This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft File: K2gwqzfLNO8nOiCi8ugmQplgE9o.mft (raw, json) Hash identifier: nwQibYCRyVdd0RsHFF1Z/dnn+ZSip1LO4IufO0pRWWE= Subject key identifier: 49:C8:EC:01:3F:A3:CC:27:ED:EF:E3:28:2E:A2:A2:BF:24:A3:FE:F9 Authority key identifier: 2B:68:30:AB:37:CB:34:EF:27:3A:20:A2:F2:E8:26:42:99:60:13:DA Certificate issuer: /CN=A91E3E80/serialNumber=2B6830AB37CB34EF273A20A2F2E82642996013DA Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft Manifest number: 61 Signing time: Tue 23 Dec 2025 05:56:28 +0000 Manifest this update: Tue 23 Dec 2025 05:56:28 +0000 Manifest next update: Tue 30 Dec 2025 05:56:28 +0000 Files and hashes: 1: K2gwqzfLNO8nOiCi8ugmQplgE9o.crl (hash: O5MAt36dqpKPCnq8LbQt48Ihl9OO8CgBAjPb1kbvCcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.crl rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E80, serialNumber=2B6830AB37CB34EF273A20A2F2E82642996013DA Validity Not Before: Dec 23 05:56:28 2025 GMT Not After : Dec 30 05:56:28 2025 GMT Subject: CN=694a2f0c-9627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5a:51:0e:95:60:a7:2a:6a:5c:ce:3d:62:6a: 7a:98:da:06:46:4f:0b:94:5d:86:35:ab:ba:99:e5: b1:88:f9:5f:b0:87:87:cf:8b:a2:6b:32:bd:6d:af: d9:24:2a:28:49:f3:29:0b:2a:e2:23:6d:e6:38:b3: 64:c0:12:39:2c:4f:a3:48:6c:0e:85:a4:9f:9f:a8: 82:5b:25:cb:15:45:56:72:c6:96:18:03:37:2b:23: 5f:57:85:05:84:60:c1:10:5a:e4:13:2b:10:ba:2f: ce:b4:f7:2b:b3:b9:8f:91:ef:cb:b2:96:fa:dd:d2: b1:ed:9f:f2:e7:d4:b1:d4:51:d7:44:e4:ee:f5:1c: fa:67:dc:8b:68:51:bd:d0:03:d7:f2:88:51:e1:15: c7:6c:c4:5f:c5:05:62:5d:4f:ae:b7:4e:aa:89:3c: f9:cf:7d:cd:8a:53:b9:09:57:9b:a1:5f:b9:c0:47: 5c:53:eb:c2:05:eb:29:91:79:b8:8d:5d:68:86:fd: fe:b5:ce:35:d4:93:76:41:0f:f8:d5:57:d3:6a:f8: dc:f3:60:aa:d0:b6:63:5e:cb:ac:a4:d4:b9:d2:20: 03:92:0f:f2:8e:94:95:a2:d3:44:29:bd:8a:b7:fc: 6a:cb:dd:4a:05:cc:27:e7:a4:c3:4d:f9:67:1c:13: 93:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C8:EC:01:3F:A3:CC:27:ED:EF:E3:28:2E:A2:A2:BF:24:A3:FE:F9 X509v3 Authority Key Identifier: keyid:2B:68:30:AB:37:CB:34:EF:27:3A:20:A2:F2:E8:26:42:99:60:13:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:2c:2a:3d:6d:c4:95:d0:89:88:e6:98:c3:9e:e7:7a:e1:17: cd:d6:27:3a:08:7c:fd:b1:d5:20:fa:0a:f6:29:62:4a:1b:6e: 