This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft File: v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft (raw, json) Hash identifier: jR7WQiXBXV5tpOW0vn0DkYGK+gwLvI1yvTOg9sP/BPU= Subject key identifier: 34:E3:04:04:77:F5:0A:0C:7A:F7:DC:D3:A8:36:DF:B6:63:B3:E9:05 Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C Certificate issuer: /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C Certificate serial: 0749 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft Manifest number: 06E7 Signing time: Sat 06 Dec 2025 21:21:26 +0000 Manifest this update: Sat 06 Dec 2025 21:21:26 +0000 Manifest next update: Sat 13 Dec 2025 21:21:26 +0000 Files and hashes: 1: v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl (hash: IRm1bPKCOrlCy4LAisMXia+u4/rGZvjnwdTE0/wQ2FM=) 2: CA44DBE09A9811EBAC99AD22C4F9AE02.roa (hash: y4GtwygNXHOsgApCazrA1K5LMWjkg33ysXo8KtVSOnk=) 3: E0AAFE389A2411EBA8913944C4F9AE02.roa (hash: UwSCk8PiXVxxp/HUKiEsKMP9QLxahaMhhaVASnsqLPY=) 4: F2AA224A1A1711F09D6D6923C4F9AE02.roa (hash: H9Y3DaflkrUF1wxbldqrT+3B0vj/ROqeiUXQ97YC1aw=) 5: 671FC40EE29211EE94348874C4F9AE02.roa (hash: 8z6xDKhwld/+PqMlkxmQW4jjFgb0KSjTx84Nej4v1h8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1865 (0x749) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE9D, serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C Validity Not Before: Dec 6 21:21:26 2025 GMT Not After : Dec 13 21:21:26 2025 GMT Subject: CN=69349e56-db28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4f:0f:df:a5:2a:25:ef:bd:e7:af:89:54:b7: cd:dd:0f:5f:37:f3:d4:62:e0:63:b7:0a:fb:bd:5f: 81:fc:a3:3c:2b:34:3f:9a:d4:cc:e5:8e:5b:18:b0: 9d:1b:23:33:64:35:97:5f:7c:1c:50:9c:75:04:a4: 02:40:bf:1b:dd:19:5b:91:b5:3c:b3:47:54:b6:78: 31:1a:54:28:bd:25:fa:aa:47:f6:76:96:71:52:a2: 2b:b3:42:3a:4d:9f:f0:3d:a5:df:7f:28:2e:c4:e3: 93:f7:8c:c0:65:b3:e4:fb:ab:15:76:43:e8:0b:54: 87:7b:44:dd:ed:10:48:00:22:81:9c:c8:9f:b4:4b: 0d:1e:ec:e5:fa:a3:8b:f3:d2:15:d9:10:20:63:46: 83:e4:c1:19:0c:51:f3:b5:d7:b5:63:c6:36:b5:d6: a2:a3:a3:ac:4e:24:e8:49:1a:67:51:42:bb:82:b8: a5:01:12:11:7c:f5:bf:ed:a1:66:09:94:a5:8d:29: 8a:c7:4c:13:31:ae:0c:9e:49:b1:f0:58:a0:e4:f1: be:36:75:f3:75:09:8b:21:09:93:52:2f:ed:d5:50: fd:70:60:ce:b6:e5:cb:d7:18:0a:56:b4:40:58:b0: 9b:82:99:03:75:62:bb:96:8b:42:aa:19:13:d5:65: b8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E3:04:04:77:F5:0A:0C:7A:F7:DC:D3:A8:36:DF:B6:63:B3:E9:05 X509v3 Authority