This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft File: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft (raw, json) Hash identifier: SZ55KEDIyvqD9wsLXayXXryPLID8IlCmBNpvHRXbP+g= Subject key identifier: 0D:F8:37:34:91:4E:7A:B4:90:EA:ED:57:98:B1:C1:2E:79:FC:AB:06 Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 Certificate issuer: /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft Manifest number: 6D Signing time: Tue 23 Dec 2025 05:49:02 +0000 Manifest this update: Tue 23 Dec 2025 05:49:02 +0000 Manifest next update: Tue 30 Dec 2025 05:49:02 +0000 Files and hashes: 1: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl (hash: 3LPob5vmhCd98q+gU+xjWZhVr0/zIzCU4xkynfKfW1U=) 2: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (hash: bLk6e/8BG0U0y63z7FNoru0rpVQQjPyy298/glBy1OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Validity Not Before: Dec 23 05:49:02 2025 GMT Not After : Dec 30 05:49:02 2025 GMT Subject: CN=694a2d4e-78c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:5b:ab:65:f6:15:37:ce:46:90:75:3a:7b:02: ab:8a:c2:3a:bd:08:1f:f2:eb:a3:4e:2f:1e:3c:b6: 58:87:e9:1c:13:81:8d:a7:59:1d:91:39:d1:37:8d: a7:dc:ff:a6:76:42:bf:a7:b3:b0:8d:fd:cd:2b:a0: f1:be:f6:99:58:e2:94:85:a9:ee:92:bd:84:66:17: 50:29:37:d3:26:08:4f:85:b4:29:82:e8:9f:b1:58: f4:ce:6f:07:0e:3a:60:b4:86:62:3b:80:31:52:f7: 6e:3f:20:e4:bd:75:5a:98:1c:1e:6e:7b:bd:14:43: 1f:5f:f0:49:7b:ae:3c:bb:df:b0:63:4e:52:13:50: 83:6d:04:3a:57:4d:e4:ff:d1:1c:f8:2a:e8:99:01: 47:33:64:15:7f:ac:81:34:94:46:a8:16:84:30:41: 1d:0d:91:62:6a:99:f3:0f:f8:8b:dc:9c:29:dc:90: fa:90:1f:1d:82:43:21:a0:b2:71:27:71:44:6a:68: bb:6e:d7:5a:96:a1:8c:8e:7d:fe:6e:70:10:7d:0d: 88:91:9d:2c:8a:f1:f9:d9:fa:00:e9:3a:08:db:5a: ac:4f:be:96:a1:a7:00:ef:40:e0:49:8e:df:02:c5: 47:5f:51:95:b3:e8:59:d5:f8:59:1f:19:e5:11:0f: 10:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F8:37:34:91:4E:7A:B4:90:EA:ED:57:98:B1:C1:2E:79:FC:AB:06 X509v3 Authority Key Identifier: keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b2:33:b9:90:e6:34:8c:68:88:5f:df:97:39:44:c4:c9:26: bc:f5:9b:cd:80:fd:5b:0e:99:e4:9a:c2:46:d2:86:49:5f:04: 3c:2c:f7:90:1a:9e:71:c4:e3:0f:d8:a6:fe:9b:43:c0:5c:67: a2:ca:26:50:9c:3e:48:16:6b:22:9a:30:7b:e7:bf:0c:1a:d8: 6e:e3:33:60:1b:12:8a:46:e1:7b:b6:a0:c4:a8:71:83:a2:ca: b3:29:ec:f1:0e:f0:b3:29:75:4d:94:e1:dc:aa:19:d0:e2:34: 81:6a:5f:24:01:73:67:66:e5:10:5b:58:95:d4:fc:18:78:9b: 47:78:04:e8:d6:b5:a8:31:df:0f:18:7b:eb:b1:04:d8:5d:7b: 3c:9f:99:fc:db:e3:64:62:a7:60:dd:35:76:cf:65:12:8e:b1: eb:e8:8f:1e:52:4a:e3:89:dd:4f:fb:82:1f:59:ff:f0:e4:51: 62:85:3b:45:1a:ad:ce:4c:32:a6:04:f4:c8:1a:d5:2a:87:23: 94:60:83:ee:f7:ee:18:72:94:82:ee:34:0c:24:f1:91:86:29: a3:fe:66:78:72:4a:10:b7:3b:f1:0f:dc:d2:ee:f6:a8:f6:fb: ea:7b:bc:02:e0:e9:6a:ee:9b:fd:20:26:b9:be:ec:0c:32:aa: 98:2b:64:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RUY4NzExMC8GA1UEBRMoMEI2Q0QxMjdEMDRFRUMzRThFRTQxODM5MTk0MTRGRDdF RjM5RDkyNDAeFw0yNTEyMjMwNTQ5MDJaFw0yNTEyMzAwNTQ5MDJaMBgxFjAUBgNV BAMMDTY5NGEyZDRlLTc4YzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1W6tl9hU3zkaQdTp7AquKwjq9CB/y66NOLx48tliH6RwTgY2nWR2ROdE3jafc /6Z2Qr+ns7CN/c0roPG+9plY4pSFqe6SvYRmF1ApN9MmCE+FtCmC6J+xWPTObwcO OmC0hmI7gDFS924/IOS9dVqYHB5ue70UQx9f8El7rjy737BjTlITUINtBDpXTeT/ 0Rz4KuiZAUczZBV/rIE0lEaoFoQwQR0NkWJqmfMP+IvcnCnckPqQHx2CQyGgsnEn cURqaLtu11qWoYyOff5ucBB9DYiRnSyK8fnZ+gDpOgjbWqxPvpahpwDvQOBJjt8C xUdfUZWz6FnV+FkfGeURDxCrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDfg3NJFO erSQ6u1XmLHBLnn8qwYwHwYDVR0jBBgwFoAUC2zRJ9BO7D6O5Bg5GUFP1+852SQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFRjg3LzNDQkUzOUEyMzhC MzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2TzVCZzVHVUZQMS04NTJT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzJ6Uko5Qk83RDZPNUJnNUdVRlAxLTg1MlNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF Rjg3LzNDQkUzOUEyMzhCMzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2 TzVCZzVHVUZQMS04NTJTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIyyM7mQ5jSMaIhf35c5RMTJJrz1m82A/VsOmeSawkbShklfBDws95Aa nnHE4w/Ypv6bQ8BcZ6LKJlCcPkgWayKaMHvnvwwa2G7jM2AbEopG4Xu2oMSocYOi yrMp7PEO8LMpdU2U4dyqGdDiNIFqXyQBc2dm5RBbWJXU/Bh4m0d4BOjWtagx3w8Y e+uxBNhdezyfmfzb42Rip2DdNXbPZRKOsevojx5SSuOJ3U/7gh9Z//DkUWKFO0Ua rc5MMqYE9Mga1SqHI5Rgg+737hhylILuNAwk8ZGGKaP+ZnhyShC3O/EP3NLu9qj2 ++p7vALg6Wrum/0gJrm+7AwyqpgrZAc= -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:00 2025 by rpki-client