This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft File: 2UVIdZZlg2gUctzDnfIkqtSon6o.mft (raw, json) Hash identifier: LahmrWY9x/N9HEA6fWYxrvhKtR2a63DEq4iceod3gJc= Subject key identifier: 53:4A:D1:E7:64:B0:9D:27:79:D9:BD:EF:59:66:99:2C:60:D9:02:43 Authority key identifier: D9:45:48:75:96:65:83:68:14:72:DC:C3:9D:F2:24:AA:D4:A8:9F:AA Certificate issuer: /CN=A91352D1/serialNumber=D9454875966583681472DCC39DF224AAD4A89FAA Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft Manifest number: 0F Signing time: Wed 03 Dec 2025 06:08:58 +0000 Manifest this update: Wed 03 Dec 2025 06:08:58 +0000 Manifest next update: Wed 10 Dec 2025 06:08:58 +0000 Files and hashes: 1: 2UVIdZZlg2gUctzDnfIkqtSon6o.crl (hash: +auAerL8XZn6d1FVFEdxwuuKq/6PsZDnY83Mhfk7RJM=) 2: 63AFC09EC10C11F08F1AFF7FC4F9AE02.roa (hash: 6W8pbhnGV4OI+/BAF+L1OPuH+jw3tDQBKF3blq5Eu2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.crl rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91352D1, serialNumber=D9454875966583681472DCC39DF224AAD4A89FAA Validity Not Before: Dec 3 06:08:58 2025 GMT Not After : Dec 10 06:08:58 2025 GMT Subject: CN=692fd3fa-8a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:37:a2:3a:ef:95:94:d6:c7:a2:17:fb:af:31: 43:25:01:0e:3b:ff:ef:7c:3a:9a:12:b6:f2:37:e2: 50:78:cb:0d:0a:f3:e6:96:d0:3d:0a:c0:2a:f6:e6: 3f:4b:75:86:b2:fa:ce:d4:68:ae:ef:af:dc:35:8c: 4c:d2:4d:bf:71:9f:ee:fe:8d:9e:fc:76:f9:1d:89: 40:03:14:5e:43:92:46:82:1a:13:ad:6c:3e:cf:13: eb:9d:bc:63:c8:9f:44:a9:b8:9a:2d:84:2e:0e:4f: 4e:53:21:13:c9:17:61:7e:9d:1e:29:74:53:d3:bd: 10:68:9a:f6:be:b3:60:d0:3d:a9:22:4d:2d:eb:43: fb:3a:fb:5d:2e:45:01:2a:af:3d:f0:70:6d:e2:40: 83:25:de:6c:2a:20:90:3b:06:6b:63:13:ba:0b:b3: ee:1e:d1:8a:4f:9e:77:42:e4:db:8f:a9:9b:a6:b1: c8:2d:38:e2:ca:69:34:87:b7:91:3b:4c:e3:e0:a8: 8e:49:fe:0b:5c:c0:23:4b:5f:4d:7b:25:eb:85:ec: 33:0f:77:07:4d:d2:43:1b:e7:4c:09:34:a0:7e:1b: f2:83:48:2c:06:07:3b:fa:75:c5:67:0d:26:1e:3a: fc:0c:ef:72:73:62:3a:a4:f4:89:9c:7f:ae:1d:8b: 2c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4A:D1:E7:64:B0:9D:27:79:D9:BD:EF:59:66:99:2C:60:D9:02:43 X509v3 Authority Key Identifier: keyid:D9:45:48:75:96:65:83:68:14:72:DC:C3:9D:F2:24:AA:D4:A8:9F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e2:03:40:11:d5:ab:11:9f:3f:b0:98:9a:f4:5b:a1:f4:f5: