This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft File: 2cYV0QtB5uVphlzKp_4oDRKOMRw.mft (raw, json) Hash identifier: PyB54nb9sNuiOA1Mh/PCyCUqgC4II9kxiurGBVWH5fA= Subject key identifier: 12:4B:C4:AD:E9:E9:DB:F2:7C:67:2A:3B:0A:D6:2D:4B:28:A3:E4:3D Authority key identifier: D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C Certificate issuer: /CN=A91293E9/serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C Certificate serial: 06C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft Manifest number: 06BB Signing time: Sat 20 Dec 2025 21:36:07 +0000 Manifest this update: Sat 20 Dec 2025 21:36:06 +0000 Manifest next update: Sat 27 Dec 2025 21:36:06 +0000 Files and hashes: 1: 2cYV0QtB5uVphlzKp_4oDRKOMRw.crl (hash: u8KwfSqwu8jYsgOYzWQd3/Jg95Xn4JzuMR7f/70PF08=) 2: 1AC1982A8C6A11EB91832D52C4F9AE02.roa (hash: erfaODFOCzcH5Y8Uxve2UG+lwqlcZgOFKf0CxYTQBCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1735 (0x6c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91293E9, serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C Validity Not Before: Dec 20 21:36:06 2025 GMT Not After : Dec 27 21:36:06 2025 GMT Subject: CN=694716c7-5544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:07:13:d1:ad:ca:bc:e7:8d:b4:e1:c8:c5:e4: f2:0d:18:a0:9c:f0:c9:c9:52:89:07:ab:2d:62:66: 6c:64:5a:b4:87:74:38:1c:ad:c0:57:09:bc:6d:03: 8c:82:bd:c7:02:dc:60:8c:3f:e0:d0:22:6d:76:67: 57:39:50:e3:bc:6e:16:80:8a:11:8a:12:d4:8d:44: f9:7c:16:9d:2d:57:3f:39:67:6b:4b:43:81:a5:9b: aa:74:c4:71:fe:ff:d8:f2:ab:7b:1d:6c:70:6a:02: e6:4e:22:e3:c4:0f:76:e8:91:90:6a:7c:65:57:0e: b8:e0:6d:03:03:0b:9e:12:03:7d:fc:35:67:12:99: 46:70:22:dc:ef:33:d2:04:43:25:f3:f9:d6:bc:71: a1:63:e9:ef:08:a4:7b:88:82:28:a2:ec:5a:5b:b6: 25:0f:31:ca:01:a6:1c:e5:26:11:be:04:a4:be:82: cf:c5:2a:0b:dc:b5:84:cb:38:c7:04:18:45:74:bf: 81:6c:e9:fb:e3:a9:3d:5f:3a:eb:ab:f6:f2:55:4b: fd:cc:4f:fc:eb:30:f3:df:4e:f3:0e:fb:88:8f:82: 6d:03:ee:ed:6b:79:4d:74:e5:fa:fe:10:f3:e0:58: 59:e3:1d:47:bb:39:e9:07:10:d7:30:0d:8b:e1:0d: 28:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4B:C4:AD:E9:E9:DB:F2:7C:67:2A:3B:0A:D6:2D:4B:28:A3:E4:3D X509v3 Authority Key Identifier: keyid:D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:72:63:52:db:fb:9c:79:27:d8:ac:06:61:7a:f5:a8:f0:1a: d6:d6:ef:4a:c1:94:b0:c6:16:12:46:e1:0d:e1:35:54:de:a5: 98:e8:3f:17:8f:01:aa:96:b5:72:24:d0:57:34:01:f6:a0:d6: c9:06:a9:c4:66:50:9b:85:e2:40:a6:95:af:36:fd:74:5a:c8: 9d:d4:1e:d6:b6:ea:43:6e:6f:47:13:12:3d:d8:0d:85:8e:cd: 41:cf:62:bb:b7:2b:5d:ba:8e:66:f8:92:c0:f3:10:5b:99:23: 1a:3a:01:05:5e:f1:e1:83:23:23:5b:7f:a1:ad:62:3d:de:ad: d1:f2:b1:23:79:48:36:f4:f6:7d:83:d2:e5:7b:82:01:79:f1: 07:3d:31:bf:fb:36:7c:d7:18:0b:71:0e:d3:37:4d:49:90:85: e9:d8:46:5f:bb:53:a4:b3:6d:75:8a:88:f4:82:69:85:94:59: 63:39:3f:1b:11:e2:4b:16:7d:a1:53:ba:65:b3:d7:66:2c:96: 37:b3:e8:f3:b2:34:0f:34:a3:cf:55:74:ab:d7:0e:6c:b0:e7: aa:72:5e:71:62:d0:53:f5:a3:af:e9:44:33:e7:41:c6:3c:47: 69:32:be:bd:23:12:68:56:a0:4e:1a:b8:9b:7f:38:e4:ca:f7: b0:84:60:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkzRTkxMTAvBgNVBAUTKEQ5QzYxNUQxMEI0MUU2RTU2OTg2NUNDQUE3RkUyODBE MTI4RTMxMUMwHhcNMjUxMjIwMjEzNjA2WhcNMjUxMjI3MjEzNjA2WjAYMRYwFAYD VQQDDA02OTQ3MTZjNy01NTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlwcT0a3KvOeNtOHIxeTyDRignPDJyVKJB6stYmZsZFq0h3Q4HK3AVwm8bQOM gr3HAtxgjD/g0CJtdmdXOVDjvG4WgIoRihLUjUT5fBadLVc/OWdrS0OBpZuqdMRx /v/Y8qt7HWxwagLmTiLjxA926JGQanxlVw644G0DAwueEgN9/DVnEplGcCLc7zPS BEMl8/nWvHGhY+nvCKR7iIIoouxaW7YlDzHKAaYc5SYRvgSkvoLPxSoL3LWEyzjH BBhFdL+BbOn746k9Xzrrq/byVUv9zE/86zDz307zDvuIj4JtA+7ta3lNdOX6/hDz 4FhZ4x1HuznpBxDXMA2L4Q0ohQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJLxK3p 6dvyfGcqOwrWLUsoo+Q9MB8GA1UdIwQYMBaAFNnGFdELQeblaYZcyqf+KA0SjjEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTNFOS84M0ExNzRGQzhD NjgxMUVCOTgxQjI1NDJDNEY5QUUwMi8yY1lWMFF0QjV1VnBobHpLcF80b0RSS09N UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjWVYwUXRCNXVWcGhsektwXzRvRFJLT01Sdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTNFOS84M0ExNzRGQzhDNjgxMUVCOTgxQjI1NDJDNEY5QUUwMi8yY1lWMFF0QjV1 VnBobHpLcF80b0RSS09NUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIcmNS2/uceSfYrAZhevWo8BrW1u9KwZSwxhYSRuEN4TVU3qWY6D8X jwGqlrVyJNBXNAH2oNbJBqnEZlCbheJAppWvNv10Wsid1B7WtupDbm9HExI92A2F js1Bz2K7tytduo5m+JLA8xBbmSMaOgEFXvHhgyMjW3+hrWI93q3R8rEjeUg29PZ9 g9Lle4IBefEHPTG/+zZ81xgLcQ7TN01JkIXp2EZfu1Oks211ioj0gmmFlFljOT8b EeJLFn2hU7pls9dmLJY3s+jzsjQPNKPPVXSr1w5ssOeqcl5xYtBT9aOv6UQz50HG PEdpMr69IxJoVqBOGribfzjkyvewhGCB -----END CERTIFICATE-----Generated at Sun Dec 21 15:38:33 2025 by rpki-client