This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft File: lddEZYkqyDm6JHn6BHVqXjBfJjw.mft (raw, json) Hash identifier: serueqwkNbF0c4XfG0/W0i29ohsJFznthorvDXR24n4= Subject key identifier: EA:1B:3F:A3:4E:29:20:0E:89:74:31:D1:28:FC:87:9E:D5:78:D0:4C Authority key identifier: 95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C Certificate issuer: /CN=A91557F2/serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft Manifest number: 01BC Signing time: Thu 18 Dec 2025 21:08:05 +0000 Manifest this update: Thu 18 Dec 2025 21:08:05 +0000 Manifest next update: Thu 25 Dec 2025 21:08:05 +0000 Files and hashes: 1: lddEZYkqyDm6JHn6BHVqXjBfJjw.crl (hash: 7lHozcxUQXsqVHDxw3hqf7x3dEQlO6zDARlD6v2NNvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F2, serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Validity Not Before: Dec 18 21:08:05 2025 GMT Not After : Dec 25 21:08:05 2025 GMT Subject: CN=69446d35-20e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f7:65:d5:a3:34:21:0f:aa:b0:4e:3a:16:bb: 72:de:5d:d4:09:10:d1:82:6a:03:70:ed:05:5f:c1: e7:9f:7b:a5:a0:b8:74:a2:1d:2e:33:d0:07:eb:8d: cb:11:31:b6:77:0a:15:30:25:2a:0c:98:8d:4e:3b: 7d:a0:a8:6b:5e:4b:68:bb:dc:4f:3c:0d:ca:c4:c6: 4f:d9:c7:05:57:92:df:6c:f2:7a:8f:9b:0e:4a:e8: e1:54:70:c6:2a:b5:6e:37:54:c2:c0:c5:ef:50:bd: df:60:9f:fe:7e:b3:93:d6:f8:5a:f9:0e:99:92:e2: 87:db:ae:e5:4c:4e:66:81:48:15:e7:ec:cf:7c:94: e5:08:6c:5e:00:ad:32:09:9c:e9:1d:b7:f4:96:35: c8:c4:e7:51:4a:36:1e:b2:ae:ca:c1:ed:22:1a:7f: 46:07:3b:53:09:c4:f4:6e:4b:ad:9b:d9:b9:37:2c: b5:34:80:4d:84:59:26:40:7a:20:f6:8e:76:9c:30: d1:9e:fc:30:97:c3:ca:c9:21:5a:9e:03:ec:2c:41: 19:3e:f6:e1:4b:6d:ea:08:81:83:c7:6e:a7:e8:a4: 4a:ea:b5:de:10:bb:ce:9b:73:3f:15:50:74:d9:70: 14:e5:86:cb:f1:8e:ec:7c:23:75:f8:51:b2:5c:19: 88:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1B:3F:A3:4E:29:20:0E:89:74:31:D1:28:FC:87:9E:D5:78:D0:4C X509v3 Authority Key Identifier: keyid:95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:db:d5:34:0d:0d:28:28:ca:06:8d:bd:18:9d:02:36:b9:0c: 68:43:1c:63:be:2b:20:2c:1f:18:cd:10:9f:f2:52:7f:34:f1: 25:cb:7a:34:05:04:3e:86:3a:1b:75:0f:d6:1e:81:c9:3f:6e: fa:39:38:75:0f:f7:c5:c2:cc:5b:cc:69:69:51:db:90:59:7c: ce:08:63:cd:01:83:a6:96:9c:7c:20:06:08:54:05:ec:02:b3: 4d:0c:90:fa:04:ea:9e:73:26:2e:9f:89:48:e8:cf:94:a1:f1: 76:7e:c4:f3:20:00:53:44:3e:97:1e:64:88:d4:db:db:4e:e9: b6:d1:49:0f:b8:56:07:96:77:2b:90:5b:cb:bb:7b:f6:28:29: 47:c5:8e:57:57:8e:3d:08:ff:a7:61:e9:e6:99:1e:ce:a1:a0: a1:1a:6f:21:72:e7:bb:47:85:2c:b8:90:5c:54:1d:92:a3:1c: f5:af:4b:3f:c3:84:fb:da:52:28:2c:5f:08:e9:e3:a5:be:05: 41:f5:0e:42:48:21:eb:e1:f3:36:70:1c:07:eb:3c:1c:a0:63: 2c:5d:cd:57:62:43:c7:11:89:ba:ba:1b:97:8d:4f:71:db:ff: 53:f5:7d:40:43:5b:f6:12:8b:5c:d9:29:79:2c:37:48:9b:d7: f0:04:b3:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjIxMTAvBgNVBAUTKDk1RDc0NDY1ODkyQUM4MzlCQTI0NzlGQTA0NzU2QTVF MzA1RjI2M0MwHhcNMjUxMjE4MjEwODA1WhcNMjUxMjI1MjEwODA1WjAYMRYwFAYD VQQDDA02OTQ0NmQzNS0yMGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPdl1aM0IQ+qsE46Frty3l3UCRDRgmoDcO0FX8Hnn3uloLh0oh0uM9AH643L ETG2dwoVMCUqDJiNTjt9oKhrXktou9xPPA3KxMZP2ccFV5LfbPJ6j5sOSujhVHDG KrVuN1TCwMXvUL3fYJ/+frOT1vha+Q6ZkuKH267lTE5mgUgV5+zPfJTlCGxeAK0y CZzpHbf0ljXIxOdRSjYesq7Kwe0iGn9GBztTCcT0bkutm9m5Nyy1NIBNhFkmQHog 9o52nDDRnvwwl8PKySFangPsLEEZPvbhS23qCIGDx26n6KRK6rXeELvOm3M/FVB0 2XAU5YbL8Y7sfCN1+FGyXBmItQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOobP6NO KSAOiXQx0Sj8h57VeNBMMB8GA1UdIwQYMBaAFJXXRGWJKsg5uiR5+gR1al4wXyY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGMi9CRjI3RkQ0NjQy RTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlEbTZKSG42QkhWcVhqQmZK ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xkZEVaWWtxeURtNkpIbjZCSFZxWGpCZkpqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGMi9CRjI3RkQ0NjQyRTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlE bTZKSG42QkhWcVhqQmZKancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu29U0DQ0oKMoGjb0YnQI2uQxoQxxjvisgLB8YzRCf8lJ/NPEly3o0 BQQ+hjobdQ/WHoHJP276OTh1D/fFwsxbzGlpUduQWXzOCGPNAYOmlpx8IAYIVAXs ArNNDJD6BOqecyYun4lI6M+UofF2fsTzIABTRD6XHmSI1NvbTum20UkPuFYHlncr kFvLu3v2KClHxY5XV449CP+nYenmmR7OoaChGm8hcue7R4UsuJBcVB2Soxz1r0s/ w4T72lIoLF8I6eOlvgVB9Q5CSCHr4fM2cBwH6zwcoGMsXc1XYkPHEYm6uhuXjU9x 2/9T9X1AQ1v2Eotc2Sl5LDdIm9fwBLOV -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:00 2025 by rpki-client