This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft File: 0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json) Hash identifier: 3Q82ewcEb9R6MnRem2JxmZzz30saqRO7sRC9hVM2BUE= Subject key identifier: 58:9E:EF:45:16:CE:67:6F:27:6C:1B:F3:D4:72:47:DA:A1:7A:D0:13 Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Certificate serial: 0B40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft Manifest number: 0B34 Signing time: Thu 18 Dec 2025 18:55:03 +0000 Manifest this update: Thu 18 Dec 2025 18:55:02 +0000 Manifest next update: Thu 25 Dec 2025 18:55:02 +0000 Files and hashes: 1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: ps9C2kZuZsL6QBO7kbVXBQhSxdZ+SjSs7A2wRBf1QXA=) 2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: rFiMZXa2OxD0Ej0KwFsbxfHbUbN1ZogDT7O8NAGWwno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2880 (0xb40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Validity Not Before: Dec 18 18:55:02 2025 GMT Not After : Dec 25 18:55:02 2025 GMT Subject: CN=69444e06-b6ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:70:21:5f:4c:d1:2c:94:37:15:84:50:d7:c0: 48:d5:53:f6:5a:23:5b:a0:06:f9:fd:a6:59:f6:26: 00:e1:08:76:1e:b9:d3:75:b2:37:14:7b:69:0a:3c: 48:4f:aa:ff:54:6c:e0:8a:97:54:d9:61:a3:df:0a: 6e:00:e6:a5:d3:39:31:aa:1a:c9:8b:31:03:6b:6f: 91:8e:73:a2:ab:a4:15:8e:a7:ad:04:b3:56:b7:96: c6:0a:54:ef:25:e9:14:d7:51:14:0c:8e:99:d1:a9: bb:76:7e:88:6d:83:4d:e0:86:01:59:da:f4:e6:90: 8a:73:13:4b:14:3c:79:74:4f:23:ff:8f:fc:d1:fe: 77:a6:aa:00:87:0b:da:dc:d8:bc:91:f8:10:b0:78: 7e:86:8b:53:fa:6c:f5:86:c5:e5:87:e9:69:a6:24: e2:92:f2:56:98:84:23:82:f2:6d:cd:be:db:70:cd: 84:da:f5:0c:fd:a6:f6:66:17:80:10:7b:0a:07:a8: 7f:b4:4e:43:68:84:82:80:32:bc:84:9a:6e:b3:ee: b8:8c:f7:2b:20:07:89:35:c1:06:9e:3b:59:83:fc: 76:2f:21:14:4c:94:dc:40:c5:22:e9:04:1b:c7:1a: 29:8f:25:ed:71:5b:17:f0:cd:d6:bc:39:fe:3f:99: ea:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9E:EF:45:16:CE:67:6F:27:6C:1B:F3:D4:72:47:DA:A1:7A:D0:13 X509v3 Authority Key Identifier: keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:9f:f8:8f:2c:30:84:fa:2f:15:83:26:9b:d3:2d:67:5e:26: df:28:2f:aa:d5:71:7f:e3:78:fc:4e:fb:94:8e:d9:4c:d6:fe: 46:e5:68:ed:c2:ef:6c:d2:80:69:75:11:c1:96:5c:c1:9b:57: 9c:81:89:0c:c6:1b:3b:48:81:05:7e:0f:63:5a:d0:3e:6b:aa: 42:0c:a3:b1:bb:94:d5:7e:6f:64:3e:ea:ba:59:98:05:38:d4: f4:45:00:66:af:ae:61:1f:b6:38:9d:77:bb:02:fd:32:0e:87: 68:51:9b:ea:1e:67:0d:d4:d2:03:29:ad:e1:59:b6:4d:b3:30: bd:60:cd:28:3e:bd:80:26:cc:f3:2b:55:c9:d2:9e:6a:22:02: 04:a3:3b:20:23:37:03:6d:1c:6b:ca:2b:0c:6d:11:2e:ed:b2: c7:33:36:8a:d4:5d:f3:da:20:97:99:f4:7d:51:04:9f:04:bf: b9:6e:07:51:a9:be:72:16:f4:48:fc:9a:1e:2e:e0:2a:02:34: bd:e2:f9:ac:d0:ab:65:48:f1:73:53:25:a8:44:7f:4a:cf:c8: b1:78:89:93:7d:63:17:42:d3:af:7b:27:41:35:30:8a:72:30: 46:94:e6:87:ce:79:41:7d:c1:77:47:f3:f1:26:e4:3c:3d:d1: 9e:a8:25:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGRTgxMTAvBgNVBAUTKEQwMkQ5MEZCOTEyQTU5NjBCQkU1NkNCNEU3NTM1MTZB MjRDNkVGN0IwHhcNMjUxMjE4MTg1NTAyWhcNMjUxMjI1MTg1NTAyWjAYMRYwFAYD VQQDDA02OTQ0NGUwNi1iNmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HAhX0zRLJQ3FYRQ18BI1VP2WiNboAb5/aZZ9iYA4Qh2HrnTdbI3FHtpCjxI T6r/VGzgipdU2WGj3wpuAOal0zkxqhrJizEDa2+RjnOiq6QVjqetBLNWt5bGClTv JekU11EUDI6Z0am7dn6IbYNN4IYBWdr05pCKcxNLFDx5dE8j/4/80f53pqoAhwva 3Ni8kfgQsHh+hotT+mz1hsXlh+lppiTikvJWmIQjgvJtzb7bcM2E2vUM/ab2ZheA EHsKB6h/tE5DaISCgDK8hJpus+64jPcrIAeJNcEGnjtZg/x2LyEUTJTcQMUi6QQb xxopjyXtcVsX8M3WvDn+P5nq6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFie70UW zmdvJ2wb89RyR9qhetATMB8GA1UdIwQYMBaAFNAtkPuRKllgu+VstOdTUWokxu97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEZFOC8xMkY5NkZCMjRF RkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdXQzc1V3kwNTFOUmFpVEc3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBDMlEtNUVxV1dDNzVXeTA1MU5SYWlURzczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEZFOC8xMkY5NkZCMjRFRkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdX Qzc1V3kwNTFOUmFpVEc3M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwn/iPLDCE+i8Vgyab0y1nXibfKC+q1XF/43j8TvuUjtlM1v5G5Wjt wu9s0oBpdRHBllzBm1ecgYkMxhs7SIEFfg9jWtA+a6pCDKOxu5TVfm9kPuq6WZgF ONT0RQBmr65hH7Y4nXe7Av0yDodoUZvqHmcN1NIDKa3hWbZNszC9YM0oPr2AJszz K1XJ0p5qIgIEozsgIzcDbRxryisMbREu7bLHMzaK1F3z2iCXmfR9UQSfBL+5bgdR qb5yFvRI/JoeLuAqAjS94vms0KtlSPFzUyWoRH9Kz8ixeImTfWMXQtOveydBNTCK cjBGlOaHznlBfcF3R/PxJuQ8PdGeqCXI -----END CERTIFICATE-----Generated at Sat Dec 20 18:12:07 2025 by rpki-client