This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft File: T2c1YxYAI2yAWYoeMyE7vWgezlc.mft (raw, json) Hash identifier: xIKwPx67x9XCERhz57pa+lEgQM986RFEeNr6BjxeDDM= Subject key identifier: 38:17:BC:1E:E1:14:10:0E:97:AE:61:AE:36:77:E1:FA:38:56:A7:F7 Authority key identifier: 4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 Certificate issuer: /CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft Manifest number: 0198 Signing time: Tue 23 Dec 2025 02:25:45 +0000 Manifest this update: Tue 23 Dec 2025 02:25:45 +0000 Manifest next update: Tue 30 Dec 2025 02:25:45 +0000 Files and hashes: 1: T2c1YxYAI2yAWYoeMyE7vWgezlc.crl (hash: kypVb+pi6N7PRMaRiNP7pWc52MNV+YC6/WjFsBlVzrc=) 2: 32357EA676C611EEA45B7909C4F9AE02.roa (hash: 7rc08NoUx6luLOLc4SLZl6pXq3BAAEvf8G5/Y6oZSx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBD, serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Validity Not Before: Dec 23 02:25:45 2025 GMT Not After : Dec 30 02:25:45 2025 GMT Subject: CN=6949fda9-d67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9f:1a:f8:e5:51:2e:51:47:10:8c:93:c6:0d: cc:4d:37:27:40:a4:c9:37:45:aa:3a:23:4b:71:82: d4:54:d0:89:ed:ce:38:3c:1e:a2:0e:74:82:7d:29: a6:e8:a8:04:78:07:58:26:9c:b4:6a:6e:ab:78:f8: 87:dd:22:df:82:19:82:56:ad:52:cf:20:1f:a6:66: fe:75:25:4a:b0:47:0d:d4:23:5a:55:fa:8c:9e:06: 69:e0:bd:57:9d:cc:26:ee:0e:22:e7:d9:35:06:57: 2c:e5:00:e5:aa:7c:7a:ce:60:00:3c:44:4c:0b:13: 8c:28:3f:ab:12:be:6f:d9:c7:12:0b:4f:45:69:91: 2f:9a:bf:5d:43:e0:ac:a7:c0:31:c0:d6:9a:c0:3c: 1f:b4:87:01:13:a7:f8:73:03:ce:a4:28:13:00:53: 58:0b:51:c7:3e:3f:e1:4d:01:1b:32:45:9d:d3:2f: 57:e6:25:6b:95:2b:db:5b:cc:eb:6f:c3:37:55:e3: d4:44:76:2f:90:23:39:41:d0:e7:04:dd:d4:83:11: 63:73:eb:26:22:76:03:52:6e:20:f7:fe:97:89:63: b0:33:2a:bf:58:e1:f0:5b:e9:83:d5:49:d8:f6:f5: 66:6d:1e:c4:2a:71:16:4a:d5:3e:53:f3:54:1f:95: 76:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:17:BC:1E:E1:14:10:0E:97:AE:61:AE:36:77:E1:FA:38:56:A7:F7 X509v3 Authority Key Identifier: keyid:4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:bd:9c:75:2a:47:00:4a:a0:a1:ec:b3:2c:a1:32:98:03:6c: ae:7c:b5:f5:fd:6c:03:68:35:e6:63:fb:0d:58:2e:46:a6:ea: 83:67:b9:53:67:02:31:47:5c:da:14:6b:be:d1:ed:b4:b7:a2: cd:bc:53:8a:2a:3f:aa:02:11:d7:05:f9:a8:93:48:e5:ee:4b: f1:77:ec:0f:0f:e5:10:d6:a0:6a:cd:ad:e8:c4:ff:83:5b:13: ad:1a:97:8e:71:42:06:9d:d3:aa:e5:ae:e1:72:81:d7:e7:a9: d9:ee:87:ed:a1:d9:ce:c3:5d:ed:8a:89:fc:e2:ce:6c:fd:35: c0:1b:7c:e5:c4:e4:0a:e5:61:bf:7e:cf:2e:fe:a1:19:f0:5b: e9:54:ba:c5:25:e1:73:f3:ed:12:36:65:91:8c:fd:f4:68:e2: f6:27:8d:3a:94:70:cc:6d:72:16:c0:35:e7:3f:2c:7a:9e:51: d9:92:bd:c1:76:d0:3b:b1:b6:43:9e:7f:34:8a:bc:78:51:d4: bf:2b:64:02:66:a2:0d:95:be:1a:5a:bb:63:76:a3:c9:9c:8c: a6:d7:dd:0b:de:c6:36:07:d0:b2:93:51:55:30:36:56:c3:c0: e9:ee:30:6d:9a:cf:1f:8b:97:62:4b:46:ca:8b:be:fa:0e:99: 02:08:d6:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDQkQxMTAvBgNVBAUTKDRGNjczNTYzMTYwMDIzNkM4MDU5OEExRTMzMjEzQkJE NjgxRUNFNTcwHhcNMjUxMjIzMDIyNTQ1WhcNMjUxMjMwMDIyNTQ1WjAYMRYwFAYD VQQDDA02OTQ5ZmRhOS1kNjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJ8a+OVRLlFHEIyTxg3MTTcnQKTJN0WqOiNLcYLUVNCJ7c44PB6iDnSCfSmm 6KgEeAdYJpy0am6rePiH3SLfghmCVq1SzyAfpmb+dSVKsEcN1CNaVfqMngZp4L1X ncwm7g4i59k1Blcs5QDlqnx6zmAAPERMCxOMKD+rEr5v2ccSC09FaZEvmr9dQ+Cs p8AxwNaawDwftIcBE6f4cwPOpCgTAFNYC1HHPj/hTQEbMkWd0y9X5iVrlSvbW8zr b8M3VePURHYvkCM5QdDnBN3UgxFjc+smInYDUm4g9/6XiWOwMyq/WOHwW+mD1UnY 9vVmbR7EKnEWStU+U/NUH5V2cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgXvB7h FBAOl65hrjZ34fo4Vqf3MB8GA1UdIwQYMBaAFE9nNWMWACNsgFmKHjMhO71oHs5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRC81ODBCRTNBRTZF MjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUkyeUFXWW9lTXlFN3ZXZ2V6 bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QyYzFZeFlBSTJ5QVdZb2VNeUU3dldnZXpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NENCRC81ODBCRTNBRTZFMjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUky eUFXWW9lTXlFN3ZXZ2V6bGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlvZx1KkcASqCh7LMsoTKYA2yufLX1/WwDaDXmY/sNWC5GpuqDZ7lT ZwIxR1zaFGu+0e20t6LNvFOKKj+qAhHXBfmok0jl7kvxd+wPD+UQ1qBqza3oxP+D WxOtGpeOcUIGndOq5a7hcoHX56nZ7oftodnOw13tion84s5s/TXAG3zlxOQK5WG/ fs8u/qEZ8FvpVLrFJeFz8+0SNmWRjP30aOL2J406lHDMbXIWwDXnPyx6nlHZkr3B dtA7sbZDnn80irx4UdS/K2QCZqINlb4aWrtjdqPJnIym190L3sY2B9Cyk1FVMDZW w8Dp7jBtms8fi5diS0bKi776DpkCCNYC -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:16 2025 by rpki-client