This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft File: 2leiQgcEcAjXOmXWgiSke5oD2qo.mft (raw, json) Hash identifier: KvG3QFdZo6y53Rmt8MsNewxZtvEdcgQgRAsDb5qqVHc= Subject key identifier: 7C:19:42:85:25:4B:58:BD:2A:7D:25:44:0D:1A:43:EF:8B:5A:D0:13 Authority key identifier: DA:57:A2:42:07:04:70:08:D7:3A:65:D6:82:24:A4:7B:9A:03:DA:AA Certificate issuer: /CN=A914573E/serialNumber=DA57A24207047008D73A65D68224A47B9A03DAAA Certificate serial: 0672 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft Manifest number: 066B Signing time: Thu 04 Dec 2025 21:21:04 +0000 Manifest this update: Thu 04 Dec 2025 21:21:04 +0000 Manifest next update: Thu 11 Dec 2025 21:21:04 +0000 Files and hashes: 1: 2leiQgcEcAjXOmXWgiSke5oD2qo.crl (hash: 29Q32itwdSM666nYYu4uBgJ61zoDXJEPIOKelzkKZcY=) 2: B67E0BB4A5A511EB94C0DE0FC4F9AE02.roa (hash: abFPv422MLo42yfuvK6GPVX4x/zkpsuvBFUhQvjbtGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.crl rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1650 (0x672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914573E, serialNumber=DA57A24207047008D73A65D68224A47B9A03DAAA Validity Not Before: Dec 4 21:21:04 2025 GMT Not After : Dec 11 21:21:04 2025 GMT Subject: CN=6931fb40-dd6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f0:4b:14:6b:83:4a:5b:0f:7e:fc:dd:b4:88: e3:35:71:37:06:1e:39:ef:8b:ae:a5:da:2c:1c:96: 1a:38:42:6e:4a:0b:e9:c8:60:9c:80:ef:4c:0c:7b: 8a:19:e7:5c:db:ef:0b:e9:16:c4:52:a9:5a:41:e9: 49:9f:de:1b:6b:9c:68:c8:fd:e2:06:1b:de:ac:67: 26:f8:cc:d8:75:9e:2b:d4:b1:73:e8:c1:5b:2d:a7: f8:aa:77:f7:d3:2f:2b:c4:c9:34:f3:d3:ee:5b:3d: 73:e6:02:94:50:e1:4a:90:49:f9:02:25:de:1f:90: 2b:9f:ae:b1:91:23:7c:8b:b3:e7:49:57:97:26:91: ad:26:71:52:d4:69:b7:c8:ce:a0:fb:91:02:57:e9: 42:ed:d7:6e:22:a1:3c:26:4d:b2:0b:f7:d0:fa:fb: 79:78:a4:d2:d2:07:9f:c5:45:0e:d4:59:ad:0f:80: c6:bc:6e:12:f9:02:7f:7f:d8:70:42:5e:08:03:15: 9e:cc:4b:d1:9c:12:b3:d2:67:3c:0b:72:17:6e:7a: 22:ac:3c:9b:66:e7:e2:53:99:9a:06:7d:b8:19:04: 0b:35:1b:db:f1:71:78:d6:a6:72:4f:52:67:f1:0f: e8:28:46:8a:f1:cf:00:1e:9e:b9:f0:11:f0:0b:58: 9f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:19:42:85:25:4B:58:BD:2A:7D:25:44:0D:1A:43:EF:8B:5A:D0:13 X509v3 Authority Key Identifier: keyid:DA:57:A2:42:07:04:70:08:D7:3A:65:D6:82:24:A4:7B:9A:03:DA:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a1:6f:9b:ab:cf:c3:85:11:56:f5:bc:99:30:db:62:5b:fe: