This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft File: 2itDzBg8qOD2qPbapUzdcwb4Yig.mft (raw, json) Hash identifier: Eb/sDtuaVU+vhqetOEuZzIRVWcxdiwHysLMOvY4hxtQ= Subject key identifier: 49:2C:B8:09:75:4D:00:DF:C6:7F:70:D9:B6:17:55:CD:E2:19:29:58 Authority key identifier: DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 Certificate issuer: /CN=A91DF0EC/serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Certificate serial: 0A73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft Manifest number: 0A62 Signing time: Mon 22 Dec 2025 19:05:34 +0000 Manifest this update: Mon 22 Dec 2025 19:05:33 +0000 Manifest next update: Mon 29 Dec 2025 19:05:33 +0000 Files and hashes: 1: 2itDzBg8qOD2qPbapUzdcwb4Yig.crl (hash: H9q9Bi3mDSGGCqxzIWJ9oxGgUICe95Y7OEJf0hzHH38=) 2: FD114232912711EFBCB4ED6EC4F9AE02.roa (hash: TxCwNFrh+xkaqDR3M5kqqPa5bX7FhYwp1p0wkxa1CxU=) 3: 0D6FFE56BA3511ECA20A3817C4F9AE02.roa (hash: JxcjLdYbfNpLt4XJbaeEwHRAAk7SbV4Cw+ExyqNKBV4=) 4: C8A0E422831611EA95762453C4F9AE02.roa (hash: yUwouY97arbHx1ysSRkQtB3/fVJX2BMSgtA5eI1eKIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2675 (0xa73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0EC, serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Validity Not Before: Dec 22 19:05:33 2025 GMT Not After : Dec 29 19:05:33 2025 GMT Subject: CN=6949967e-e9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8f:cf:f2:20:fe:4e:d8:5a:24:0d:09:7d:28: 70:f5:19:46:d0:fa:4e:e7:e7:15:9b:cc:06:75:a9: 36:40:f6:35:a1:b5:1c:b7:a1:dd:64:04:e8:16:23: 4f:85:0d:99:78:b5:af:56:30:bc:0f:65:1a:74:ed: 74:d6:1a:87:e4:fa:8d:4a:70:78:47:fb:07:8d:a4: cb:ea:22:02:ee:6e:e8:8b:21:b8:c8:8b:88:ea:35: 69:81:84:d1:7a:87:3e:23:7e:43:08:d3:82:cc:c5: 5e:e1:64:ed:0a:0b:9a:29:34:7d:47:ea:f6:cd:d4: b2:cf:5c:c1:ce:bd:e3:ea:58:00:82:51:c6:56:e7: 5d:7b:65:0f:38:48:9b:fe:d3:08:dd:de:da:02:74: 9f:1b:38:03:fb:99:08:70:0d:37:16:cf:03:f7:ed: b8:d6:1c:45:a2:55:b2:68:ff:bc:6c:e2:f2:67:9c: 3b:80:f5:df:fc:fa:82:07:38:d5:c5:d3:de:e7:5d: 83:9d:bd:32:30:e5:44:56:4b:33:fd:59:78:65:d0: 2f:ab:84:ff:9e:0c:fa:7d:16:b8:40:00:9d:2c:9e: 1d:d0:9d:dd:b9:d2:dd:22:d9:fb:80:a3:57:16:cd: 9b:91:ad:c3:61:fe:31:c9:b3:c2:d0:16:15:d8:17: 06:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2C:B8:09:75:4D:00:DF:C6:7F:70:D9:B6:17:55:CD:E2:19:29:58 X509v3 Authority Key Identifier: