This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft File: F2vOFchi1HunYKH2ZTj4HVxJO4E.mft (raw, json) Hash identifier: EYejKzotQI1cmc2vmVd0REcHGYfiEAyvUrTStXnORe0= Subject key identifier: 08:E6:BC:2E:1B:DF:69:E8:41:3F:BF:B8:FC:80:49:B4:F7:10:9B:14 Authority key identifier: 17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81 Certificate issuer: /CN=A91706E4/serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft Manifest number: C9 Signing time: Fri 19 Dec 2025 04:53:54 +0000 Manifest this update: Fri 19 Dec 2025 04:53:54 +0000 Manifest next update: Fri 26 Dec 2025 04:53:54 +0000 Files and hashes: 1: F2vOFchi1HunYKH2ZTj4HVxJO4E.crl (hash: TVWJxJ4uwrYmIlvTsQ/UbayGfjz/wrUILN/DGGLD+Ss=) 2: 2CE10886A68511EFB0CF9981C4F9AE02.roa (hash: veK+ihHT7rgGehPtR5m7GK/hbNWI81sjRNiKcGQwWGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706E4, serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81 Validity Not Before: Dec 19 04:53:54 2025 GMT Not After : Dec 26 04:53:54 2025 GMT Subject: CN=6944da62-2d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4c:77:99:d5:2b:6f:a9:06:3f:28:67:dc:92: 4c:c5:90:89:6f:21:18:b6:16:47:56:05:f3:b1:38: 8f:74:34:4f:51:f5:a7:ce:1b:5f:de:87:4e:16:0b: bd:a4:f9:91:88:46:a7:96:c8:35:87:68:6d:85:14: 9f:df:78:74:54:ce:aa:be:31:0c:71:28:51:fe:20: 67:19:86:1a:42:bb:32:51:52:28:0b:ce:b3:03:86: 20:9e:81:ff:53:8c:95:39:12:4b:c7:99:13:7f:bb: a1:ec:f5:4a:15:91:2b:6c:ef:9f:1b:3a:b5:2d:88: e5:55:09:b8:0c:8c:c7:77:7e:d2:9b:9d:39:8d:b3: 99:46:43:81:3e:0e:b9:19:3b:27:b3:31:80:ef:78: 4e:b2:7f:04:e5:fe:b4:15:d2:84:b3:e0:b2:80:64: fe:3a:62:ec:af:9d:3b:b3:4d:f8:8c:86:37:7e:05: 7e:97:95:32:63:00:1b:f7:ee:be:57:27:e2:df:ea: d9:17:a4:be:8f:b3:75:56:37:80:04:f6:d6:a1:7c: d7:f3:9d:dc:75:2f:07:5f:be:31:c5:59:d0:c6:de: 6e:32:ed:f2:bf:bd:09:df:9c:f4:35:6b:a0:e1:3e: 14:e9:c5:60:18:13:12:e1:d4:1b:e2:c0:a0:33:d8: 80:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E6:BC:2E:1B:DF:69:E8:41:3F:BF:B8:FC:80:49:B4:F7:10:9B:14 X509v3 Authority Key Identifier: keyid:17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d3:b7:ac:89:1d:c2:bd:54:0f:24:d5:1b:cb:8d:a4:68:9e: 0f:b5:db:23:58:80:45:33:82:78:17:82:6b:61:25:d5:1a:a0: 2c:6f:49:2a:c5:e1:78:61:2a:69:4c:d1:35:f4:cd:8d:98:30: 5c:65:24:2b:5b:11:4b:4a:bb:83:f5:e0:dc:b0:c5:5f:59:bb: f0:35:10:d9:7f:0f:1a:28:01:d9:1e:fa:26:88:aa:b6:07:88: c0:3c:78:fb:a8:f2:b1:cb:ab:5e:e9:c0:6f:e6:ea:a1:2d:6f: 43:f4:72:66:22:b1:5b:f5:c2:46:39:5c:a9:6b:5c:b4:63:81: e4:04:cc:bb:d1:9d:41:0b:cd:22:17:1f:d5:9d:60:3d:58:41: 3d:a9:09:fa:b4:9b:60:d9:ef:4c:73:23:6a:13:1b:c7:9d:db: 7c:21:1a:4f:a6:0d:49:73:42:fb:e4:5d:86:d7:1f:67:f0:4e: 2f:d9:e5:a2:ae:32:86:04:77:0b:88:c8:e0:fd:c5:26:87:91: 95:cb:5a:96:77:c7:6c:f5:40:cf:56:3b:bd:dc:f2:32:66:0d: 5e:83:6d:ed:f9:dc:32:e1:b5:0c:73:80:ea:15:f0:d7:61:f4: 1f:fb:1f:6f:27:b0:cb:d1:c8:3b:ed:9e:51:65:74:c4:6f:7d: 9b:b8:66:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2RTQxMTAvBgNVBAUTKDE3NkJDRTE1Qzg2MkQ0N0JBNzYwQTFGNjY1MzhGODFE NUM0OTNCODEwHhcNMjUxMjE5MDQ1MzU0WhcNMjUxMjI2MDQ1MzU0WjAYMRYwFAYD VQQDDA02OTQ0ZGE2Mi0yZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Ux3mdUrb6kGPyhn3JJMxZCJbyEYthZHVgXzsTiPdDRPUfWnzhtf3odOFgu9 pPmRiEanlsg1h2hthRSf33h0VM6qvjEMcShR/iBnGYYaQrsyUVIoC86zA4YgnoH/ U4yVORJLx5kTf7uh7PVKFZErbO+fGzq1LYjlVQm4DIzHd37Sm505jbOZRkOBPg65 GTsnszGA73hOsn8E5f60FdKEs+CygGT+OmLsr507s034jIY3fgV+l5UyYwAb9+6+ Vyfi3+rZF6S+j7N1VjeABPbWoXzX853cdS8HX74xxVnQxt5uMu3yv70J35z0NWug 4T4U6cVgGBMS4dQb4sCgM9iAVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjmvC4b 32noQT+/uPyASbT3EJsUMB8GA1UdIwQYMBaAFBdrzhXIYtR7p2Ch9mU4+B1cSTuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZFNC8zMkU5OTNDMEE2 ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9GMnZPRmNoaTFIdW5ZS0gyWlRqNEhWeEpP NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Yydk9GY2hpMUh1bllLSDJaVGo0SFZ4Sk80RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZFNC8zMkU5OTNDMEE2ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9GMnZPRmNoaTFI dW5ZS0gyWlRqNEhWeEpPNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe07esiR3CvVQPJNUby42kaJ4PtdsjWIBFM4J4F4JrYSXVGqAsb0kq xeF4YSppTNE19M2NmDBcZSQrWxFLSruD9eDcsMVfWbvwNRDZfw8aKAHZHvomiKq2 B4jAPHj7qPKxy6te6cBv5uqhLW9D9HJmIrFb9cJGOVypa1y0Y4HkBMy70Z1BC80i Fx/VnWA9WEE9qQn6tJtg2e9McyNqExvHndt8IRpPpg1Jc0L75F2G1x9n8E4v2eWi rjKGBHcLiMjg/cUmh5GVy1qWd8ds9UDPVju93PIyZg1eg23t+dwy4bUMc4DqFfDX YfQf+x9vJ7DL0cg77Z5RZXTEb32buGaG -----END CERTIFICATE-----Generated at Fri Dec 19 10:38:59 2025 by rpki-client