This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft File: g2LSOGrBMH7vi7_YdPc45tqjVXI.mft (raw, json) Hash identifier: vnH5qriNUDOn/GGaaCh9tcCqYcVyzIyW9JY0iAZlCo0= Subject key identifier: 34:35:B8:A6:C0:42:61:9F:83:2F:B5:27:6E:40:78:84:AC:6A:AE:4E Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 Certificate issuer: /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Certificate serial: 0D86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft Manifest number: 0D7F Signing time: Mon 22 Dec 2025 17:35:08 +0000 Manifest this update: Mon 22 Dec 2025 17:35:07 +0000 Manifest next update: Mon 29 Dec 2025 17:35:07 +0000 Files and hashes: 1: g2LSOGrBMH7vi7_YdPc45tqjVXI.crl (hash: FTl1sovFbD4wZ/xiOsyFKlhyGHHdfqq7qKlAK5x2RKs=) 2: D11C8B12DB7111E981104A54C4F9AE02.roa (hash: b+YvMULskW1aqcLGiau9z7PDlxuascZM6xtTvuLKH/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3462 (0xd86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F5, serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Validity Not Before: Dec 22 17:35:07 2025 GMT Not After : Dec 29 17:35:07 2025 GMT Subject: CN=6949814c-80c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:23:65:6c:43:df:2d:1a:84:09:48:5e:6a:89: f3:78:17:cc:43:5c:b3:66:60:fe:11:5e:45:7e:2e: a3:88:9f:a1:37:4f:23:16:64:a2:0d:db:49:73:7a: 30:86:fb:96:f4:24:ca:e7:2e:15:64:00:cb:24:73: 3e:ed:90:90:b1:1c:4c:c9:ae:60:5b:db:ce:2d:d6: a7:36:be:b0:b9:0d:ce:0a:df:18:85:ca:34:45:0c: 72:a4:91:96:5e:a2:58:37:0b:52:cd:ed:96:7d:b4: b0:ed:54:0e:e4:02:65:60:55:9c:7a:ee:73:b4:c4: 46:b8:d5:0e:92:a4:30:a6:41:10:1c:31:17:3d:e8: c1:79:77:18:d6:28:b7:a5:7d:06:ba:90:8c:6f:5a: 4d:90:a5:da:73:ab:27:0b:08:bc:e8:47:6b:f4:47: 2f:6b:e0:93:f8:f6:8a:ae:f9:ca:67:dd:25:3b:a2: 3a:16:26:b0:30:b6:ac:5f:a9:33:d7:ad:ad:d9:ea: b5:56:47:3a:f4:df:8a:3a:96:e9:b4:06:38:02:64: 47:46:cc:ea:34:f8:6a:9b:1f:70:ce:5d:7a:b4:d6: 78:c8:20:19:a6:b1:56:bb:57:60:fc:aa:a8:47:02: 8c:b2:d3:a6:29:71:2a:60:fa:a4:d2:c3:7a:14:f5: cd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:35:B8:A6:C0:42:61:9F:83:2F:B5:27:6E:40:78:84:AC:6A:AE:4E X509v3 Authority Key Identifier: keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:e9:5c:97:73:c3:0b:39:c7:50:b5:5a:bd:e1:f3:15:80:03: d9:99:36:da:27:3c:02:84:ff:90:eb:59:ea:98:ac:b7:aa:2f: a6:18:f0:ca:ff:6d:d2:65:18:85:81:b9:8f:49:62:28:7b:48: d2:75:94:af:c0:7e:e9:10:9e:c5:38:af:15:ed:3d:2a:ae:04: aa:45:1c:ae:78:77:f4:7a:72:89:a7:d2:92:28:47:22:5c:40: fb:5d:f9:95:9d:0d:c0:a5:01:6d:98:a7:89:df:7a:58:93:76: cf:bb:aa:6a:89:1a:4a:56:b8:91:30:a4:34:cb:e5:46:f9:cc: ae:15:a8:4d:25:1a:39:ab:61:0c:5c:2e:2b:f4:02:b8:f1:34: 8d:cc:2c:60:bd:2e:0a:aa:d4:c3:cd:72:fa:a3:ed:87:37:1a: 75:08:4d:bb:49:91:f0:96:52:80:e3:f2:4f:64:b1:04:9d:8f: 2a:e2:1e:bd:0f:fa:19:c1:5b:aa:2c:ff:ac:83:73:13:94:ff: 6d:6f:ad:3b:a8:a7:85:be:cd:ab:4b:c2:b9:a4:b2:1e:08:47: b6:63:d9:c4:05:21:2c:86:42:9a:97:b4:d3:d0:a1:94:ec:22: b5:f1:74:e2:d5:1a:b5:29:ea:7f:83:da:ab:43:e0:d7:7d:94: 65:c2:d4:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MwRjUxMTAvBgNVBAUTKDgzNjJEMjM4NkFDMTMwN0VFRjhCQkZEODc0RjczOEU2 REFBMzU1NzIwHhcNMjUxMjIyMTczNTA3WhcNMjUxMjI5MTczNTA3WjAYMRYwFAYD VQQDDA02OTQ5ODE0Yy04MGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAriNlbEPfLRqECUheaonzeBfMQ1yzZmD+EV5Ffi6jiJ+hN08jFmSiDdtJc3ow hvuW9CTK5y4VZADLJHM+7ZCQsRxMya5gW9vOLdanNr6wuQ3OCt8Yhco0RQxypJGW XqJYNwtSze2WfbSw7VQO5AJlYFWceu5ztMRGuNUOkqQwpkEQHDEXPejBeXcY1ii3 pX0GupCMb1pNkKXac6snCwi86Edr9Ecva+CT+PaKrvnKZ90lO6I6FiawMLasX6kz 162t2eq1Vkc69N+KOpbptAY4AmRHRszqNPhqmx9wzl16tNZ4yCAZprFWu1dg/Kqo RwKMstOmKXEqYPqk0sN6FPXNAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQ1uKbA QmGfgy+1J25AeISsaq5OMB8GA1UdIwQYMBaAFINi0jhqwTB+74u/2HT3OObao1Vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGNS8xRUM0RTA5QURC NzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1IN3ZpN19ZZFBjNDV0cWpW WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cyTFNPR3JCTUg3dmk3X1lkUGM0NXRxalZYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzBGNS8xRUM0RTA5QURCNzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1I N3ZpN19ZZFBjNDV0cWpWWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj6VyXc8MLOcdQtVq94fMVgAPZmTbaJzwChP+Q61nqmKy3qi+mGPDK /23SZRiFgbmPSWIoe0jSdZSvwH7pEJ7FOK8V7T0qrgSqRRyueHf0enKJp9KSKEci XED7XfmVnQ3ApQFtmKeJ33pYk3bPu6pqiRpKVriRMKQ0y+VG+cyuFahNJRo5q2EM XC4r9AK48TSNzCxgvS4KqtTDzXL6o+2HNxp1CE27SZHwllKA4/JPZLEEnY8q4h69 D/oZwVuqLP+sg3MTlP9tb607qKeFvs2rS8K5pLIeCEe2Y9nEBSEshkKal7TT0KGU 7CK18XTi1Rq1Kep/g9qrQ+DXfZRlwtRf -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:21 2025 by rpki-client