3c:ad:a2:8e:09:9e:16:37:c1:2c:e8:21:1e:f1:1c:44:22:74: 4f:26:a8:42:8e:b0:bb:3f:3b:c1:ee:0a:dd:92:4f:77:e8:9a: 02:89:47:70:9d:87:35:fa:dc:c0:46:af:c6:ea:f8:e2:8f:28: 0e:bf:68:c0:d6:42:ea:74:58:2c:36:83:42:af:5d:c8:d8:f9: 39:c8:54:b7:b5:95:c6:9b:e5:67:a0:4e:5a:aa:7b:c7:7d:31: e6:b4:4e:84:00:2f:3f:71:db:2d:bd:fe:3a:01:7e:82:69:71: 69:c0:77:f4:43:70:c0:72:ce:ce:a9:ba:b4:ea:16:11:34:1c: 99:8a:d3:6e:ed:ef:78:ea:b9:f2:06:2c:a2:41:ce:23:9f:a6: 96:4e:51:f6:f3:bf:ae:67:1d:b4:0e:b8:92:9a:76:3f:71:e2: d6:4e:26:33:5b:02:1d:95:63:16:e5:3d:f1:dc:7d:13:80:95: c9:04:b3:09:32:d7:30:2b:88:89:b6:ff:3d:99:4e:ac:69:d0: b0:94:07:e9:39:d1:dc:7b:f9:89:f3:17:0f:2e:f4:0e:f7:cc: 57:6c:f3:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0U4MDExMC8GA1UEBRMoMkI2ODMwQUIzN0NCMzRFRjI3M0EyMEEyRjJFODI2NDI5 OTYwMTNEQTAeFw0yNTEyMjMwNTU2MjhaFw0yNTEyMzAwNTU2MjhaMBgxFjAUBgNV BAMMDTY5NGEyZjBjLTk2MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTWlEOlWCnKmpczj1ianqY2gZGTwuUXYY1q7qZ5bGI+V+wh4fPi6JrMr1tr9kk KihJ8ykLKuIjbeY4s2TAEjksT6NIbA6FpJ+fqIJbJcsVRVZyxpYYAzcrI19XhQWE YMEQWuQTKxC6L8609yuzuY+R78uylvrd0rHtn/Ln1LHUUddE5O71HPpn3ItoUb3Q A9fyiFHhFcdsxF/FBWJdT663TqqJPPnPfc2KU7kJV5uhX7nAR1xT68IF6ymRebiN XWiG/f61zjXUk3ZBD/jVV9Nq+NzzYKrQtmNey6yk1LnSIAOSD/KOlJWi00QpvYq3 /GrL3UoFzCfnpMNN+WccE5PRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUScjsAT+j zCft7+MoLqKivySj/vkwHwYDVR0jBBgwFoAUK2gwqzfLNO8nOiCi8ugmQplgE9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRTgwLzNFNDAyQUVBNEI2 NjExRjBCODg1MjQzOUM0RjlBRTAyL0syZ3dxemZMTk84bk9pQ2k4dWdtUXBsZ0U5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSzJnd3F6ZkxOTzhuT2lDaTh1Z21RcGxnRTlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RTgwLzNFNDAyQUVBNEI2NjExRjBCODg1MjQzOUM0RjlBRTAyL0syZ3dxemZMTk84 bk9pQ2k4dWdtUXBsZ0U5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAYsKj1txJXQiYjmmMOe53rhF83WJzoIfP2x1SD6CvYpYkobbjytoo4J nhY3wSzoIR7xHEQidE8mqEKOsLs/O8HuCt2ST3fomgKJR3CdhzX63MBGr8bq+OKP KA6/aMDWQup0WCw2g0KvXcjY+TnIVLe1lcab5WegTlqqe8d9Mea0ToQALz9x2y29 /joBfoJpcWnAd/RDcMByzs6purTqFhE0HJmK027t73jqufIGLKJBziOfppZOUfbz v65nHbQOuJKadj9x4tZOJjNbAh2VYxblPfHcfROAlckEswky1zAriIm2/z2ZTqxp 0LCUB+k50dx7+YnzFw8u9A73zFds884= -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:18 2025 by rpki-client