This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft File: 2xy4SFQGnkPKG3JdQuprqbU5gVs.mft (raw, json) Hash identifier: hlN6Do0qruHLoMHE9eXyWai8oSxPNhHECO3IO4p8wFE= Subject key identifier: 17:15:A7:B8:12:3D:0A:50:E4:07:CD:C6:37:0B:39:DD:BE:D9:8B:D9 Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B Certificate issuer: /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Certificate serial: 0D02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft Manifest number: 0CEA Signing time: Thu 18 Dec 2025 17:57:41 +0000 Manifest this update: Thu 18 Dec 2025 17:57:40 +0000 Manifest next update: Thu 25 Dec 2025 17:57:40 +0000 Files and hashes: 1: 2xy4SFQGnkPKG3JdQuprqbU5gVs.crl (hash: lsbHLUeO6vK/uRdA0jSMHfoIE535ofe2HWfx4SjLpNI=) 2: 55903190A67E11F0BBF9853FC4F9AE02.roa (hash: AdYW9GJhci7LYEDyJ6XwBJoZPBWZtoWOpqlz3zLpEms=) 3: 18F7410671F311ECBA5DA710C4F9AE02.roa (hash: tIg3kB0f/wtqp+Q6ik7/n7dKrrQEFLMxhaaJzHV4nr8=) 4: BC36A3E8A67E11F0A35CBF40C4F9AE02.roa (hash: Zy1Cr+ByTtuPlrpGjoVSDT6QhmmfCIHpbLzangTlT68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3330 (0xd02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Validity Not Before: Dec 18 17:57:40 2025 GMT Not After : Dec 25 17:57:40 2025 GMT Subject: CN=69444095-cd2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c3:7b:5a:01:60:f5:19:3e:5f:01:a9:c1:50: ee:f4:70:5e:93:d7:63:a1:e6:d1:25:c7:5e:02:bf: 27:21:e3:8a:20:74:94:e0:50:17:4a:55:76:36:c6: ee:d9:b6:43:94:81:fd:ba:2f:8f:f1:79:97:11:bc: 76:59:e2:40:0a:ae:0d:ec:62:77:a4:a3:06:18:88: d2:7e:df:08:27:c8:39:30:3b:8b:88:72:44:90:28: 0c:b4:64:01:44:95:0a:85:bc:37:56:df:c6:a4:2e: 9e:2c:0e:d0:1b:99:70:cd:4c:c0:91:03:6f:1f:53: 37:60:73:63:3a:a6:4a:24:4a:49:d7:f2:8b:99:f8: ab:a4:34:c6:23:41:b5:fa:17:2f:1a:40:31:c2:83: 10:41:4d:f9:42:6c:a1:41:19:80:de:b3:4d:3e:f4: 5b:35:b2:05:a2:c4:a5:9a:30:57:9d:cf:35:c3:52: 10:ea:58:b2:8f:fd:c9:a6:84:e5:79:3c:6f:99:9f: 51:d6:50:db:12:96:57:03:d4:ab:c4:bd:c0:8c:97: 7f:6d:3a:79:e4:24:c7:ec:07:ee:a9:04:6b:ef:06: ed:8f:a6:9b:8e:b8:0b:b9:18:48:87:37:99:ea:6f: 6d:05:5c:46:71:4b:8f:11:e1:20:9b:3f:d4:6f:d9: 0a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:15:A7:B8:12:3D:0A:50:E4:07:CD:C6:37:0B:39:DD:BE:D9:8B:D9 X509v3 Authority Key Identifier: keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:6c:a9:a2:dc:9b:fd:e9:96:60:8c:01:d0:23:e3:cb:1f:48: 