This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json) Hash identifier: DfED9u2A3tcDhHs6deI9Uwk98bTaKbdTqf1f9sT7zwU= Subject key identifier: D9:DC:9A:0F:3E:43:9B:F6:B6:8A:A9:1B:9A:18:27:3B:26:E3:F2:6F Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft Manifest number: 020E Signing time: Tue 09 Dec 2025 00:32:00 +0000 Manifest this update: Tue 09 Dec 2025 00:31:59 +0000 Manifest next update: Tue 16 Dec 2025 00:31:59 +0000 Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: +T9httCXC0fE/BMp9S+vqU5/4Pe9hJT0zxVX8kLdTI0=) 2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: 1lAKMWWiDhArZBXjlm4IA+8JjIhSP0kfTCYDjl8+xiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 00:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Validity Not Before: Dec 9 00:31:59 2025 GMT Not After : Dec 16 00:31:59 2025 GMT Subject: CN=69376e00-c835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a5:65:3a:2d:b2:dc:eb:df:db:40:4f:50:42: 09:6a:f9:d3:05:d5:6e:a8:04:46:f6:4d:d0:2e:8b: 90:88:bb:b3:40:6e:8b:66:05:bd:69:53:11:9a:83: 78:50:f3:89:c0:b1:d2:45:8f:07:9a:5c:12:9c:6a: bc:32:fd:a4:41:54:21:ba:c9:20:fc:02:53:cd:88: c6:be:a8:2d:cd:18:ad:31:22:a1:95:42:cf:4b:61: e8:cb:5c:0e:9a:b1:07:79:b5:1e:5f:0c:73:67:5f: e8:2d:e2:ab:47:6e:c6:cd:8d:b8:77:97:a0:7b:7b: b2:79:53:68:a4:b5:1e:fe:39:37:03:95:c0:82:cb: aa:f0:dc:ae:95:e8:e1:b5:e7:0f:e4:6f:80:c3:19: 5b:f4:de:21:4c:28:d4:04:05:9f:b6:62:a5:93:46: 22:dd:57:9d:c2:34:f8:2f:2f:a6:1f:a6:75:7d:89: da:c4:ce:1c:0d:d7:54:2d:9d:e3:4c:50:7d:5a:d2: b5:73:6c:3a:60:92:99:29:e1:67:0c:2e:ea:d6:d0: ed:ef:1e:5e:03:fa:7b:74:1c:43:38:4f:92:c0:3a: 24:c4:c0:94:4b:62:59:3a:fe:94:68:6e:18:be:6d: 20:5b:53:0a:24:24:ab:ae:3e:36:b3:c8:d9:a1:e6: 49:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DC:9A:0F:3E:43:9B:F6:B6:8A:A9:1B:9A:18:27:3B:26:E3:F2:6F X509v3 Authority Key Identifier: keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:6a:74:c2:67:e8:64:9c:9f:a4:b5:8b:9e:4d:2e:5e:8a:a5: 25:30:66:99:d1:97:b3:4c:c3:c5:b6:5b:01:2d:85:3e:b0:26: be:18:f5:5e:69:e4:11:d3:dc:45:be:cf:4e:f5:f7:33:cc:ba: c4:48:4d:11:ca:a0:f8:52:a7:99:52:30:51:d6:49:53:3a:db: e6:73:74:16:32:58:c0:83:ab:1a:ce:f7:82:83:b5:6c:e2:de: d5:33:72:54:a8:d6:69:03:60:ef:a6:a0:7c:bf:dd:44:76:c7: ae:81:6c:8c:22:84:0d:45:62:90:d5:ba:41:07:a8:7c:b0:f4: 70:c9:31:68:e4:66:5b:6c:49:b7:43:de:cb:ab:bf:7c:84:63: e4:93:8e:30:99:eb:74:0c:e2:13:75:c0:6f:85:d3:aa:5f:a9: c3:6a:98:b3:22:c6:40:c9:bc:57:4d:13:c3:60:3d:57:81:1d: 5b:d5:67:e9:aa:f7:fb:d5:6c:c1:bc:3a:15:a1:f0:42:ca:5a: a9:23:5d:9a:54:a9:15:bb:23:d5:19:d7:73:fa:9f:e4:12:ca: 95:02:68:ba:5e:6a:7a:18:cb:25:df:6f:51:57:45:66:66:27: 61:e0:db:df:1a:75:c5:1a:df:1d:d1:92:2f:4d:38:8d:64:fd: e3:bb:9d:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUzNzQxMTAvBgNVBAUTKEQ4NEJDRDZDNTgwOTI3OUJDQkNDMEE1NkFENEExNjgz MjMwRjQzM0UwHhcNMjUxMjA5MDAzMTU5WhcNMjUxMjE2MDAzMTU5WjAYMRYwFAYD VQQDEw02OTM3NmUwMC1jODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KVlOi2y3Ovf20BPUEIJavnTBdVuqARG9k3QLouQiLuzQG6LZgW9aVMRmoN4 UPOJwLHSRY8HmlwSnGq8Mv2kQVQhuskg/AJTzYjGvqgtzRitMSKhlULPS2Hoy1wO mrEHebUeXwxzZ1/oLeKrR27GzY24d5ege3uyeVNopLUe/jk3A5XAgsuq8Nyulejh tecP5G+Awxlb9N4hTCjUBAWftmKlk0Yi3VedwjT4Ly+mH6Z1fYnaxM4cDddULZ3j TFB9WtK1c2w6YJKZKeFnDC7q1tDt7x5eA/p7dBxDOE+SwDokxMCUS2JZOv6UaG4Y vm0gW1MKJCSrrj42s8jZoeZJAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNncmg8+ Q5v2toqpG5oYJzsm4/JvMB8GA1UdIwQYMBaAFNhLzWxYCSeby8wKVq1KFoMjD0M+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTM3NC80MDYwMzU2MkFD MzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1dkx6QXBXclVvV2d5TVBR ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJFdk5iRmdKSjV2THpBcFdyVW9XZ3lNUFF6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTM3NC80MDYwMzU2MkFDMzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1 dkx6QXBXclVvV2d5TVBRejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqanTCZ+hknJ+ktYueTS5eiqUlMGaZ0ZezTMPFtlsBLYU+sCa+GPVe aeQR09xFvs9O9fczzLrESE0RyqD4UqeZUjBR1klTOtvmc3QWMljAg6sazveCg7Vs 4t7VM3JUqNZpA2DvpqB8v91EdseugWyMIoQNRWKQ1bpBB6h8sPRwyTFo5GZbbEm3 Q97Lq798hGPkk44wmet0DOITdcBvhdOqX6nDapizIsZAybxXTRPDYD1XgR1b1Wfp qvf71WzBvDoVofBCylqpI12aVKkVuyPVGddz+p/kEsqVAmi6Xmp6GMsl329RV0Vm Zidh4NvfGnXFGt8d0ZIvTTiNZP3ju51k -----END CERTIFICATE-----Generated at Wed Dec 10 15:48:28 2025 by rpki-client