This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft File: 2CKi28iCNPgPcORngrLU2c0_m9w.mft (raw, json) Hash identifier: WOZvX1n+x4p7mewCW5tFJyKOWSMtfAyLUF7V/1NaPJA= Subject key identifier: 87:7B:52:24:20:5C:97:42:21:0F:D6:7C:EB:48:CF:6F:1D:94:C1:34 Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft Manifest number: 028A Signing time: Sun 07 Dec 2025 00:06:55 +0000 Manifest this update: Sun 07 Dec 2025 00:06:54 +0000 Manifest next update: Sun 14 Dec 2025 00:06:54 +0000 Files and hashes: 1: 2CKi28iCNPgPcORngrLU2c0_m9w.crl (hash: BwxlNRgDxbZgzEdql1BgV4LlYXRK5V+9MOKVhdEDry4=) 2: 3A281348C8FF11F0A8BC2876C4F9AE02.roa (hash: pYe0+bHqCYcW1iVEEt6tk6dblnlCH5OApr9vBfmnQiE=) 3: C3A9035CC8FF11F0BE76E779C4F9AE02.roa (hash: jU5Md8Gh4CBr/ZHApHJnxAlGLX6cvpq9zc86CFRKi+8=) 4: C4149072C8FF11F0AC8AE779C4F9AE02.roa (hash: 60cLUiwIo3OFkat+dtGQ2GzMMVBuPgmzgGRtVgQi3Xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Validity Not Before: Dec 7 00:06:54 2025 GMT Not After : Dec 14 00:06:54 2025 GMT Subject: CN=6934c51e-945f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1c:18:9e:e7:ca:26:ca:26:9d:81:53:07:58: 88:9d:23:a4:6e:58:5e:f8:7f:86:6f:4c:d0:a7:d8: 7e:26:80:b0:91:d6:e0:93:7b:fa:78:46:cc:6d:f5: 5c:27:8e:c4:0a:5e:b2:3a:d2:66:e3:cb:6d:48:e0: 65:f6:b1:f6:19:82:6c:02:eb:d4:0c:9f:25:6e:a9: 02:cd:e1:0c:27:49:04:32:99:32:4d:f3:72:23:e4: 57:79:3a:c5:b0:99:cd:d4:4d:1c:77:9d:7c:bf:39: df:aa:73:e4:b9:b3:59:ea:2b:16:3a:31:dc:77:cd: d8:a5:53:4e:4e:33:db:b8:e6:e9:4b:f0:1a:57:5d: bd:21:9e:d1:75:26:a1:79:9e:d1:1d:ec:01:33:f5: 48:05:a4:fd:a8:89:6c:03:f7:4e:b1:e4:67:0d:5e: 4b:db:2a:66:92:88:5f:9e:4e:c0:79:33:c2:84:04: fa:34:db:8c:9f:a5:9d:cc:6b:3d:3a:3c:6b:c2:f7: 42:af:76:fd:87:70:87:f1:d3:43:64:33:b4:1a:d0: 35:ec:19:72:f0:3a:17:f8:06:59:b8:01:4e:24:1f: e1:21:c1:66:e0:2f:c2:2e:13:fd:49:fd:b4:6b:f9: 4c:b0:a0:f7:b5:92:27:1e:33:54:bc:21:3b:1d:07: 08:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7B:52:24:20:5C:97:42:21:0F:D6:7C:EB:48:CF:6F:1D:94:C1:34 X509v3 Authority Key Identifier: keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:75:f9:04:c1:f9:1a:16:2e:93:44:65:a9:17:d1:36:d4:4a: af:e6:86:36:b7:f5:8e:9f:63:95:2c:44:f9:59:ce:61:66:1f: 6d:2a:9d:76:57:32:de:3f:82:e7:80:13:8d:65:d2:d9:5c:49: 