This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft File: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft (raw, json) Hash identifier: DwDFvFQlcQxa3WD+HJn1gWHKZCExeeAbarWwqMbhC0Q= Subject key identifier: DA:53:FA:15:7B:B6:BC:89:0F:F4:56:E2:07:1B:BE:E2:4F:24:21:B0 Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 Certificate issuer: /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft Manifest number: 0239 Signing time: Mon 29 Dec 2025 01:05:14 +0000 Manifest this update: Mon 29 Dec 2025 01:05:13 +0000 Manifest next update: Mon 05 Jan 2026 01:05:13 +0000 Files and hashes: 1: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl (hash: rbM//w5AjEm4WMxDOxyijuQfM44DJq5E3sttIDEBtDM=) 2: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (hash: SRGoWxChP7e+9DgNFVadV9cBgB/2tWGPBAWl8n31NII=) 3: F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (hash: 9OZz5jF3wKw1CoZp9fYy/VeudY7hWDh1XxJPduifOg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 01:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Validity Not Before: Dec 29 01:05:13 2025 GMT Not After : Jan 5 01:05:13 2026 GMT Subject: CN=6951d3ca-9606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:21:99:10:5a:b2:d5:2f:20:0a:18:22:de:ed: ec:c5:03:46:45:f7:96:fe:f3:32:41:07:19:79:13: 71:78:8b:78:30:2b:48:14:a5:ef:79:9e:00:62:77: e4:77:aa:5c:6f:9b:c0:ef:ca:28:82:bf:43:a0:e2: d2:cd:59:bf:b4:3d:5c:9c:f0:54:3e:05:29:bd:bb: 74:aa:f3:51:4d:f2:73:4a:f6:e9:31:4d:52:c0:c6: ae:cd:99:49:2f:5b:8d:a2:f6:e9:3d:55:27:1c:17: 06:4b:c7:21:9f:d1:df:4f:f5:12:d9:6f:90:50:e4: 28:52:63:d5:14:90:fa:0b:bb:d5:b2:08:4c:b1:02: 8d:75:bd:82:da:4a:97:de:af:f9:2f:6d:07:81:be: 45:b0:ee:58:49:d5:1d:65:cc:31:3b:84:1c:d3:4a: 3a:90:3c:bb:44:e9:6f:48:ec:27:1d:01:4e:0b:8e: 86:ac:7a:ca:4c:69:0c:12:c5:8c:e4:8a:0e:7c:52: 14:b0:e2:e7:7f:89:37:45:74:b4:69:f6:a6:fe:50: 5b:fa:42:8f:70:99:56:10:ca:f8:a9:6d:2b:d4:ad: 4f:e3:94:bc:6b:b8:57:fc:ee:3d:05:64:a4:8a:ca: a9:a9:7f:3f:d9:0f:57:80:32:23:32:18:cc:63:28: 64:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:53:FA:15:7B:B6:BC:89:0F:F4:56:E2:07:1B:BE:E2:4F:24:21:B0 X509v3 Authority Key Identifier: keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:b1:87:6b:04:89:3a:3b:e2:e1:44:d9:89:1c:5a:1a:1e:76: 03:d3:3e:f2:20:a3:eb:2c:5a:84:2e:72:66:2d:89:5d:08:47: 52:86:46:72:1e:6d:7c:1a:e9:ec:e0:45:30:0c:49:99:23:fa: 79:cf:ae:96:42:df:49:3b:80:1b:c0:bc:56:7d:22:e2:3f:5e: 22:f8:49:72:0e:6f:e6:fd:22:e0:9a:67:aa:24:ce:fa:c4:c9: 42:08:46:38:00:fe:1b:32:4d:8b:cf:b5:68:b3:84:75:b3:cc: 75:13:03:b2:ba:07:7b:40:62:d6:6f:ba:d4:50:1e:59:9c:e7: 38:ff:61:4b:27:ae:c1:93:61:be:ed:4b:1b:b1:d9:66:53:c6: 61:90:b6:a3:f1:d4:c7:ad:a2:6e:d6:0d:51:28:80:fd:98:85: 47:e6:fb:7e:18:18:0e:81:b7:4c:40:cd:94:8a:d8:bd:45:de: be:c7:0b:82:78:b9:2f:2c:f0:e3:20:ad:2b:d7:bd:a9:a5:62: 17:a3:70:02:45:ac:5c:cb:b1:bb:c0:5d:e2:98:98:73:37:bb: a4:1c:f3:53:8f:0f:3b:d3:fb:a8:05:4e:34:1a:e2:bf:8f:c4: d4:61:de:de:3f:a3:63:b3:96:df:85:7f:d6:71:ea:0c:4b:09: cf:94:6b:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VDM0IxMTAvBgNVBAUTKDJERENEMDVEQ0UyQzU4MDM3RkUwMkY5NUUxQThCRkNC RDNFMEUzMjUwHhcNMjUxMjI5MDEwNTEzWhcNMjYwMTA1MDEwNTEzWjAYMRYwFAYD VQQDDA02OTUxZDNjYS05NjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmCGZEFqy1S8gChgi3u3sxQNGRfeW/vMyQQcZeRNxeIt4MCtIFKXveZ4AYnfk d6pcb5vA78oogr9DoOLSzVm/tD1cnPBUPgUpvbt0qvNRTfJzSvbpMU1SwMauzZlJ L1uNovbpPVUnHBcGS8chn9HfT/US2W+QUOQoUmPVFJD6C7vVsghMsQKNdb2C2kqX 3q/5L20Hgb5FsO5YSdUdZcwxO4Qc00o6kDy7ROlvSOwnHQFOC46GrHrKTGkMEsWM 5IoOfFIUsOLnf4k3RXS0afam/lBb+kKPcJlWEMr4qW0r1K1P45S8a7hX/O49BWSk isqpqX8/2Q9XgDIjMhjMYyhkLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpT+hV7 tryJD/RW4gcbvuJPJCGwMB8GA1UdIwQYMBaAFC3c0F3OLFgDf+AvleGov8vT4OMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUMzQi9ERjRBNDM3MjdE RTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dBTl80Qy1WNGFpX3k5UGc0 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xkelFYYzRzV0FOXzRDLVY0YWlfeTlQZzR5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUMzQi9ERjRBNDM3MjdERTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dB Tl80Qy1WNGFpX3k5UGc0eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgsYdrBIk6O+LhRNmJHFoaHnYD0z7yIKPrLFqELnJmLYldCEdShkZy Hm18Guns4EUwDEmZI/p5z66WQt9JO4AbwLxWfSLiP14i+ElyDm/m/SLgmmeqJM76 xMlCCEY4AP4bMk2Lz7Vos4R1s8x1EwOyugd7QGLWb7rUUB5ZnOc4/2FLJ67Bk2G+ 7UsbsdlmU8ZhkLaj8dTHraJu1g1RKID9mIVH5vt+GBgOgbdMQM2Uiti9Rd6+xwuC eLkvLPDjIK0r172ppWIXo3ACRaxcy7G7wF3imJhzN7ukHPNTjw870/uoBU40GuK/ j8TUYd7eP6Njs5bfhX/WceoMSwnPlGvs -----END CERTIFICATE-----Generated at Tue Dec 30 10:34:36 2025 by rpki-client