This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft File: x2h2G8gatP5_1EAVSCYcuocge-o.mft (raw, json) Hash identifier: 9hoyEsQh8ZKPzya4YU1hVoGKKaFnWE7k8KUeBj2gLLI= Subject key identifier: DF:CD:56:39:0A:A8:C7:3E:27:6E:DC:28:DB:72:E3:CD:D6:7C:32:D2 Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA Certificate issuer: /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Certificate serial: 0E8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft Manifest number: 0E66 Signing time: Thu 04 Dec 2025 17:18:35 +0000 Manifest this update: Thu 04 Dec 2025 17:18:34 +0000 Manifest next update: Thu 11 Dec 2025 17:18:34 +0000 Files and hashes: 1: x2h2G8gatP5_1EAVSCYcuocge-o.crl (hash: uNI4OnH5m9gEfRCt421iP+ZNuSGBFvB1BmcGLZ/SMiU=) 2: 127D33EC027011EB98FEC44BC4F9AE02.roa (hash: qtVktuatmgxYDOUKpmx9+4mvFE8ErGGHadU2rZXHHOI=) 3: 1C99C7E021D911EB85DAFE71C4F9AE02.roa (hash: 6vTa2jFZRIl18mXvmJhTh/HGMJaVZWt9h8uikA4SPmc=) 4: 670DF186232111EB9896B783C4F9AE02.roa (hash: QRv08V7HqtcB3bHnZdM9X+W4jlFsB6z2SpL2l3Cbxgo=) 5: 1609CE067A4A11EB99C11F5FC4F9AE02.roa (hash: rV1Z8AbpTv1d+o44R7LlYsk8JevP6flWo0s81DQ5Rok=) 6: 1D93B82C21D911EB85DAFE71C4F9AE02.roa (hash: lbAPfcc0myVwdYbEISgNYKY5g+qS8g/HzTgMPDxOCGE=) 7: 1BBE249C21D911EB85DAFE71C4F9AE02.roa (hash: 1hlPRZQBD73jEyWKbHC8ZRWrArjylE9If913X/Jb57A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3726 (0xe8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118022, serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Validity Not Before: Dec 4 17:18:34 2025 GMT Not After : Dec 11 17:18:34 2025 GMT Subject: CN=6931c26b-e74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a4:b3:09:69:1e:b1:8f:ef:ce:7c:67:a8:65: 5f:dc:fd:24:aa:59:9b:36:68:6b:51:aa:31:68:cf: 43:98:2a:3f:f2:70:f3:81:c1:ae:36:9f:10:db:a2: 7b:a6:e0:7c:06:11:b7:f6:a7:52:5f:5c:3d:d3:cf: 26:a3:30:9b:2f:4c:87:73:ac:d0:53:2d:bd:e9:a2: aa:b8:54:20:d6:00:c1:8d:4c:05:f9:28:57:3f:e4: e2:55:25:16:68:d5:f2:44:eb:a9:98:c1:60:44:4c: b9:e2:03:ae:36:bc:7e:47:0c:7f:e0:6a:9a:0d:0e: d5:b7:dd:4b:b9:69:b5:97:73:4b:d3:cc:95:c6:6b: 0b:ff:d0:79:d0:2a:39:03:41:d9:29:98:ad:cc:b6: 5f:43:32:ca:3e:ea:2f:f1:a9:da:70:ef:b0:25:6d: 61:a3:cc:5c:6d:3d:78:ab:eb:20:f2:18:59:65:e4: 5a:f4:10:77:29:3a:b7:f8:20:df:7b:51:ca:0d:56: bc:76:3d:c4:84:06:fe:3b:87:fe:ec:18:9b:7c:8f: 10:aa:c1:b5:57:bf:5a:05:86:96:5b:85:fd:3f:28: 12:4d:ee:9b:14:bd:67:2d:6c:a3:a7:0e:53:9a:b7: dc:39:2e:1e:dd:dd:29:83:41:62:5c:28:c2:94:fb: 27:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CD:56:39:0A:A8:C7:3E:27:6E:DC:28:DB:72:E3:CD:D6:7C:32:D2 