keyid:DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:67:9d:ab:30:f0:fe:3c:a9:f3:a7:f6:44:be:69:94:73:fe: 25:24:27:08:bc:b4:d0:50:4d:9d:29:d8:02:ce:2b:0a:89:7d: 28:90:41:17:d6:d3:41:bb:f9:b7:b4:8d:fb:68:b7:f3:9d:1e: 9f:d1:6a:b1:52:5b:c0:ca:6b:3c:be:30:f3:5c:da:74:9b:56: 26:91:01:2a:22:19:aa:dd:84:b8:3e:72:b2:da:f6:64:75:09: d1:f4:0f:bb:13:ec:75:b6:8d:26:81:8b:2a:cf:83:93:99:6b: 5b:c6:ea:14:cc:8d:47:9a:51:9c:b5:74:c5:8e:db:8a:dd:6c: 55:be:bb:f4:0b:62:ac:96:e1:3f:f7:a7:13:db:b0:5a:af:f0: 83:fa:02:68:86:4c:1d:ed:10:94:1c:ea:2e:0c:42:4f:12:fe: 60:53:54:25:31:05:11:8d:a6:9f:c4:29:7a:ac:c6:a1:06:0e: f5:eb:87:d6:5f:72:46:bd:8a:34:2c:d6:50:f5:34:a6:2a:91: 49:14:8d:59:13:af:ec:a7:f7:5f:51:cf:56:88:bf:80:ca:97: b8:dc:7a:e8:4e:cb:e1:1c:03:30:a5:96:0c:9e:93:cf:60:15: 2c:4c:4c:ff:7e:55:a6:93:b7:ab:cc:24:e7:8e:f2:2f:c9:05: 85:9f:8a:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwRUMxMTAvBgNVBAUTKERBMkI0M0NDMTgzQ0E4RTBGNkE4RjZEQUE1NENERDcz MDZGODYyMjgwHhcNMjUxMjIyMTkwNTMzWhcNMjUxMjI5MTkwNTMzWjAYMRYwFAYD VQQDDA02OTQ5OTY3ZS1lOWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4/P8iD+TthaJA0JfShw9RlG0PpO5+cVm8wGdak2QPY1obUct6HdZAToFiNP hQ2ZeLWvVjC8D2UadO101hqH5PqNSnB4R/sHjaTL6iIC7m7oiyG4yIuI6jVpgYTR eoc+I35DCNOCzMVe4WTtCguaKTR9R+r2zdSyz1zBzr3j6lgAglHGVudde2UPOEib /tMI3d7aAnSfGzgD+5kIcA03Fs8D9+241hxFolWyaP+8bOLyZ5w7gPXf/PqCBzjV xdPe512Dnb0yMOVEVksz/Vl4ZdAvq4T/ngz6fRa4QACdLJ4d0J3dudLdItn7gKNX Fs2bka3DYf4xybPC0BYV2BcGKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEksuAl1 TQDfxn9w2bYXVc3iGSlYMB8GA1UdIwQYMBaAFNorQ8wYPKjg9qj22qVM3XMG+GIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBFQy85OTFDRUY3RTc5 NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFPRDJxUGJhcFV6ZGN3YjRZ aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJpdER6Qmc4cU9EMnFQYmFwVXpkY3diNFlpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjBFQy85OTFDRUY3RTc5NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFP RDJxUGJhcFV6ZGN3YjRZaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfZ52rMPD+PKnzp/ZEvmmUc/4lJCcIvLTQUE2dKdgCzisKiX0okEEX 1tNBu/m3tI37aLfznR6f0WqxUlvAyms8vjDzXNp0m1YmkQEqIhmq3YS4PnKy2vZk dQnR9A+7E+x1to0mgYsqz4OTmWtbxuoUzI1HmlGctXTFjtuK3WxVvrv0C2KsluE/ 96cT27Bar/CD+gJohkwd7RCUHOouDEJPEv5gU1QlMQURjaafxCl6rMahBg7164fW X3JGvYo0LNZQ9TSmKpFJFI1ZE6/sp/dfUc9WiL+Aype43HroTsvhHAMwpZYMnpPP YBUsTEz/flWmk7erzCTnjvIvyQWFn4qi -----END CERTIFICATE-----Generated at Tue Dec 23 12:23:47 2025 by rpki-client