This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft File: 2spjaZboGaoflR3Gb_Ka0JecBcg.mft (raw, json) Hash identifier: 7OqTXpJiWXV+CCTtPhQCrT+dgq6vn8pC0y5IWbEiDhk= Subject key identifier: CD:9C:CF:79:7C:50:6F:E2:43:87:97:AE:5A:EC:5F:E1:E8:C6:32:5C Authority key identifier: DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 Certificate issuer: /CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Certificate serial: 0C96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft Manifest number: 0C81 Signing time: Mon 22 Dec 2025 18:07:44 +0000 Manifest this update: Mon 22 Dec 2025 18:07:43 +0000 Manifest next update: Mon 29 Dec 2025 18:07:43 +0000 Files and hashes: 1: 2spjaZboGaoflR3Gb_Ka0JecBcg.crl (hash: 9/VwIMNVXitMLdgflWPoJ7BYYT2tTqwKcVQdzui7JMA=) 2: 15FB452EE46E11EABA2FD316C4F9AE02.roa (hash: Dj1n5Ws5ZOwUHxV0iXhdVuXnGHZDTpjS0z8ntITqHGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3222 (0xc96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E0E, serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Validity Not Before: Dec 22 18:07:43 2025 GMT Not After : Dec 29 18:07:43 2025 GMT Subject: CN=694988ef-5ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b0:58:cf:ce:8b:5c:60:04:1b:41:1f:7b:66: f9:6c:ad:b9:1c:d7:07:3e:ff:7c:09:e6:d6:7b:1b: 99:1c:9d:3c:7e:9c:02:6c:2c:10:3b:f6:c9:55:bd: d8:55:fd:a3:bc:c1:51:36:c7:cc:f1:c1:65:dc:28: ac:2e:ec:f1:f9:30:c4:2d:5d:1d:55:57:64:13:e6: 7e:8e:4c:48:7f:fd:5f:a3:94:bd:da:ba:cb:2f:b8: 24:85:3c:66:03:9a:69:90:ea:8c:29:7a:f2:8c:7d: 36:d8:c3:79:33:5f:88:f3:11:dc:b4:24:0f:55:87: 27:35:c7:29:3a:25:fc:5d:65:b9:11:46:6b:0a:9e: 30:e4:d8:fa:f5:2d:26:92:9b:02:49:57:7d:e2:d8: 09:e7:e2:81:82:2b:de:41:c3:ab:1e:c0:8b:cd:65: 81:52:7f:97:e9:51:98:64:6f:fb:49:d6:95:80:00: 84:a3:83:64:ab:b5:0f:ea:26:bb:7a:5d:de:6c:29: e2:1a:b5:30:25:0b:f2:c8:d3:93:f8:c2:fb:8e:03: 18:78:b0:d2:55:92:46:52:ff:69:3b:6f:33:42:9d: 59:6e:1e:dd:8d:be:af:81:4c:ca:95:67:df:8a:ed: 6b:c1:e6:b7:29:b7:12:23:6e:0f:1f:e2:93:a5:6c: ee:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9C:CF:79:7C:50:6F:E2:43:87:97:AE:5A:EC:5F:E1:E8:C6:32:5C X509v3 Authority Key Identifier: keyid:DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:d3:b7:16:92:03:b3:72:10:52:66:20:f2:2b:25:77:3c:c1: 96:b1:29:b9:f2:b9:e5:4b:e9:5c:b9:3d:cb:bc:ae:6f:a9:f8: 56:79:de:5e:16:53:e6:c3:ae:65:f3:8d:88:96:bf:1a:ca:2a: ec:27:36:3a:7e:0e:66:65:0f:ec:fa:3f:28:74:73:71:0e:e1: b5:31:1a:3b:89:69:04:03:2e:71:06:fe:ef:b8:b9:75:6f:f0: 3e:d8:be:3d:b2:fd:8b:c9:df:e7:df:ac:61:d6:31:67:8b:fb: 20:66:ea:b1:79:06:58:b5:68:06:ca:34:9d:0a:39:c8:ec:32: fe:24:8f:1b:95:c6:57:e4:83:14:e5:6a:cf:75:4c:53:8b:79: 0c:fb:9a:72:40:51:27:f5:8d:4d:fa:6c:c4:3c:0c:2d:c9:5e: cb:58:26:73:a0:0b:5e:23:09:a4:42:7c:c4:5b:99:91:5c:4a: cc:4e:37:d9:b6:24:f7:01:a0:29:c0:34:2b:fc:6a:8f:60:6a: ce:55:32:c3:0f:fd:a0:96:96:c7:bb:ed:b2:88:fa:ce:ad:a2: 91:4b:9a:f1:b5:03:ca:53:c9:b0:35:d7:1f:be:82:a6:f9:60: 14:56:3b:d9:fd:8f:21:b7:8e:02:92:39:49:39:07:fe:3d:1d: c4:18:ab:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFMEUxMTAvBgNVBAUTKERBQ0E2MzY5OTZFODE5QUExRjk1MURDNjZGRjI5QUQw OTc5QzA1QzgwHhcNMjUxMjIyMTgwNzQzWhcNMjUxMjI5MTgwNzQzWjAYMRYwFAYD VQQDDA02OTQ5ODhlZi01ZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5LBYz86LXGAEG0Efe2b5bK25HNcHPv98CebWexuZHJ08fpwCbCwQO/bJVb3Y Vf2jvMFRNsfM8cFl3CisLuzx+TDELV0dVVdkE+Z+jkxIf/1fo5S92rrLL7gkhTxm A5ppkOqMKXryjH022MN5M1+I8xHctCQPVYcnNccpOiX8XWW5EUZrCp4w5Nj69S0m kpsCSVd94tgJ5+KBgiveQcOrHsCLzWWBUn+X6VGYZG/7SdaVgACEo4Nkq7UP6ia7 el3ebCniGrUwJQvyyNOT+ML7jgMYeLDSVZJGUv9pO28zQp1Zbh7djb6vgUzKlWff iu1rwea3KbcSI24PH+KTpWzuBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2cz3l8 UG/iQ4eXrlrsX+HoxjJcMB8GA1UdIwQYMBaAFNrKY2mW6BmqH5Udxm/ymtCXnAXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUUwRS80NzJDMzkyMjEw RUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dhb2ZsUjNHYl9LYTBKZWNC Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzcGphWmJvR2FvZmxSM0diX0thMEplY0JjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUUwRS80NzJDMzkyMjEwRUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dh b2ZsUjNHYl9LYTBKZWNCY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX07cWkgOzchBSZiDyKyV3PMGWsSm58rnlS+lcuT3LvK5vqfhWed5e FlPmw65l842Ilr8ayirsJzY6fg5mZQ/s+j8odHNxDuG1MRo7iWkEAy5xBv7vuLl1 b/A+2L49sv2Lyd/n36xh1jFni/sgZuqxeQZYtWgGyjSdCjnI7DL+JI8blcZX5IMU 5WrPdUxTi3kM+5pyQFEn9Y1N+mzEPAwtyV7LWCZzoAteIwmkQnzEW5mRXErMTjfZ tiT3AaApwDQr/GqPYGrOVTLDD/2glpbHu+2yiPrOraKRS5rxtQPKU8mwNdcfvoKm +WAUVjvZ/Y8ht44CkjlJOQf+PR3EGKsX -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:14 2025 by rpki-client