This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft File: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft (raw, json) Hash identifier: Le5a2var20/CFF7P36K8OJuFYHkPalnae5YMx+mFaWs= Subject key identifier: 55:25:75:37:43:8D:29:33:20:0F:FE:99:E0:30:B8:51:74:93:1D:8D Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 Certificate issuer: /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft Manifest number: 0117 Signing time: Tue 23 Dec 2025 03:51:50 +0000 Manifest this update: Tue 23 Dec 2025 03:51:50 +0000 Manifest next update: Tue 30 Dec 2025 03:51:50 +0000 Files and hashes: 1: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl (hash: pao96zZsfwm1jSXvtd2Ybde4Sle3HR71yspmeaOpBhw=) 2: 5E9461285DB711EF8AB66F0EC4F9AE02.roa (hash: CBgoWvrmHvyFdXC0BLyQHHm9awpAM5FPWyknUbzVkgo=) 3: 40BC278038EB11EF9AD66E7FC4F9AE02.roa (hash: r+E4tv3uimhBOzrNZaN5fn8Ync8wrwOD2GgwaX3Fu0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91610DD, serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Validity Not Before: Dec 23 03:51:50 2025 GMT Not After : Dec 30 03:51:50 2025 GMT Subject: CN=694a11d6-b188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fc:3e:db:ac:f0:a2:8c:f9:83:85:f2:37:b9: d0:3a:a0:b6:40:f8:9e:ba:f7:9b:af:fe:ac:e3:14: df:ff:3e:eb:59:6b:b1:c9:26:c1:65:3d:49:77:c0: cd:af:55:28:a3:29:59:87:12:2a:f3:30:c2:f5:1b: e7:0d:aa:74:0b:eb:63:b9:6f:c8:17:cd:fa:84:dd: cd:53:49:c1:5b:59:79:d7:33:7d:51:b3:c8:8b:f5: 68:cd:ba:ac:6b:c9:2e:91:74:9c:f8:8b:c1:73:d1: aa:ec:6b:1b:4a:63:f6:be:dd:d7:cc:25:63:c4:2a: 7c:c0:e3:65:ef:cf:bc:94:55:c9:75:45:f6:e9:d2: 6d:e6:35:7f:20:57:4e:18:dc:66:66:e0:bf:f5:1d: 78:d4:05:a7:b9:5a:a5:f7:93:62:b3:a4:76:ea:46: 53:8e:f5:c2:08:f6:01:9c:79:90:4f:0b:53:ad:bd: 5a:93:a5:69:29:34:cc:a5:a7:a9:94:c7:eb:2c:13: b7:70:32:98:72:a7:61:1b:24:3e:95:47:9e:78:ce: dc:21:85:52:ac:6e:8d:a8:9f:f6:55:25:54:cf:00: 5f:7f:fe:3e:71:df:eb:74:21:f5:da:2a:43:9b:ed: 89:d9:da:83:e7:be:4f:6b:4e:9a:71:d8:3f:09:bc: 07:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:25:75:37:43:8D:29:33:20:0F:FE:99:E0:30:B8:51:74:93:1D:8D X509v3 Authority Key Identifier: keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:b7:16:10:c1:2a:4e:9e:f0:f7:0f:7e:7e:51:b4:e5:59:16: be:93:73:2c:4d:fe:c0:c8:01:5a:0c:b9:6f:1b:35:d1:10:a8: df:36:ef:a1:50:9a:b6:05:d0:c7:62:c9:14:31:9d:b9:20:0d: f2:39:35:53:f0:71:ae:34:94:3d:4f:a0:6e:41:3e:5a:c0:4f: a0:8e:66:14:1e:b5:19:27:35:cd:82:8e:4b:19:07:25:1b:aa: 31:1f:8f:99:0e:45:5f:15:93:48:93:45:02:51:05:46:0f:23: 49:d1:35:6d:d5:ac:6c:28:1d:88:92:49:87:e9:85:33:4d:92: 85:3f:be:47:91:15:ed:09:18:28:09:53:49:19:66:f7:fc:19: 33:23:74:c6:8b:d5:41:be:49:83:a3:57:28:1a:37:ae:cf:16: d2:63:76:06:36:ec:49:89:cc:bf:7f:1b:be:87:d6:af:ab:5e: 6a:5d:2b:59:1c:11:6b:fc:8e:87:c7:fb:e1:fb:44:4c:7d:b0: fe:6a:18:8a:6d:31:77:28:f2:4c:fb:ed:24:71:8b:08:77:97: 24:74:a0:74:9c:65:54:44:c7:52:b7:62:eb:8c:d8:25:75:59: c9:21:67:af:09:a3:a3:62:7c:db:aa:31:6f:c1:08:ff:d3:21: f0:23:14:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwREQxMTAvBgNVBAUTKEQ4QkQ2NzY1MTgzNjYwMzRCODg4ODQ4QjNCNTcxOEZB OTA3MEUxOTIwHhcNMjUxMjIzMDM1MTUwWhcNMjUxMjMwMDM1MTUwWjAYMRYwFAYD VQQDDA02OTRhMTFkNi1iMTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufw+26zwooz5g4XyN7nQOqC2QPieuvebr/6s4xTf/z7rWWuxySbBZT1Jd8DN r1UooylZhxIq8zDC9RvnDap0C+tjuW/IF836hN3NU0nBW1l51zN9UbPIi/Vozbqs a8kukXSc+IvBc9Gq7GsbSmP2vt3XzCVjxCp8wONl78+8lFXJdUX26dJt5jV/IFdO GNxmZuC/9R141AWnuVql95Nis6R26kZTjvXCCPYBnHmQTwtTrb1ak6VpKTTMpaep lMfrLBO3cDKYcqdhGyQ+lUeeeM7cIYVSrG6NqJ/2VSVUzwBff/4+cd/rdCH12ipD m+2J2dqD575Pa06acdg/CbwHhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUldTdD jSkzIA/+meAwuFF0kx2NMB8GA1UdIwQYMBaAFNi9Z2UYNmA0uIiEiztXGPqQcOGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTBERC82NTYzMjRGNDM4 RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllEUzRpSVNMTzFjWS1wQnc0 WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMMW5aUmcyWURTNGlJU0xPMWNZLXBCdzRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTBERC82NTYzMjRGNDM4RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllE UzRpSVNMTzFjWS1wQnc0WkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4txYQwSpOnvD3D35+UbTlWRa+k3MsTf7AyAFaDLlvGzXREKjfNu+h UJq2BdDHYskUMZ25IA3yOTVT8HGuNJQ9T6BuQT5awE+gjmYUHrUZJzXNgo5LGQcl G6oxH4+ZDkVfFZNIk0UCUQVGDyNJ0TVt1axsKB2IkkmH6YUzTZKFP75HkRXtCRgo CVNJGWb3/BkzI3TGi9VBvkmDo1coGjeuzxbSY3YGNuxJicy/fxu+h9avq15qXStZ HBFr/I6Hx/vh+0RMfbD+ahiKbTF3KPJM++0kcYsId5ckdKB0nGVURMdSt2LrjNgl dVnJIWevCaOjYnzbqjFvwQj/0yHwIxRG -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:16 2025 by rpki-client