This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft File: 2AV3_jUc7BMvwP-hiIerDHRrFPI.mft (raw, json) Hash identifier: waYo6kYpEGY5ZoteXDaU6cFcZHgUmPOLKvrnXPs/IdQ= Subject key identifier: 6E:15:07:BB:28:C5:3C:70:32:9F:1B:A6:F3:DB:2E:2F:9B:CB:EF:BA Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 Certificate issuer: /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft Manifest number: 01FA Signing time: Tue 23 Dec 2025 01:30:48 +0000 Manifest this update: Tue 23 Dec 2025 01:30:48 +0000 Manifest next update: Tue 30 Dec 2025 01:30:48 +0000 Files and hashes: 1: 2AV3_jUc7BMvwP-hiIerDHRrFPI.crl (hash: Y0Twna4w2IWnUZUbd3HcUqtSGTqBFQeoB2tl7LeFjHQ=) 2: 732F4132D85E11EDB34ED618C4F9AE02.roa (hash: Xws1Pbqqq0/QFZ02P8d+7Evj6MZMCt/rYpdMr05WU7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169FA9, serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Validity Not Before: Dec 23 01:30:48 2025 GMT Not After : Dec 30 01:30:48 2025 GMT Subject: CN=6949f0c8-49d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ac:c1:63:b7:38:65:e8:9a:7f:41:0c:c9:7a: 39:17:47:57:8b:df:19:cc:2e:0a:68:2e:5a:1d:1f: a9:f1:7e:67:0d:e5:ae:49:a0:82:2e:a8:a0:7c:9e: fe:78:7f:d5:7b:68:fd:ff:92:90:66:51:fa:f1:8f: c5:55:c2:1e:fb:e1:66:3e:b4:15:5b:5b:d5:de:10: 64:08:d9:54:b8:ea:33:94:4e:e1:68:03:33:9b:cd: 48:e8:e7:81:c1:3d:64:6f:c2:f3:0a:75:0c:18:86: fd:3c:64:14:99:99:8c:0e:9a:c1:2e:35:09:c3:a3: c2:72:dc:f4:87:ba:62:d3:6d:4b:0b:b6:06:d9:a4: c4:b8:3f:4d:7f:76:82:1e:f8:04:d4:c6:3c:70:d3: 49:37:46:48:04:80:7b:b2:f9:a8:6a:3a:5e:87:dc: a7:ed:00:b1:1b:55:38:06:49:bd:aa:ae:1c:91:64: 2a:b7:56:b0:05:4e:eb:f4:e5:9a:90:b9:af:dd:7a: a4:79:7c:9d:6b:b5:53:66:ce:a6:f9:10:f8:2e:f0: b9:2f:53:81:a3:87:fa:3d:19:24:24:d6:c0:01:37: e2:a6:e2:5c:9d:34:20:25:fe:be:f5:cf:e0:59:72: 30:32:4c:c5:25:22:9a:88:7a:53:43:a0:92:72:fb: 58:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:15:07:BB:28:C5:3C:70:32:9F:1B:A6:F3:DB:2E:2F:9B:CB:EF:BA X509v3 Authority Key Identifier: keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:6c:74:3d:87:88:9c:cb:f9:b3:83:a3:13:75:66:15:99:e4: af:41:91:14:c9:8b:fb:fc:93:76:9c:db:68:fe:1d:12:fc:57: 27:0d:f1:a9:6a:a7:26:1d:ed:74:6d:3b:74:7d:67:c7:9d:a4: f0:1d:a1:d9:06:5f:8d:75:87:c0:51:7f:fa:33:13:7a:bd:13: 9e:cf:c5:52:0b:ed:6b:1b:80:cd:a8:56:fa:7b:9b:d4:a9:11: 2f:8e:c3:2c:4a:b3:70:62:f8:77:bd:e4:04:f2:fc:37:07:9f: 50:ee:70:8f:de:26:e7:b7:d6:e0:8e:ff:c6:aa:95:69:13:bd: c3:58:49:67:f5:d5:52:3c:70:fc:9e:f6:bc:9f:cd:bc:47:95: fa:dd:46:6e:7f:95:1b:99:71:2b:34:e5:c8:83:06:68:b5:36: a9:dd:f0:e1:20:04:57:16:c3:7c:48:cd:fd:ec:d6:00:3a:94: 10:30:48:06:0b:a0:07:69:fa:7a:ec:e7:a3:56:56:e6:d1:7f: 9a:eb:f6:1c:a4:63:14:b9:98:90:a4:fb:e4:f9:a2:3b:4c:89: da:e7:f1:9e:97:e3:da:3a:a4:01:d5:62:56:36:66:97:67:9c: a2:14:04:a4:45:0d:cd:61:2a:ae:12:ba:97:22:01:c6:cd:2b: c6:c0:7b:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlGQTkxMTAvBgNVBAUTKEQ4MDU3N0ZFMzUxQ0VDMTMyRkMwRkZBMTg4ODdBQjBD NzQ2QjE0RjIwHhcNMjUxMjIzMDEzMDQ4WhcNMjUxMjMwMDEzMDQ4WjAYMRYwFAYD VQQDDA02OTQ5ZjBjOC00OWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqzBY7c4Zeiaf0EMyXo5F0dXi98ZzC4KaC5aHR+p8X5nDeWuSaCCLqigfJ7+ eH/Ve2j9/5KQZlH68Y/FVcIe++FmPrQVW1vV3hBkCNlUuOozlE7haAMzm81I6OeB wT1kb8LzCnUMGIb9PGQUmZmMDprBLjUJw6PCctz0h7pi021LC7YG2aTEuD9Nf3aC HvgE1MY8cNNJN0ZIBIB7svmoajpeh9yn7QCxG1U4Bkm9qq4ckWQqt1awBU7r9OWa kLmv3XqkeXyda7VTZs6m+RD4LvC5L1OBo4f6PRkkJNbAATfipuJcnTQgJf6+9c/g WXIwMkzFJSKaiHpTQ6CScvtYEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4VB7so xTxwMp8bpvPbLi+by++6MB8GA1UdIwQYMBaAFNgFd/41HOwTL8D/oYiHqwx0axTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUZBOS83QzBGNEQ4MkQ4 NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdCTXZ3UC1oaUllckRIUnJG UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBVjNfalVjN0JNdndQLWhpSWVyREhSckZQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUZBOS83QzBGNEQ4MkQ4NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdC TXZ3UC1oaUllckRIUnJGUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwbHQ9h4icy/mzg6MTdWYVmeSvQZEUyYv7/JN2nNto/h0S/FcnDfGp aqcmHe10bTt0fWfHnaTwHaHZBl+NdYfAUX/6MxN6vROez8VSC+1rG4DNqFb6e5vU qREvjsMsSrNwYvh3veQE8vw3B59Q7nCP3ibnt9bgjv/GqpVpE73DWEln9dVSPHD8 nva8n828R5X63UZuf5UbmXErNOXIgwZotTap3fDhIARXFsN8SM397NYAOpQQMEgG C6AHafp67OejVlbm0X+a6/YcpGMUuZiQpPvk+aI7TIna5/Gel+PaOqQB1WJWNmaX Z5yiFASkRQ3NYSquErqXIgHGzSvGwHtd -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:41 2025 by rpki-client