This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft File: 2K83cS1WsbaT720D40bADPPwST4.mft (raw, json) Hash identifier: qmzJaYmDKIqsn+0XUercFNVLADCi33EHWNIp9z4D6F0= Subject key identifier: FF:74:9D:CC:DC:C5:8B:F5:E9:FB:6B:D5:02:58:6B:2C:EF:3E:E8:5B Authority key identifier: D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E Certificate issuer: /CN=A91A86D0/serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E Certificate serial: 0FD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft Manifest number: 0FBF Signing time: Wed 24 Dec 2025 17:14:42 +0000 Manifest this update: Wed 24 Dec 2025 17:14:42 +0000 Manifest next update: Wed 31 Dec 2025 17:14:42 +0000 Files and hashes: 1: 2K83cS1WsbaT720D40bADPPwST4.crl (hash: 7AkMQ7u/lDRk6pS68LTD5CdGFuOS+lklkc3D019b0ng=) 2: F0F0DEC2C43411F0836DBC7DC4F9AE02.roa (hash: FlKDn7TH0xwtocs3xoGnXoyNOsEdYeMYxp8TFP51AsY=) 3: AFCF76ECC43411F0982E427DC4F9AE02.roa (hash: mNdL6rcYZPvYSFc6XWNaIrKma9w9J2a48AtG9Q5JxNY=) 4: CC99502E382F11EEAB87A63EC4F9AE02.roa (hash: /jxk5arOtk8XX4x0oqH6WonBrSttsEFSJuqdd1pQsXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4055 (0xfd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E Validity Not Before: Dec 24 17:14:42 2025 GMT Not After : Dec 31 17:14:42 2025 GMT Subject: CN=694c1f82-9cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0f:1c:de:99:4e:c0:f4:1c:86:dc:29:31:0f: 29:0f:b5:be:8f:df:84:ac:40:81:a7:0a:24:bd:51: 74:c2:90:1d:a3:0d:5b:ec:1a:9a:33:80:76:1a:a6: 2a:a4:cb:41:ed:06:fc:04:14:97:28:d6:7d:0d:b8: 00:61:53:fa:7f:f9:40:ad:ab:40:0d:48:21:29:ed: 50:c6:99:2a:36:98:59:7b:e9:12:d1:3b:33:38:b0: 86:2a:ed:3f:10:ce:bb:fc:13:c9:03:b3:03:5f:c3: d2:05:e5:0d:7b:51:22:df:c4:66:a4:15:82:03:55: 79:d9:d9:8c:5b:a9:b7:35:a2:74:12:47:d9:48:21: 65:c7:79:8e:0d:75:ee:d4:52:ae:b3:dc:02:ed:c0: 93:9d:ff:6c:5d:28:98:95:a8:2c:0e:6e:b9:f1:cb: 61:83:a2:8e:8f:f8:2f:78:d0:a9:56:58:7a:e7:88: 90:05:c4:de:3e:6f:44:5d:d6:82:92:5b:bb:56:ba: 15:a7:1f:36:6b:d9:48:28:7a:28:bb:f1:2f:54:0b: 21:df:26:e8:65:7b:a5:68:ba:e8:d8:4e:1e:69:6f: 9f:4b:18:84:bb:b1:81:05:d3:7e:7c:c2:7d:e5:41: 9b:b3:cb:9c:5c:30:34:ec:70:84:ad:d7:fa:97:13: 66:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:74:9D:CC:DC:C5:8B:F5:E9:FB:6B:D5:02:58:6B:2C:EF:3E:E8:5B X509v3 Authority Key Identifier: keyid:D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:fd:ee:4a:ed:93:99:12:01:9a:10:a2:fd:8c:b4:ca:5d:63: