This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft File: 2dCjxqTde6e0VN6uAa9nryxUxDM.mft (raw, json) Hash identifier: ujAfiv36F+Sn3KxgNeIRf5PO7f4+BHWbDMDZNUzBBbE= Subject key identifier: 86:D6:C3:CC:03:C8:26:00:AC:66:99:DB:8B:49:B0:00:52:12:64:22 Authority key identifier: D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 Certificate issuer: /CN=A915C9B7/serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Certificate serial: 0854 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft Manifest number: 0849 Signing time: Mon 22 Dec 2025 20:05:08 +0000 Manifest this update: Mon 22 Dec 2025 20:05:08 +0000 Manifest next update: Mon 29 Dec 2025 20:05:08 +0000 Files and hashes: 1: 2dCjxqTde6e0VN6uAa9nryxUxDM.crl (hash: Fqz51ObC/lDx6srFLyk3ZDEWwPRC2TQdX/MVG7sr3kE=) 2: 12A47D4E9CDB11EF857FB626C4F9AE02.roa (hash: DuU/zvCDCUg2TONY7brDsE/++qWvSBYjnL7XCdcyag0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2132 (0x854) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C9B7, serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Validity Not Before: Dec 22 20:05:08 2025 GMT Not After : Dec 29 20:05:08 2025 GMT Subject: CN=6949a474-6bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cc:c1:49:d5:f3:d7:5c:a8:c3:3b:5f:dd:16: 91:7c:aa:7b:b7:2e:69:c9:0a:1e:0d:bb:e9:c1:2a: 66:a2:e6:26:46:ad:8a:97:e3:0f:68:29:db:53:e5: a9:ac:0b:e9:58:f6:3a:69:3b:7f:7d:03:28:8f:34: f5:59:c0:9f:b8:69:0e:d8:37:ca:99:49:65:cd:39: 01:5f:42:be:80:a2:55:93:0a:bc:4a:85:be:d9:22: 62:25:cc:3a:e4:53:e3:c9:56:09:71:e9:6f:98:bb: b5:23:f5:f4:18:b4:37:7d:8b:40:12:67:a5:86:fa: 76:ad:27:d6:fa:c5:3b:99:4a:e2:76:94:5a:80:4f: 9d:d1:d6:29:7d:18:4c:ce:1c:70:c9:0e:03:ed:a5: 55:1e:fd:41:fe:97:d0:83:39:51:30:12:ee:e3:db: f4:53:52:5f:4a:46:a9:98:d5:c0:b1:0d:09:ff:9f: 5d:6a:18:aa:f5:3a:9e:c6:c4:e7:af:2d:8f:42:01: ea:c7:1e:7d:a0:57:e6:93:30:42:db:29:14:76:e0: cc:45:ac:ab:4c:27:5a:b8:f1:0b:30:e5:7c:cd:97: 7f:19:08:95:a9:b7:8d:13:10:2f:97:b1:40:fa:1d: 60:aa:0f:b5:0f:1a:f7:5a:41:96:20:fe:cc:e5:d3: 14:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D6:C3:CC:03:C8:26:00:AC:66:99:DB:8B:49:B0:00:52:12:64:22 X509v3 Authority Key Identifier: keyid:D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:ce:56:61:6a:65:94:e0:f7:83:fd:44:75:d4:7a:46:39:39: 94:5c:32:4a:f1:51:28:cb:80:75:38:a6:8c:9f:0b:7a:df:1b: d1:f1:00:8f:5f:0e:f1:d0:bb:93:52:2d:e0:26:02:13:fc:36: 74:46:b9:2c:66:9b:d7:fc:10:cd:ca:98:8e:9c:2f:9f:09:c7: da:0e:6e:19:bf:fb:d5:e4:e4:fe:7b:16:f0:47:74:98:dd:69: d9:a4:cf:00:e4:75:b7:5e:61:4c:18:ff:a4:b9:65:17:67:29: 85:ab:80:eb:19:b9:6f:bb:6b:7a:71:60:8b:19:92:b6:5a:63: c4:8d:4e:46:53:a2:4f:b8:27:f1:be:e0:c4:aa:12:bf:b4:a1: 8c:d5:10:11:3e:a7:2a:51:2b:4f:23:3a:50:0a:fc:8b:4b:05: 59:1e:8a:76:96:d9:08:a9:24:48:7b:ab:09:32:68:3c:cd:98: 13:5a:e4:23:6b:8c:53:76:08:32:20:c4:93:1e:37:29:cb:5f: f7:30:7b:78:e4:91:93:36:4b:61:cb:f4:6d:39:0d:e7:68:26: b5:02:59:eb:20:9a:42:00:d4:42:13:ed:dc:78:21:47:cf:d2: 94:d7:45:ba:a3:50:e6:4a:18:92:7f:ac:a6:33:15:1f:02:67: 84:38:b6:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM5QjcxMTAvBgNVBAUTKEQ5RDBBM0M2QTRERDdCQTdCNDU0REVBRTAxQUY2N0FG MkM1NEM0MzMwHhcNMjUxMjIyMjAwNTA4WhcNMjUxMjI5MjAwNTA4WjAYMRYwFAYD VQQDDA02OTQ5YTQ3NC02YmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08zBSdXz11yowztf3RaRfKp7ty5pyQoeDbvpwSpmouYmRq2Kl+MPaCnbU+Wp rAvpWPY6aTt/fQMojzT1WcCfuGkO2DfKmUllzTkBX0K+gKJVkwq8SoW+2SJiJcw6 5FPjyVYJcelvmLu1I/X0GLQ3fYtAEmelhvp2rSfW+sU7mUridpRagE+d0dYpfRhM zhxwyQ4D7aVVHv1B/pfQgzlRMBLu49v0U1JfSkapmNXAsQ0J/59dahiq9TqexsTn ry2PQgHqxx59oFfmkzBC2ykUduDMRayrTCdauPELMOV8zZd/GQiVqbeNExAvl7FA +h1gqg+1Dxr3WkGWIP7M5dMUMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbWw8wD yCYArGaZ24tJsABSEmQiMB8GA1UdIwQYMBaAFNnQo8ak3XuntFTergGvZ68sVMQz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzlCNy84QzI2NEZEMkVF NUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2ZTBWTjZ1QWE5bnJ5eFV4 RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkQ2p4cVRkZTZlMFZONnVBYTlucnl4VXhETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzlCNy84QzI2NEZEMkVFNUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2 ZTBWTjZ1QWE5bnJ5eFV4RE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwzlZhamWU4PeD/UR11HpGOTmUXDJK8VEoy4B1OKaMnwt63xvR8QCP Xw7x0LuTUi3gJgIT/DZ0RrksZpvX/BDNypiOnC+fCcfaDm4Zv/vV5OT+exbwR3SY 3WnZpM8A5HW3XmFMGP+kuWUXZymFq4DrGblvu2t6cWCLGZK2WmPEjU5GU6JPuCfx vuDEqhK/tKGM1RARPqcqUStPIzpQCvyLSwVZHop2ltkIqSRIe6sJMmg8zZgTWuQj a4xTdggyIMSTHjcpy1/3MHt45JGTNkthy/RtOQ3naCa1AlnrIJpCANRCE+3ceCFH z9KU10W6o1DmShiSf6ymMxUfAmeEOLZn -----END CERTIFICATE-----Generated at Tue Dec 23 21:12:51 2025 by rpki-client