This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft File: b2dYEDhTTU2848gbXy2IYcU2tnw.mft (raw, json) Hash identifier: htclRTGoguXogCucgk/IsVZ7fEh3+FnTdHfr8kYT4QE= Subject key identifier: 2B:D2:AE:C9:D9:0E:02:50:BE:33:30:C8:3E:F8:6F:BC:D5:B5:D3:49 Authority key identifier: 6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C Certificate issuer: /CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft Manifest number: 01BF Signing time: Tue 23 Dec 2025 02:07:53 +0000 Manifest this update: Tue 23 Dec 2025 02:07:52 +0000 Manifest next update: Tue 30 Dec 2025 02:07:52 +0000 Files and hashes: 1: b2dYEDhTTU2848gbXy2IYcU2tnw.crl (hash: TrRItdlNWYBDP0ikIusbyGPMAnjZKu2vQ/ws8QAKJXw=) 2: D1B29B22765011F0BCBD414BC4F9AE02.roa (hash: TpQVJHA6sSxFaciFmuBU1DFAl38Xh8Nn5sF6lcXLIuM=) 3: EAA5793C367411EF98F49F1CC4F9AE02.roa (hash: 1hUCax5WiGiWQgbYzegA6fFS1jIG16Os9zx/NpFktvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117836, serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C Validity Not Before: Dec 23 02:07:52 2025 GMT Not After : Dec 30 02:07:52 2025 GMT Subject: CN=6949f979-d62e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f8:33:32:a3:e9:c7:ca:4f:f6:a9:f8:86:8f: ab:41:3b:21:06:b6:98:9e:39:b4:d8:f0:6b:60:8a: 26:54:92:e2:a4:e6:c9:e0:ac:a9:5a:bd:b1:6e:6b: 67:85:74:11:a2:e2:00:c5:f6:8d:cc:6b:6d:e9:a8: 05:5e:e1:96:d8:45:47:e0:53:7c:f3:74:41:7c:82: 06:c0:14:41:57:27:42:7f:cf:84:cc:27:df:76:34: fa:65:fc:a7:15:44:63:1b:c6:a2:71:5d:01:9e:a8: 29:e7:d6:49:c5:53:95:3b:12:67:40:6f:eb:c1:cb: 5c:05:d9:e2:ff:ed:03:d5:a9:e0:c6:c4:d3:96:41: 18:0a:1f:4f:58:69:94:93:f1:30:a9:3e:4a:ee:1e: 6f:63:8a:b8:a1:ab:bd:f9:fc:17:a5:43:4f:d3:71: 93:46:33:da:1b:87:55:5c:fc:a4:83:3c:77:63:cc: bd:45:23:70:f9:b3:48:33:8d:7f:b5:cc:73:a5:ef: 90:d1:3f:c5:55:68:f5:7b:72:88:48:d9:c8:37:ec: 9c:24:a3:c5:9e:fd:cf:63:43:59:78:29:3f:02:d4: 93:de:fe:31:3f:42:94:ed:5a:e5:31:5c:f4:01:12: 87:3e:d9:2f:55:99:8b:7e:0c:09:c8:3f:b9:85:ef: 0b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D2:AE:C9:D9:0E:02:50:BE:33:30:C8:3E:F8:6F:BC:D5:B5:D3:49 X509v3 Authority Key Identifier: keyid:6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:97:0d:16:3b:d6:81:3b:84:55:aa:ee:4a:04:2d:da:84:15: 3f:e5:5e:7a:21:cf:d3:c7:ad:65:33:43:ee:88:31:1f:01:76: 90:7e:21:12:e4:08:39:a7:c6:5b:33:c3:0f:7d:5f:12:5d:38: 4d:9f:93:ec:1b:f9:f5:05:dd:35:11:56:83:63:03:09:4c:68: 94:e7:78:06:de:7f:01:69:82:55:ba:79:79:30:31:f7:c9:ea: a8:c1:7e:f4:85:d8:4c:2f:9a:57:8b:e5:bb:eb:ba:94:1e:59: fc:66:0a:36:2e:e4:57:c9:6c:a3:c7:57:53:9f:be:68:a4:82: 07:c8:e7:47:b7:b7:9e:31:50:4d:e4:91:41:f7:74:ec:b7:ad: ce:92:d8:28:93:f0:76:20:e9:de:09:4a:8f:fa:48:f5:a9:c3: fd:d0:88:6d:80:bf:aa:30:25:30:44:bb:02:9d:0f:d2:30:53: db:74:1b:c8:f4:23:c0:f3:6d:3a:cd:63:ea:cb:4f:4d:5a:f9: b9:45:48:5a:0e:66:ab:2b:f9:09:95:11:4d:77:c5:89:b9:b1: 79:4c:fc:ca:7b:f9:1f:57:32:68:45:95:a6:e7:07:82:95:99: 86:e0:63:c4:94:39:1f:79:ed:fa:cd:7f:3f:77:ab:d0:76:0e: 6d:b6:80:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4MzYxMTAvBgNVBAUTKDZGNjc1ODEwMzg1MzRENERCQ0UzQzgxQjVGMkQ4ODYx QzUzNkI2N0MwHhcNMjUxMjIzMDIwNzUyWhcNMjUxMjMwMDIwNzUyWjAYMRYwFAYD VQQDDA02OTQ5Zjk3OS1kNjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/gzMqPpx8pP9qn4ho+rQTshBraYnjm02PBrYIomVJLipObJ4KypWr2xbmtn hXQRouIAxfaNzGtt6agFXuGW2EVH4FN883RBfIIGwBRBVydCf8+EzCffdjT6Zfyn FURjG8aicV0Bnqgp59ZJxVOVOxJnQG/rwctcBdni/+0D1angxsTTlkEYCh9PWGmU k/EwqT5K7h5vY4q4oau9+fwXpUNP03GTRjPaG4dVXPykgzx3Y8y9RSNw+bNIM41/ tcxzpe+Q0T/FVWj1e3KISNnIN+ycJKPFnv3PY0NZeCk/AtST3v4xP0KU7VrlMVz0 ARKHPtkvVZmLfgwJyD+5he8LwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvSrsnZ DgJQvjMwyD74b7zVtdNJMB8GA1UdIwQYMBaAFG9nWBA4U01NvOPIG18tiGHFNrZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzgzNi9GQTI1RURFMjQz MUQxMUVFODY4Q0E0MEZDNEY5QUUwMi9iMmRZRURoVFRVMjg0OGdiWHkySVljVTJ0 bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IyZFlFRGhUVFUyODQ4Z2JYeTJJWWNVMnRudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzgzNi9GQTI1RURFMjQzMUQxMUVFODY4Q0E0MEZDNEY5QUUwMi9iMmRZRURoVFRV Mjg0OGdiWHkySVljVTJ0bncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCelw0WO9aBO4RVqu5KBC3ahBU/5V56Ic/Tx61lM0PuiDEfAXaQfiES 5Ag5p8ZbM8MPfV8SXThNn5PsG/n1Bd01EVaDYwMJTGiU53gG3n8BaYJVunl5MDH3 yeqowX70hdhML5pXi+W767qUHln8Zgo2LuRXyWyjx1dTn75opIIHyOdHt7eeMVBN 5JFB93Tst63Oktgok/B2IOneCUqP+kj1qcP90IhtgL+qMCUwRLsCnQ/SMFPbdBvI 9CPA8206zWPqy09NWvm5RUhaDmarK/kJlRFNd8WJubF5TPzKe/kfVzJoRZWm5weC lZmG4GPElDkfee36zX8/d6vQdg5ttoDT -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:07 2025 by rpki-client