This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft File: 2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft (raw, json) Hash identifier: K9/vXgVpZscOCoh4uLW52PKYF0ojnABreGclL0AKc2I= Subject key identifier: F1:02:5B:D7:D1:79:83:6D:BC:A0:37:C1:A6:69:E1:EF:A0:BE:67:0C Authority key identifier: D8:AF:F5:03:FE:8C:5B:D2:26:6A:A2:EC:AB:E5:52:CA:75:14:7F:66 Certificate issuer: /CN=A918049D/serialNumber=D8AFF503FE8C5BD2266AA2ECABE552CA75147F66 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft Manifest number: 1F Signing time: Tue 23 Dec 2025 06:36:21 +0000 Manifest this update: Tue 23 Dec 2025 06:36:21 +0000 Manifest next update: Tue 30 Dec 2025 06:36:21 +0000 Files and hashes: 1: 2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl (hash: KyWdW+SXnBB27acN+KSVGiJEl2tB1ScCY2PkwEZH06k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918049D, serialNumber=D8AFF503FE8C5BD2266AA2ECABE552CA75147F66 Validity Not Before: Dec 23 06:36:21 2025 GMT Not After : Dec 30 06:36:21 2025 GMT Subject: CN=694a3865-1698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:23:b6:a5:5b:3f:df:2f:bb:25:b3:ed:ea:57: 4f:9f:c8:30:6b:b1:23:4b:fc:a6:17:09:10:7f:4e: 47:b0:ff:9e:3f:8e:2c:38:2c:ab:9e:3d:43:4d:00: da:16:5d:5d:83:da:15:29:9b:22:02:5b:0b:7d:cc: 66:56:6d:de:03:82:64:ca:18:3e:63:70:69:6c:8f: 52:73:96:67:bb:f8:76:d8:20:cf:c7:ff:d7:1d:6a: b9:f5:25:b4:30:43:28:90:05:c9:43:59:6f:79:01: 44:09:cb:ad:d9:87:38:55:86:e9:28:0b:76:48:be: ba:d7:41:b7:e4:36:f2:70:2b:90:f2:7d:52:44:60: a3:46:fe:3f:a8:97:b5:2f:e3:70:d2:e5:e3:a1:6a: d3:75:6c:08:00:3c:b9:0c:aa:5f:c7:40:1c:8c:fd: 63:84:fb:6b:39:00:60:5f:65:74:fc:6f:d0:67:03: 95:5b:d6:c9:d4:16:2b:dd:4e:6a:75:02:9e:d4:3c: fc:17:20:55:ff:2b:e2:4a:4d:71:82:e4:6f:28:1d: 0a:fa:e4:58:23:2f:fb:74:41:93:3d:61:fb:27:90: 44:0f:9b:13:3b:ad:24:8d:93:db:db:8a:82:bc:62: 6a:21:6d:ff:48:a8:1e:ec:1b:67:e0:cf:08:88:20: 41:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:02:5B:D7:D1:79:83:6D:BC:A0:37:C1:A6:69:E1:EF:A0:BE:67:0C X509v3 Authority Key Identifier: keyid:D8:AF:F5:03:FE:8C:5B:D2:26:6A:A2:EC:AB:E5:52:CA:75:14:7F:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:bc:37:1c:54:57:aa:aa:ff:91:25:66:c8:e3:0d:c6:a3:b2: 6b:0c:d5:e6:e2:b0:be:7a:be:d6:84:d3:da:c9:aa:2f:28:02: 28:87:e6:ee:56:14:ad:ff:9f:f6:9e:7b:3d:ff:1a:f7:a4:a8: fe:1c:26:48:33:2d:eb:14:48:03:f8:8f:a9:bb:68:88:f1:e4: 83:f2:74:d0:a4:b9:7b:de:0a:1b:7c:6a:af:19:47:a3:3a:12: 8b:d2:ef:f7:d0:7d:23:79:0e:88:25:dd:86:58:01:74:d1:04: 65:ef:5e:ba:37:4f:5c:d7:4f:ff:12:1f:ee:eb:96:7d:78:4b: 33:19:ca:96:c7:a5:6f:5d:bc:e4:8b:86:30:77:2c:67:b1:b1: ae:b1:62:b3:f0:c0:52:d3:b2:4c:37:c9:ed:39:5f:47:88:ae: c9:4a:e3:04:c4:6d:88:8c:a3:ec:b3:0f:a8:7d:15:78:0f:fd: 7a:8b:8f:a7:1d:2c:c1:fe:67:11:a4:3e:52:74:9c:df:69:16: 96:25:56:8b:2d:04:1b:cb:8b:51:f3:d1:95:7f:bd:00:a2:1e: 4c:20:11:71:e4:00:d4:dd:8d:43:29:09:63:36:08:8f:21:9f: b1:20:8d:fa:f8:1b:40:55:34:da:ab:03:a9:b5:f1:96:83:1e: 1c:ae:b0:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDQ5RDExMC8GA1UEBRMoRDhBRkY1MDNGRThDNUJEMjI2NkFBMkVDQUJFNTUyQ0E3 NTE0N0Y2NjAeFw0yNTEyMjMwNjM2MjFaFw0yNTEyMzAwNjM2MjFaMBgxFjAUBgNV BAMMDTY5NGEzODY1LTE2OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxI7alWz/fL7sls+3qV0+fyDBrsSNL/KYXCRB/Tkew/54/jiw4LKuePUNNANoW XV2D2hUpmyICWwt9zGZWbd4DgmTKGD5jcGlsj1Jzlme7+HbYIM/H/9cdarn1JbQw QyiQBclDWW95AUQJy63ZhzhVhukoC3ZIvrrXQbfkNvJwK5DyfVJEYKNG/j+ol7Uv 43DS5eOhatN1bAgAPLkMql/HQByM/WOE+2s5AGBfZXT8b9BnA5Vb1snUFivdTmp1 Ap7UPPwXIFX/K+JKTXGC5G8oHQr65FgjL/t0QZM9YfsnkEQPmxM7rSSNk9vbioK8 Ymohbf9IqB7sG2fgzwiIIEGdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8QJb19F5 g228oDfBpmnh76C+ZwwwHwYDVR0jBBgwFoAU2K/1A/6MW9ImaqLsq+VSynUUf2Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwNDlEL0I1N0NBNTU4QjJD NjExRjA5MTM0QkE2REM0RjlBRTAyLzJLXzFBXzZNVzlJbWFxTHNxLVZTeW5VVWYy WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMktfMUFfNk1XOUltYXFMc3EtVlN5blVVZjJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw NDlEL0I1N0NBNTU4QjJDNjExRjA5MTM0QkE2REM0RjlBRTAyLzJLXzFBXzZNVzlJ bWFxTHNxLVZTeW5VVWYyWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEu8NxxUV6qq/5ElZsjjDcajsmsM1ebisL56vtaE09rJqi8oAiiH5u5W FK3/n/aeez3/GvekqP4cJkgzLesUSAP4j6m7aIjx5IPydNCkuXveCht8aq8ZR6M6 EovS7/fQfSN5Dogl3YZYAXTRBGXvXro3T1zXT/8SH+7rln14SzMZypbHpW9dvOSL hjB3LGexsa6xYrPwwFLTskw3ye05X0eIrslK4wTEbYiMo+yzD6h9FXgP/XqLj6cd LMH+ZxGkPlJ0nN9pFpYlVostBBvLi1Hz0ZV/vQCiHkwgEXHkANTdjUMpCWM2CI8h n7Egjfr4G0BVNNqrA6m18ZaDHhyusEw= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:53 2025 by rpki-client