This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft File: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json) Hash identifier: nNxp4IrQGVaRBB7IluD76A/abGiY2jGZ/Rd/rBhkUrw= Subject key identifier: DF:C1:FA:84:7E:64:B8:31:E1:B7:C3:E1:62:B0:4E:47:C4:2A:07:EE Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40 Certificate issuer: /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft Manifest number: 01A3 Signing time: Fri 05 Dec 2025 01:36:06 +0000 Manifest this update: Fri 05 Dec 2025 01:36:06 +0000 Manifest next update: Fri 12 Dec 2025 01:36:06 +0000 Files and hashes: 1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: 9Jmv5LGHFvLjIQvYlD02AoO4llXGhljo9tjEDNVCV1Q=) 2: 337F4584817E11F08861A82EC4F9AE02.roa (hash: KuMW19KH73/hFw8JKl9ArAOUwXbSFArQygkA6LoPJk4=) 3: 4B2AA57A817E11F09C78E12EC4F9AE02.roa (hash: REOJoaqVdrJhNGonqBJNmT+BZxMjjyhTcxLRbt3wFv8=) 4: C45AC058825811F09D83BD57C4F9AE02.roa (hash: awWR/tTohg7Dk0K+TdJ2AhHUsvle/tzHsjESu5B0y7w=) 5: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: R7rPLcu7KBIwwKHWQWTFZ/O5x8NWRmyKksg1gxkuSH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740 Validity Not Before: Dec 5 01:36:06 2025 GMT Not After : Dec 12 01:36:06 2025 GMT Subject: CN=69323706-ce7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:76:8e:b6:ff:d9:70:01:57:db:cd:fa:74:d0: 79:ab:be:d1:34:c1:d4:05:69:ef:ad:b1:7c:a9:37: 75:b6:d4:23:1d:e3:c3:b8:fd:32:61:6d:db:b7:49: b3:a0:df:ee:df:e6:75:a6:4e:e8:c6:9a:8d:f6:ad: d6:67:96:c0:3f:a9:e1:81:9f:fd:95:86:55:0b:04: 34:a6:9b:4a:52:b5:92:96:2e:76:e6:c8:39:5d:08: 3a:bc:e9:b1:c4:52:31:30:97:a0:96:28:f0:f0:6d: 7a:65:2f:9f:50:d2:a7:93:46:34:cc:7d:fd:5a:10: 73:c8:8a:79:e6:01:96:25:4e:8c:e4:a9:df:af:dd: e6:5f:f3:32:54:8f:99:55:96:62:b1:85:2f:2c:03: 9c:67:47:9b:73:cb:61:25:1a:4f:ea:d5:5f:49:18: 14:9b:f8:cd:02:2a:2f:5f:27:57:95:6e:09:03:4d: 75:f8:5e:a8:43:e4:74:bc:e2:19:c4:de:86:da:cc: 55:6f:7d:db:62:b0:93:40:46:43:6b:ed:22:c4:77: a5:ca:a2:be:f7:e9:40:7e:f4:8b:28:4e:79:6a:4e: bd:05:31:2b:44:fe:68:39:d0:b7:ed:10:7f:6e:4f: d0:ef:a5:5a:52:0e:06:c7:d9:d0:dd:71:eb:e0:8c: 63:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C1:FA:84:7E:64:B8:31:E1:B7:C3:E1:62:B0:4E:47:C4:2A:07:EE X509v3 Authority Key Identifier: keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:c2:3f:b8:c1:fb:79:92:ea:42:37:e2:fe:31:d2:d9:fa:2c: 