This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft File: 2rx4_BTzDLhy7ADtak_0dtlMsng.mft (raw, json) Hash identifier: rPPxyCC/XYxv3Sa+3zHIPfWyqKHIge0YGL2SXi4M5iE= Subject key identifier: 07:C4:38:D3:61:3C:EA:C2:C8:24:E1:FF:CA:4E:57:0B:C2:D8:A5:7D Authority key identifier: DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 Certificate issuer: /CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Certificate serial: 033A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft Manifest number: 0336 Signing time: Tue 23 Dec 2025 00:01:53 +0000 Manifest this update: Tue 23 Dec 2025 00:01:52 +0000 Manifest next update: Tue 30 Dec 2025 00:01:52 +0000 Files and hashes: 1: 2rx4_BTzDLhy7ADtak_0dtlMsng.crl (hash: xUEpPCYxXWRWThxdKJGnoPOQk8ClRocEEZwiXawu3zA=) 2: F585ED70EBB511ECA410BF6DC4F9AE02.roa (hash: FDgCbVEtaiF6hhOlzAuEf/7GQvnyK8/vB0MpeqREr6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 826 (0x33a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE1E6, serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Validity Not Before: Dec 23 00:01:52 2025 GMT Not After : Dec 30 00:01:52 2025 GMT Subject: CN=6949dbf1-9082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b8:65:14:b5:75:57:27:98:76:d2:19:83:27: 5c:c0:e1:3b:66:93:e6:26:2d:93:c2:87:db:50:f3: 71:eb:81:1d:55:4a:8d:b9:f2:84:18:c3:a3:6f:8b: 59:f5:5d:eb:2b:5f:14:89:f4:ba:5f:11:64:cb:89: 7a:3d:89:52:e7:c2:28:c7:9a:82:d2:27:34:38:3f: ff:48:50:44:8f:b1:75:70:1d:ad:12:11:68:68:38: ea:6d:b3:0f:98:59:1b:a9:db:04:cb:a0:d2:84:c3: 09:e1:56:b9:03:6e:e3:e6:89:2e:bd:5f:0b:08:78: 1d:a1:b9:57:e0:8b:01:ce:c7:7d:29:7e:98:25:e7: 71:83:bf:e4:2e:dc:a4:5c:cd:43:42:4b:e4:4d:6d: 0a:10:9d:a0:ad:d7:97:8c:f9:56:40:3c:4c:e8:e9: f9:58:d1:41:29:87:d8:a6:8f:87:94:7c:63:82:00: b5:45:ba:37:f2:61:d7:8f:fb:f8:24:2c:84:7d:97: 87:fd:fe:0f:88:56:17:4e:04:64:30:37:23:dd:43: df:ac:44:78:23:0c:e2:42:00:ac:7e:a4:8e:cb:c3: c2:00:2d:32:3d:5e:a5:16:1d:ea:4d:22:11:cd:0e: 0e:d7:56:6e:88:65:de:1f:40:4f:00:c4:77:4c:7e: a9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C4:38:D3:61:3C:EA:C2:C8:24:E1:FF:CA:4E:57:0B:C2:D8:A5:7D X509v3 Authority Key Identifier: keyid:DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:47:34:9c:37:ac:9d:6b:f5:da:e1:d3:03:a4:e5:22:aa:f4: 55:ad:cc:5c:5c:79:f8:1d:1d:35:39:a2:d0:7b:f9:b0:85:dc: 32:82:20:e3:6b:11:18:8d:4c:f6:85:36:b0:5f:18:48:f8:0d: 69:c1:88:59:30:aa:48:ba:15:0c:a1:bd:de:a4:d6:59:1c:03: 18:1c:15:bc:89:b9:ee:ae:e0:9d:7f:f2:b5:de:0a:a2:5a:be: 4c:88:a2:20:3e:54:70:8f:2a:d0:14:05:67:c8:30:e9:9f:c6: 4c:01:2d:c9:f5:eb:a2:e3:b5:72:ae:01:7e:0e:2c:f8:f9:a5: 1a:e8:a6:0b:aa:28:5f:b9:1b:02:eb:5d:5f:42:9c:78:c3:b1: 1c:23:54:84:a7:62:80:24:de:6a:9a:ac:f6:3f:c1:fa:fc:1b: 85:66:25:3a:eb:6d:c9:f5:fa:c5:be:1e:1e:f1:2f:5e:32:ec: c0:18:71:90:15:b0:af:33:b3:ef:52:10:38:39:2d:fd:4c:2e: 5f:fe:68:b9:26:61:90:83:b8:0c:b8:5c:2d:51:67:c3:56:46: f7:2d:a9:31:f3:f3:5f:5f:dc:f5:e0:34:2c:40:cc:d8:80:59: 32:36:ce:0b:4b:f6:94:e7:bb:1d:89:b2:f9:ed:f6:27:2f:57: bd:b7:4f:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UxRTYxMTAvBgNVBAUTKERBQkM3OEZDMTRGMzBDQjg3MkVDMDBFRDZBNEZGNDc2 RDk0Q0IyNzgwHhcNMjUxMjIzMDAwMTUyWhcNMjUxMjMwMDAwMTUyWjAYMRYwFAYD VQQDDA02OTQ5ZGJmMS05MDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7hlFLV1VyeYdtIZgydcwOE7ZpPmJi2TwofbUPNx64EdVUqNufKEGMOjb4tZ 9V3rK18UifS6XxFky4l6PYlS58Iox5qC0ic0OD//SFBEj7F1cB2tEhFoaDjqbbMP mFkbqdsEy6DShMMJ4Va5A27j5okuvV8LCHgdoblX4IsBzsd9KX6YJedxg7/kLtyk XM1DQkvkTW0KEJ2grdeXjPlWQDxM6On5WNFBKYfYpo+HlHxjggC1Rbo38mHXj/v4 JCyEfZeH/f4PiFYXTgRkMDcj3UPfrER4IwziQgCsfqSOy8PCAC0yPV6lFh3qTSIR zQ4O11ZuiGXeH0BPAMR3TH6plQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfEONNh POrCyCTh/8pOVwvC2KV9MB8GA1UdIwQYMBaAFNq8ePwU8wy4cuwA7WpP9HbZTLJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTFFNi9DRDk0QjhCOEVC QjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRMaHk3QUR0YWtfMGR0bE1z bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyeDRfQlR6RExoeTdBRHRha18wZHRsTXNuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTFFNi9DRDk0QjhCOEVCQjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRM aHk3QUR0YWtfMGR0bE1zbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwRzScN6yda/Xa4dMDpOUiqvRVrcxcXHn4HR01OaLQe/mwhdwygiDj axEYjUz2hTawXxhI+A1pwYhZMKpIuhUMob3epNZZHAMYHBW8ibnuruCdf/K13gqi Wr5MiKIgPlRwjyrQFAVnyDDpn8ZMAS3J9eui47VyrgF+Diz4+aUa6KYLqihfuRsC 611fQpx4w7EcI1SEp2KAJN5qmqz2P8H6/BuFZiU6623J9frFvh4e8S9eMuzAGHGQ FbCvM7PvUhA4OS39TC5f/mi5JmGQg7gMuFwtUWfDVkb3Lakx8/NfX9z14DQsQMzY gFkyNs4LS/aU57sdibL57fYnL1e9t08w -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:32 2025 by rpki-client