This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft File: 2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft (raw, json) Hash identifier: 3fa56S+99jB/YeppehVD6cYMwzM04kp13qJyjqU6Pqc= Subject key identifier: F9:DC:18:F6:CC:06:BE:3C:59:62:68:40:7B:43:6B:9A:4A:EA:53:A5 Authority key identifier: DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF Certificate issuer: /CN=A9140E66/serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF Certificate serial: 0CD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft Manifest number: 0CCF Signing time: Mon 22 Dec 2025 17:47:00 +0000 Manifest this update: Mon 22 Dec 2025 17:47:00 +0000 Manifest next update: Mon 29 Dec 2025 17:47:00 +0000 Files and hashes: 1: 2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl (hash: RWSQHIlPOBn+PaTexTR0uDKLqorP8FhUQ/Lc5AO/7+U=) 2: C21D3A065B7E11F0A8B76B2EC4F9AE02.roa (hash: 84DuWQA+97cDdeAiob2yXUJKVlhHSu21Cq4u1ZPXmWs=) 3: 44FEC394589711F0B981A181C4F9AE02.roa (hash: czF1g9Ex6VYm+KxfQ/94CmFck1ccrgeMZN09KqEwv5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3289 (0xcd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E66, serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF Validity Not Before: Dec 22 17:47:00 2025 GMT Not After : Dec 29 17:47:00 2025 GMT Subject: CN=69498414-e3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:cb:82:67:bd:b5:c2:26:1a:68:2a:06:46: fb:e3:6c:f8:c8:46:5f:9e:90:0a:2a:7e:0e:f7:89: 5b:64:c2:66:e6:7c:95:99:9c:27:39:67:89:4e:19: df:c9:b8:94:97:df:71:57:80:2e:a7:d5:83:da:e4: 99:0c:f6:df:00:e2:ee:72:8c:ec:0b:05:71:22:65: 7b:e3:65:4c:88:3f:04:6b:c1:fc:1d:8f:0c:f6:11: fd:d9:b8:0b:0f:c6:ae:55:1f:d1:48:18:df:69:e6: c5:66:02:19:22:31:c7:25:be:f1:e2:be:59:c7:49: 92:80:3d:d6:2a:31:f3:e6:96:68:51:77:03:53:81: 22:03:ad:e4:20:08:85:ac:11:0d:4e:d3:0e:20:6f: ee:d5:bf:44:61:99:77:30:4a:de:29:a7:4c:73:f8: b0:a9:8d:f1:0b:23:d6:f4:88:bc:a1:ba:6f:5e:67: 84:1a:25:92:d3:90:da:8e:ef:d0:5a:39:72:02:81: 3d:cd:40:5e:ff:82:40:35:0d:bf:ab:02:61:29:20: 17:c3:37:04:69:83:06:4b:f3:61:74:40:c4:1d:79: 30:09:7a:80:c3:7f:06:ea:59:7b:b9:5a:ef:f1:c0: b9:ad:af:51:20:77:7b:a3:11:dd:23:4f:e0:1d:c3: ec:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DC:18:F6:CC:06:BE:3C:59:62:68:40:7B:43:6B:9A:4A:EA:53:A5 X509v3 Authority Key Identifier: keyid:DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:2b:98:0a:ab:17:58:72:2d:73:f0:0c:28:d7:42:35:75:10: a5:9a:ec:ca:c7:98:ce:29:ee:50:b4:86:7c:1e:16:82:34:b1: c2:f2:5c:a4:ad:c1:c1:b3:00:bf:f4:a3:cf:ce:c3:ca:33:16: 58:da:ed:b8:13:0c:42:fd:fc:99:c5:f0:86:87:ff:4b:ac:b1: 4e:3f:e6:94:55:83:1b:0d:ce:5c:53:41:0f:6e:3b:03:71:f1: 65:1d:f5:f9:9e:43:98:e6:88:64:a5:ef:99:06:9f:f8:b1:bd: 25:04:b7:01:20:ac:31:b1:ab:90:e9:b4:c1:27:60:e3:7d:c9: df:dc:b2:c5:71:29:88:a8:9b:56:bc:65:58:a3:25:0d:bd:9a: 64:e0:5b:9d:d1:a0:9f:f4:88:80:66:6e:4b:33:59:14:dd:c4: fd:6e:50:2d:2d:ae:ff:35:dd:e9:e7:f8:5f:1d:43:78:bc:0d: 02:68:a0:ab:74:7c:40:21:10:22:35:05:72:50:e2:3a:45:a1: 12:2e:05:27:5a:67:98:52:6d:fa:f6:dc:ae:42:4b:86:a3:5d: 9d:15:2a:d4:55:2d:34:d3:8b:b5:5a:56:0b:e3:4f:18:08:8f: f8:be:3c:20:65:d1:53:81:ea:6a:17:89:2e:76:c0:e2:fc:25: 93:35:6a:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNjYxMTAvBgNVBAUTKERBNTQ3RUQ2OTI4QUFEMUVDRkI2ODQ3QTFCMDc0MzJC RDg3QjE5RUYwHhcNMjUxMjIyMTc0NzAwWhcNMjUxMjI5MTc0NzAwWjAYMRYwFAYD VQQDDA02OTQ5ODQxNC1lM2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGHLgme9tcImGmgqBkb742z4yEZfnpAKKn4O94lbZMJm5nyVmZwnOWeJThnf ybiUl99xV4Aup9WD2uSZDPbfAOLucozsCwVxImV742VMiD8Ea8H8HY8M9hH92bgL D8auVR/RSBjfaebFZgIZIjHHJb7x4r5Zx0mSgD3WKjHz5pZoUXcDU4EiA63kIAiF rBENTtMOIG/u1b9EYZl3MEreKadMc/iwqY3xCyPW9Ii8obpvXmeEGiWS05Daju/Q WjlyAoE9zUBe/4JANQ2/qwJhKSAXwzcEaYMGS/NhdEDEHXkwCXqAw38G6ll7uVrv 8cC5ra9RIHd7oxHdI0/gHcPs9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPncGPbM Br48WWJoQHtDa5pK6lOlMB8GA1UdIwQYMBaAFNpUftaSiq0ez7aEehsHQyvYexnv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU2Ni83MDYzOUVGQ0ZG NkUxMUU5ODVBODhDNjdDNEY5QUUwMi8ybFItMXBLS3JSN1B0b1I2R3dkREs5aDdH ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsUi0xcEtLclI3UHRvUjZHd2RESzloN0dlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU2Ni83MDYzOUVGQ0ZGNkUxMUU5ODVBODhDNjdDNEY5QUUwMi8ybFItMXBLS3JS N1B0b1I2R3dkREs5aDdHZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHK5gKqxdYci1z8Awo10I1dRClmuzKx5jOKe5QtIZ8HhaCNLHC8lyk rcHBswC/9KPPzsPKMxZY2u24EwxC/fyZxfCGh/9LrLFOP+aUVYMbDc5cU0EPbjsD cfFlHfX5nkOY5ohkpe+ZBp/4sb0lBLcBIKwxsauQ6bTBJ2Djfcnf3LLFcSmIqJtW vGVYoyUNvZpk4Fud0aCf9IiAZm5LM1kU3cT9blAtLa7/Nd3p5/hfHUN4vA0CaKCr dHxAIRAiNQVyUOI6RaESLgUnWmeYUm369tyuQkuGo12dFSrUVS0004u1WlYL408Y CI/4vjwgZdFTgepqF4kudsDi/CWTNWoY -----END CERTIFICATE-----Generated at Wed Dec 24 04:46:08 2025 by rpki-client