This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft File: lddEZYkqyDm6JHn6BHVqXjBfJjw.mft (raw, json) Hash identifier: YSD4yjVrXOzECSdGGUGK4NrGakI6sqRN7tFbFqETKHk= Subject key identifier: 0C:44:5A:84:82:9E:E0:32:D8:D9:F9:79:4B:B3:81:F8:6D:18:4F:AE Authority key identifier: 95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C Certificate issuer: /CN=A91557F2/serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft Manifest number: 01C1 Signing time: Sun 28 Dec 2025 20:59:09 +0000 Manifest this update: Sun 28 Dec 2025 20:59:09 +0000 Manifest next update: Sun 04 Jan 2026 20:59:09 +0000 Files and hashes: 1: lddEZYkqyDm6JHn6BHVqXjBfJjw.crl (hash: zqdDRIe8FgrK5dyOaCjiopmNZSnZaUQRgImCbKiDork=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 19:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F2, serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Validity Not Before: Dec 28 20:59:09 2025 GMT Not After : Jan 4 20:59:09 2026 GMT Subject: CN=69519a1d-9bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7b:f9:65:84:88:02:cc:ef:ed:de:52:3e:9c: 2f:7e:79:d7:3f:b0:88:4f:e3:04:dd:f2:8a:b0:be: 2b:1c:99:2d:1b:94:6e:53:44:b6:e1:b7:99:94:2f: c1:64:92:ef:f3:05:c4:93:bf:7c:e7:3d:8a:fe:99: 70:7a:c5:a0:8c:7a:8d:94:29:02:45:5c:8c:b0:ea: d8:d1:b8:51:45:ca:cb:d9:d4:16:f1:76:f4:e8:9c: 02:1f:b0:a0:ed:44:31:a8:76:f7:2c:60:8c:62:50: f1:2c:ef:ad:57:ea:df:fb:b5:78:2f:90:82:fd:47: 59:f8:b9:fb:0b:a2:23:23:d4:22:96:3c:a2:18:43: ce:c8:ad:b1:0c:cf:c8:8f:9a:82:1e:66:c4:b0:f7: 14:63:ce:03:84:89:b3:6d:ca:52:cb:b8:da:b7:ee: 4f:a5:a1:c1:b0:9e:dd:4c:a8:d3:09:f8:ef:0f:b9: 66:2d:13:f6:5e:ae:b6:f5:66:ba:75:17:cb:b5:2c: c7:be:e1:61:bf:b4:f1:99:a8:00:66:5c:2c:67:6c: c6:5c:13:04:d1:9b:46:6b:72:a3:01:fe:16:dd:7b: c1:95:e4:a3:5e:2c:e7:b4:4c:fa:5d:a8:1c:d5:bc: 0d:db:81:19:90:2c:24:bc:0f:3e:52:3a:e2:da:4e: c3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:44:5A:84:82:9E:E0:32:D8:D9:F9:79:4B:B3:81:F8:6D:18:4F:AE X509v3 Authority Key Identifier: keyid:95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:fe:c2:d6:42:52:22:29:af:7d:12:a7:0d:79:15:52:36:07: d8:bc:dd:03:29:f0:6e:22:c6:44:60:d1:eb:ce:41:72:30:47: a1:ce:f9:73:bb:f9:2b:a9:29:ca:0a:63:99:9b:26:ad:45:f8: 17:2d:6b:6e:97:6c:7c:2f:c6:03:18:5e:ee:61:c5:b4:c3:a0: 8e:ed:55:61:5f:9c:a3:72:ca:e8:6e:ee:b6:23:f7:10:14:7c: ea:5b:c2:dd:95:78:31:e9:50:fc:55:17:b3:fd:69:34:dd:d3: ad:69:07:d6:03:0d:15:cf:96:0a:bd:fc:f6:5a:46:d7:c8:a9: 49:72:d1:d3:2f:8f:b6:c8:54:87:92:53:b1:f9:b7:b3:85:42: 93:62:48:56:d7:53:6f:24:e6:fe:64:00:3c:67:73:ef:cf:b8: ed:7e:73:60:c3:61:2d:41:ac:5c:00:26:74:68:a0:4a:78:84: 15:17:20:06:24:ce:cd:65:a0:c5:40:e3:d3:bf:8c:61:83:d3: 6c:b9:a8:e7:59:ec:3f:5f:b4:02:17:db:a8:30:3f:88:4e:40: d1:76:f7:05:01:3c:69:7c:d0:7c:fe:b0:04:91:1a:75:f6:c2: ce:d6:7a:5d:fd:0a:62:04:86:32:5c:8a:b1:95:0c:04:d3:92: 20:e7:dd:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjIxMTAvBgNVBAUTKDk1RDc0NDY1ODkyQUM4MzlCQTI0NzlGQTA0NzU2QTVF MzA1RjI2M0MwHhcNMjUxMjI4MjA1OTA5WhcNMjYwMTA0MjA1OTA5WjAYMRYwFAYD VQQDDA02OTUxOWExZC05YmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nv5ZYSIAszv7d5SPpwvfnnXP7CIT+ME3fKKsL4rHJktG5RuU0S24beZlC/B ZJLv8wXEk7985z2K/plwesWgjHqNlCkCRVyMsOrY0bhRRcrL2dQW8Xb06JwCH7Cg 7UQxqHb3LGCMYlDxLO+tV+rf+7V4L5CC/UdZ+Ln7C6IjI9QiljyiGEPOyK2xDM/I j5qCHmbEsPcUY84DhImzbcpSy7jat+5PpaHBsJ7dTKjTCfjvD7lmLRP2Xq629Wa6 dRfLtSzHvuFhv7TxmagAZlwsZ2zGXBME0ZtGa3KjAf4W3XvBleSjXizntEz6Xagc 1bwN24EZkCwkvA8+Ujri2k7DuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxEWoSC nuAy2Nn5eUuzgfhtGE+uMB8GA1UdIwQYMBaAFJXXRGWJKsg5uiR5+gR1al4wXyY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGMi9CRjI3RkQ0NjQy RTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlEbTZKSG42QkhWcVhqQmZK ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xkZEVaWWtxeURtNkpIbjZCSFZxWGpCZkpqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGMi9CRjI3RkQ0NjQyRTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlE bTZKSG42QkhWcVhqQmZKancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp/sLWQlIiKa99EqcNeRVSNgfYvN0DKfBuIsZEYNHrzkFyMEehzvlz u/krqSnKCmOZmyatRfgXLWtul2x8L8YDGF7uYcW0w6CO7VVhX5yjcsrobu62I/cQ FHzqW8LdlXgx6VD8VRez/Wk03dOtaQfWAw0Vz5YKvfz2WkbXyKlJctHTL4+2yFSH klOx+bezhUKTYkhW11NvJOb+ZAA8Z3Pvz7jtfnNgw2EtQaxcACZ0aKBKeIQVFyAG JM7NZaDFQOPTv4xhg9NsuajnWew/X7QCF9uoMD+ITkDRdvcFATxpfNB8/rAEkRp1 9sLO1npd/QpiBIYyXIqxlQwE05Ig590t -----END CERTIFICATE-----Generated at Sun Dec 28 23:41:18 2025 by rpki-client