This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft File: DldBdtqmrGyXcGxmecfiTnC6rVc.mft (raw, json) Hash identifier: m8eRcVSqd3loEYuOw/CK8Sf0DTH6oCacURed03MnjiQ= Subject key identifier: B7:7C:3A:15:75:80:FB:86:AA:AB:E3:97:DF:3D:DF:54:BA:33:83:91 Authority key identifier: 0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 Certificate issuer: /CN=A91C0BDE/serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Certificate serial: 09FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft Manifest number: 133D Signing time: Thu 04 Dec 2025 19:07:28 +0000 Manifest this update: Thu 04 Dec 2025 19:07:28 +0000 Manifest next update: Thu 11 Dec 2025 19:07:28 +0000 Files and hashes: 1: DldBdtqmrGyXcGxmecfiTnC6rVc.crl (hash: w4QZ3gf42+cohziRrSXwwlvj0qcfeKdLCzEZ2v4JSj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2558 (0x9fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Validity Not Before: Dec 4 19:07:28 2025 GMT Not After : Dec 11 19:07:28 2025 GMT Subject: CN=6931dbf0-027c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:94:16:93:d5:05:f0:4f:40:ac:16:1f:fe:03: 8d:09:a7:f1:d6:0a:5c:7f:76:19:9f:fc:9d:4f:da: 4f:4f:5d:cb:06:ea:48:0a:1e:df:ab:1c:42:6d:5e: db:78:6a:86:0b:f3:08:5d:86:1c:d2:9f:70:17:b8: ab:55:f9:19:00:23:eb:cd:9a:56:70:e9:03:d9:ac: 93:80:d5:0d:b7:0a:36:7a:dd:73:be:d4:22:dd:fe: 63:75:db:7d:9c:d4:56:2e:b4:d9:b2:f8:ca:cb:f9: 25:0c:12:8a:80:bf:87:14:d7:96:85:19:ce:40:c8: ac:54:3e:23:d0:82:4c:9a:f9:5d:41:2e:a6:ba:27: 1d:f7:b0:90:42:07:81:6d:fd:6c:e0:99:d0:1a:a0: 75:c9:22:d1:62:6f:f2:f8:a7:41:42:6a:ac:bb:9d: 1a:0f:b3:a1:9f:dd:63:ad:37:b6:cb:de:ea:c1:1a: 40:fe:58:7d:cc:16:9c:d4:31:28:a4:b6:eb:10:dc: 34:09:e5:11:23:d8:de:7b:e8:3b:27:e7:93:11:bb: 38:69:36:38:e2:95:4b:91:32:e0:e8:f1:b0:41:7e: 96:93:f8:68:8f:c5:77:98:83:96:b0:47:6a:7d:1e: 09:3e:ab:3f:24:42:ea:6c:17:b0:28:bc:e0:92:8f: 4a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7C:3A:15:75:80:FB:86:AA:AB:E3:97:DF:3D:DF:54:BA:33:83:91 X509v3 Authority Key Identifier: keyid:0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:af:7f:47:db:fb:e0:69:df:e8:85:7e:24:a2:65:62:e3:a3: 89:07:a9:0b:5c:0b:85:bd:0e:d6:fc:5f:aa:f0:16:5a:e7:21: ae:07:53:65:34:0e:71:75:50:7e:87:0a:e5:8c:4a:09:f5:25: ea:cf:d2:21:ed:65:78:36:df:4f:bf:2f:d9:1a:0b:0e:fb:73: 2d:5e:07:4c:01:e2:15:b1:d4:fe:86:f2:ab:cf:63:57:22:82: 2d:3a:bc:d0:26:e7:a1:c6:36:88:b3:2b:b0:40:97:df:48:51: 08:fc:18:d4:70:a7:64:f7:e9:52:b3:2d:74:87:14:14:10:33: 25:a4:b1:0f:c0:b1:19:de:17:4e:ae:8a:d7:ee:ac:18:87:a3: 7b:42:c5:1f:8a:53:7d:0b:9c:c8:cb:4e:ea:60:01:7e:aa:04: 22:87:ed:c1:48:5a:91:19:71:d9:ac:dd:54:0a:64:89:96:db: 00:eb:2a:bc:76:7c:b4:30:eb:b7:42:a6:d7:2f:61:2f:5b:ef: c4:56:6e:87:b9:67:b8:1b:44:80:33:4c:f7:ee:f1:20:6f:67: de:48:5c:f2:87:74:68:5f:9f:1c:89:fa:15:0f:d4:c9:0f:81: 48:f0:92:2c:8d:a6:0b:19:4d:54:97:af:bc:b0:5a:fb:c4:fa: 32:aa:2f:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKDBFNTc0MTc2REFBNkFDNkM5NzcwNkM2Njc5QzdFMjRF NzBCQUFENTcwHhcNMjUxMjA0MTkwNzI4WhcNMjUxMjExMTkwNzI4WjAYMRYwFAYD VQQDEw02OTMxZGJmMC0wMjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15QWk9UF8E9ArBYf/gONCafx1gpcf3YZn/ydT9pPT13LBupICh7fqxxCbV7b eGqGC/MIXYYc0p9wF7irVfkZACPrzZpWcOkD2ayTgNUNtwo2et1zvtQi3f5jddt9 nNRWLrTZsvjKy/klDBKKgL+HFNeWhRnOQMisVD4j0IJMmvldQS6muicd97CQQgeB bf1s4JnQGqB1ySLRYm/y+KdBQmqsu50aD7Ohn91jrTe2y97qwRpA/lh9zBac1DEo pLbrENw0CeURI9jee+g7J+eTEbs4aTY44pVLkTLg6PGwQX6Wk/hoj8V3mIOWsEdq fR4JPqs/JELqbBewKLzgko9KhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLd8OhV1 gPuGqqvjl98931S6M4ORMB8GA1UdIwQYMBaAFA5XQXbapqxsl3BsZnnH4k5wuq1X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJHeVhjR3htZWNmaVRuQzZy VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZEJkdHFtckd5WGNHeG1lY2ZpVG5DNnJWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJH eVhjR3htZWNmaVRuQzZyVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAr39H2/vgad/ohX4komVi46OJB6kLXAuFvQ7W/F+q8BZa5yGuB1Nl NA5xdVB+hwrljEoJ9SXqz9Ih7WV4Nt9Pvy/ZGgsO+3MtXgdMAeIVsdT+hvKrz2NX IoItOrzQJuehxjaIsyuwQJffSFEI/BjUcKdk9+lSsy10hxQUEDMlpLEPwLEZ3hdO rorX7qwYh6N7QsUfilN9C5zIy07qYAF+qgQih+3BSFqRGXHZrN1UCmSJltsA6yq8 dny0MOu3QqbXL2EvW+/EVm6HuWe4G0SAM0z37vEgb2feSFzyh3RoX58cifoVD9TJ D4FI8JIsjaYLGU1Ul6+8sFr7xPoyqi9o -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:48 2025 by rpki-client