68:b2:22:07:60:e6:df:61:30:c4:d3:0f:f9:6f:e3:e1:9a:07: 42:ab:d2:eb:66:5f:fe:13:23:9c:45:de:26:86:25:0d:08:00: 80:e9:fd:a3:57:35:f8:07:82:70:a1:ff:39:15:0f:ac:a7:8f: 70:1c:1a:8d:b3:6a:99:07:f6:d7:c2:a1:73:fe:0e:78:69:39: 39:aa:94:fa:43:e3:d9:2c:6a:6e:33:00:56:28:45:74:bb:0c: 2b:87:e5:1c:6c:c2:8b:bd:12:b5:e5:86:68:97:24:1c:17:45: c6:b1:91:5f:73:74:be:a2:3c:87:78:b9:29:fa:bb:17:75:2a: f0:e5:95:02:f9:bb:42:8e:26:4c:cd:70:40:78:8e:24:b6:82: f5:63:d3:c6:48:bc:e4:76:e7:32:e2:c9:9f:6b:c6:24:e5:7b: fb:ab:58:53:a4:77:10:d6:03:69:fb:0c:d6:4e:30:f4:e9:34: ad:2f:b0:f4:88:87:55:9c:64:3b:de:0f:d6:57:6f:f4:80:d1: 43:ea:95:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZCMzIxMTAvBgNVBAUTKEQ4MjJBMkRCQzg4MjM0RjgwRjcwRTQ2NzgyQjJENEQ5 Q0QzRjlCREMwHhcNMjUxMjA3MDAwNjU0WhcNMjUxMjE0MDAwNjU0WjAYMRYwFAYD VQQDEw02OTM0YzUxZS05NDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBwYnufKJsomnYFTB1iInSOkblhe+H+Gb0zQp9h+JoCwkdbgk3v6eEbMbfVc J47ECl6yOtJm48ttSOBl9rH2GYJsAuvUDJ8lbqkCzeEMJ0kEMpkyTfNyI+RXeTrF sJnN1E0cd518vznfqnPkubNZ6isWOjHcd83YpVNOTjPbuObpS/AaV129IZ7RdSah eZ7RHewBM/VIBaT9qIlsA/dOseRnDV5L2ypmkohfnk7AeTPChAT6NNuMn6WdzGs9 OjxrwvdCr3b9h3CH8dNDZDO0GtA17Bly8DoX+AZZuAFOJB/hIcFm4C/CLhP9Sf20 a/lMsKD3tZInHjNUvCE7HQcIIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFId7UiQg XJdCIQ/WfOtIz28dlME0MB8GA1UdIwQYMBaAFNgiotvIgjT4D3DkZ4Ky1NnNP5vc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkIzMi83Mzg3OTYxODJG MzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05QZ1BjT1JuZ3JMVTJjMF9t OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDS2kyOGlDTlBnUGNPUm5nckxVMmMwX205dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkIzMi83Mzg3OTYxODJGMzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05Q Z1BjT1JuZ3JMVTJjMF9tOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOdfkEwfkaFi6TRGWpF9E21Eqv5oY2t/WOn2OVLET5Wc5hZh9tKp12 VzLeP4LngBONZdLZXElosiIHYObfYTDE0w/5b+PhmgdCq9LrZl/+EyOcRd4mhiUN CACA6f2jVzX4B4Jwof85FQ+sp49wHBqNs2qZB/bXwqFz/g54aTk5qpT6Q+PZLGpu MwBWKEV0uwwrh+UcbMKLvRK15YZolyQcF0XGsZFfc3S+ojyHeLkp+rsXdSrw5ZUC +btCjiZMzXBAeI4ktoL1Y9PGSLzkducy4smfa8Yk5Xv7q1hTpHcQ1gNp+wzWTjD0 6TStL7D0iIdVnGQ73g/WV2/0gNFD6pW8 -----END CERTIFICATE-----Generated at Mon Dec 8 06:24:24 2025 by rpki-client