This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft File: f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft (raw, json) Hash identifier: xF3hqo4EMpYp8YYDBtKleknmJOa9YwRA454au8CCAlE= Subject key identifier: 50:48:F8:EC:60:01:F5:9C:32:BB:D1:68:DC:4A:9E:DB:F9:34:E3:F6 Authority key identifier: 7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7 Certificate issuer: /CN=A915BA28/serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7 Certificate serial: 1127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft Manifest number: 1116 Signing time: Mon 22 Dec 2025 16:57:52 +0000 Manifest this update: Mon 22 Dec 2025 16:57:51 +0000 Manifest next update: Mon 29 Dec 2025 16:57:51 +0000 Files and hashes: 1: f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl (hash: bn0PeFw9jkep85ecDhAYw3Jxdoy+dhA2P4GcNbDI8Yw=) 2: C90C4476FBA611E9BA00AB33C4F9AE02.roa (hash: Cm3DQhbEayghF/7ogKNgiTb/7gIXNNRsWelKhE6uB7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4391 (0x1127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BA28, serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7 Validity Not Before: Dec 22 16:57:51 2025 GMT Not After : Dec 29 16:57:51 2025 GMT Subject: CN=69497890-b710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:eb:2c:0e:27:00:71:f1:35:0b:33:32:f5:4d: 19:cd:91:4a:fc:a3:2f:ce:69:f9:48:3f:83:df:2e: 1b:22:52:9e:21:c4:7b:ec:84:c1:c8:f8:9a:13:8e: 4f:3d:f4:dd:12:66:85:d5:e2:4e:f5:10:c1:88:90: 08:33:39:9a:ed:40:06:d8:a1:07:6f:bd:8a:d2:6f: 1a:84:c9:c0:0a:45:1a:d3:e8:93:0e:29:6b:67:72: cb:59:34:fe:06:cc:88:ed:6d:17:6f:0e:83:66:b8: 5a:13:4b:29:c1:4a:05:70:ed:bf:53:5a:bd:b6:33: 69:2b:a3:3f:57:f0:3a:8a:7f:a7:a4:f9:a4:b2:e8: 24:30:fd:96:f3:a0:1d:3d:fb:5f:11:4c:b7:72:51: 64:e5:f1:ff:81:d0:04:78:24:d6:4f:3a:d8:4d:4b: 51:d7:7e:58:ff:64:3f:2a:d8:e1:74:d9:8f:ab:bb: df:1d:4b:3d:31:22:b5:97:0b:5d:07:ea:a4:81:cd: a1:4a:2d:a3:7c:0f:5a:94:af:26:45:15:7c:66:03: 2b:af:be:1a:08:2d:09:7e:48:8d:a5:08:91:97:1b: 93:68:3e:f0:61:9a:7b:e3:07:c1:95:e4:57:54:8e: c2:b4:82:23:72:06:8b:3e:9c:25:dd:3a:fd:41:d1: c6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:48:F8:EC:60:01:F5:9C:32:BB:D1:68:DC:4A:9E:DB:F9:34:E3:F6 X509v3 Authority Key Identifier: keyid:7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:0e:e4:ec:b9:45:fc:c8:0d:3d:62:fd:a3:76:a0:93:b2:3f: e0:8e:9c:cc:50:03:3b:4a:28:2c:e9:37:e0:fb:78:58:f0:7c: 66:c8:33:c5:53:7c:91:6d:81:2b:63:56:11:6c:79:1d:bb:ce: 1a:cb:6c:44:4e:0b:b5:6a:dc:30:93:9b:6d:36:33:be:f0:da: 01:14:9c:d4:ad:93:71:e8:70:bc:df:ce:48:5a:a3:fb:76:6e: 9d:b9:d1:6a:c1:99:79:0f:e9:b9:41:e1:30:d8:11:4c:8f:2b: 07:ff:ad:a8:f6:df:85:46:43:79:4b:18:46:df:7e:1d:9f:b0: 63:32:5f:de:ad:45:19:b3:7e:17:09:9e:c6:fe:55:e3:12:a6: c7:60:d1:89:b3:ec:97:39:75:1d:d0:a6:f1:ce:25:03:93:65: b1:1a:37:f7:20:3d:86:85:c4:67:11:f9:11:62:80:99:69:fb: 2c:f0:16:e5:d3:39:ce:98:68:72:46:4c:b4:8c:cb:b6:97:df: aa:64:e0:a8:ab:e7:e3:5a:62:0f:c7:a2:72:e0:83:b2:b2:a9: ce:f9:a3:dd:97:f3:85:ed:46:c2:65:c0:fa:c4:dc:a3:33:28: de:bd:d0:c4:4a:3d:e4:3b:5d:24:fd:30:9b:b2:01:b6:0d:e9: dc:e8:5b:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJBMjgxMTAvBgNVBAUTKDdGNjA0NUEzNzY3NjVCRjgyNzkyQUE3MDVCQkQ4OTk1 MTlDQjE5QzcwHhcNMjUxMjIyMTY1NzUxWhcNMjUxMjI5MTY1NzUxWjAYMRYwFAYD VQQDDA02OTQ5Nzg5MC1iNzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOssDicAcfE1CzMy9U0ZzZFK/KMvzmn5SD+D3y4bIlKeIcR77ITByPiaE45P PfTdEmaF1eJO9RDBiJAIMzma7UAG2KEHb72K0m8ahMnACkUa0+iTDilrZ3LLWTT+ BsyI7W0Xbw6DZrhaE0spwUoFcO2/U1q9tjNpK6M/V/A6in+npPmksugkMP2W86Ad PftfEUy3clFk5fH/gdAEeCTWTzrYTUtR135Y/2Q/KtjhdNmPq7vfHUs9MSK1lwtd B+qkgc2hSi2jfA9alK8mRRV8ZgMrr74aCC0JfkiNpQiRlxuTaD7wYZp74wfBleRX VI7CtIIjcgaLPpwl3Tr9QdHGiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBI+Oxg AfWcMrvRaNxKntv5NOP2MB8GA1UdIwQYMBaAFH9gRaN2dlv4J5KqcFu9iZUZyxnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkEyOC9BNDdEMjAyODI4 NTUxMUU5QUQzODExNTFDNEY5QUUwMi9mMkJGbzNaMldfZ25rcXB3VzcySmxSbkxH Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyQkZvM1oyV19nbmtxcHdXNzJKbFJuTEdjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkEyOC9BNDdEMjAyODI4NTUxMUU5QUQzODExNTFDNEY5QUUwMi9mMkJGbzNaMldf Z25rcXB3VzcySmxSbkxHY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHDuTsuUX8yA09Yv2jdqCTsj/gjpzMUAM7Sigs6Tfg+3hY8HxmyDPF U3yRbYErY1YRbHkdu84ay2xETgu1atwwk5ttNjO+8NoBFJzUrZNx6HC8385IWqP7 dm6dudFqwZl5D+m5QeEw2BFMjysH/62o9t+FRkN5SxhG334dn7BjMl/erUUZs34X CZ7G/lXjEqbHYNGJs+yXOXUd0KbxziUDk2WxGjf3ID2GhcRnEfkRYoCZafss8Bbl 0znOmGhyRky0jMu2l9+qZOCoq+fjWmIPx6Jy4IOysqnO+aPdl/OF7UbCZcD6xNyj MyjevdDESj3kO10k/TCbsgG2Denc6Fur -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:48 2025 by rpki-client