This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft File: 2TXs95kTG-wkONqd6CtoWJY8cFw.mft (raw, json) Hash identifier: CJNQd0g5ywZBUwmmBoXwSIzTxX1OpeyMvKNh7myzKiI= Subject key identifier: 72:D8:0D:B6:2C:97:45:D1:2D:58:B5:53:16:98:EA:9A:80:38:11:F4 Authority key identifier: D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C Certificate issuer: /CN=A91547E4/serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft Manifest number: 11 Signing time: Tue 23 Dec 2025 06:50:06 +0000 Manifest this update: Tue 23 Dec 2025 06:50:05 +0000 Manifest next update: Tue 30 Dec 2025 06:50:05 +0000 Files and hashes: 1: 2TXs95kTG-wkONqd6CtoWJY8cFw.crl (hash: S4CzLNYQU/McGinuZ1pjsGedDYq4aUxE6nz3Ifc0yMk=) 2: EDD5097ECB7411F0A2C24D4FC4F9AE02.roa (hash: HCkuebr9HV42wP4+Tkes5jAKhv3pdZCIfJI8PjfVHow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547E4, serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C Validity Not Before: Dec 23 06:50:05 2025 GMT Not After : Dec 30 06:50:05 2025 GMT Subject: CN=694a3b9e-0959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:83:5c:a0:5e:ff:8d:1f:65:66:ec:b6:8f: e7:bf:87:1e:59:23:d9:4d:f6:a6:93:5f:a6:c2:ba: dd:6b:64:0f:9e:4c:75:b5:33:7c:ce:2a:0c:33:e9: df:5f:0f:45:d8:65:d9:27:bf:b4:ac:4e:21:90:5d: 15:8d:57:9a:39:7d:af:22:48:c1:6e:5c:e1:3b:73: 1c:80:9e:ec:e4:42:5e:62:e9:23:77:14:c6:40:69: 4f:18:4d:e1:fd:7a:79:91:82:d7:32:98:ab:0b:c3: 01:4a:5d:c7:fe:7b:cf:7f:8d:d6:e0:ef:fd:ff:30: 91:c4:7c:e6:4e:3a:a1:53:16:14:18:77:71:2e:5b: db:f1:d2:74:ee:93:4c:de:8e:bd:e5:6f:c1:41:88: d0:00:b1:1e:8b:3d:4d:d0:67:6d:1e:3e:f9:da:16: 4d:29:89:8d:f0:ae:3c:f4:19:0b:51:01:e5:e3:3f: c1:8a:69:bf:d6:5e:77:00:8b:73:46:e0:16:ae:99: 0f:31:58:a9:fd:77:0c:6b:19:60:e5:10:b1:fa:4e: b6:bd:61:d0:1a:3b:7c:0e:29:28:bc:88:87:dc:19: 3f:23:98:7a:46:0c:e4:d8:20:ba:d7:73:fb:18:bd: 71:da:13:dc:ef:61:a7:18:c5:60:c7:d6:00:4e:cd: 2f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D8:0D:B6:2C:97:45:D1:2D:58:B5:53:16:98:EA:9A:80:38:11:F4 X509v3 Authority Key Identifier: keyid:D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:81:28:a9:26:78:5c:d2:1c:56:b9:02:68:b5:b0:f3:69:5d: a8:5c:43:35:0d:a6:20:23:b4:be:c2:89:d3:75:f8:9b:ef:fb: aa:f4:70:04:8a:e9:d9:21:90:e2:2a:e0:e2:09:e5:5a:d2:14: 61:91:db:60:6f:15:56:79:d1:be:43:1c:84:fa:6f:f9:78:56: 6b:b3:98:15:be:64:d9:0a:dc:ca:2e:85:f5:12:d2:b0:11:f7: ec:26:7d:46:6c:c1:2d:24:81:2d:48:a8:6f:24:99:07:ec:8e: d0:00:e9:47:bd:fd:5b:86:da:a4:54:1b:03:39:6f:77:9d:ca: 37:33:3e:db:64:1a:db:2d:7b:02:4f:89:51:8e:87:30:96:df: f8:6b:84:69:f3:1e:70:4a:c9:5b:cd:a0:97:05:d3:42:f2:a6: 1b:ac:a0:13:22:2e:99:96:62:fa:92:8b:bd:34:57:08:2e:10: b4:fe:5b:71:c0:35:01:8f:1a:df:38:f4:6c:5a:cf:41:d2:15: ac:af:b1:fd:8a:0a:fb:8d:87:5c:9c:54:52:13:ab:66:5a:40: 74:77:82:3a:76:3e:eb:e9:ce:33:3d:5d:79:29:b8:42:fb:1f: f1:83:64:b4:88:d5:73:22:34:63:db:5b:0e:2b:f1:25:f2:99: 43:6a:52:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDdFNDExMC8GA1UEBRMoRDkzNUVDRjc5OTEzMUJFQzI0MzhEQTlERTgyQjY4NTg5 NjNDNzA1QzAeFw0yNTEyMjMwNjUwMDVaFw0yNTEyMzAwNjUwMDVaMBgxFjAUBgNV BAMMDTY5NGEzYjllLTA5NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNgYNcoF7/jR9lZuy2j+e/hx5ZI9lN9qaTX6bCut1rZA+eTHW1M3zOKgwz6d9f D0XYZdknv7SsTiGQXRWNV5o5fa8iSMFuXOE7cxyAnuzkQl5i6SN3FMZAaU8YTeH9 enmRgtcymKsLwwFKXcf+e89/jdbg7/3/MJHEfOZOOqFTFhQYd3EuW9vx0nTuk0ze jr3lb8FBiNAAsR6LPU3QZ20ePvnaFk0piY3wrjz0GQtRAeXjP8GKab/WXncAi3NG 4BaumQ8xWKn9dwxrGWDlELH6Tra9YdAaO3wOKSi8iIfcGT8jmHpGDOTYILrXc/sY vXHaE9zvYacYxWDH1gBOzS+1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUctgNtiyX RdEtWLVTFpjqmoA4EfQwHwYDVR0jBBgwFoAU2TXs95kTG+wkONqd6CtoWJY8cFww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0U0LzAyMzJFNTQ4Q0I3 MTExRjBBNUFERUQyMkM0RjlBRTAyLzJUWHM5NWtURy13a09OcWQ2Q3RvV0pZOGNG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMlRYczk1a1RHLXdrT05xZDZDdG9XSlk4Y0Z3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 N0U0LzAyMzJFNTQ4Q0I3MTExRjBBNUFERUQyMkM0RjlBRTAyLzJUWHM5NWtURy13 a09OcWQ2Q3RvV0pZOGNGdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMiBKKkmeFzSHFa5Ami1sPNpXahcQzUNpiAjtL7CidN1+Jvv+6r0cASK 6dkhkOIq4OIJ5VrSFGGR22BvFVZ50b5DHIT6b/l4VmuzmBW+ZNkK3MouhfUS0rAR 9+wmfUZswS0kgS1IqG8kmQfsjtAA6Ue9/VuG2qRUGwM5b3edyjczPttkGtstewJP iVGOhzCW3/hrhGnzHnBKyVvNoJcF00LyphusoBMiLpmWYvqSi700VwguELT+W3HA NQGPGt849Gxaz0HSFayvsf2KCvuNh1ycVFITq2ZaQHR3gjp2PuvpzjM9XXkpuEL7 H/GDZLSI1XMiNGPbWw4r8SXymUNqUmI= -----END CERTIFICATE-----Generated at Wed Dec 24 14:04:59 2025 by rpki-client