83:9c:d5:af:65:3e:ff:30:ea:55:fc:29:fd:7f:38:68:98:d0: d7:a0:4f:8f:fe:ad:4c:04:33:d0:16:8e:14:2d:07:b0:5d:44: 2a:41:e0:5e:25:15:f7:fb:11:c7:5d:a7:89:d0:fe:e3:84:f3: 1c:a8:c3:5a:47:41:c5:9c:48:69:cb:58:0d:52:09:f2:6e:56: ba:8b:d3:60:0b:78:6d:f8:17:32:ca:e5:46:aa:41:a0:53:eb: 3c:28:e9:c1:9b:97:02:a4:ac:7e:d8:a9:50:48:38:b4:0c:0e: d1:4e:d3:32:7f:bc:78:ea:0a:10:82:ed:7a:12:37:3f:e0:82: 1f:f9:d6:8f:45:28:a1:ff:84:0e:8e:2b:a0:0b:5c:bf:85:9d: 37:a3:fd:c0:e6:f1:87:a2:34:f6:c0:3a:d6:ea:11:ac:bd:7b: 7b:d5:71:b1:cb:31:8f:8e:fc:a6:3f:ff:e0:0c:c6:dc:58:6a: f0:a7:02:7c:61:5d:dc:16:1d:22:c1:8e:83:a6:28:a6:48:9f: 90:7b:17:ab:6b:c2:12:2c:28:49:2a:e5:96:1f:51:05:b0:ad: 75:1f:60:46:f5:d6:98:96:30:12:e0:6f:ba:d4:50:6d:88:ca: 8e:3d:8c:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA3NTMxMTAvBgNVBAUTKERBRDc4Q0FDMzZEMTQzRjE3NEFCRTExMkQ0OTVFRDVB MDZFQ0E3NDAwHhcNMjUxMjA1MDEzNjA2WhcNMjUxMjEyMDEzNjA2WjAYMRYwFAYD VQQDEw02OTMyMzcwNi1jZTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXaOtv/ZcAFX2836dNB5q77RNMHUBWnvrbF8qTd1ttQjHePDuP0yYW3bt0mz oN/u3+Z1pk7oxpqN9q3WZ5bAP6nhgZ/9lYZVCwQ0pptKUrWSli525sg5XQg6vOmx xFIxMJeglijw8G16ZS+fUNKnk0Y0zH39WhBzyIp55gGWJU6M5Knfr93mX/MyVI+Z VZZisYUvLAOcZ0ebc8thJRpP6tVfSRgUm/jNAiovXydXlW4JA011+F6oQ+R0vOIZ xN6G2sxVb33bYrCTQEZDa+0ixHelyqK+9+lAfvSLKE55ak69BTErRP5oOdC37RB/ bk/Q76VaUg4Gx9nQ3XHr4Ixj1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/B+oR+ ZLgx4bfD4WKwTkfEKgfuMB8GA1UdIwQYMBaAFNrXjKw20UPxdKvhEtSV7VoG7KdA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDc1My84RUYyNEExMjVC NkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFfRjBxLUVTMUpYdFdnYnNw MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ0ZU1yRGJSUV9GMHEtRVMxSlh0V2dic3AwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDc1My84RUYyNEExMjVCNkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFf RjBxLUVTMUpYdFdnYnNwMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhwj+4wft5kupCN+L+MdLZ+iyDnNWvZT7/MOpV/Cn9fzhomNDXoE+P /q1MBDPQFo4ULQewXUQqQeBeJRX3+xHHXaeJ0P7jhPMcqMNaR0HFnEhpy1gNUgny bla6i9NgC3ht+BcyyuVGqkGgU+s8KOnBm5cCpKx+2KlQSDi0DA7RTtMyf7x46goQ gu16Ejc/4IIf+daPRSih/4QOjiugC1y/hZ03o/3A5vGHojT2wDrW6hGsvXt71XGx yzGPjvymP//gDMbcWGrwpwJ8YV3cFh0iwY6DpiimSJ+Qexera8ISLChJKuWWH1EF sK11H2BG9daYljAS4G+61FBtiMqOPYwh -----END CERTIFICATE-----Generated at Sat Dec 6 20:09:16 2025 by rpki-client