This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft File: LDTzNZTMO-PAfo54N2v8QzJjFUg.mft (raw, json) Hash identifier: BkthiKPlUsubHx08yiFCy/7CbRDXLP98IqWYvgDL2L4= Subject key identifier: DE:7D:A3:55:FA:66:D1:0C:1C:42:20:93:A8:76:45:0F:FD:D1:74:D3 Authority key identifier: 2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48 Certificate issuer: /CN=A914ADD8/serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548 Certificate serial: 34E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft Manifest number: 34E6 Signing time: Sat 06 Dec 2025 14:26:45 +0000 Manifest this update: Sat 06 Dec 2025 14:26:44 +0000 Manifest next update: Sat 13 Dec 2025 14:26:44 +0000 Files and hashes: 1: LDTzNZTMO-PAfo54N2v8QzJjFUg.crl (hash: 2eUKFy9rCbKhj7ZgACIk6nczOp6EGNVyZGHQLT9Zuvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13543 (0x34e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ADD8, serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548 Validity Not Before: Dec 6 14:26:44 2025 GMT Not After : Dec 13 14:26:44 2025 GMT Subject: CN=69343d25-5eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f5:3a:82:fb:5e:45:1b:89:6b:f9:71:1e:fc: 77:8c:d8:d6:7a:9e:2c:86:96:4a:ee:03:27:4d:9e: 3e:de:fc:93:a2:97:98:37:87:33:b9:10:44:74:9b: 5c:a6:b8:d9:67:e1:23:3c:10:87:05:c5:bc:b1:ce: 66:40:d8:fa:f4:22:be:06:e8:44:4d:89:d1:5a:18: 6a:de:f9:35:27:af:ad:fd:69:48:22:fd:5f:06:f4: a9:aa:ce:a3:5b:f9:c0:86:23:a7:e0:74:e6:6e:8a: ee:4a:32:6a:6d:fc:2c:b3:3b:79:b2:f4:7b:c2:3f: ab:74:46:6c:a6:1d:7f:1a:f2:f0:0e:91:61:f5:82: 93:91:20:07:52:fd:52:08:ba:ed:56:d6:ac:4d:ee: 73:26:91:90:03:d2:58:fc:87:b8:1c:76:14:f5:63: e2:17:12:1e:ed:0a:e8:c6:49:e4:9e:bd:60:c2:3b: 14:c7:f6:59:06:f5:80:76:91:30:c4:84:5b:a7:c6: a7:b9:2c:e4:21:98:84:af:8b:2c:0d:ae:4a:f7:c3: 4e:1b:77:c8:4f:01:e6:e6:96:aa:97:0d:71:7b:c6: 20:04:d1:2c:db:e0:bf:2f:cd:4c:66:78:b7:7f:e5: 0e:a6:3b:f0:50:4d:8c:43:d4:e1:9d:8e:4f:71:25: 39:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7D:A3:55:FA:66:D1:0C:1C:42:20:93:A8:76:45:0F:FD:D1:74:D3 X509v3 Authority Key Identifier: keyid:2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:c0:0b:b3:08:e5:6e:58:12:47:88:c4:db:26:97:b2:e6:2a: 2e:a9:a6:25:b0:78:c9:f3:32:98:2c:f8:2c:ed:55:0f:d6:80: af:05:dc:b5:7c:ec:6b:aa:3d:c0:7d:36:28:5c:f5:a5:af:a6: fb:5d:08:06:63:7e:89:ce:cf:c9:4d:e0:97:0d:c6:a1:6e:bf: 7e:0c:93:a8:0a:1c:e2:c1:d7:0b:9b:55:e8:82:13:c4:13:fd: c9:14:b1:98:2d:ee:30:98:f4:52:39:42:07:ab:6d:23:59:8e: 35:68:00:5c:cb:7e:d2:ac:96:5c:24:e6:29:56:be:34:40:f3: 6e:43:ba:35:df:29:07:ff:ae:1e:62:1a:78:ee:9c:a8:e9:65: 26:47:ec:37:32:8a:c1:ad:80:81:54:77:56:4c:eb:ea:bb:55: d6:54:0a:e8:bd:aa:f2:cc:86:80:37:e2:e4:83:06:5b:b9:4c: 25:20:16:e9:1a:a9:57:40:8f:05:ff:98:8a:91:d7:46:38:3b: ab:20:8d:bd:1a:b8:a0:3b:4a:35:ba:9a:5b:67:9a:09:0e:86: fb:01:7f:fb:4d:4c:7a:35:75:4f:63:47:9a:ff:48:55:f6:3a: 14:da:32:9a:95:1a:2f:17:8e:6e:5c:ce:30:78:78:a3:db:13: 5f:f5:c1:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFERDgxMTAvBgNVBAUTKDJDMzRGMzM1OTRDQzNCRTNDMDdFOEU3ODM3NkJGQzQz MzI2MzE1NDgwHhcNMjUxMjA2MTQyNjQ0WhcNMjUxMjEzMTQyNjQ0WjAYMRYwFAYD VQQDEw02OTM0M2QyNS01ZWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPU6gvteRRuJa/lxHvx3jNjWep4shpZK7gMnTZ4+3vyTopeYN4czuRBEdJtc prjZZ+EjPBCHBcW8sc5mQNj69CK+BuhETYnRWhhq3vk1J6+t/WlIIv1fBvSpqs6j W/nAhiOn4HTmboruSjJqbfwsszt5svR7wj+rdEZsph1/GvLwDpFh9YKTkSAHUv1S CLrtVtasTe5zJpGQA9JY/Ie4HHYU9WPiFxIe7Qroxknknr1gwjsUx/ZZBvWAdpEw xIRbp8anuSzkIZiEr4ssDa5K98NOG3fITwHm5paqlw1xe8YgBNEs2+C/L81MZni3 f+UOpjvwUE2MQ9ThnY5PcSU5DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN59o1X6 ZtEMHEIgk6h2RQ/90XTTMB8GA1UdIwQYMBaAFCw08zWUzDvjwH6OeDdr/EMyYxVI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUREOC9BNEQ4MTA0RTFE ODcxMUUyODM0Q0I5REYwOEIwMkNEMi9MRFR6TlpUTU8tUEFmbzU0TjJ2OFF6SmpG VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEVHpOWlRNTy1QQWZvNTROMnY4UXpKakZVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUREOC9BNEQ4MTA0RTFEODcxMUUyODM0Q0I5REYwOEIwMkNEMi9MRFR6TlpUTU8t UEFmbzU0TjJ2OFF6SmpGVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgwAuzCOVuWBJHiMTbJpey5iouqaYlsHjJ8zKYLPgs7VUP1oCvBdy1 fOxrqj3AfTYoXPWlr6b7XQgGY36Jzs/JTeCXDcahbr9+DJOoChziwdcLm1XoghPE E/3JFLGYLe4wmPRSOUIHq20jWY41aABcy37SrJZcJOYpVr40QPNuQ7o13ykH/64e Yhp47pyo6WUmR+w3MorBrYCBVHdWTOvqu1XWVArovaryzIaAN+LkgwZbuUwlIBbp GqlXQI8F/5iKkddGODurII29GrigO0o1uppbZ5oJDob7AX/7TUx6NXVPY0ea/0hV 9joU2jKalRovF45uXM4weHij2xNf9cHE -----END CERTIFICATE-----Generated at Sun Dec 7 01:58:08 2025 by rpki-client