This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft File: 2fpCBt8OmUfNUB39UlsuRmlv1EI.mft (raw, json) Hash identifier: LE5kCpxl/8ZrYwGuLjZsXr9tRfPWwXSl2POS5cBLIiM= Subject key identifier: 31:4E:8A:02:76:09:85:93:86:9C:E7:61:7A:9F:33:AB:E6:48:22:57 Authority key identifier: D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 Certificate issuer: /CN=A911D40B/serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft Manifest number: 017B Signing time: Fri 05 Dec 2025 01:55:34 +0000 Manifest this update: Fri 05 Dec 2025 01:55:34 +0000 Manifest next update: Fri 12 Dec 2025 01:55:34 +0000 Files and hashes: 1: 2fpCBt8OmUfNUB39UlsuRmlv1EI.crl (hash: 7v2AZbzsGcObEtUMnOkxcQQoabPyA1I7oj0wdPDxHIw=) 2: 91BCF5D08E0811EE91C7BD62C4F9AE02.roa (hash: 16O4tOIwTKe9KyjFOBLZvUGIgda/sT358bnVtxfjCnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D40B, serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Validity Not Before: Dec 5 01:55:34 2025 GMT Not After : Dec 12 01:55:34 2025 GMT Subject: CN=69323b96-d934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:94:e8:34:17:58:fb:28:d6:04:60:2f:7d:9f: ac:60:ed:05:45:28:e0:73:7a:88:94:b7:ce:f1:4d: 8d:4d:7e:a4:d6:cc:de:e5:6f:fb:17:eb:67:c9:1b: fa:c6:95:1b:69:a3:7b:9d:32:b3:38:9a:30:37:d0: e8:35:b4:b4:d2:7d:54:27:ae:a8:7f:22:9a:f8:c6: f3:f1:f7:02:69:99:45:f6:89:de:cb:dd:38:7f:7b: d5:3f:e4:ba:3b:43:40:ca:80:5f:8d:4f:b2:c3:c2: db:23:be:6f:ee:e3:9c:e3:94:b6:39:8f:7d:ce:55: fd:99:d1:fa:a6:cb:85:da:20:fa:ad:a2:ca:b5:5a: 6d:9d:07:64:8b:7f:c7:fe:a1:e2:3e:9b:47:2f:97: 4d:de:17:5f:5d:0d:05:21:ec:4a:48:ee:99:85:5c: cf:98:41:b2:0f:36:6e:63:1d:01:7a:06:aa:fc:f9: 2f:46:b9:ac:a7:2e:97:dc:10:6a:3e:fa:0d:65:49: b1:40:bd:59:eb:bb:e7:f4:f7:e8:17:e4:15:2c:63: cf:87:9b:39:89:75:bf:a3:7a:a6:ba:b2:3b:d3:ca: 5d:e3:64:20:96:e7:44:57:eb:91:05:6f:87:44:9f: b9:26:70:00:f9:8a:28:eb:43:ab:e1:8f:7d:db:d7: 66:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4E:8A:02:76:09:85:93:86:9C:E7:61:7A:9F:33:AB:E6:48:22:57 X509v3 Authority Key Identifier: keyid:D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:e2:12:a5:29:5f:cf:c9:32:2a:39:0a:69:67:de:70:dc:2a: 6b:ff:8c:f6:58:87:2d:80:8e:55:a2:f0:88:e6:be:ba:84:75: 83:3c:a6:21:24:98:06:2d:4a:d6:31:39:1f:27:44:db:65:42: fb:a5:19:d5:36:4b:d5:4f:f4:0e:6e:62:72:af:a8:69:84:21: 55:ab:a3:2c:58:27:ac:6b:c2:4f:ed:2f:e6:02:db:76:49:34: 1e:dc:61:ee:bd:7f:ae:e3:9c:8e:45:ba:2c:06:cc:4f:0a:e8: 14:5d:0f:65:96:74:e9:86:e1:d0:13:b8:3b:00:17:6d:23:5a: c8:b9:c3:d4:4b:37:dc:43:4b:e5:ec:9a:14:0c:e2:ff:35:c0: 49:0e:44:2a:45:59:fa:91:d3:a0:5c:22:59:ac:08:2d:3e:c7: 88:85:60:02:b7:99:65:3c:21:d6:dc:f6:c7:24:93:bb:86:a5: f7:66:92:4b:d3:d5:f5:eb:b1:34:05:64:95:f9:eb:5f:c2:4b: e0:00:f0:1d:cb:05:fa:1d:40:57:fb:88:be:51:f9:92:a8:43: 3f:a2:93:f5:38:bf:c9:d9:8c:f6:e3:3a:5a:b5:64:e0:98:4d: 8d:2d:6f:07:d2:10:7c:7a:a7:4a:ae:f1:b7:45:c8:9f:55:a2: 81:1c:d9:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ0MEIxMTAvBgNVBAUTKEQ5RkE0MjA2REYwRTk5NDdDRDUwMURGRDUyNUIyRTQ2 Njk2RkQ0NDIwHhcNMjUxMjA1MDE1NTM0WhcNMjUxMjEyMDE1NTM0WjAYMRYwFAYD VQQDEw02OTMyM2I5Ni1kOTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5ToNBdY+yjWBGAvfZ+sYO0FRSjgc3qIlLfO8U2NTX6k1sze5W/7F+tnyRv6 xpUbaaN7nTKzOJowN9DoNbS00n1UJ66ofyKa+Mbz8fcCaZlF9oney904f3vVP+S6 O0NAyoBfjU+yw8LbI75v7uOc45S2OY99zlX9mdH6psuF2iD6raLKtVptnQdki3/H /qHiPptHL5dN3hdfXQ0FIexKSO6ZhVzPmEGyDzZuYx0Begaq/PkvRrmspy6X3BBq PvoNZUmxQL1Z67vn9PfoF+QVLGPPh5s5iXW/o3qmurI708pd42QgludEV+uRBW+H RJ+5JnAA+Yoo60Or4Y9929dmbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFOigJ2 CYWThpznYXqfM6vmSCJXMB8GA1UdIwQYMBaAFNn6QgbfDplHzVAd/VJbLkZpb9RC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDQwQi80NjI2QkIxQThF MDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21VZk5VQjM5VWxzdVJtbHYx RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmcENCdDhPbVVmTlVCMzlVbHN1Um1sdjFFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDQwQi80NjI2QkIxQThFMDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21V Zk5VQjM5VWxzdVJtbHYxRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj4hKlKV/PyTIqOQppZ95w3Cpr/4z2WIctgI5VovCI5r66hHWDPKYh JJgGLUrWMTkfJ0TbZUL7pRnVNkvVT/QObmJyr6hphCFVq6MsWCesa8JP7S/mAtt2 STQe3GHuvX+u45yORbosBsxPCugUXQ9llnTphuHQE7g7ABdtI1rIucPUSzfcQ0vl 7JoUDOL/NcBJDkQqRVn6kdOgXCJZrAgtPseIhWACt5llPCHW3PbHJJO7hqX3ZpJL 09X167E0BWSV+etfwkvgAPAdywX6HUBX+4i+UfmSqEM/opP1OL/J2Yz24zpatWTg mE2NLW8H0hB8eqdKrvG3RcifVaKBHNnp -----END CERTIFICATE-----Generated at Sun Dec 7 01:01:34 2025 by rpki-client