This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft File: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft (raw, json) Hash identifier: 2T0/PI2CFHZIF1E0RY/9ZQAD1SYFtM1fdu7uqxSCQmg= Subject key identifier: 83:C0:DE:C3:D9:D9:F3:45:2E:96:3D:32:C0:3D:49:79:95:77:41:04 Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 Certificate issuer: /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Certificate serial: 01FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft Manifest number: 01F7 Signing time: Fri 19 Dec 2025 01:44:07 +0000 Manifest this update: Fri 19 Dec 2025 01:44:07 +0000 Manifest next update: Fri 26 Dec 2025 01:44:07 +0000 Files and hashes: 1: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl (hash: txJWcK81jKE2UOipaSqpUrgRaTbjqAXXFko1HN36ptA=) 2: 45F398E6EA6C11EE9C6A0650C4F9AE02.roa (hash: uGfo/5fIxDdDsFC6pdFYD34hICtnXrNFqQZCf34GVx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912764F, serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Validity Not Before: Dec 19 01:44:07 2025 GMT Not After : Dec 26 01:44:07 2025 GMT Subject: CN=6944ade7-1202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:13:08:9e:a4:c5:94:7e:83:e9:cb:97:0f:58: 35:a2:a7:04:62:2e:00:3c:4b:c3:ce:09:53:65:c9: 5e:a7:62:63:8a:d7:d0:29:84:3d:89:de:9d:93:11: 1d:35:e8:45:3e:78:5d:cc:1e:ae:c7:c5:54:59:9a: 69:ae:27:e3:45:ec:d1:1d:33:f9:e0:ff:57:62:e0: 56:ee:7c:7a:ed:67:4b:bd:35:ae:9b:d1:39:c5:ab: fb:02:7e:72:24:15:58:8b:63:c9:16:73:4b:57:44: 43:6e:85:bb:27:22:7f:56:84:fc:7e:4f:f9:e6:4b: c6:27:b1:28:d1:c4:dc:48:c7:de:a0:1c:13:b1:8e: ec:84:91:f5:52:9d:3f:f7:9d:37:60:c9:79:cc:63: b9:b7:56:df:53:cd:a9:3f:c3:dd:07:6d:09:22:7b: 9d:7c:d2:a7:28:66:4f:c3:5c:09:5f:ce:72:57:47: 56:8f:7a:ea:35:0c:72:a0:3a:6a:e7:10:00:3a:7d: a6:a6:de:46:90:ae:aa:a0:aa:1e:b3:44:13:4a:28: cd:14:3d:3f:32:64:0c:a8:0a:21:1c:b1:eb:da:93: f5:da:82:fe:64:eb:e1:d1:bc:c1:43:e9:e5:35:50: 74:14:cc:c0:3c:fc:66:04:23:81:63:40:b7:94:51: 55:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C0:DE:C3:D9:D9:F3:45:2E:96:3D:32:C0:3D:49:79:95:77:41:04 X509v3 Authority Key Identifier: keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:57:72:69:a1:7a:9e:db:c5:cf:b6:30:5e:b3:0c:b0:db:67: bb:c5:32:05:5d:4e:e1:41:45:db:b1:d2:3c:55:74:9a:a5:f7: b3:7f:24:56:ec:9f:26:51:de:b6:b8:fe:e4:f3:a2:4b:a7:d9: 29:b2:17:78:60:23:bf:9d:88:8a:8d:e9:be:06:0f:f4:45:e1: ea:59:91:5f:50:95:3c:11:9c:e5:30:fa:6a:b4:ca:fe:e4:51: dd:d5:af:31:bc:9a:c8:73:ec:20:9e:06:43:3e:4d:a5:06:a0: bd:d0:03:1b:7e:a8:da:27:32:7e:86:2f:af:07:c7:9a:d0:b9: a1:20:c6:a4:c9:5e:0a:f8:b7:05:42:1d:8b:9a:84:50:a4:99: 1e:1a:3e:53:28:5b:c5:d7:cf:20:99:5a:37:33:de:89:34:cd: 9f:01:ff:45:5c:a6:dd:8c:e8:59:4b:c2:ea:37:3e:22:33:ab: 36:27:47:f0:d2:93:09:b6:e0:43:64:44:75:c0:35:d9:e3:d8: 8a:81:e9:98:1e:11:20:0d:93:03:cb:e3:1d:d7:26:80:e2:f6: 3e:e4:f5:b2:4f:ff:10:05:91:e9:f0:35:e0:5d:7b:66:0d:ef: 40:a1:bb:e2:4d:1d:f3:8d:00:cf:72:ec:1c:49:7c:50:9d:d7: a0:e7:fe:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NEYxMTAvBgNVBAUTKERBQTEzRkIxNUEwNDU2NkM0QjM1OTM2Mzg2QThCMjVD MDE1NDhDQzYwHhcNMjUxMjE5MDE0NDA3WhcNMjUxMjI2MDE0NDA3WjAYMRYwFAYD VQQDDA02OTQ0YWRlNy0xMjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xMInqTFlH6D6cuXD1g1oqcEYi4APEvDzglTZclep2JjitfQKYQ9id6dkxEd NehFPnhdzB6ux8VUWZpprifjRezRHTP54P9XYuBW7nx67WdLvTWum9E5xav7An5y JBVYi2PJFnNLV0RDboW7JyJ/VoT8fk/55kvGJ7Eo0cTcSMfeoBwTsY7shJH1Up0/ 9503YMl5zGO5t1bfU82pP8PdB20JInudfNKnKGZPw1wJX85yV0dWj3rqNQxyoDpq 5xAAOn2mpt5GkK6qoKoes0QTSijNFD0/MmQMqAohHLHr2pP12oL+ZOvh0bzBQ+nl NVB0FMzAPPxmBCOBY0C3lFFVmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPA3sPZ 2fNFLpY9MsA9SXmVd0EEMB8GA1UdIwQYMBaAFNqhP7FaBFZsSzWTY4aoslwBVIzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY0Ri9DRUQwRjg3RURE MTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZteExOWk5qaHFpeVhBRlVq TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxRV9zVm9FVm14TE5aTmpocWl5WEFGVWpNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY0Ri9DRUQwRjg3RUREMTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZt eExOWk5qaHFpeVhBRlVqTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaV3JpoXqe28XPtjBeswyw22e7xTIFXU7hQUXbsdI8VXSapfezfyRW 7J8mUd62uP7k86JLp9kpshd4YCO/nYiKjem+Bg/0ReHqWZFfUJU8EZzlMPpqtMr+ 5FHd1a8xvJrIc+wgngZDPk2lBqC90AMbfqjaJzJ+hi+vB8ea0LmhIMakyV4K+LcF Qh2LmoRQpJkeGj5TKFvF188gmVo3M96JNM2fAf9FXKbdjOhZS8LqNz4iM6s2J0fw 0pMJtuBDZER1wDXZ49iKgemYHhEgDZMDy+Md1yaA4vY+5PWyT/8QBZHp8DXgXXtm De9AobviTR3zjQDPcuwcSXxQndeg5/56 -----END CERTIFICATE-----Generated at Sat Dec 20 23:57:27 2025 by rpki-client