c5:c8:14:ec:59:aa:90:f8:82:3f:83:01:dc:76:ce:5c:3b:43: df:25:a8:9f:6c:6f:53:d4:26:79:6a:8b:61:06:f3:db:f4:e8: e9:4a:32:d7:06:12:6a:9d:28:a8:2b:a2:bd:ba:94:40:29:88: 3d:ba:11:1c:75:d1:96:11:d4:61:aa:17:0a:8c:d8:01:e6:c2: 24:e3:1c:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxNzQxMTAvBgNVBAUTKDk1RENFMjFCNUVDQURFQjA2OURDODFCOTI0MDVENDc0 REU0MUMyMDYwHhcNMjUxMjIyMTgwMjM5WhcNMjUxMjI5MTgwMjM5WjAYMRYwFAYD VQQDDA02OTQ5ODdiZi1mODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5ERY9G3Nv9dej/jz2v4oDUKiDRHyR6OFXW1EKhm6D5WT6SWzsQwD3OSSDBp d3NwjV1+qbYJEe7l8P7OzsYJKZKWvoMhLblWExp4MLWBBc8CIPwjImf5qSfTZDfL yhFC22dO1SMxPGvq/ONo/tOwaeGXz2LbG1G8iVWt3BtX6BOnLUVN22OkQNGgLXeH 3Dq9YYfN7+GJTFWe2T0P59VKQNM7P0a8ixsynnr+scwYb8xRHWb3Ex8J6lBi3hZ+ 3j5ObmEjgYOxpm7FOILMiAeo9N4DC3qfusTMBIz31bGE3wZDlRILmQdo8OomKIoF R46lMeZ4EfojB6BcE4jQE/Sh0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlDV9Pv 1i+8kKlrDN8czTExLgrbMB8GA1UdIwQYMBaAFJXc4hteyt6wadyBuSQF1HTeQcIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDE3NC81MUMzRTU0ODBC NEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNyQnAzSUc1SkFYVWRONUJ3 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkemlHMTdLM3JCcDNJRzVKQVhVZE41QndnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDE3NC81MUMzRTU0ODBCNEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNy QnAzSUc1SkFYVWRONUJ3Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQf/32bp+jUR60YfjRH3YWLK+fat1JRtnF8jQABAbLSnmMxLoh9Ayb Q9mLxNqY1kQs5YiMjfZLvakyJOEBd+cXs1QaoXxE4N51qCPcRAQtosmYqpfE0ZdY ClpxCy25YU/xTsA9PyfcRogE0B9R838rQn6k7AOec476sC48nDunGDUq7vESz7n/ 7tAeTR+g2w9EpSU13YG9HAPWc/SFTRPoFGGwGL7kQ8+bmh7y39zsaraX5CLFyBTs WaqQ+II/gwHcds5cO0PfJaifbG9T1CZ5aothBvPb9OjpSjLXBhJqnSioK6K9upRA KYg9uhEcddGWEdRhqhcKjNgB5sIk4xyj -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:05 2025 by rpki-client