This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft File: 2gElQupZNV_ohHjSHXPjbOvN88s.mft (raw, json) Hash identifier: 4uZB+PduC9Ulqz37Xs80LbhIXsjZz3wUf4ocr+m8aUg= Subject key identifier: 56:F2:F5:13:C0:21:7F:45:C2:93:B2:3E:6F:E8:FE:A2:14:3B:47:08 Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB Certificate issuer: /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB Certificate serial: 0334 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft Manifest number: 032E Signing time: Tue 23 Dec 2025 00:03:54 +0000 Manifest this update: Tue 23 Dec 2025 00:03:53 +0000 Manifest next update: Tue 30 Dec 2025 00:03:53 +0000 Files and hashes: 1: 2gElQupZNV_ohHjSHXPjbOvN88s.crl (hash: bDGnT/coz7jRlus/1/n5eaUzqD8IGM3hwKHKgIhcYMw=) 2: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (hash: V0PWHgjdigOTAk+IhNcZGbzQ+qgLVdszRbUdJLxDupo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B241, serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB Validity Not Before: Dec 23 00:03:53 2025 GMT Not After : Dec 30 00:03:53 2025 GMT Subject: CN=6949dc69-a812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:61:e1:f4:6e:f3:22:ec:3d:cf:ea:5c:f2:04: cf:52:86:59:e4:51:b8:73:0c:31:c8:b8:3b:e7:fe: eb:54:6a:fd:33:8a:52:c9:5b:e0:59:60:37:10:ce: fe:52:8b:19:95:d1:fb:69:ca:bb:22:54:98:94:d1: cc:2d:86:2b:c3:94:0c:8f:c3:8b:49:19:7e:59:16: 5e:42:92:ef:a2:d9:cd:af:bf:85:88:f2:8d:cb:c6: 1a:c8:28:e7:c1:cb:30:a7:bf:16:7e:e9:80:02:cd: e9:48:c6:08:90:3c:31:5c:88:03:2e:4e:9a:2d:7f: 46:5b:52:cf:2f:92:89:f1:3c:f6:a5:52:88:ff:7c: d4:f8:74:93:b3:f7:72:89:37:0c:ae:79:ef:f0:f6: e0:2e:e8:c1:db:43:d0:ac:dc:e6:62:c0:1c:52:8f: 86:4a:97:26:f3:aa:57:89:51:88:b1:b4:4e:19:f0: da:32:f1:45:13:12:19:a2:4e:65:83:d1:81:02:5e: 2c:49:d8:e9:6c:b2:ca:e3:22:fd:64:54:04:99:46: 89:d8:e9:4c:01:a4:92:a8:be:de:96:ff:cd:5a:e9: 36:ad:0e:8e:74:37:71:68:96:ab:85:cd:89:29:a1: d4:bb:9e:be:cc:32:9a:39:e5:35:10:8a:e8:de:46: 07:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F2:F5:13:C0:21:7F:45:C2:93:B2:3E:6F:E8:FE:A2:14:3B:47:08 X509v3 Authority Key Identifier: keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:88:6a:d5:8f:9a:18:c8:8e:6c:7d:e7:a6:c3:54:35:77:91: 96:32:84:b2:04:b8:ee:cd:69:36:92:63:f7:83:7b:4d:8a:d6: 05:24:e2:81:90:2b:0f:54:8a:2e:60:5c:25:00:51:b7:c4:58: 96:d1:fd:7f:44:8d:11:b2:ce:96:d5:8b:f3:82:50:b1:ae:48: 49:ae:8d:3e:8a:2d:96:60:68:04:97:05:2a:4f:42:74:1f:51: 14:a0:b1:8b:92:ea:74:a6:0e:7e:9b:e9:8c:b2:3c:18:6e:2b: 2d:47:4b:47:86:1c:ff:18:b0:a2:cb:cd:8c:6f:7f:0b:8e:25: d5:15:5a:10:54:1e:77:ef:fd:ba:6d:4d:86:3d:33:91:bf:67: c7:71:e3:e0:4e:d4:21:5f:44:a5:1e:ea:02:9e:98:8e:23:f7: cd:4d:0a:f9:44:df:dd:3b:98:66:b7:5d:60:a9:d0:02:e8:4b: c3:81:4e:97:1a:7e:1d:a5:90:11:98:fb:f9:d6:f9:f5:a5:ee: 5c:38:34:5c:8a:5c:12:2d:1d:ad:52:3f:e2:ab:e6:0d:6c:52: 7c:46:41:c1:83:93:85:f0:69:19:d2:27:56:84:e4:21:65:4c: 43:b0:80:73:a5:55:81:e6:30:2e:c5:87:de:e3:03:7e:67:2b: 0d:53:95:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyNDExMTAvBgNVBAUTKERBMDEyNTQyRUE1OTM1NUZFODg0NzhEMjFENzNFMzZD RUJDREYzQ0IwHhcNMjUxMjIzMDAwMzUzWhcNMjUxMjMwMDAwMzUzWjAYMRYwFAYD VQQDDA02OTQ5ZGM2OS1hODEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmHh9G7zIuw9z+pc8gTPUoZZ5FG4cwwxyLg75/7rVGr9M4pSyVvgWWA3EM7+ UosZldH7acq7IlSYlNHMLYYrw5QMj8OLSRl+WRZeQpLvotnNr7+FiPKNy8YayCjn wcswp78WfumAAs3pSMYIkDwxXIgDLk6aLX9GW1LPL5KJ8Tz2pVKI/3zU+HSTs/dy iTcMrnnv8PbgLujB20PQrNzmYsAcUo+GSpcm86pXiVGIsbROGfDaMvFFExIZok5l g9GBAl4sSdjpbLLK4yL9ZFQEmUaJ2OlMAaSSqL7elv/NWuk2rQ6OdDdxaJarhc2J KaHUu56+zDKaOeU1EIro3kYHhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFby9RPA IX9FwpOyPm/o/qIUO0cIMB8GA1UdIwQYMBaAFNoBJULqWTVf6IR40h1z42zrzfPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjI0MS9CNjQ5Q0E5NkYw NzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5WX29oSGpTSFhQamJPdk44 OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnRWxRdXBaTlZfb2hIalNIWFBqYk92Tjg4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjI0MS9CNjQ5Q0E5NkYwNzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5W X29oSGpTSFhQamJPdk44OHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQiGrVj5oYyI5sfeemw1Q1d5GWMoSyBLjuzWk2kmP3g3tNitYFJOKB kCsPVIouYFwlAFG3xFiW0f1/RI0Rss6W1YvzglCxrkhJro0+ii2WYGgElwUqT0J0 H1EUoLGLkup0pg5+m+mMsjwYbistR0tHhhz/GLCiy82Mb38LjiXVFVoQVB537/26 bU2GPTORv2fHcePgTtQhX0SlHuoCnpiOI/fNTQr5RN/dO5hmt11gqdAC6EvDgU6X Gn4dpZARmPv51vn1pe5cODRcilwSLR2tUj/iq+YNbFJ8RkHBg5OF8GkZ0idWhOQh ZUxDsIBzpVWB5jAuxYfe4wN+ZysNU5Vz -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:01 2025 by rpki-client