X509v3 Authority Key Identifier: keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:24:4a:5a:73:af:d4:fb:d6:46:46:b4:a0:71:46:45:1f:2f: 76:57:ad:bd:5f:17:ab:1f:3f:eb:96:7e:31:3b:a0:35:78:a9: 4c:bb:36:a1:4d:1d:25:65:50:d6:8a:f1:23:34:37:f5:b9:53: ca:44:c5:5c:9e:95:3c:78:12:94:d9:2c:8e:0e:87:1b:ec:e8: ad:8e:6a:98:69:93:b3:82:e9:8f:db:5c:f1:a8:0b:df:72:f8: 3d:32:8c:2d:0d:81:9d:23:1d:68:ab:d7:d0:f0:6d:0b:f4:2d: f9:30:55:2b:02:56:5b:b3:2e:03:3e:9b:3b:6d:1b:87:ab:a9: 18:c5:f6:9e:04:c5:ff:3e:e7:a5:02:11:20:c7:58:80:90:19: d6:6e:60:07:7e:ff:79:12:b8:fb:9d:4f:ef:3f:73:58:8d:74: 03:c7:dd:17:57:c3:88:d5:d2:ea:6a:72:38:83:ac:f8:dd:26: 27:7f:91:73:ba:17:d4:49:ab:37:bf:19:d9:77:d7:ec:8e:45: 0b:43:60:06:9f:d1:e0:84:48:4e:73:ce:46:ef:72:92:a8:10: 62:34:89:7e:ae:16:4e:8f:f0:e2:12:c2:2d:8d:32:40:2b:67: da:60:27:c5:4c:9e:c4:da:8a:ef:14:b0:cc:77:06:cf:ea:0e: 13:73:0b:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMjIxMTAvBgNVBAUTKEM3Njg3NjFCQzgxQUI0RkU3RkQ0NDAxNTQ4MjYxQ0JB ODcyMDdCRUEwHhcNMjUxMjA0MTcxODM0WhcNMjUxMjExMTcxODM0WjAYMRYwFAYD VQQDEw02OTMxYzI2Yi1lNzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqSzCWkesY/vznxnqGVf3P0kqlmbNmhrUaoxaM9DmCo/8nDzgcGuNp8Q26J7 puB8BhG39qdSX1w9088mozCbL0yHc6zQUy296aKquFQg1gDBjUwF+ShXP+TiVSUW aNXyROupmMFgREy54gOuNrx+Rwx/4GqaDQ7Vt91LuWm1l3NL08yVxmsL/9B50Co5 A0HZKZitzLZfQzLKPuov8anacO+wJW1ho8xcbT14q+sg8hhZZeRa9BB3KTq3+CDf e1HKDVa8dj3EhAb+O4f+7BibfI8QqsG1V79aBYaWW4X9PygSTe6bFL1nLWyjpw5T mrfcOS4e3d0pg0FiXCjClPsnBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/NVjkK qMc+J27cKNty483WfDLSMB8GA1UdIwQYMBaAFMdodhvIGrT+f9RAFUgmHLqHIHvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAyMi9DNjFDMjU2QUFE Q0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQNV8xRUFWU0NZY3VvY2dl LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gyaDJHOGdhdFA1XzFFQVZTQ1ljdW9jZ2Utby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAyMi9DNjFDMjU2QUFEQ0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQ NV8xRUFWU0NZY3VvY2dlLW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXJEpac6/U+9ZGRrSgcUZFHy92V629XxerHz/rln4xO6A1eKlMuzah TR0lZVDWivEjNDf1uVPKRMVcnpU8eBKU2SyODocb7OitjmqYaZOzgumP21zxqAvf cvg9MowtDYGdIx1oq9fQ8G0L9C35MFUrAlZbsy4DPps7bRuHq6kYxfaeBMX/Puel AhEgx1iAkBnWbmAHfv95Erj7nU/vP3NYjXQDx90XV8OI1dLqanI4g6z43SYnf5Fz uhfUSas3vxnZd9fsjkULQ2AGn9HghEhOc85G73KSqBBiNIl+rhZOj/DiEsItjTJA K2faYCfFTJ7E2orvFLDMdwbP6g4TcwuD -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:21 2025 by rpki-client