This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft File: tB02AK8mCZMOgvCWAMevmPLdbJ8.mft (raw, json) Hash identifier: 6Y1/whQmiljhZLmkyNn5vGH02RfGg0dXDN/lp3W5CRo= Subject key identifier: D8:4F:E7:8E:2D:6E:C3:C2:2B:25:20:CF:CD:73:63:EB:8C:BA:48:6E Authority key identifier: B4:1D:36:00:AF:26:09:93:0E:82:F0:96:00:C7:AF:98:F2:DD:6C:9F Certificate issuer: /CN=A9193F42/serialNumber=B41D3600AF2609930E82F09600C7AF98F2DD6C9F Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft Manifest number: 2B Signing time: Tue 23 Dec 2025 06:30:17 +0000 Manifest this update: Tue 23 Dec 2025 06:30:17 +0000 Manifest next update: Tue 30 Dec 2025 06:30:17 +0000 Files and hashes: 1: tB02AK8mCZMOgvCWAMevmPLdbJ8.crl (hash: MamP+a7D1DI/z2UDjKkK5f/nLlxuCvBdHHOqZBVjKFY=) 2: E8D991EAA2B311F09C429E36C4F9AE02.roa (hash: Hrz6E8zGVE7+V0nQ5qUnfosiDutsahGCdlw2tJNUEv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.crl rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F42, serialNumber=B41D3600AF2609930E82F09600C7AF98F2DD6C9F Validity Not Before: Dec 23 06:30:17 2025 GMT Not After : Dec 30 06:30:17 2025 GMT Subject: CN=694a36f9-a41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3d:29:d9:6b:30:8c:42:00:de:ba:2f:81:32: f1:33:92:90:02:be:dc:9c:6f:39:d0:6d:3c:c0:60: b6:88:aa:a9:1e:65:7f:10:db:08:1b:3f:c5:15:8e: 86:20:6f:6c:71:7e:18:ea:a1:78:69:46:90:ee:b6: 01:af:b1:c0:7b:32:1c:2d:71:65:85:4c:6c:75:1a: b9:64:1a:f8:fc:87:72:0c:cd:3e:a2:c7:57:5f:41: 26:b4:41:23:bb:a8:f3:a3:e5:11:a7:24:4d:a2:9c: 42:53:98:de:e9:9a:8a:f3:d0:b5:fe:b3:8e:df:f4: b9:3f:31:82:91:56:77:2d:4d:a4:c1:1d:56:22:52: 99:d1:d7:fb:fc:57:40:1f:df:23:2b:b0:14:0a:31: ea:71:40:d7:6b:ae:2e:3c:28:0a:8a:ea:db:5a:34: 2e:2e:99:2a:fb:6d:fc:8c:ae:7b:6c:3f:58:48:bb: 68:2e:3e:4d:dd:ad:be:b7:79:5d:ac:52:7f:e1:94: 08:0d:ea:a4:a0:04:20:c8:16:a2:ab:d5:3a:06:5f: ee:c4:0a:48:5c:2a:ce:af:81:88:bb:e7:54:e0:a2: 65:3f:03:91:82:a4:90:fd:4f:9b:58:c2:c2:fa:c1: d2:8b:6e:e7:11:d9:fd:cb:51:df:b8:0f:cb:5a:7f: 8c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4F:E7:8E:2D:6E:C3:C2:2B:25:20:CF:CD:73:63:EB:8C:BA:48:6E X509v3 Authority Key Identifier: keyid:B4:1D:36:00:AF:26:09:93:0E:82:F0:96:00:C7:AF:98:F2:DD:6C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:be:95:0c:9f:44:23:6f:49:fe:a4:1d:78:a9:04:56:c6:61: 