This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft File: R2wrlqUY81f22XaCqHHD5Iu54SM.mft (raw, json) Hash identifier: lgEahW+JVa6OVoobSMHZrNEYZH9XuV7SrU+MEyIa3l4= Subject key identifier: 04:02:A3:0D:3F:0C:A0:03:3A:DD:29:9A:B2:48:AE:3E:E2:AA:B5:2B Authority key identifier: 47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23 Certificate issuer: /CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft Manifest number: 020D Signing time: Sun 21 Dec 2025 01:37:53 +0000 Manifest this update: Sun 21 Dec 2025 01:37:52 +0000 Manifest next update: Sun 28 Dec 2025 01:37:52 +0000 Files and hashes: 1: R2wrlqUY81f22XaCqHHD5Iu54SM.crl (hash: xoeNHtq0qfOPRezu9vpmwmryQZDjah2sNqgb1zir8uQ=) 2: 65E02670C83E11ED9FAAFA22C4F9AE02.roa (hash: QqBINDd+m6GAidQPZDLnjXwqI13nDti3MNbtgoHfQfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A442, serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123 Validity Not Before: Dec 21 01:37:52 2025 GMT Not After : Dec 28 01:37:52 2025 GMT Subject: CN=69474f71-46a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:08:40:ad:b4:0d:ae:1a:2c:e8:8d:bc:d3: 7f:b3:66:d9:7c:75:7e:65:ab:d4:a0:17:32:12:13: ee:4a:89:a7:cd:c3:93:69:70:41:70:c6:09:8e:a6: 5b:24:93:4e:f9:1c:6f:60:42:b6:16:b3:59:85:dd: 55:57:05:80:58:3f:20:35:e7:e2:6b:64:0e:ea:d7: fc:47:eb:ed:2c:e0:0a:67:ea:ab:d9:5a:3d:7b:70: c1:1c:97:1a:8b:c5:26:60:b7:39:8a:b7:ea:c4:81: c3:58:4f:0e:79:6a:b9:ff:a9:79:c5:39:f4:2f:e6: e4:5d:06:ab:dc:fd:d2:d6:b6:c5:91:4a:bf:ff:c0: 3e:da:d2:a1:f2:83:cd:97:91:e1:f5:7c:94:cb:64: d6:9a:05:61:6c:34:34:6e:d9:f3:be:32:73:90:9c: 8e:3f:16:ab:03:1c:63:de:7b:10:27:80:d3:d5:b2: 19:01:d1:a2:a8:c0:55:24:90:42:c8:9f:c9:27:ad: 47:c7:1d:76:c2:24:ea:1a:8d:5e:b3:96:74:88:cb: 34:92:90:cd:af:1a:b1:8d:b8:13:53:a9:20:0b:2e: d1:de:9b:7b:8a:4e:1c:6e:f3:93:80:f9:78:99:b7: d6:11:0c:b7:49:7d:03:e0:6d:47:a5:7e:72:14:16: 51:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:02:A3:0D:3F:0C:A0:03:3A:DD:29:9A:B2:48:AE:3E:E2:AA:B5:2B X509v3 Authority Key Identifier: keyid:47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:6d:9e:8b:81:f3:42:21:2b:22:af:5f:68:0a:06:ce:0e:21: be:4b:e5:14:b2:c4:66:20:75:3c:5d:1c:80:94:fb:ac:2f:35: ef:62:33:b3:d1:16:ba:97:0c:5d:4e:a1:12:c9:a5:b8:f3:c7: e8:cd:a9:d9:d3:79:0f:a8:40:9a:85:ab:14:47:1b:6d:79:59: 77:4e:a4:fd:18:55:9c:f0:14:80:5a:72:48:cc:dc:86:59:d1: e3:16:2d:97:97:37:df:b2:13:75:41:44:83:81:3c:3e:52:d0: c8:47:bc:24:78:65:31:b5:86:5e:44:dc:f7:b0:6e:12:73:f1: 69:3f:71:ca:ec:c3:eb:69:9b:26:4d:e0:0a:25:cc:38:b2:ff: 8b:a5:10:69:80:c6:ca:68:6c:8f:e0:bd:65:4d:44:b9:96:ab: b0:b7:55:f8:5c:34:bb:18:d2:e0:96:51:98:6b:8b:5e:71:4d: 3b:4a:4d:7e:88:eb:12:6d:06:22:c2:ca:66:61:f2:9a:66:5d: 4f:0d:be:d6:89:8d:0a:57:0b:86:70:5e:f4:04:34:0b:a0:84: 92:7f:d6:2b:f8:d1:f8:68:99:06:37:b7:9d:a4:62:1a:61:03: 16:b9:f9:bd:fd:ad:2e:30:ad:74:61:63:88:16:67:cb:4a:2f: 03:fa:a5:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NDIxMTAvBgNVBAUTKDQ3NkMyQjk2QTUxOEYzNTdGNkQ5NzY4MkE4NzFDM0U0 OEJCOUUxMjMwHhcNMjUxMjIxMDEzNzUyWhcNMjUxMjI4MDEzNzUyWjAYMRYwFAYD VQQDDA02OTQ3NGY3MS00NmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuG4IQK20Da4aLOiNvNN/s2bZfHV+ZavUoBcyEhPuSomnzcOTaXBBcMYJjqZb JJNO+RxvYEK2FrNZhd1VVwWAWD8gNefia2QO6tf8R+vtLOAKZ+qr2Vo9e3DBHJca i8UmYLc5irfqxIHDWE8OeWq5/6l5xTn0L+bkXQar3P3S1rbFkUq//8A+2tKh8oPN l5Hh9XyUy2TWmgVhbDQ0btnzvjJzkJyOPxarAxxj3nsQJ4DT1bIZAdGiqMBVJJBC yJ/JJ61Hxx12wiTqGo1es5Z0iMs0kpDNrxqxjbgTU6kgCy7R3pt7ik4cbvOTgPl4 mbfWEQy3SX0D4G1HpX5yFBZR0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQCow0/ DKADOt0pmrJIrj7iqrUrMB8GA1UdIwQYMBaAFEdsK5alGPNX9tl2gqhxw+SLueEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ0Mi9FMEU3REI1NkM4 MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgxZjIyWGFDcUhIRDVJdTU0 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Iyd3JscVVZODFmMjJYYUNxSEhENUl1NTRTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ0Mi9FMEU3REI1NkM4MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgx ZjIyWGFDcUhIRDVJdTU0U00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwbZ6LgfNCISsir19oCgbODiG+S+UUssRmIHU8XRyAlPusLzXvYjOz 0Ra6lwxdTqESyaW488fozanZ03kPqECahasURxtteVl3TqT9GFWc8BSAWnJIzNyG WdHjFi2XlzffshN1QUSDgTw+UtDIR7wkeGUxtYZeRNz3sG4Sc/FpP3HK7MPraZsm TeAKJcw4sv+LpRBpgMbKaGyP4L1lTUS5lquwt1X4XDS7GNLgllGYa4tecU07Sk1+ iOsSbQYiwspmYfKaZl1PDb7WiY0KVwuGcF70BDQLoISSf9Yr+NH4aJkGN7edpGIa YQMWufm9/a0uMK10YWOIFmfLSi8D+qXY -----END CERTIFICATE-----Generated at Mon Dec 22 09:09:21 2025 by rpki-client