d7:bd:e1:f1:da:d0:64:92:58:6a:34:a2:bb:ad:94:1c:9b:6c: 1d:10:2d:1b:40:52:9e:00:ee:34:54:23:a7:a7:2b:a3:f4:9b: 14:ea:59:76:d0:69:68:f4:55:50:25:a1:14:59:a0:3d:82:44: 89:26:ac:d6:dc:1d:46:53:7b:96:b5:98:0a:61:45:e0:f1:39: 45:62:a8:6d:06:75:4f:7d:a6:63:4e:91:c3:1b:b9:ca:c3:ab: fa:f0:4b:ff:da:1e:97:e3:6d:47:e0:4c:7d:71:b8:a4:ff:1e: 08:d1:d2:1f:6b:1c:6d:c0:28:62:6c:ba:81:49:89:33:13:91: 33:4f:13:0d:30:94:43:2c:0f:be:97:69:05:11:7b:38:c9:bb: d3:cd:36:56:58:95:66:91:9b:e4:41:0a:1d:54:c3:06:16:78: 4c:47:bc:0e:51:96:29:8a:2a:b9:dd:96:ce:5f:3d:d6:74:60: 6f:18:80:9f:73:2b:b1:2a:e5:cc:2b:0e:8a:24:60:a1:ad:03: 9d:b7:2f:10:d1:de:0b:06:83:7f:38:b7:5f:0f:4d:24:8c:41: cf:ec:26:77:29:83:04:05:09:2b:30:ec:a3:b1:46:b7:06:d8: 91:22:8b:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKEQ4QUYzNzcxMkQ1NkIxQjY5M0VGNkQwM0UzNDZDMDBD RjNGMDQ5M0UwHhcNMjUxMjI0MTcxNDQyWhcNMjUxMjMxMTcxNDQyWjAYMRYwFAYD VQQDDA02OTRjMWY4Mi05Y2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyA8c3plOwPQchtwpMQ8pD7W+j9+ErECBpwokvVF0wpAdow1b7BqaM4B2GqYq pMtB7Qb8BBSXKNZ9DbgAYVP6f/lAratADUghKe1QxpkqNphZe+kS0TszOLCGKu0/ EM67/BPJA7MDX8PSBeUNe1Ei38RmpBWCA1V52dmMW6m3NaJ0EkfZSCFlx3mODXXu 1FKus9wC7cCTnf9sXSiYlagsDm658cthg6KOj/gveNCpVlh654iQBcTePm9EXdaC klu7VroVpx82a9lIKHoou/EvVAsh3yboZXulaLro2E4eaW+fSxiEu7GBBdN+fMJ9 5UGbs8ucXDA07HCErdf6lxNmzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP90nczc xYv16ftr1QJYayzvPuhbMB8GA1UdIwQYMBaAFNivN3EtVrG2k+9tA+NGwAzz8Ek+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC9GQTc4QjA0NDZG Q0UxMUU5ODhDNDRCM0VDNEY5QUUwMi8ySzgzY1MxV3NiYVQ3MjBENDBiQURQUHdT VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLODNjUzFXc2JhVDcyMEQ0MGJBRFBQd1NUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC9GQTc4QjA0NDZGQ0UxMUU5ODhDNDRCM0VDNEY5QUUwMi8ySzgzY1MxV3Ni YVQ3MjBENDBiQURQUHdTVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy/e5K7ZOZEgGaEKL9jLTKXWPXveHx2tBkklhqNKK7rZQcm2wdEC0b QFKeAO40VCOnpyuj9JsU6ll20Glo9FVQJaEUWaA9gkSJJqzW3B1GU3uWtZgKYUXg 8TlFYqhtBnVPfaZjTpHDG7nKw6v68Ev/2h6X421H4Ex9cbik/x4I0dIfaxxtwChi bLqBSYkzE5EzTxMNMJRDLA++l2kFEXs4ybvTzTZWWJVmkZvkQQodVMMGFnhMR7wO UZYpiiq53ZbOXz3WdGBvGICfcyuxKuXMKw6KJGChrQOdty8Q0d4LBoN/OLdfD00k jEHP7CZ3KYMEBQkrMOyjsUa3BtiRIotQ -----END CERTIFICATE-----Generated at Thu Dec 25 06:20:16 2025 by rpki-client