ce:30:cf:97:3a:43:1a:1b:03:f8:d7:9a:0c:ec:6e:57:e4:63: 34:11:f2:b8:4e:a4:47:cc:e0:74:df:b6:fc:dc:28:d7:7b:a6: 40:99:81:37:54:a9:64:c3:06:e8:74:37:50:a3:e0:25:bf:9b: 4e:bc:37:4f:54:ca:00:9f:db:e5:0e:f8:06:20:97:04:04:80: ca:ce:43:20:dd:b3:55:ff:ef:bc:0e:cd:37:4a:80:fa:81:8d: 0a:bd:bf:9d:bb:69:fc:13:2f:8f:de:67:32:f5:d6:55:f2:84: a3:12:b7:1a:9d:2e:d7:53:45:f2:fe:5e:fa:c6:3f:91:2c:58: a9:1c:10:c3:bc:e4:1f:9a:bd:81:fc:16:1e:48:a1:3e:79:31: 51:b1:67:fe:74:c5:ec:31:1c:13:b5:1c:9c:1d:f1:29:22:e3: 5a:a7:65:3c:e2:8f:4c:e9:c1:8f:a1:a4:53:23:d6:c3:96:ff: fe:48:f3:ed:7e:1a:70:91:b3:cd:18:88:bc:c2:c6:8e:74:bd: 2f:65:6e:b0:60:8f:5e:58:0c:26:6a:af:41:cc:60:32:24:72: fe:32:8f:b5:94:61:ef:07:1e:35:91:3e:b8:71:e3:80:06:83: 98:20:c2:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NTJEMTExMC8GA1UEBRMoRDk0NTQ4NzU5NjY1ODM2ODE0NzJEQ0MzOURGMjI0QUFE NEE4OUZBQTAeFw0yNTEyMDMwNjA4NThaFw0yNTEyMTAwNjA4NThaMBgxFjAUBgNV BAMTDTY5MmZkM2ZhLThhM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqN6I675WU1seiF/uvMUMlAQ47/+98OpoStvI34lB4yw0K8+aW0D0KwCr25j9L dYay+s7UaK7vr9w1jEzSTb9xn+7+jZ78dvkdiUADFF5DkkaCGhOtbD7PE+udvGPI n0SpuJothC4OT05TIRPJF2F+nR4pdFPTvRBomva+s2DQPakiTS3rQ/s6+10uRQEq rz3wcG3iQIMl3mwqIJA7BmtjE7oLs+4e0YpPnndC5NuPqZumscgtOOLKaTSHt5E7 TOPgqI5J/gtcwCNLX017JeuF7DMPdwdN0kMb50wJNKB+G/KDSCwGBzv6dcVnDSYe OvwM73JzYjqk9Imcf64diywzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU0rR52Sw nSd52b3vWWaZLGDZAkMwHwYDVR0jBBgwFoAU2UVIdZZlg2gUctzDnfIkqtSon6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1MkQxL0RERjQyMjZDQzA0 MTExRjBCQzI1NkYxNUM0RjlBRTAyLzJVVklkWlpsZzJnVWN0ekRuZklrcXRTb242 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMlVWSWRaWmxnMmdVY3R6RG5mSWtxdFNvbjZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 MkQxL0RERjQyMjZDQzA0MTExRjBCQzI1NkYxNUM0RjlBRTAyLzJVVklkWlpsZzJn VWN0ekRuZklrcXRTb242by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGviA0AR1asRnz+wmJr0W6H09c4wz5c6QxobA/jXmgzsblfkYzQR8rhO pEfM4HTftvzcKNd7pkCZgTdUqWTDBuh0N1Cj4CW/m068N09UygCf2+UO+AYglwQE gMrOQyDds1X/77wOzTdKgPqBjQq9v527afwTL4/eZzL11lXyhKMStxqdLtdTRfL+ XvrGP5EsWKkcEMO85B+avYH8Fh5IoT55MVGxZ/50xewxHBO1HJwd8Ski41qnZTzi j0zpwY+hpFMj1sOW//5I8+1+GnCRs80YiLzCxo50vS9lbrBgj15YDCZqr0HMYDIk cv4yj7WUYe8HHjWRPrhx44AGg5ggwtU= -----END CERTIFICATE-----Generated at Wed Dec 3 16:38:26 2025 by rpki-client