This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft File: 2VWVxglbTfriy5tFuQicwmI9lKM.mft (raw, json) Hash identifier: HcS5yc0J8HGEM/d8OoRxUAHXt0ji7KwEMZLo0+VsN8M= Subject key identifier: 58:43:74:43:A8:24:BD:6B:BD:BA:07:8F:DA:F0:4B:61:ED:25:30:A7 Authority key identifier: D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3 Certificate issuer: /CN=A9144E38/serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3 Certificate serial: 0EFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft Manifest number: 0EF2 Signing time: Sat 06 Dec 2025 17:05:15 +0000 Manifest this update: Sat 06 Dec 2025 17:05:14 +0000 Manifest next update: Sat 13 Dec 2025 17:05:14 +0000 Files and hashes: 1: 2VWVxglbTfriy5tFuQicwmI9lKM.crl (hash: GkX3JLeiSqyAruQ6GBsix90c1nkppnX7/3VvYXjCNRo=) 2: D7E41D6A788411EA9186C910C4F9AE02.roa (hash: KyrGSf7V5zfG9F8nLNaSQJ4n2vaZ8LBybDGS/PP9Wq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3836 (0xefc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144E38, serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3 Validity Not Before: Dec 6 17:05:14 2025 GMT Not After : Dec 13 17:05:14 2025 GMT Subject: CN=6934624b-6171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f4:a7:4d:a0:c3:08:34:fb:77:b3:7d:67:d6: dd:c9:d7:92:8f:38:0b:71:41:10:4e:f0:f0:85:89: f5:6d:40:3f:eb:d5:a6:60:fa:9b:87:fa:d1:7d:43: 6c:ad:75:d7:83:e5:b6:10:c7:c4:47:fe:df:dc:55: 9f:58:3f:aa:ad:45:13:d9:a9:e3:7d:74:20:af:53: 9f:9e:ef:b7:47:20:e7:cc:cf:6f:36:f2:b8:08:70: 72:8c:f1:ba:0e:4d:4a:b8:0f:99:7b:d5:76:a3:68: 7e:4d:1d:4e:e5:e7:1d:0c:f1:c0:c0:50:13:5b:12: a0:e5:0f:56:9f:ca:0c:39:d6:1c:7c:35:31:09:8e: 99:3c:bf:0e:b7:df:d4:cf:38:8e:43:5f:1e:f7:ac: c8:ee:21:0a:c1:70:2f:e2:6c:9d:d9:c9:84:3c:05: 38:34:86:6b:7b:c7:ea:7c:d6:cd:77:47:b6:41:16: d8:32:17:61:3d:e2:6f:70:fe:b0:5b:b6:68:df:91: 2e:8d:a9:da:33:39:2a:c4:14:7a:54:87:57:c1:72: 12:b5:7f:ef:9f:6e:d2:52:83:07:63:3b:a4:59:0f: df:aa:c0:d5:9c:da:4e:88:7a:c7:35:87:e7:f2:ca: 67:83:db:3b:4e:c2:84:9f:45:d0:d8:ab:fc:12:4a: 24:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:43:74:43:A8:24:BD:6B:BD:BA:07:8F:DA:F0:4B:61:ED:25:30:A7 X509v3 Authority Key Identifier: keyid:D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:53:93:76:9f:e0:73:fa:82:45:8d:ca:78:d4:05:2e:d2:d6: ed:54:42:46:57:f0:18:a9:58:65:83:9e:57:2d:20:91:f7:eb: 91:d1:6f:fd:d9:02:7e:02:b4:a4:7a:ea:41:89:de:e8:e5:b2: 3c:16:9d:ca:99:5c:e2:62:2d:2d:87:36:a4:5d:0e:ec:bf:03: 83:cc:93:58:64:47:69:ef:29:db:1e:9e:6d:4b:b7:49:b0:e3: 30:71:d4:85:1d:8f:dc:81:5b:ea:65:1a:f8:8c:d8:d2:8d:ba: 37:f6:0c:2f:f8:0a:6b:76:82:81:b2:c3:33:31:60:40:93:79: 38:e5:68:ed:5a:30:ab:18:12:f6:f1:24:e7:62:13:f3:1a:54: 16:39:00:b2:e5:4e:f9:7b:ab:2d:4c:43:59:e1:16:89:aa:2f: f1:ff:cb:1d:25:1e:5b:da:29:47:19:a9:53:ad:82:94:2f:9c: 9f:c8:71:0e:cd:4c:31:cb:91:7d:4f:01:f2:88:95:06:51:f4: 29:ac:8d:02:52:6b:88:0b:7a:e1:38:ac:77:99:72:72:35:56: 54:79:33:db:99:fb:8d:53:2e:cb:07:75:80:38:fd:ad:81:5c: 4e:75:67:ef:32:a7:f3:d8:69:3f:54:f5:fa:72:f1:3e:4a:07: 37:16:f2:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRFMzgxMTAvBgNVBAUTKEQ5NTU5NUM2MDk1QjRERkFFMkNCOUI0NUI5MDg5Q0My NjIzRDk0QTMwHhcNMjUxMjA2MTcwNTE0WhcNMjUxMjEzMTcwNTE0WjAYMRYwFAYD VQQDEw02OTM0NjI0Yi02MTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfSnTaDDCDT7d7N9Z9bdydeSjzgLcUEQTvDwhYn1bUA/69WmYPqbh/rRfUNs rXXXg+W2EMfER/7f3FWfWD+qrUUT2anjfXQgr1Ofnu+3RyDnzM9vNvK4CHByjPG6 Dk1KuA+Ze9V2o2h+TR1O5ecdDPHAwFATWxKg5Q9Wn8oMOdYcfDUxCY6ZPL8Ot9/U zziOQ18e96zI7iEKwXAv4myd2cmEPAU4NIZre8fqfNbNd0e2QRbYMhdhPeJvcP6w W7Zo35EujanaMzkqxBR6VIdXwXIStX/vn27SUoMHYzukWQ/fqsDVnNpOiHrHNYfn 8spng9s7TsKEn0XQ2Kv8EkokyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhDdEOo JL1rvboHj9rwS2HtJTCnMB8GA1UdIwQYMBaAFNlVlcYJW0364subRbkInMJiPZSj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEUzOC83MzMzMUI1RTkx RDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRmcml5NXRGdVFpY3dtSTls S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJWV1Z4Z2xiVGZyaXk1dEZ1UWljd21JOWxLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEUzOC83MzMzMUI1RTkxRDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRm cml5NXRGdVFpY3dtSTlsS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYU5N2n+Bz+oJFjcp41AUu0tbtVEJGV/AYqVhlg55XLSCR9+uR0W/9 2QJ+ArSkeupBid7o5bI8Fp3KmVziYi0thzakXQ7svwODzJNYZEdp7ynbHp5tS7dJ sOMwcdSFHY/cgVvqZRr4jNjSjbo39gwv+AprdoKBssMzMWBAk3k45WjtWjCrGBL2 8STnYhPzGlQWOQCy5U75e6stTENZ4RaJqi/x/8sdJR5b2ilHGalTrYKUL5yfyHEO zUwxy5F9TwHyiJUGUfQprI0CUmuIC3rhOKx3mXJyNVZUeTPbmfuNUy7LB3WAOP2t gVxOdWfvMqfz2Gk/VPX6cvE+Sgc3FvK+ -----END CERTIFICATE-----Generated at Sun Dec 7 01:55:35 2025 by rpki-client