a8:fd:3d:f9:7b:02:22:76:7d:83:6c:41:a8:26:ac:93:42:5e: ff:ee:46:4a:92:97:82:a1:0e:a9:99:86:db:af:cd:04:71:b0: 8a:3f:62:b5:9d:f2:a5:c3:2a:a4:f1:49:e5:93:79:ed:da:1d: 55:25:20:1a:d6:a4:e8:a7:d9:48:7d:3b:5d:ee:16:2d:4a:ff: ec:48:34:52:8e:49:d9:d9:fd:30:87:f2:d6:ca:cd:8b:aa:a8: 37:6b:93:82:ae:a6:e3:37:05:88:25:ec:08:df:cb:e6:3a:c0: f1:d6:a3:39:fd:60:c9:e2:63:89:26:7a:dd:04:e3:eb:5c:af: a7:e1:a2:23:40:4f:55:e7:46:3d:36:89:d9:a5:08:85:c1:75: 44:5d:e4:a4:c5:16:9c:79:83:2f:60:a7:d5:65:bf:e3:a5:e9: fe:47:9b:d3:ad:34:5d:c6:7b:e7:32:98:21:ef:65:ba:6d:61: d2:4e:69:87:56:41:00:5e:24:60:d3:39:6c:5a:d5:db:3f:75: ab:da:1a:64:18:77:f2:96:54:bb:94:bc:c3:12:e3:a8:1a:a8: ea:ed:5e:05:1f:b5:a7:83:42:02:b5:3b:5c:eb:6d:1f:14:ef: ef:dd:68:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU3M0UxMTAvBgNVBAUTKERBNTdBMjQyMDcwNDcwMDhENzNBNjVENjgyMjRBNDdC OUEwM0RBQUEwHhcNMjUxMjA0MjEyMTA0WhcNMjUxMjExMjEyMTA0WjAYMRYwFAYD VQQDEw02OTMxZmI0MC1kZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/BLFGuDSlsPfvzdtIjjNXE3Bh4574uupdosHJYaOEJuSgvpyGCcgO9MDHuK Gedc2+8L6RbEUqlaQelJn94ba5xoyP3iBhverGcm+MzYdZ4r1LFz6MFbLaf4qnf3 0y8rxMk089PuWz1z5gKUUOFKkEn5AiXeH5Arn66xkSN8i7PnSVeXJpGtJnFS1Gm3 yM6g+5ECV+lC7dduIqE8Jk2yC/fQ+vt5eKTS0gefxUUO1FmtD4DGvG4S+QJ/f9hw Ql4IAxWezEvRnBKz0mc8C3IXbnoirDybZufiU5maBn24GQQLNRvb8XF41qZyT1Jn 8Q/oKEaK8c8AHp658BHwC1ifxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwZQoUl S1i9Kn0lRA0aQ++LWtATMB8GA1UdIwQYMBaAFNpXokIHBHAI1zpl1oIkpHuaA9qq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTczRS82NzY4OTc4RUE1 QTQxMUVCOThDMzI5MEZDNEY5QUUwMi8ybGVpUWdjRWNBalhPbVhXZ2lTa2U1b0Qy cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsZWlRZ2NFY0FqWE9tWFdnaVNrZTVvRDJxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTczRS82NzY4OTc4RUE1QTQxMUVCOThDMzI5MEZDNEY5QUUwMi8ybGVpUWdjRWNB alhPbVhXZ2lTa2U1b0QycW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdoW+bq8/DhRFW9byZMNtiW/6o/T35ewIidn2DbEGoJqyTQl7/7kZK kpeCoQ6pmYbbr80EcbCKP2K1nfKlwyqk8Unlk3nt2h1VJSAa1qTop9lIfTtd7hYt Sv/sSDRSjknZ2f0wh/LWys2Lqqg3a5OCrqbjNwWIJewI38vmOsDx1qM5/WDJ4mOJ JnrdBOPrXK+n4aIjQE9V50Y9NonZpQiFwXVEXeSkxRaceYMvYKfVZb/jpen+R5vT rTRdxnvnMpgh72W6bWHSTmmHVkEAXiRg0zlsWtXbP3Wr2hpkGHfyllS7lLzDEuOo Gqjq7V4FH7Wng0ICtTtc620fFO/v3Wiv -----END CERTIFICATE-----Generated at Sat Dec 6 14:33:50 2025 by rpki-client