This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft File: 2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft (raw, json) Hash identifier: SGB3NFevRamqbRB6JpieZmUJykI/oGXqoyi9XOAPm3Q= Subject key identifier: 65:E3:93:A1:AA:B6:1C:9F:AF:6F:B7:8C:EE:16:2D:E1:6A:DE:71:22 Authority key identifier: DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19 Certificate issuer: /CN=A91E802C/serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft Manifest number: 26 Signing time: Tue 23 Dec 2025 06:32:50 +0000 Manifest this update: Tue 23 Dec 2025 06:32:49 +0000 Manifest next update: Tue 30 Dec 2025 06:32:49 +0000 Files and hashes: 1: 2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl (hash: WT+I89jqlBdtKdM+P68wTIaGr2j5Bi5xcycSaaJ9xrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E802C, serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119 Validity Not Before: Dec 23 06:32:49 2025 GMT Not After : Dec 30 06:32:49 2025 GMT Subject: CN=694a3792-356f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:55:bb:11:56:1e:a0:73:8e:cf:cf:d7:ce:92: 1c:3a:6e:4b:c2:49:29:bd:7b:9d:7d:ef:da:36:77: ae:69:94:38:5c:9f:55:27:5c:94:b0:54:06:22:e8: 03:3d:07:d8:85:42:e1:6f:3d:51:7d:54:8f:71:d4: 04:98:c6:e1:a3:d1:d4:25:30:c7:19:0d:08:c2:88: 1c:1e:4a:e0:1e:b3:60:32:41:8c:3a:c9:05:17:c9: 60:50:de:ee:a8:fe:39:a7:50:63:99:b2:72:94:7c: 23:e6:de:af:e2:f2:bc:cc:a1:31:39:e1:15:0c:c2: 6c:a7:b1:54:e9:ca:54:ca:ce:01:27:ed:f0:fe:7c: 86:e9:8b:ba:6e:df:e4:03:61:25:d6:1f:f7:94:99: 08:22:43:36:1d:db:06:a0:28:95:e3:64:f8:d5:0c: 68:29:9f:9f:f6:e6:6d:af:7e:70:a7:f2:12:85:b7: c7:44:8a:b7:c6:7e:62:3e:65:e7:db:30:48:f8:84: 14:8f:d2:fa:9d:98:0f:a0:a9:dd:f8:a5:69:49:85: 87:74:93:9d:7b:58:75:64:1b:bb:fd:12:dd:ed:4e: 5c:83:7c:0b:b1:93:35:78:21:1d:01:fc:b0:49:d0: 02:2a:33:c0:7a:5b:d4:b3:a0:1c:6b:b0:9d:31:30: 1f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E3:93:A1:AA:B6:1C:9F:AF:6F:B7:8C:EE:16:2D:E1:6A:DE:71:22 X509v3 Authority Key Identifier: keyid:DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:96:27:86:b4:1b:a9:62:90:e9:5f:03:2d:83:b5:34:11:57: 25:ed:6c:dd:20:5a:0e:45:df:d2:83:ac:8a:60:8f:6a:79:98: 51:69:ff:14:ca:8a:06:ef:1c:db:f1:4f:34:44:7a:48:97:35: e6:38:a0:71:30:18:78:a3:f3:80:27:63:d7:42:61:59:50:f8: cd:0a:6f:0d:23:1f:bd:9a:f4:64:62:12:dc:af:36:c6:97:d5: dc:41:8e:fe:c5:e8:f2:1c:01:5e:20:54:ac:32:9f:4b:cc:4a: 79:24:f3:45:2c:ce:96:85:e8:53:18:c3:bb:df:43:86:07:9b: b4:fc:7d:cd:f8:cb:bd:35:84:a4:1b:6e:8b:a0:46:c2:15:46: c6:ac:a1:1f:07:82:e5:db:74:e9:5a:9e:dc:38:68:ca:84:ff: 12:ff:76:b2:04:43:5b:3f:11:6a:77:15:f2:8a:38:d3:2f:2c: dc:a6:df:12:7f:83:e4:89:f5:35:15:6f:48:e6:19:bb:53:9e: ce:e7:22:ea:29:01:fe:85:d2:93:18:b1:a7:d0:d3:10:16:a0: b2:70:92:f2:7b:65:75:cd:1b:40:ac:3e:2d:8f:72:14:2b:69: 3d:23:6e:5e:bf:35:8a:b9:94:47:9e:c8:ab:02:2f:c9:ed:41: 06:90:cc:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODAyQzExMC8GA1UEBRMoREEwQTUxQkEyNjMxNTc3OUJGNkY4M0VGRjAzNEYyNjAx MDVDNTExOTAeFw0yNTEyMjMwNjMyNDlaFw0yNTEyMzAwNjMyNDlaMBgxFjAUBgNV BAMMDTY5NGEzNzkyLTM1NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSVbsRVh6gc47Pz9fOkhw6bkvCSSm9e51979o2d65plDhcn1UnXJSwVAYi6AM9 B9iFQuFvPVF9VI9x1ASYxuGj0dQlMMcZDQjCiBweSuAes2AyQYw6yQUXyWBQ3u6o /jmnUGOZsnKUfCPm3q/i8rzMoTE54RUMwmynsVTpylTKzgEn7fD+fIbpi7pu3+QD YSXWH/eUmQgiQzYd2wagKJXjZPjVDGgpn5/25m2vfnCn8hKFt8dEirfGfmI+Zefb MEj4hBSP0vqdmA+gqd34pWlJhYd0k517WHVkG7v9Et3tTlyDfAuxkzV4IR0B/LBJ 0AIqM8B6W9SzoBxrsJ0xMB/hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZeOToaq2 HJ+vb7eM7hYt4WrecSIwHwYDVR0jBBgwFoAU2gpRuiYxV3m/b4Pv8DTyYBBcURkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4MDJDLzAyMzQ1Rjk0QTlC QzExRjA5NzU2NEQxQkM0RjlBRTAyLzJncFJ1aVl4VjNtX2I0UHY4RFR5WUJCY1VS ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmdwUnVpWXhWM21fYjRQdjhEVHlZQkJjVVJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 MDJDLzAyMzQ1Rjk0QTlCQzExRjA5NzU2NEQxQkM0RjlBRTAyLzJncFJ1aVl4VjNt X2I0UHY4RFR5WUJCY1VSay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF+WJ4a0G6likOlfAy2DtTQRVyXtbN0gWg5F39KDrIpgj2p5mFFp/xTK igbvHNvxTzREekiXNeY4oHEwGHij84AnY9dCYVlQ+M0Kbw0jH72a9GRiEtyvNsaX 1dxBjv7F6PIcAV4gVKwyn0vMSnkk80UszpaF6FMYw7vfQ4YHm7T8fc34y701hKQb bougRsIVRsasoR8HguXbdOlantw4aMqE/xL/drIEQ1s/EWp3FfKKONMvLNym3xJ/ g+SJ9TUVb0jmGbtTns7nIuopAf6F0pMYsafQ0xAWoLJwkvJ7ZXXNG0CsPi2PchQr aT0jbl6/NYq5lEeeyKsCL8ntQQaQzIw= -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:54 2025 by rpki-client