This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft File: lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft (raw, json) Hash identifier: RAHuA/lqbDKFNGk+IQJCUcxwC67IQu66Ufoww8FtP5s= Subject key identifier: 32:BA:A1:19:70:6D:F6:38:81:B5:70:68:31:B3:B5:31:E2:3A:38:F2 Authority key identifier: 94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7 Certificate issuer: /CN=A91DEB01/serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft Manifest number: 52 Signing time: Tue 23 Dec 2025 06:10:02 +0000 Manifest this update: Tue 23 Dec 2025 06:10:02 +0000 Manifest next update: Tue 30 Dec 2025 06:10:02 +0000 Files and hashes: 1: lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl (hash: zNbuFECg6/vREpIC15gJUzqapxAc4z0VnEOE5nL/Gj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB01, serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7 Validity Not Before: Dec 23 06:10:02 2025 GMT Not After : Dec 30 06:10:02 2025 GMT Subject: CN=694a323a-7391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:43:09:61:cf:a3:a5:10:cf:f1:50:05:4f:83: c8:61:59:7c:be:40:7e:7f:1e:93:5c:ab:c0:1e:94: 0b:36:f7:18:e4:bd:2c:67:a2:3c:7e:f9:57:05:92: 6b:d5:7c:2b:7e:ff:f9:95:c6:58:b9:3f:b2:78:b7: 1a:92:b1:c9:23:42:8b:a8:c6:3c:4d:dd:ff:0b:80: a6:46:52:6e:ce:38:b6:7f:a3:ab:7f:43:9c:fc:e4: 63:73:fa:78:96:44:9c:89:20:c5:45:24:45:17:8e: 9e:5a:52:29:12:b5:b6:f2:94:17:9a:3d:23:e4:a9: c2:51:c5:90:8b:3d:15:58:28:77:0d:ae:7e:25:bc: 0f:62:23:ac:bb:e0:7c:e5:d9:b4:64:46:19:d6:e2: 75:12:33:e5:5a:2b:98:8c:c1:56:75:0b:77:5e:42: 4c:7a:a0:c7:44:6e:9d:92:2a:e2:9a:be:e9:ab:c9: ff:39:eb:50:db:9c:a5:7f:fe:6e:b3:eb:02:7c:65: 44:d8:a9:48:91:67:4a:d2:0d:ec:9f:d9:3e:ee:b3: 92:e5:bc:b6:82:1a:55:77:bb:a9:62:62:21:31:ff: 86:9f:48:c6:43:2d:73:f3:4a:60:8c:d6:24:7e:2e: f0:67:4b:81:6f:aa:ca:e3:a7:fd:1a:6a:a2:a8:80: 69:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BA:A1:19:70:6D:F6:38:81:B5:70:68:31:B3:B5:31:E2:3A:38:F2 X509v3 Authority Key Identifier: keyid:94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:3d:aa:26:08:6e:71:07:04:5f:9d:07:25:a2:31:fd:59:dd: 05:96:a1:58:8b:78:ca:92:fb:6f:a4:dd:ba:80:72:54:ed:35: b8:28:52:29:cd:4a:ec:44:0d:4a:9c:16:a5:80:f4:f7:07:15: 4b:89:50:46:e5:8b:62:fe:4e:af:c2:e1:26:5c:46:b1:44:a8: b1:f3:03:b5:27:40:1d:93:41:ff:e6:60:ce:82:83:b5:52:02: 83:1b:50:e6:fc:9f:ff:7a:50:2f:84:c4:f0:70:ef:16:1d:52: ef:22:cd:5f:31:2b:2c:92:58:df:d5:e1:70:12:f8:be:34:32: 9c:94:9b:74:ee:74:f4:e7:4f:c2:e5:ea:70:3b:05:ca:82:19: 21:7b:40:15:6b:1c:1a:07:d3:ac:0f:c6:59:66:b5:4f:df:56: 99:96:39:8c:78:3f:42:81:ad:cb:0e:83:92:d8:d2:0a:0c:6f: 5d:52:07:2d:21:ac:d1:49:43:ea:c3:38:4a:e2:cf:5f:cb:24: e3:2b:48:0c:47:0c:01:41:b7:33:8f:29:24:d7:b4:dd:6c:c8: 49:d8:50:a2:a2:36:ed:c6:ce:86:be:46:a0:ee:5d:b9:13:b8: 53:57:98:95:2c:d5:37:cb:33:4e:2a:1d:38:4c:3b:d4:dc:b9: 34:6f:e1:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RUIwMTExMC8GA1UEBRMoOTQzMzQ5RkRCNkRDMEFGMTVDRDU3NERBNDJGOEVDN0I0 OURDMERCNzAeFw0yNTEyMjMwNjEwMDJaFw0yNTEyMzAwNjEwMDJaMBgxFjAUBgNV BAMMDTY5NGEzMjNhLTczOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYQwlhz6OlEM/xUAVPg8hhWXy+QH5/HpNcq8AelAs29xjkvSxnojx++VcFkmvV fCt+//mVxli5P7J4txqSsckjQouoxjxN3f8LgKZGUm7OOLZ/o6t/Q5z85GNz+niW RJyJIMVFJEUXjp5aUikStbbylBeaPSPkqcJRxZCLPRVYKHcNrn4lvA9iI6y74Hzl 2bRkRhnW4nUSM+VaK5iMwVZ1C3deQkx6oMdEbp2SKuKavumryf8561DbnKV//m6z 6wJ8ZUTYqUiRZ0rSDeyf2T7us5LlvLaCGlV3u6liYiEx/4afSMZDLXPzSmCM1iR+ LvBnS4Fvqsrjp/0aaqKogGnFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMrqhGXBt 9jiBtXBoMbO1MeI6OPIwHwYDVR0jBBgwFoAUlDNJ/bbcCvFc1XTaQvjse0ncDbcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFQjAxL0Y2QTY0NUQ2NjdB MTExRjBCQkVCREYwOUM0RjlBRTAyL2xETkpfYmJjQ3ZGYzFYVGFRdmpzZTBuY0Ri Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEROSl9iYmNDdkZjMVhUYVF2anNlMG5jRGJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF QjAxL0Y2QTY0NUQ2NjdBMTExRjBCQkVCREYwOUM0RjlBRTAyL2xETkpfYmJjQ3ZG YzFYVGFRdmpzZTBuY0RiYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIA9qiYIbnEHBF+dByWiMf1Z3QWWoViLeMqS+2+k3bqAclTtNbgoUinN SuxEDUqcFqWA9PcHFUuJUEbli2L+Tq/C4SZcRrFEqLHzA7UnQB2TQf/mYM6Cg7VS AoMbUOb8n/96UC+ExPBw7xYdUu8izV8xKyySWN/V4XAS+L40MpyUm3TudPTnT8Ll 6nA7BcqCGSF7QBVrHBoH06wPxllmtU/fVpmWOYx4P0KBrcsOg5LY0goMb11SBy0h rNFJQ+rDOEriz1/LJOMrSAxHDAFBtzOPKSTXtN1syEnYUKKiNu3Gzoa+RqDuXbkT uFNXmJUs1TfLM04qHThMO9TcuTRv4Yk= -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:31 2025 by rpki-client