This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft File: t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft (raw, json) Hash identifier: YaD2YJbell8vUmwqFw6IpDcEq7ODqKgP3sPlaKcUZrA= Subject key identifier: 8F:11:91:E9:3A:50:BC:63:DF:B3:1B:C5:3A:37:A2:A2:D5:78:E6:46 Authority key identifier: B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 Certificate issuer: /CN=A91EEC3B/serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Certificate serial: 07B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft Manifest number: 2D87 Signing time: Mon 22 Dec 2025 16:11:04 +0000 Manifest this update: Mon 22 Dec 2025 16:11:04 +0000 Manifest next update: Mon 29 Dec 2025 16:11:04 +0000 Files and hashes: 1: t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl (hash: tDVt4P5tn0gA4cYm8QZqhcelQOMqy/xbyQPvfYbOohY=) 2: 4F7B7728DD5D11EF9312601BC4F9AE02.roa (hash: Ftg4ftCr2lGn4RvcA0VVEwLsH6nD0OpE3hi7kVlpjbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1976 (0x7b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEC3B, serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Validity Not Before: Dec 22 16:11:04 2025 GMT Not After : Dec 29 16:11:04 2025 GMT Subject: CN=69496d98-0b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:f5:dc:94:40:7c:9d:e9:26:7a:08:c2:6b: 40:5d:de:42:cf:29:35:34:f8:66:78:2e:f1:be:b9: 87:c4:35:d2:eb:94:cf:ae:32:54:01:4f:21:a8:07: a6:d0:91:a9:6b:27:a1:60:69:7e:f7:62:31:77:f8: 18:ac:c6:6c:f5:3e:3e:85:3b:e9:f0:52:2c:54:34: 4a:35:47:5a:97:fd:bc:e1:5e:b1:5a:97:c5:f5:e0: f4:6f:3e:c2:27:79:02:c0:77:15:16:76:ee:46:a5: dc:55:05:28:0f:c6:1c:8a:36:d7:3b:3d:96:a3:aa: ae:ba:64:f8:1b:60:cc:91:8a:0c:da:d7:22:66:59: bb:e6:eb:25:fa:0d:95:a8:b2:be:5d:c8:04:06:58: 7c:39:94:b9:80:3b:21:76:77:1b:7c:14:e9:27:c5: 7c:29:4d:fd:7d:d9:81:25:67:af:33:a1:d1:75:4e: 09:bf:a2:4c:aa:7e:77:55:01:57:96:4b:08:3e:4d: 37:92:e0:57:04:fb:54:04:69:69:f7:f6:0a:45:ad: 75:63:e2:32:af:f0:42:66:7c:92:f3:fe:5f:0d:24: dc:6f:52:7d:96:f2:e1:3f:ac:4d:bc:6c:da:ce:c3: 17:7f:c6:a2:87:23:62:2c:79:8e:3a:2c:b1:4e:c2: 4e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:11:91:E9:3A:50:BC:63:DF:B3:1B:C5:3A:37:A2:A2:D5:78:E6:46 X509v3 Authority Key Identifier: keyid:B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:d7:4f:ba:d6:d8:af:b1:40:db:e3:23:c0:f4:94:af:a6:7d: e6:5a:b9:19:c8:5d:22:63:81:ea:16:1c:58:e8:b2:71:4f:eb: e8:6d:d7:0e:d6:42:04:c7:e8:0b:d2:92:e8:44:c2:4a:a4:e9: 2b:8f:69:be:3c:90:23:64:65:3f:0a:4f:df:f2:7d:91:1d:7a: f0:6f:5a:ac:42:9d:c4:9a:6e:e4:1b:5d:eb:ba:ed:d5:7b:63: 62:ca:84:78:b9:b5:8a:46:33:b3:3b:09:15:44:10:03:3a:61: 05:bc:3f:f1:3d:a7:2e:dd:ca:c2:b8:c8:67:3f:60:43:02:b9: 48:9a:a7:2c:bf:6a:1b:51:9c:94:30:d1:72:55:15:c1:d1:dd: 22:73:46:df:7e:49:44:c9:52:af:a2:b8:36:48:05:1e:88:8a: 27:12:03:0f:cd:63:a9:23:f4:0b:bc:3e:ce:1a:32:ab:4a:b5: f4:6f:68:38:32:3e:5f:cd:f5:48:b2:3c:84:c0:75:b4:f9:c3: 88:5c:86:c0:6b:d4:97:ff:8f:f8:65:7a:7d:b9:ea:ab:14:1c: 26:06:56:7e:97:22:4d:2c:0f:f5:a4:75:76:cc:63:fa:c5:9a: f9:8d:6a:a1:0c:c0:22:3f:7f:8b:79:86:5b:1f:f6:a0:39:d3: 2e:45:84:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDM0IxMTAvBgNVBAUTKEI3NjY3NTA1QkIyMDQyRTcyQjYyQUUwNUJFMkQxQTNC NDFCNEQyMzUwHhcNMjUxMjIyMTYxMTA0WhcNMjUxMjI5MTYxMTA0WjAYMRYwFAYD VQQDDA02OTQ5NmQ5OC0wYjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlsP13JRAfJ3pJnoIwmtAXd5Czyk1NPhmeC7xvrmHxDXS65TPrjJUAU8hqAem 0JGpayehYGl+92Ixd/gYrMZs9T4+hTvp8FIsVDRKNUdal/284V6xWpfF9eD0bz7C J3kCwHcVFnbuRqXcVQUoD8YcijbXOz2Wo6quumT4G2DMkYoM2tciZlm75usl+g2V qLK+XcgEBlh8OZS5gDshdncbfBTpJ8V8KU39fdmBJWevM6HRdU4Jv6JMqn53VQFX lksIPk03kuBXBPtUBGlp9/YKRa11Y+Iyr/BCZnyS8/5fDSTcb1J9lvLhP6xNvGza zsMXf8aihyNiLHmOOiyxTsJOSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8Rkek6 ULxj37MbxTo3oqLVeOZGMB8GA1UdIwQYMBaAFLdmdQW7IELnK2KuBb4tGjtBtNI1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0 MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1Y3JZcTRGdmkwYU8wRzAw alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QyWjFCYnNnUXVjcllxNEZ2aTBhTzBHMDBqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUMzQi82QjM3RTE5Qzg0MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1 Y3JZcTRGdmkwYU8wRzAwalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz10+61tivsUDb4yPA9JSvpn3mWrkZyF0iY4HqFhxY6LJxT+vobdcO 1kIEx+gL0pLoRMJKpOkrj2m+PJAjZGU/Ck/f8n2RHXrwb1qsQp3Emm7kG13ruu3V e2NiyoR4ubWKRjOzOwkVRBADOmEFvD/xPacu3crCuMhnP2BDArlImqcsv2obUZyU MNFyVRXB0d0ic0bffklEyVKvorg2SAUeiIonEgMPzWOpI/QLvD7OGjKrSrX0b2g4 Mj5fzfVIsjyEwHW0+cOIXIbAa9SX/4/4ZXp9ueqrFBwmBlZ+lyJNLA/1pHV2zGP6 xZr5jWqhDMAiP3+LeYZbH/agOdMuRYSr -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:37 2025 by rpki-client