This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft File: _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json) Hash identifier: lVB25Snju2O2SrXDQY3tIoEgPB+OCG0cpYSBbnK3+0I= Subject key identifier: 87:BC:AC:BE:AC:7F:A7:8A:DB:46:A3:FE:3E:05:DC:76:AE:5F:52:5F Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 06B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft Manifest number: 0680 Signing time: Wed 10 Dec 2025 21:26:48 +0000 Manifest this update: Wed 10 Dec 2025 21:26:47 +0000 Manifest next update: Wed 17 Dec 2025 21:26:47 +0000 Files and hashes: 1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: 53ArqDqwCxF5om+GfVNAr33oUIQUJx38fCQokEQjKpA=) 2: 845606CEC0A211F08C07402EC4F9AE02.roa (hash: 60O5q/M3Zhbupf4irny02ti/wPSXEWKTgiVbupEbwmY=) 3: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: CKUqvOaMRoHUuvk0O3ZRuqOU8HxzjagSOpCtfnM7DSk=) 4: A19BECB47DC011F0907B9458C4F9AE02.roa (hash: PV6jY777/SNCb3xfvV4u3m3ixy1j9fHX09H2Nm4Vk4s=) 5: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: lXdiATosqgnGw9iwMqgeyMFFlsqTM6dHLhkV++SdnXI=) 6: 617AEF02C0A211F0834F0B2EC4F9AE02.roa (hash: e2cBgK3GRmfDjSm1Qqg4IoisAWAPLTjuVCxKZ4c2zQ4=) 7: 1F642722FE4811EF9909DE6BC4F9AE02.roa (hash: 50SJ1VD5Mg9u7/s+ykx+b/EGgkeu1R+I/i5QtPiDi1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 21:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1714 (0x6b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: Dec 10 21:26:47 2025 GMT Not After : Dec 17 21:26:47 2025 GMT Subject: CN=6939e597-62a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1a:43:e2:34:7c:c8:0c:0c:0c:34:2c:6f:61: a0:2a:e4:c4:e4:90:25:d2:11:26:1b:bb:3d:8a:ba: 66:1e:89:88:bc:0e:57:9b:37:aa:35:8b:64:6d:42: 42:6b:f8:42:cf:b6:c6:65:ec:1f:e3:7c:53:b9:c2: 00:5c:ba:ac:f6:cc:bb:27:54:c8:5e:fe:bc:4e:c9: 20:d2:5a:ce:4d:47:96:2c:d8:30:ef:f1:f5:90:f0: 90:8e:0f:e3:02:a0:91:e6:5e:93:8b:95:f7:40:ad: 35:f2:a8:50:45:e8:9e:6a:4d:03:4e:80:08:fb:a3: 3d:25:da:58:c1:59:21:eb:60:45:78:6d:e7:e8:d7: ba:3e:82:27:c3:5e:55:f8:1f:2e:1c:53:df:99:cb: d5:64:d2:5a:3e:18:2e:02:b7:66:e0:7d:44:1b:14: 90:60:3d:4a:1b:4b:c3:ee:f2:d2:58:54:69:88:9e: 2e:c6:38:b9:09:a6:84:75:86:a8:da:9a:5c:2b:a2: 1a:bf:0a:a1:2d:48:19:17:7e:20:90:a8:4b:09:88: 2a:d9:95:b4:13:f4:16:9f:66:91:bf:11:45:a8:46: 88:cf:ea:8e:20:7a:cd:66:44:aa:02:df:dc:47:e5: b0:3e:5a:3a:d4:77:a4:b3:81:2b:60:e4:d4:b5:83: 8d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BC:AC:BE:AC:7F:A7:8A:DB:46:A3:FE:3E:05:DC:76:AE:5F:52:5F X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:58:70:92:c7:15:49:ba:02:20:02:34:7a:ec:d7:ce:ef:da: fb:bf:c1:d9:27:e6:31:e1:3f:9d:a8:3f:35:22:e0:05:44:c0: 7a:44:6d:84:b0:22:0b:39:c1:ef:0b:17:0a:6b:64:34:5c:0d: 48:d1:b3:19:c6:db:98:8f:62:98:fa:58:00:6e:09:78:0a:9e: 76:07:3c:07:8d:ea:ac:e7:4f:6c:05:fa:a7:5d:8e:88:2f:f2: f0:e3:76:7d:bc:e3:8a:31:c3:eb:c7:c2:1e:de:ce:a1:41:ce: 7e:98:3d:b5:0b:dc:94:c6:ae:20:da:1f:c5:71:64:fe:d6:f8: 37:ad:c7:4a:46:49:43:da:27:76:29:56:5a:96:00:0c:e5:d6: 53:39:7b:f8:89:6e:eb:36:02:3c:24:4f:84:37:5b:29:46:4a: 24:a8:83:ee:57:64:f9:72:89:d5:f5:28:6f:eb:bf:ae:c1:45: 3f:4d:f6:b5:2c:d9:b1:92:6c:ab:36:1e:2c:6f:73:81:17:97: a0:b3:60:8d:58:d6:d4:c5:45:fa:d6:7a:88:31:1d:39:f1:23: 2b:eb:6e:27:8e:13:37:7d:f5:8d:b4:bb:73:c1:13:c0:bf:55: e3:08:c6:a1:dc:b7:ed:99:57:6e:35:4a:7a:f1:7a:2d:dd:a1: 20:4b:4e:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjUxMjEwMjEyNjQ3WhcNMjUxMjE3MjEyNjQ3WjAYMRYwFAYD VQQDEw02OTM5ZTU5Ny02MmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxpD4jR8yAwMDDQsb2GgKuTE5JAl0hEmG7s9irpmHomIvA5XmzeqNYtkbUJC a/hCz7bGZewf43xTucIAXLqs9sy7J1TIXv68Tskg0lrOTUeWLNgw7/H1kPCQjg/j AqCR5l6Ti5X3QK018qhQReieak0DToAI+6M9JdpYwVkh62BFeG3n6Ne6PoInw15V +B8uHFPfmcvVZNJaPhguArdm4H1EGxSQYD1KG0vD7vLSWFRpiJ4uxji5CaaEdYao 2ppcK6IavwqhLUgZF34gkKhLCYgq2ZW0E/QWn2aRvxFFqEaIz+qOIHrNZkSqAt/c R+WwPlo61Heks4ErYOTUtYON5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIe8rL6s f6eK20aj/j4F3HauX1JfMB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDZCMC8zMkU5ODczQ0JGQzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpM TkIyY3Q3YkFaWnZfcXN5Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcWHCSxxVJugIgAjR67NfO79r7v8HZJ+Yx4T+dqD81IuAFRMB6RG2E sCILOcHvCxcKa2Q0XA1I0bMZxtuYj2KY+lgAbgl4Cp52BzwHjeqs509sBfqnXY6I L/Lw43Z9vOOKMcPrx8Ie3s6hQc5+mD21C9yUxq4g2h/FcWT+1vg3rcdKRklD2id2 KVZalgAM5dZTOXv4iW7rNgI8JE+EN1spRkokqIPuV2T5conV9Shv67+uwUU/Tfa1 LNmxkmyrNh4sb3OBF5egs2CNWNbUxUX61nqIMR058SMr624njhM3ffWNtLtzwRPA v1XjCMah3LftmVduNUp68Xot3aEgS06v -----END CERTIFICATE-----Generated at Thu Dec 11 05:16:53 2025 by rpki-client