64:cd:a1:8e:49:35:ba:2a:42:a2:95:61:0d:8d:ec:c1:05:69: 11:39:ff:8f:e1:7b:d9:e6:b7:85:a3:b5:76:12:b0:b3:f5:a0: 79:ff:fc:c1:73:80:66:44:4e:b8:c7:83:c4:da:d9:44:c1:fb: b3:b4:02:33:9c:70:99:ab:16:3d:75:ac:e0:73:d9:f1:32:eb: 5b:76:17:80:c7:52:72:51:ed:36:24:0b:df:8b:73:b6:60:f8: e8:5c:25:e9:bd:74:04:a1:a1:fc:4b:e1:0c:20:b4:26:4a:62: e0:91:f9:5a:58:08:25:4e:fa:c1:9e:00:55:a8:e7:4e:cb:d7: 35:9f:72:fd:aa:48:ec:a7:4d:3e:f7:18:54:36:d3:70:21:d8: d8:ba:fa:55:3c:5f:4c:9a:e3:8f:62:85:6b:e1:b6:b8:6c:1f: 0b:0d:ef:9c:9f:a8:aa:df:a8:9d:9a:5a:76:b5:e6:df:19:d9: 49:1f:05:80:58:35:a5:89:c5:ba:30:34:bd:1f:23:11:b2:f7: 1d:9f:5f:65:48:0a:cc:1e:74:3d:10:30:8d:af:30:a1:c9:de: 6e:05:16:d8:91:05:3a:c5:13:2c:d0:a6:ad:ce:b9:94:e9:46: 48:c5:83:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0Y0MjExMC8GA1UEBRMoQjQxRDM2MDBBRjI2MDk5MzBFODJGMDk2MDBDN0FGOThG MkRENkM5RjAeFw0yNTEyMjMwNjMwMTdaFw0yNTEyMzAwNjMwMTdaMBgxFjAUBgNV BAMMDTY5NGEzNmY5LWE0MWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8PSnZazCMQgDeui+BMvEzkpACvtycbznQbTzAYLaIqqkeZX8Q2wgbP8UVjoYg b2xxfhjqoXhpRpDutgGvscB7MhwtcWWFTGx1GrlkGvj8h3IMzT6ix1dfQSa0QSO7 qPOj5RGnJE2inEJTmN7pmorz0LX+s47f9Lk/MYKRVnctTaTBHVYiUpnR1/v8V0Af 3yMrsBQKMepxQNdrri48KAqK6ttaNC4umSr7bfyMrntsP1hIu2guPk3drb63eV2s Un/hlAgN6qSgBCDIFqKr1ToGX+7ECkhcKs6vgYi751TgomU/A5GCpJD9T5tYwsL6 wdKLbucR2f3LUd+4D8taf4w9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2E/nji1u w8IrJSDPzXNj64y6SG4wHwYDVR0jBBgwFoAUtB02AK8mCZMOgvCWAMevmPLdbJ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzRjQyLzgwMEVEOUNDQTJC MzExRjA5NDY2RTIzNUM0RjlBRTAyL3RCMDJBSzhtQ1pNT2d2Q1dBTWV2bVBMZGJK OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdEIwMkFLOG1DWk1PZ3ZDV0FNZXZtUExkYko4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz RjQyLzgwMEVEOUNDQTJCMzExRjA5NDY2RTIzNUM0RjlBRTAyL3RCMDJBSzhtQ1pN T2d2Q1dBTWV2bVBMZGJKOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMO+lQyfRCNvSf6kHXipBFbGYWTNoY5JNboqQqKVYQ2N7MEFaRE5/4/h e9nmt4WjtXYSsLP1oHn//MFzgGZETrjHg8Ta2UTB+7O0AjOccJmrFj11rOBz2fEy 61t2F4DHUnJR7TYkC9+Lc7Zg+OhcJem9dAShofxL4QwgtCZKYuCR+VpYCCVO+sGe AFWo507L1zWfcv2qSOynTT73GFQ203Ah2Ni6+lU8X0ya449ihWvhtrhsHwsN75yf qKrfqJ2aWna15t8Z2UkfBYBYNaWJxbowNL0fIxGy9x2fX2VICswedD0QMI2vMKHJ 3m4FFtiRBTrFEyzQpq3OuZTpRkjFg3w= -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:25 2025 by rpki-client