This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft File: DldBdtqmrGyXcGxmecfiTnC6rVc.mft (raw, json) Hash identifier: ncOToCmaKi+CTFmdmFm/WcLTXax3Np4GowCXsEFkulM= Subject key identifier: 3A:89:51:06:C4:73:E0:D3:18:8B:C2:17:3E:F8:8D:46:9A:53:86:4F Authority key identifier: 0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 Certificate issuer: /CN=A91C0BDE/serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Certificate serial: 0A06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft Manifest number: 134D Signing time: Thu 18 Dec 2025 19:25:15 +0000 Manifest this update: Thu 18 Dec 2025 19:25:15 +0000 Manifest next update: Thu 25 Dec 2025 19:25:15 +0000 Files and hashes: 1: DldBdtqmrGyXcGxmecfiTnC6rVc.crl (hash: yFGlZb8yXfz/MAsRH+iCbGEXU8SOcqPqcvZAs+cOeyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2566 (0xa06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Validity Not Before: Dec 18 19:25:15 2025 GMT Not After : Dec 25 19:25:15 2025 GMT Subject: CN=6944551b-c261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:98:f2:ed:d3:6a:10:d4:04:56:0b:e4:20:39: 89:8f:fd:74:8d:60:20:06:fe:fc:99:f6:4c:88:6b: e1:44:16:a7:7c:f3:f3:51:b3:9a:3a:bc:b8:6b:6f: f3:04:0d:93:be:b2:9d:80:1d:56:2e:2e:8a:6b:f4: 87:ba:1e:84:20:ca:a6:c8:85:14:11:e2:b8:a7:31: 26:cf:80:ac:45:cb:03:ee:9f:ec:90:e4:af:36:a4: 0e:be:57:c5:71:23:76:4c:d8:b6:95:8c:d5:73:ac: 2a:c3:4f:cd:bc:eb:66:42:b1:26:ae:3c:3a:fe:9a: d1:c1:4e:4f:b5:54:1b:b0:7b:50:9c:91:35:74:96: fa:17:66:c7:6e:6b:80:33:e9:98:af:4b:16:d0:72: de:01:74:3d:f0:e5:cf:39:3b:72:98:ff:54:18:2d: df:d7:44:5b:d4:49:a7:35:14:39:c4:c2:31:26:21: 8a:65:7f:1a:00:38:b3:ae:3b:e5:b8:42:ac:c8:44: 32:16:e6:ae:12:1a:b7:ed:3b:46:bc:cb:75:cb:84: 45:f8:05:93:5c:14:ff:65:90:8d:a7:88:24:2a:99: df:53:23:f3:e8:44:d5:4c:91:60:08:d7:c9:91:77: aa:f0:ab:53:95:4b:95:6a:d6:47:27:2f:dd:cf:2f: 4e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:89:51:06:C4:73:E0:D3:18:8B:C2:17:3E:F8:8D:46:9A:53:86:4F X509v3 Authority Key Identifier: keyid:0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:5c:86:25:44:db:9d:1c:6a:d8:e1:13:6b:a7:bb:c7:8b:6f: e3:44:51:54:3d:ae:42:02:1e:71:e4:a1:44:32:6e:d7:b1:7b: 39:d9:d0:c9:d9:fd:11:30:41:03:21:18:a5:9b:ca:7c:3c:35: 55:45:01:f4:f0:13:06:bc:5b:24:b4:0a:42:c2:a1:59:5c:29: cb:2a:e2:59:13:1e:1b:a7:84:ec:97:dd:5e:57:ec:53:3b:70: 30:33:e2:fb:87:96:2d:f0:44:b3:3e:5f:78:6c:1a:4f:91:c3: a8:61:ae:07:d6:44:d6:27:0b:d9:df:74:ed:02:17:f3:db:ba: 2c:93:df:e4:3d:a3:a2:35:d1:c1:fc:67:b0:18:29:e6:f6:26: 32:b8:fb:e1:21:3d:b5:f9:8d:65:0b:f4:5a:fb:eb:19:26:78: 8f:bd:2e:14:74:17:ed:51:f2:25:0a:87:3c:9d:58:68:0f:14: a6:f4:bc:39:fe:8d:1e:40:d6:1f:c7:ff:8e:10:03:ab:f4:76: 33:b5:c7:0e:e0:65:f1:f9:5b:8f:a0:3a:5f:7a:2a:6e:41:97: 0d:a8:ec:73:aa:d8:b8:a7:6f:81:3c:52:65:74:aa:68:c7:53: cf:20:76:7b:16:99:40:12:3b:6a:ad:0f:58:da:1c:0f:1d:f3: 67:ae:bd:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKDBFNTc0MTc2REFBNkFDNkM5NzcwNkM2Njc5QzdFMjRF NzBCQUFENTcwHhcNMjUxMjE4MTkyNTE1WhcNMjUxMjI1MTkyNTE1WjAYMRYwFAYD VQQDDA02OTQ0NTUxYi1jMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Jjy7dNqENQEVgvkIDmJj/10jWAgBv78mfZMiGvhRBanfPPzUbOaOry4a2/z BA2TvrKdgB1WLi6Ka/SHuh6EIMqmyIUUEeK4pzEmz4CsRcsD7p/skOSvNqQOvlfF cSN2TNi2lYzVc6wqw0/NvOtmQrEmrjw6/prRwU5PtVQbsHtQnJE1dJb6F2bHbmuA M+mYr0sW0HLeAXQ98OXPOTtymP9UGC3f10Rb1EmnNRQ5xMIxJiGKZX8aADizrjvl uEKsyEQyFuauEhq37TtGvMt1y4RF+AWTXBT/ZZCNp4gkKpnfUyPz6ETVTJFgCNfJ kXeq8KtTlUuVatZHJy/dzy9OPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqJUQbE c+DTGIvCFz74jUaaU4ZPMB8GA1UdIwQYMBaAFA5XQXbapqxsl3BsZnnH4k5wuq1X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJHeVhjR3htZWNmaVRuQzZy VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZEJkdHFtckd5WGNHeG1lY2ZpVG5DNnJWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJH eVhjR3htZWNmaVRuQzZyVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoXIYlRNudHGrY4RNrp7vHi2/jRFFUPa5CAh5x5KFEMm7XsXs52dDJ 2f0RMEEDIRilm8p8PDVVRQH08BMGvFsktApCwqFZXCnLKuJZEx4bp4Tsl91eV+xT O3AwM+L7h5Yt8ESzPl94bBpPkcOoYa4H1kTWJwvZ33TtAhfz27osk9/kPaOiNdHB /GewGCnm9iYyuPvhIT21+Y1lC/Ra++sZJniPvS4UdBftUfIlCoc8nVhoDxSm9Lw5 /o0eQNYfx/+OEAOr9HYztccO4GXx+VuPoDpfeipuQZcNqOxzqti4p2+BPFJldKpo x1PPIHZ7FplAEjtqrQ9Y2hwPHfNnrr1h -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:06 2025 by rpki-client