1b:00:b4:34:1c:cb:30:1d:36:73:b6:6a:ab:e2:d8:cc:8d:1e: 2e:d8:43:fb:dd:a3:25:33:ee:09:16:46:de:16:f8:f7:9b:fb: 64:da:29:81:3d:c0:c4:6e:79:25:7e:5e:d2:32:b3:1a:d8:12: 43:c2:25:3f:c7:d5:0d:ee:21:76:4e:a4:c0:36:c3:52:d9:e1: 46:53:8a:2c:3a:ea:cf:d0:03:71:a5:e0:3d:ec:d8:34:de:27: 78:da:00:ed:10:4c:cb:7d:29:22:59:b1:42:fb:af:41:99:90: 9f:14:e0:9d:1a:fc:ff:5d:97:a8:9b:18:02:03:09:0a:ee:4e: b2:5f:b2:71:c1:c0:ef:e9:2b:88:13:ee:33:3b:1a:61:01:d9: fe:28:b3:63:74:62:cd:0b:86:dc:6e:e5:e4:a5:b0:54:73:b3: 65:fe:c4:5b:d6:bd:54:d9:20:d6:29:e6:d1:ea:e0:04:5b:32: 61:d1:85:e3:d2:f8:16:02:05:8f:71:08:b5:65:90:c7:c2:ca: c0:8e:25:c7:d4:e6:20:0b:1d:38:80:a8:8b:e0:58:8d:3c:18: ef:49:72:a6:eb:b1:47:0e:8d:36:ca:e2:f8:63:90:81:b4:7c: 87:d2:86:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4OEQxMTAvBgNVBAUTKERCMUNCODQ4NTQwNjlFNDNDQTFCNzI1RDQyRUE2QkE5 QjUzOTgxNUIwHhcNMjUxMjE4MTc1NzQwWhcNMjUxMjI1MTc1NzQwWjAYMRYwFAYD VQQDDA02OTQ0NDA5NS1jZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8N7WgFg9Rk+XwGpwVDu9HBek9djoebRJcdeAr8nIeOKIHSU4FAXSlV2Nsbu 2bZDlIH9ui+P8XmXEbx2WeJACq4N7GJ3pKMGGIjSft8IJ8g5MDuLiHJEkCgMtGQB RJUKhbw3Vt/GpC6eLA7QG5lwzUzAkQNvH1M3YHNjOqZKJEpJ1/KLmfirpDTGI0G1 +hcvGkAxwoMQQU35QmyhQRmA3rNNPvRbNbIFosSlmjBXnc81w1IQ6liyj/3JpoTl eTxvmZ9R1lDbEpZXA9SrxL3AjJd/bTp55CTH7AfuqQRr7wbtj6abjrgLuRhIhzeZ 6m9tBVxGcUuPEeEgmz/Ub9kKvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcVp7gS PQpQ5AfNxjcLOd2+2YvZMB8GA1UdIwQYMBaAFNscuEhUBp5DyhtyXULqa6m1OYFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg4RC8yQTE0QkUwODAw NUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25rUEtHM0pkUXVwcnFiVTVn VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4eTRTRlFHbmtQS0czSmRRdXBycWJVNWdWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg4RC8yQTE0QkUwODAwNUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25r UEtHM0pkUXVwcnFiVTVnVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1bKmi3Jv96ZZgjAHQI+PLH0gbALQ0HMswHTZztmqr4tjMjR4u2EP7 3aMlM+4JFkbeFvj3m/tk2imBPcDEbnklfl7SMrMa2BJDwiU/x9UN7iF2TqTANsNS 2eFGU4osOurP0ANxpeA97Ng03id42gDtEEzLfSkiWbFC+69BmZCfFOCdGvz/XZeo mxgCAwkK7k6yX7JxwcDv6SuIE+4zOxphAdn+KLNjdGLNC4bcbuXkpbBUc7Nl/sRb 1r1U2SDWKebR6uAEWzJh0YXj0vgWAgWPcQi1ZZDHwsrAjiXH1OYgCx04gKiL4FiN PBjvSXKm67FHDo02yuL4Y5CBtHyH0obD -----END CERTIFICATE-----Generated at Fri Dec 19 22:33:36 2025 by rpki-client