This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft File: 2Qg5PFuoA1r2i37ACVWOgS7QleA.mft (raw, json) Hash identifier: rCKWgHBg/7foxNn8swxAQvbG57aHSd9Nev6ZmjH+TGk= Subject key identifier: D2:68:30:A6:C9:1F:83:95:15:B5:27:6F:EB:A9:F8:5C:20:3C:08:46 Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 Certificate issuer: /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft Manifest number: E3 Signing time: Tue 09 Dec 2025 17:13:05 +0000 Manifest this update: Tue 09 Dec 2025 17:13:04 +0000 Manifest next update: Tue 16 Dec 2025 17:13:04 +0000 Files and hashes: 1: 2Qg5PFuoA1r2i37ACVWOgS7QleA.crl (hash: tLWzoV5vOLWDQjtXDSbBYGND9xX2VbRNiOdPC2RVv4A=) 2: 4E4A18B0D52211F08B0A0834C4F9AE02.roa (hash: oZqRBzW1NqDFUlR9NaAyV5sfWERm6KyWOzH8vmoZ6LU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 17:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Validity Not Before: Dec 9 17:13:04 2025 GMT Not After : Dec 16 17:13:04 2025 GMT Subject: CN=693858a1-ba71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:c3:4b:dc:42:46:26:2f:2f:06:30:d0:a7: 1b:5f:b5:9f:2a:57:47:c5:3a:e7:7a:2e:1f:2c:0f: cf:be:00:91:35:a4:3e:9a:a1:c2:cf:fd:60:52:7b: 1e:b4:75:a8:29:86:84:70:40:3a:e9:d2:48:6c:ff: fd:5a:cb:6d:d9:81:3a:52:97:c5:35:0b:02:b0:2e: 38:68:d7:5c:b1:a2:33:b8:57:c4:ae:23:a7:bd:30: 62:f4:90:9c:d3:0e:c7:32:4d:1b:da:e8:33:30:ba: 79:ca:07:b0:50:94:a5:5c:e7:e3:3f:9e:aa:7a:00: 30:cd:13:ab:16:f8:7a:59:84:68:d8:17:fb:6d:54: 47:e2:c5:c3:d5:7e:26:39:db:8a:e1:35:2a:70:69: a8:22:a2:65:1a:e0:c2:d7:5f:04:00:08:11:2d:7d: 6c:39:7b:93:fe:17:11:eb:51:37:d6:85:1e:17:99: 43:6c:b9:5c:08:5a:3f:31:e0:39:2c:2a:28:6e:d1: 5c:d2:cc:1f:1b:6f:3f:54:5c:3c:c0:86:0b:d2:94: de:13:b4:fc:a6:22:9f:a1:60:d3:6f:d5:b9:8c:b0: 40:d2:8b:b3:49:8e:5c:3d:77:cd:3b:b7:55:c6:42: c1:2d:d6:b9:de:ec:34:95:13:26:da:d6:ef:12:74: b2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:68:30:A6:C9:1F:83:95:15:B5:27:6F:EB:A9:F8:5C:20:3C:08:46 X509v3 Authority Key Identifier: keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:56:a7:5e:73:9b:2f:9c:11:8c:36:84:15:0e:48:99:39:5f: 6f:95:b5:61:f3:83:2c:6f:09:0d:02:80:bc:15:83:f1:79:6f: ff:d0:38:b5:bc:12:61:f7:a3:7a:d3:44:7f:2b:ed:2b:aa:f1: 2f:9c:94:e3:34:98:05:af:29:5e:f9:92:d7:31:38:89:2c:7c: 07:d4:ca:fa:40:81:07:cf:8c:7c:99:23:ae:2e:f7:c9:99:a9: b8:07:99:6b:ec:80:3d:2d:00:ff:f8:24:ee:10:74:0f:fb:2b: 69:02:ca:ba:06:95:a8:f7:17:a8:df:85:de:a2:ca:c7:44:ea: 8e:44:48:ed:32:37:4a:a1:37:e2:08:20:c4:57:41:5b:18:ba: f7:df:14:61:f5:2e:8d:84:03:05:3e:5d:b4:0d:66:27:fb:4c: 43:f8:a5:77:aa:85:2b:24:bc:8c:e0:9f:b0:c6:78:8c:ce:56: 87:99:72:19:a7:55:36:b3:91:e9:8d:32:ac:73:27:59:b3:fc: 3f:82:4c:b6:bd:f1:23:db:30:0b:21:77:74:52:54:16:4b:68: 22:9d:4e:0c:5e:20:68:ca:e9:6e:81:30:8a:74:6a:af:58:33: e1:e5:13:b0:5e:6c:df:8d:b9:98:5e:44:08:30:b7:9c:ab:e3: 09:ed:10:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2OUExMTAvBgNVBAUTKEQ5MDgzOTNDNUJBODAzNUFGNjhCN0VDMDA5NTU4RTgx MkVEMDk1RTAwHhcNMjUxMjA5MTcxMzA0WhcNMjUxMjE2MTcxMzA0WjAYMRYwFAYD VQQDEw02OTM4NThhMS1iYTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutnDS9xCRiYvLwYw0KcbX7WfKldHxTrnei4fLA/PvgCRNaQ+mqHCz/1gUnse tHWoKYaEcEA66dJIbP/9Wstt2YE6UpfFNQsCsC44aNdcsaIzuFfEriOnvTBi9JCc 0w7HMk0b2ugzMLp5ygewUJSlXOfjP56qegAwzROrFvh6WYRo2Bf7bVRH4sXD1X4m OduK4TUqcGmoIqJlGuDC118EAAgRLX1sOXuT/hcR61E31oUeF5lDbLlcCFo/MeA5 LCoobtFc0swfG28/VFw8wIYL0pTeE7T8piKfoWDTb9W5jLBA0ouzSY5cPXfNO7dV xkLBLda53uw0lRMm2tbvEnSyyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJoMKbJ H4OVFbUnb+up+FwgPAhGMB8GA1UdIwQYMBaAFNkIOTxbqANa9ot+wAlVjoEu0JXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDY5QS8yRUI2MDc5NjlC RjAxMUVGODFDOTAyNjdDNEY5QUUwMi8yUWc1UEZ1b0ExcjJpMzdBQ1ZXT2dTN1Fs ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJRZzVQRnVvQTFyMmkzN0FDVldPZ1M3UWxlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDY5QS8yRUI2MDc5NjlCRjAxMUVGODFDOTAyNjdDNEY5QUUwMi8yUWc1UEZ1b0Ex cjJpMzdBQ1ZXT2dTN1FsZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDVqdec5svnBGMNoQVDkiZOV9vlbVh84MsbwkNAoC8FYPxeW//0Di1 vBJh96N600R/K+0rqvEvnJTjNJgFryle+ZLXMTiJLHwH1Mr6QIEHz4x8mSOuLvfJ mam4B5lr7IA9LQD/+CTuEHQP+ytpAsq6BpWo9xeo34XeosrHROqOREjtMjdKoTfi CCDEV0FbGLr33xRh9S6NhAMFPl20DWYn+0xD+KV3qoUrJLyM4J+wxniMzlaHmXIZ p1U2s5HpjTKscydZs/w/gky2vfEj2zALIXd0UlQWS2ginU4MXiBoyulugTCKdGqv WDPh5ROwXmzfjbmYXkQIMLecq+MJ7RD3 -----END CERTIFICATE-----Generated at Wed Dec 10 06:13:47 2025 by rpki-client