Key Identifier: keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:4d:5a:34:70:8b:15:1e:b7:be:a1:20:41:c8:36:71:5f:1a: fd:28:13:2d:e1:e9:79:f3:70:66:cf:05:10:21:b9:9e:5e:bb: db:9c:0f:b1:72:61:f3:dc:25:a5:2b:a0:1d:03:59:9e:bb:d2: e2:5c:e3:4d:b0:e7:ca:38:54:b5:cb:71:f8:da:39:72:ef:6f: 6f:10:71:e7:4a:8d:14:47:9f:fe:44:6a:dc:37:87:60:b0:98: 52:78:9f:a0:35:f3:c3:4c:56:ea:3a:da:4e:ac:0d:aa:0a:d7: 15:53:7f:5f:f2:f2:34:51:c8:88:ad:8a:6e:97:70:56:63:6c: ed:82:11:c8:f3:cb:01:61:32:d5:a3:17:d0:78:b0:d2:f1:ef: e9:9c:f7:a6:64:3d:d3:37:0f:35:e7:07:f1:eb:4c:9b:22:4a: 5d:e0:42:6b:02:db:23:fa:78:67:4f:a8:5d:b2:25:9b:ae:0b: 99:c5:24:c6:ec:76:a9:b1:ec:5b:46:d4:c8:e6:3b:2f:0c:ab: 4f:07:ec:48:fc:8d:2e:fb:16:9d:be:24:34:7b:aa:1b:1c:3f: d3:1c:28:5e:41:7b:5c:0a:8c:01:c1:8a:46:a6:11:3b:28:4a: 4b:48:c1:bf:ce:c8:2a:10:70:c9:9e:43:2d:ab:40:5a:0b:1b: 3e:7f:91:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFOUQxMTAvBgNVBAUTKEJGNkFEMUFCQzlEOTE2MTlBMDkyODdGQjZDNjRGNDY0 N0I5RkQzMUMwHhcNMjUxMjA2MjEyMTI2WhcNMjUxMjEzMjEyMTI2WjAYMRYwFAYD VQQDEw02OTM0OWU1Ni1kYjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoU8P36UqJe+956+JVLfN3Q9fN/PUYuBjtwr7vV+B/KM8KzQ/mtTM5Y5bGLCd GyMzZDWXX3wcUJx1BKQCQL8b3RlbkbU8s0dUtngxGlQovSX6qkf2dpZxUqIrs0I6 TZ/wPaXffyguxOOT94zAZbPk+6sVdkPoC1SHe0Td7RBIACKBnMiftEsNHuzl+qOL 89IV2RAgY0aD5MEZDFHztde1Y8Y2tdaio6OsTiToSRpnUUK7grilARIRfPW/7aFm CZSljSmKx0wTMa4Mnkmx8Fig5PG+NnXzdQmLIQmTUi/t1VD9cGDOtuXL1xgKVrRA WLCbgpkDdWK7lotCqhkT1WW42QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTjBAR3 9QoMevfc06g237Zjs+kFMB8GA1UdIwQYMBaAFL9q0avJ2RYZoJKH+2xk9GR7n9Mc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU5RC9EMzA1RTRFRTk5 MEUxMUVCODlCNzZENjhDNEY5QUUwMi92MnJScThuWkZobWdrb2Y3YkdUMFpIdWYw eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YyclJxOG5aRmhtZ2tvZjdiR1QwWkh1ZjB4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkU5RC9EMzA1RTRFRTk5MEUxMUVCODlCNzZENjhDNEY5QUUwMi92MnJScThuWkZo bWdrb2Y3YkdUMFpIdWYweHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUTVo0cIsVHre+oSBByDZxXxr9KBMt4el583BmzwUQIbmeXrvbnA+x cmHz3CWlK6AdA1meu9LiXONNsOfKOFS1y3H42jly729vEHHnSo0UR5/+RGrcN4dg sJhSeJ+gNfPDTFbqOtpOrA2qCtcVU39f8vI0UciIrYpul3BWY2ztghHI88sBYTLV oxfQeLDS8e/pnPemZD3TNw815wfx60ybIkpd4EJrAtsj+nhnT6hdsiWbrguZxSTG 7HapsexbRtTI5jsvDKtPB+xI/I0u+xadviQ0e6obHD/THCheQXtcCowBwYpGphE7 KEpLSMG/zsgqEHDJnkMtq0BaCxs+f5E3 -----END CERTIFICATE-----Generated at Mon Dec 8 06:19:25 2025 by rpki-client