This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft File: 2TIL_awMkLNCikT8fcoOL3kJd0E.mft (raw, json) Hash identifier: tZiw4VBMzBjlEuL19mhn/2egOVxw3qZ+udc7LynVOWM= Subject key identifier: CB:7A:E6:AC:BB:5E:C6:61:56:45:B2:3F:A6:3B:16:B9:83:F0:61:28 Authority key identifier: D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 Certificate issuer: /CN=A9197ADE/serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft Manifest number: 94 Signing time: Tue 23 Dec 2025 05:24:58 +0000 Manifest this update: Tue 23 Dec 2025 05:24:58 +0000 Manifest next update: Tue 30 Dec 2025 05:24:58 +0000 Files and hashes: 1: 2TIL_awMkLNCikT8fcoOL3kJd0E.crl (hash: Pc/kctgBdgNe5zTLWnDFxRAY3nNEwc8hkSCfbupaYZo=) 2: E0CFA54EFE4D11EF8274971BC4F9AE02.roa (hash: xErSiwEVGbEN6QlFmGLkFVWsdMEkeNM0TxyRejXCRHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197ADE, serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Validity Not Before: Dec 23 05:24:58 2025 GMT Not After : Dec 30 05:24:58 2025 GMT Subject: CN=694a27aa-4511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:02:76:c5:4c:10:1e:88:62:ba:99:f9:50:2d: c0:1a:ab:dc:59:b8:f2:98:bc:5b:fd:87:e0:12:97: cc:ec:4a:32:34:b0:9a:6f:3d:ff:f3:29:e0:4e:1a: 14:98:20:e9:7b:b5:2d:c2:6f:ce:7a:d2:6a:57:c4: 9a:2f:2e:0a:bd:ba:30:80:14:18:66:88:ec:3e:b3: 72:29:4e:8a:0d:b3:fa:2e:e4:d7:4d:d8:42:4f:79: cb:75:e9:0a:f8:21:29:da:ad:39:b5:e2:87:55:df: de:83:70:eb:15:79:b1:2f:46:7f:5c:6f:e5:bd:0c: 47:23:a8:5e:3e:88:bc:cd:58:d9:44:fa:5e:c1:6d: 83:ff:aa:04:e5:17:bb:d3:10:68:1c:30:e8:d1:59: 37:ac:bf:1c:f0:53:07:b2:28:14:48:9b:1b:7c:61: 4b:36:94:3a:b0:02:f5:a0:41:4f:93:41:af:a5:65: 80:f9:07:1e:7b:5f:79:1f:95:f1:6e:88:0a:73:35: 4d:2a:ec:d4:be:fd:14:ea:bf:da:54:2a:8b:70:98: f7:e4:09:e5:80:83:cd:7e:6a:bd:ab:cf:00:91:cc: bb:59:93:ca:ca:d3:1f:11:7d:b2:ee:ce:a0:23:2a: 14:63:18:03:d6:6c:01:c7:5f:cf:59:86:92:e7:a3: 07:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7A:E6:AC:BB:5E:C6:61:56:45:B2:3F:A6:3B:16:B9:83:F0:61:28 X509v3 Authority Key Identifier: keyid:D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:99:30:37:e1:b5:e4:36:15:8e:2c:c9:01:93:b7:60:4c:c4: 26:73:5f:c8:2c:70:03:dd:aa:70:8a:bc:cc:36:8b:0a:42:e0: 7a:99:28:da:f0:4a:54:c4:b7:0f:47:3a:ad:36:70:74:d3:74: 3c:d7:26:cf:a0:9c:2e:cb:37:ed:df:c2:c5:14:d2:48:b9:2f: da:17:83:63:1f:c3:52:f7:05:ee:b4:0c:7d:9e:1b:30:64:ed: c2:3d:03:13:2e:83:33:10:09:d6:6a:a8:69:27:5f:b8:8e:31: c1:03:22:35:65:38:e2:61:9d:aa:d7:b8:e0:b6:19:c1:23:7a: 5e:c1:ba:76:57:c8:b2:a7:f4:a9:60:53:1a:33:86:56:fd:17: 5b:13:38:e8:a7:06:12:12:33:c1:e4:ef:88:76:bf:fa:c9:95: 72:23:6a:02:36:52:81:14:ad:94:c3:9b:87:f6:8a:33:99:e9: f5:5a:88:55:3c:cd:fc:17:ce:cd:9b:da:ac:b1:58:88:9e:e9: db:86:32:5a:c1:a2:27:81:b1:dd:5d:05:22:fc:2c:82:b7:f0: ac:32:ff:99:00:ca:fa:5e:32:fc:1a:1a:41:1e:0b:14:1c:f3: 22:d7:29:a0:20:d3:02:df:a3:ad:84:66:59:93:1a:f1:2b:92: ad:f1:ce:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdBREUxMTAvBgNVBAUTKEQ5MzIwQkZEQUMwQzkwQjM0MjhBNDRGQzdEQ0EwRTJG NzkwOTc3NDEwHhcNMjUxMjIzMDUyNDU4WhcNMjUxMjMwMDUyNDU4WjAYMRYwFAYD VQQDDA02OTRhMjdhYS00NTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhQJ2xUwQHohiupn5UC3AGqvcWbjymLxb/YfgEpfM7EoyNLCabz3/8yngThoU mCDpe7Utwm/OetJqV8SaLy4KvbowgBQYZojsPrNyKU6KDbP6LuTXTdhCT3nLdekK +CEp2q05teKHVd/eg3DrFXmxL0Z/XG/lvQxHI6hePoi8zVjZRPpewW2D/6oE5Re7 0xBoHDDo0Vk3rL8c8FMHsigUSJsbfGFLNpQ6sAL1oEFPk0GvpWWA+Qcee195H5Xx bogKczVNKuzUvv0U6r/aVCqLcJj35AnlgIPNfmq9q88Akcy7WZPKytMfEX2y7s6g IyoUYxgD1mwBx1/PWYaS56MHHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMt65qy7 XsZhVkWyP6Y7FrmD8GEoMB8GA1UdIwQYMBaAFNkyC/2sDJCzQopE/H3KDi95CXdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0FERS84OUE0OTNFMkZF NEQxMUVGQTFBRkZDMUFDNEY5QUUwMi8yVElMX2F3TWtMTkNpa1Q4ZmNvT0wza0pk MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJUSUxfYXdNa0xOQ2lrVDhmY29PTDNrSmQwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0FERS84OUE0OTNFMkZFNEQxMUVGQTFBRkZDMUFDNEY5QUUwMi8yVElMX2F3TWtM TkNpa1Q4ZmNvT0wza0pkMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0mTA34bXkNhWOLMkBk7dgTMQmc1/ILHAD3apwirzMNosKQuB6mSja 8EpUxLcPRzqtNnB003Q81ybPoJwuyzft38LFFNJIuS/aF4NjH8NS9wXutAx9nhsw ZO3CPQMTLoMzEAnWaqhpJ1+4jjHBAyI1ZTjiYZ2q17jgthnBI3pewbp2V8iyp/Sp YFMaM4ZW/RdbEzjopwYSEjPB5O+Idr/6yZVyI2oCNlKBFK2Uw5uH9oozmen1WohV PM38F87Nm9qssViInunbhjJawaIngbHdXQUi/CyCt/CsMv+ZAMr6XjL8GhpBHgsU HPMi1ymgINMC36OthGZZkxrxK5Kt8c6+ -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:43 2025 by rpki-client