This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft File: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft (raw, json) Hash identifier: P2Nb1PmXwK7H9os+891eUfmQU+BWicNKIECAAsw1udo= Subject key identifier: 3A:76:6A:5A:58:DA:2E:F5:B8:E4:73:8B:FE:7A:B4:6E:1B:B1:33:3A Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 Certificate issuer: /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft Manifest number: 022D Signing time: Fri 05 Dec 2025 00:40:21 +0000 Manifest this update: Fri 05 Dec 2025 00:40:21 +0000 Manifest next update: Fri 12 Dec 2025 00:40:21 +0000 Files and hashes: 1: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl (hash: 6DfayLd5EOesTDHmu/1LRYXmKsnNsZw4VepOxEhtj7k=) 2: F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (hash: 9OZz5jF3wKw1CoZp9fYy/VeudY7hWDh1XxJPduifOg0=) 3: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (hash: SRGoWxChP7e+9DgNFVadV9cBgB/2tWGPBAWl8n31NII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Validity Not Before: Dec 5 00:40:21 2025 GMT Not After : Dec 12 00:40:21 2025 GMT Subject: CN=693229f5-09b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:88:5a:4f:98:4f:d3:05:75:bf:ab:67:f6:01: cf:76:03:5d:70:25:de:df:46:6c:16:02:69:a5:ff: 6b:2e:db:0b:52:ce:f3:b4:9e:b5:0d:2b:88:75:1a: 35:7c:0c:9b:d9:d9:cd:8b:28:b4:3f:da:bf:63:55: 81:d0:82:fb:a8:06:1d:1a:ec:e4:4b:06:e6:0c:8f: 47:2c:fc:39:bf:38:81:35:69:41:53:85:de:a8:04: 96:6d:ff:15:87:8c:01:96:03:40:b3:af:3a:09:1a: 19:64:68:b2:c5:12:b9:4a:3a:00:7e:6e:c6:b7:88: b5:0f:8d:0c:57:79:87:ef:ba:ad:fa:0d:fa:6e:ae: 10:80:dd:25:de:47:37:c8:46:42:f2:a8:98:08:af: be:d0:89:1a:4b:3e:dd:73:19:88:9b:49:ce:ab:37: 2c:21:ef:a8:c9:54:1e:e6:92:4d:e3:a4:b0:52:5e: 7e:7a:6d:84:a6:ec:96:ec:24:99:7f:0b:93:75:48: 0f:88:9d:24:ea:6f:82:e3:e0:99:6a:c4:56:54:55: 9d:fb:e6:87:49:db:9e:bb:1c:b0:e8:a1:1d:db:6c: 1c:59:44:cf:28:5a:51:83:bb:f9:d0:6a:13:35:8b: a5:9e:80:9a:9b:1e:5e:ce:09:0f:89:cb:b1:3a:44: df:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:76:6A:5A:58:DA:2E:F5:B8:E4:73:8B:FE:7A:B4:6E:1B:B1:33:3A X509v3 Authority Key Identifier: keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:2f:e3:f3:d1:86:07:06:c4:b9:03:ad:7e:7b:db:84:4c:9a: 4e:0e:7b:09:8d:9b:21:de:2f:92:e2:15:6d:ba:e6:ed:1a:94: 38:5a:91:af:09:d1:ff:52:5e:14:d4:dc:f2:9c:09:a7:8d:f0: d4:7f:36:a9:f1:3f:70:21:2f:45:24:96:49:01:ce:ad:cf:4d: 92:d5:81:dd:10:e4:e3:c6:d2:dc:ff:01:2d:92:d1:1a:cb:e3: 35:92:89:21:67:42:cf:9a:49:19:04:39:b0:9d:6e:d4:3f:7d: 76:93:9b:b5:ca:e0:0e:28:58:cb:e0:bb:0a:16:a6:19:03:f4: 16:9f:25:67:33:7b:9c:4a:48:13:a0:20:cd:74:2d:0f:c7:28: 48:2e:62:28:1e:9a:5f:02:74:77:64:6f:01:98:ed:d2:a1:58: fa:d1:d0:62:18:aa:96:9d:01:ca:21:2b:c4:42:4b:ab:36:31: 83:68:63:16:43:10:09:2b:12:98:64:dd:40:89:2f:78:95:40: e0:29:70:9d:ef:72:19:f1:22:41:77:cc:12:34:cd:9f:23:c1: 47:26:c6:15:08:46:08:a9:58:76:4b:d1:6b:e7:7d:e0:5f:9b: 83:4b:63:4a:0f:4a:e3:29:7e:5b:2a:92:65:9d:59:28:b2:20: 95:37:d0:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VDM0IxMTAvBgNVBAUTKDJERENEMDVEQ0UyQzU4MDM3RkUwMkY5NUUxQThCRkNC RDNFMEUzMjUwHhcNMjUxMjA1MDA0MDIxWhcNMjUxMjEyMDA0MDIxWjAYMRYwFAYD VQQDEw02OTMyMjlmNS0wOWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA44haT5hP0wV1v6tn9gHPdgNdcCXe30ZsFgJppf9rLtsLUs7ztJ61DSuIdRo1 fAyb2dnNiyi0P9q/Y1WB0IL7qAYdGuzkSwbmDI9HLPw5vziBNWlBU4XeqASWbf8V h4wBlgNAs686CRoZZGiyxRK5SjoAfm7Gt4i1D40MV3mH77qt+g36bq4QgN0l3kc3 yEZC8qiYCK++0IkaSz7dcxmIm0nOqzcsIe+oyVQe5pJN46SwUl5+em2EpuyW7CSZ fwuTdUgPiJ0k6m+C4+CZasRWVFWd++aHSdueuxyw6KEd22wcWUTPKFpRg7v50GoT NYulnoCamx5ezgkPicuxOkTfkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDp2alpY 2i71uORzi/56tG4bsTM6MB8GA1UdIwQYMBaAFC3c0F3OLFgDf+AvleGov8vT4OMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUMzQi9ERjRBNDM3MjdE RTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dBTl80Qy1WNGFpX3k5UGc0 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xkelFYYzRzV0FOXzRDLVY0YWlfeTlQZzR5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUMzQi9ERjRBNDM3MjdERTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dB Tl80Qy1WNGFpX3k5UGc0eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZL+Pz0YYHBsS5A61+e9uETJpODnsJjZsh3i+S4hVtuubtGpQ4WpGv CdH/Ul4U1NzynAmnjfDUfzap8T9wIS9FJJZJAc6tz02S1YHdEOTjxtLc/wEtktEa y+M1kokhZ0LPmkkZBDmwnW7UP312k5u1yuAOKFjL4LsKFqYZA/QWnyVnM3ucSkgT oCDNdC0PxyhILmIoHppfAnR3ZG8BmO3SoVj60dBiGKqWnQHKISvEQkurNjGDaGMW QxAJKxKYZN1AiS94lUDgKXCd73IZ8SJBd8wSNM2fI8FHJsYVCEYIqVh2S9Fr533g X5uDS2NKD0rjKX5bKpJlnVkosiCVN9Ay -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:31 2025 by rpki-client