This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft File: lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft (raw, json) Hash identifier: CIqcAUsRPlCOFyfZ7adGr2a3k3Xm0pO44XXt3rn+Sd8= Subject key identifier: 93:67:44:D2:8B:56:60:4B:9E:AA:46:EE:1C:C8:1D:95:E4:6A:2D:E0 Authority key identifier: 94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7 Certificate issuer: /CN=A91DEB01/serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft Manifest number: 49 Signing time: Fri 05 Dec 2025 05:14:58 +0000 Manifest this update: Fri 05 Dec 2025 05:14:58 +0000 Manifest next update: Fri 12 Dec 2025 05:14:58 +0000 Files and hashes: 1: lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl (hash: BIWeBND7JYVnImqUQAgwejIko1qjece+zMfkOSqi5dM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB01, serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7 Validity Not Before: Dec 5 05:14:58 2025 GMT Not After : Dec 12 05:14:58 2025 GMT Subject: CN=69326a52-75f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7e:b4:d6:4e:12:9d:a3:c7:30:82:c4:41:a0: ed:42:67:94:ba:d8:be:c6:ab:57:82:e8:07:7b:74: 57:08:08:67:4f:9e:6b:96:42:e2:80:d5:96:39:a3: 05:79:a5:cf:63:04:99:4c:5a:c7:48:13:d0:8c:fe: e7:f4:cf:01:94:3a:54:d8:fd:82:6a:de:7b:51:f7: a3:68:38:37:e3:31:81:91:4c:77:95:ce:cf:05:ab: 53:d1:26:2a:7d:ee:0e:9a:ca:39:a9:c8:f5:88:d9: e8:73:f4:c9:47:74:04:19:5b:87:b3:a3:81:d8:08: cb:de:a3:84:5c:83:b5:a9:90:d8:ee:53:69:41:5e: db:d8:4f:d1:ad:61:54:44:10:eb:e6:40:b2:13:14: 8b:f2:e3:e6:48:1f:0f:42:24:ed:b1:a4:53:30:ac: 2a:96:e4:8f:e6:51:c2:01:3c:70:0e:70:f3:45:06: a5:c6:59:5a:0f:75:87:10:3e:75:a6:36:ac:89:8c: 87:22:07:3c:df:0b:b0:a8:2a:c5:8f:fc:34:05:f1: 65:17:d3:35:84:24:1f:cc:43:b3:36:07:bf:5d:ec: 24:c5:d3:06:e0:a8:e0:f4:05:a4:a0:52:37:83:8a: c5:58:4d:f0:e9:ea:c1:09:ee:55:d4:02:ae:74:68: 5f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:67:44:D2:8B:56:60:4B:9E:AA:46:EE:1C:C8:1D:95:E4:6A:2D:E0 X509v3 Authority Key Identifier: keyid:94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:13:10:76:b1:42:21:87:02:ae:19:6c:76:f9:8a:02:bc:76: 08:73:d6:22:17:d0:69:e7:d1:47:5e:47:fd:11:c0:c9:09:e4: a8:03:db:fc:a1:12:e3:c7:67:c1:74:ae:05:f1:ba:ee:23:8c: ae:a0:2c:f3:68:bf:5c:c5:cf:f9:2a:ec:2a:82:06:26:b1:78: 2d:a7:95:0d:03:f4:84:24:bd:5d:0b:48:20:53:05:e0:2f:2a: d1:f6:90:c0:bf:7f:11:e4:14:a1:c4:c5:08:06:dd:a8:35:33: 06:e3:76:d3:63:f0:8f:e0:ae:05:d8:a9:52:7c:c5:b7:f7:06: 28:95:b2:0b:0c:42:d1:05:ad:31:f0:82:56:90:db:e9:c3:41: f0:f0:4e:ec:51:40:9e:78:1c:41:1d:d4:30:09:60:df:7e:e7: e1:d5:69:ad:cd:10:99:6c:c2:c1:0f:d1:42:71:ca:33:d5:20: 84:44:99:ae:88:80:10:ce:f0:bf:24:07:a3:3e:c1:dc:53:5e: 15:ee:68:6f:40:ce:d2:d9:c3:60:81:6d:3d:54:b7:c2:4b:8e: b5:cf:56:d4:a3:2e:6a:93:b6:f6:18:86:e2:c1:c6:63:3c:35: 18:2c:d0:a4:59:72:f8:20:56:dc:cb:24:a7:80:fc:0c:65:58: 9a:40:e1:64 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RUIwMTExMC8GA1UEBRMoOTQzMzQ5RkRCNkRDMEFGMTVDRDU3NERBNDJGOEVDN0I0 OURDMERCNzAeFw0yNTEyMDUwNTE0NThaFw0yNTEyMTIwNTE0NThaMBgxFjAUBgNV BAMTDTY5MzI2YTUyLTc1ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGfrTWThKdo8cwgsRBoO1CZ5S62L7Gq1eC6Ad7dFcICGdPnmuWQuKA1ZY5owV5 pc9jBJlMWsdIE9CM/uf0zwGUOlTY/YJq3ntR96NoODfjMYGRTHeVzs8Fq1PRJip9 7g6ayjmpyPWI2ehz9MlHdAQZW4ezo4HYCMveo4Rcg7WpkNjuU2lBXtvYT9GtYVRE EOvmQLITFIvy4+ZIHw9CJO2xpFMwrCqW5I/mUcIBPHAOcPNFBqXGWVoPdYcQPnWm NqyJjIciBzzfC7CoKsWP/DQF8WUX0zWEJB/MQ7M2B79d7CTF0wbgqOD0BaSgUjeD isVYTfDp6sEJ7lXUAq50aF89AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUk2dE0otW YEueqkbuHMgdleRqLeAwHwYDVR0jBBgwFoAUlDNJ/bbcCvFc1XTaQvjse0ncDbcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFQjAxL0Y2QTY0NUQ2NjdB MTExRjBCQkVCREYwOUM0RjlBRTAyL2xETkpfYmJjQ3ZGYzFYVGFRdmpzZTBuY0Ri Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEROSl9iYmNDdkZjMVhUYVF2anNlMG5jRGJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF QjAxL0Y2QTY0NUQ2NjdBMTExRjBCQkVCREYwOUM0RjlBRTAyL2xETkpfYmJjQ3ZG YzFYVGFRdmpzZTBuY0RiYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC8TEHaxQiGHAq4ZbHb5igK8dghz1iIX0Gnn0UdeR/0RwMkJ5KgD2/yh EuPHZ8F0rgXxuu4jjK6gLPNov1zFz/kq7CqCBiaxeC2nlQ0D9IQkvV0LSCBTBeAv KtH2kMC/fxHkFKHExQgG3ag1MwbjdtNj8I/grgXYqVJ8xbf3BiiVsgsMQtEFrTHw glaQ2+nDQfDwTuxRQJ54HEEd1DAJYN9+5+HVaa3NEJlswsEP0UJxyjPVIIREma6I gBDO8L8kB6M+wdxTXhXuaG9AztLZw2CBbT1Ut8JLjrXPVtSjLmqTtvYYhuLBxmM8 NRgs0KRZcvggVtzLJKeA/AxlWJpA4WQ= -----END CERTIFICATE-----Generated at Sat Dec 6 21:46:00 2025 by rpki-client