This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft File: M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json) Hash identifier: nLzh8gtCUZe7asnYubA9WfoSLD+mp0vlKBMi8r5AefU= Subject key identifier: 23:FB:03:DE:14:51:46:13:0B:D1:5A:57:C5:F5:84:85:EC:9F:41:CD Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft Manifest number: 01FD Signing time: Fri 21 Nov 2025 00:51:32 +0000 Manifest this update: Fri 21 Nov 2025 00:51:32 +0000 Manifest next update: Fri 28 Nov 2025 00:51:32 +0000 Files and hashes: 1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: JxOAUcqWqVZFEArUlvPhG3L4GgXobqxp0uKwbg4G1Do=) 2: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: fdj786LqemSZiJSQFR5Ny/PwTC9eYDtT9LwHAqxwkRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Nov 2025 00:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Validity Not Before: Nov 21 00:51:32 2025 GMT Not After : Nov 28 00:51:32 2025 GMT Subject: CN=691fb794-bf97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2b:89:65:8b:d7:6f:83:67:62:72:f6:fc:d4: b1:6e:33:0a:38:34:6a:9a:06:a7:64:9c:1e:05:83: a7:a4:1d:5a:97:30:7e:ed:9f:64:26:4e:e1:2b:98: cf:8f:55:6d:b0:6f:c4:c8:ee:6d:7e:41:74:46:1f: 0d:b2:12:3d:43:5a:97:09:3b:60:05:c2:7b:46:d3: 05:75:35:5f:bc:6d:10:6a:e2:d9:de:ad:b5:3c:a3: 28:20:13:ea:76:dc:d5:fa:29:b4:5f:64:b8:c2:82: 63:85:5e:65:a5:bf:9f:cd:c3:8e:82:9b:6f:93:5e: 27:2b:56:26:b5:a0:68:0b:a0:8d:b1:56:56:4c:41: 91:e8:2c:e4:83:71:20:80:43:ff:50:e3:05:de:b5: 4c:bd:27:f5:b3:bf:d2:df:14:1c:5d:8c:39:a4:43: 1b:43:f8:46:55:ee:50:b3:dd:9b:bc:f4:56:15:fe: 0e:2b:b7:26:f7:dd:5f:ab:90:13:42:e5:10:df:1f: d9:a6:0f:2b:9d:4c:dc:b7:bd:b3:69:8a:b8:cd:cf: c6:d0:ac:6e:59:2c:3b:85:5f:ca:5c:6d:cb:16:52: a1:4e:fa:46:0d:26:cf:39:fb:22:79:c4:69:c5:89: 9f:f3:63:bc:6b:73:a7:03:8e:cd:2a:11:c9:ab:07: 75:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FB:03:DE:14:51:46:13:0B:D1:5A:57:C5:F5:84:85:EC:9F:41:CD X509v3 Authority Key Identifier: keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ba:84:af:bc:73:b7:0e:9f:6c:a3:ce:0a:e4:cf:02:db:1e: e7:27:e2:75:b2:85:7f:39:64:fe:96:07:eb:72:a3:37:3e:09: 0a:b4:76:f5:f2:85:c2:d6:10:09:22:57:7f:24:8c:24:8a:ea: ce:48:49:cf:c0:34:bc:61:07:c2:4a:c7:ef:3a:e5:6f:ed:22: 17:88:a1:02:45:a6:5b:45:4f:f8:0e:29:08:ce:54:b5:fd:f1: 3b:99:5e:4e:39:6b:b0:7b:e8:e1:ed:0f:3f:85:0f:44:e8:e2: 4d:7f:ec:c4:b8:96:cc:06:16:65:e6:af:dd:91:9b:7e:94:a3: 9d:70:e0:21:fa:c1:53:b5:4c:8f:3a:9f:0e:37:5a:e5:63:8c: 1d:42:ed:51:d6:72:52:35:1e:8d:c1:2c:89:3f:05:50:93:ba: f2:9f:a8:f4:7c:dc:ba:cb:90:1b:3d:91:8e:a3:27:fc:e1:f1: e7:17:d3:fd:49:0c:97:a3:25:f6:b3:f8:ee:b0:d2:43:ba:d8: b0:07:11:29:e9:85:96:99:ef:72:28:88:ca:04:4e:43:e4:25: b4:ec:8d:ec:2c:f1:7e:a1:91:5b:78:07:a6:da:5b:87:b1:82: b1:a7:26:c9:9e:49:a3:69:ff:9e:1d:44:d1:51:7b:74:5c:ab: f9:47:d2:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQUIxMTAvBgNVBAUTKDMzNjYxNzlCMkQ3Qzk3QjgyNjZGOUI0MzE4MDRBOEM2 RDJEMDkwRUIwHhcNMjUxMTIxMDA1MTMyWhcNMjUxMTI4MDA1MTMyWjAYMRYwFAYD VQQDEw02OTFmYjc5NC1iZjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCuJZYvXb4NnYnL2/NSxbjMKODRqmganZJweBYOnpB1alzB+7Z9kJk7hK5jP j1VtsG/EyO5tfkF0Rh8NshI9Q1qXCTtgBcJ7RtMFdTVfvG0QauLZ3q21PKMoIBPq dtzV+im0X2S4woJjhV5lpb+fzcOOgptvk14nK1YmtaBoC6CNsVZWTEGR6Czkg3Eg gEP/UOMF3rVMvSf1s7/S3xQcXYw5pEMbQ/hGVe5Qs92bvPRWFf4OK7cm991fq5AT QuUQ3x/Zpg8rnUzct72zaYq4zc/G0KxuWSw7hV/KXG3LFlKhTvpGDSbPOfsiecRp xYmf82O8a3OnA47NKhHJqwd1tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCP7A94U UUYTC9FaV8X1hIXsn0HNMB8GA1UdIwQYMBaAFDNmF5stfJe4Jm+bQxgEqMbS0JDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJBQi8yQjk5ODU0RUI4 QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3Z21iNXRER0FTb3h0TFFr T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yWVhteTE4bDdnbWI1dERHQVNveHRMUWtPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJBQi8yQjk5ODU0RUI4QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3 Z21iNXRER0FTb3h0TFFrT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKuoSvvHO3Dp9so84K5M8C2x7nJ+J1soV/OWT+lgfrcqM3PgkKtHb1 8oXC1hAJIld/JIwkiurOSEnPwDS8YQfCSsfvOuVv7SIXiKECRaZbRU/4DikIzlS1 /fE7mV5OOWuwe+jh7Q8/hQ9E6OJNf+zEuJbMBhZl5q/dkZt+lKOdcOAh+sFTtUyP Op8ON1rlY4wdQu1R1nJSNR6NwSyJPwVQk7ryn6j0fNy6y5AbPZGOoyf84fHnF9P9 SQyXoyX2s/jusNJDutiwBxEp6YWWme9yKIjKBE5D5CW07I3sLPF+oZFbeAem2luH sYKxpybJnkmjaf+eHUTRUXt0XKv5R9Is -----END CERTIFICATE-----Generated at Sat Nov 22 21:49:57 2025 by rpki-client