This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft File: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft (raw, json) Hash identifier: 5XQ/6jCdd9c4Vc+ld9MywMzLnhRVA02kbjkFbBiLOfE= Subject key identifier: 59:91:3C:5C:FC:BD:DB:5F:0A:20:FA:96:27:7C:C8:FA:CF:E0:8A:6E Authority key identifier: DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C Certificate issuer: /CN=A915201D/serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft Manifest number: 89 Signing time: Fri 05 Dec 2025 04:34:24 +0000 Manifest this update: Fri 05 Dec 2025 04:34:23 +0000 Manifest next update: Fri 12 Dec 2025 04:34:23 +0000 Files and hashes: 1: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl (hash: Zm1XSBkBVmjOKdz115vtxb1gpy5lhFTQH2le2/f9nuo=) 2: 69AF571603F211F09BC45354C4F9AE02.roa (hash: dT/BONoh4iz/mCrFUa2bnRPY+g4+rGXpyhnWzue1M3M=) 3: C0FB557E03F211F08D0A9566C4F9AE02.roa (hash: R+1VP9LHiaevMYdKlJuk8iImqVduU78fQg6WO1Eu+k0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915201D, serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C Validity Not Before: Dec 5 04:34:23 2025 GMT Not After : Dec 12 04:34:23 2025 GMT Subject: CN=693260cf-3f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:df:62:65:e1:5d:6c:d5:d9:3b:8a:83:f6:46: ad:c8:c6:ad:8d:ff:17:41:1f:b5:20:72:e9:03:43: 76:12:6b:a7:ae:93:64:11:ce:df:df:17:f2:f4:65: e2:29:38:13:37:5e:ac:8a:36:12:23:6e:18:0f:7c: b8:32:a0:bb:c3:1b:a1:65:04:ba:c6:ee:c5:3d:7c: 34:24:bd:ed:ad:76:9e:84:db:1a:06:1f:be:a7:dd: 60:3c:23:99:68:90:a6:ad:30:9f:91:b5:0d:a2:7b: 00:e2:cc:c1:3d:ae:3f:d1:8a:38:3e:16:d0:da:71: 8c:e9:5f:fb:a2:fa:cf:35:da:d4:01:f2:d4:49:5d: 35:0e:ac:2d:47:1f:09:a7:06:45:9b:39:1d:29:6d: f7:34:dd:39:ba:4f:e0:ac:5b:ff:92:cc:44:c6:2f: be:af:27:25:d8:aa:72:9a:0f:84:fa:c0:b1:c2:3e: 71:e2:45:7c:ec:c1:07:1c:e2:73:59:af:f5:22:c2: 13:08:fa:61:ab:2e:e7:4c:37:cf:fe:41:91:eb:37: b3:c3:e6:5e:09:ed:58:99:1d:2e:14:e1:06:bc:04: ac:a8:52:08:b9:ef:49:43:a6:2d:50:9e:b3:ed:e9: 39:bf:fc:e3:67:fa:da:17:ea:39:4c:cf:c9:85:4b: 63:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:91:3C:5C:FC:BD:DB:5F:0A:20:FA:96:27:7C:C8:FA:CF:E0:8A:6E X509v3 Authority Key Identifier: keyid:DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:4c:52:bc:64:6f:eb:f0:e4:cf:ae:7b:f0:ed:9e:4a:11:51: f8:dc:56:a9:27:a3:35:e1:ee:94:c6:88:e3:b2:77:63:ca:95: 22:55:38:61:ae:2a:db:45:32:ac:b5:e0:44:64:4e:5a:9d:d7: fb:6a:05:14:ef:82:ae:dd:97:b5:16:c0:b6:ce:19:7e:a4:61: a1:d5:84:69:b0:c1:ba:3e:a6:71:8f:04:c2:a7:fa:3e:af:ba: fc:06:17:41:62:91:53:f6:8e:90:ea:7f:34:5a:e9:34:a7:83: 3d:01:7a:2a:6f:ef:94:31:18:ec:7c:bd:61:e3:c3:f2:cc:54: f1:d6:cd:77:34:83:ae:a7:ce:cf:a7:db:8e:87:75:2a:56:b7: 41:f1:42:02:e8:0d:97:c1:c5:a0:dc:06:2f:50:e4:91:82:54: 63:00:8f:7b:68:b8:3f:3d:94:b4:26:13:52:a1:e0:d4:72:6d: 4d:ea:1c:73:61:17:39:ce:2f:89:7b:fa:8d:b5:f0:c7:c0:44: 1f:8d:a7:f6:0c:b1:df:09:a7:b0:5e:e3:61:ab:83:4d:7f:a5: d6:b3:3d:7f:9f:74:e8:be:e0:21:62:1a:17:10:fa:4e:91:d8: f0:de:f6:09:35:a2:e0:de:7b:8e:b0:7a:ca:c8:5e:7a:29:f6: 36:c7:b6:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIwMUQxMTAvBgNVBAUTKERCMUI5NkUwNUE5OEQ4MjhCRjU3RUEwQTcxNTVBRjFE MzMyMjNFMkMwHhcNMjUxMjA1MDQzNDIzWhcNMjUxMjEyMDQzNDIzWjAYMRYwFAYD VQQDEw02OTMyNjBjZi0zZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvt9iZeFdbNXZO4qD9katyMatjf8XQR+1IHLpA0N2EmunrpNkEc7f3xfy9GXi KTgTN16sijYSI24YD3y4MqC7wxuhZQS6xu7FPXw0JL3trXaehNsaBh++p91gPCOZ aJCmrTCfkbUNonsA4szBPa4/0Yo4PhbQ2nGM6V/7ovrPNdrUAfLUSV01DqwtRx8J pwZFmzkdKW33NN05uk/grFv/ksxExi++rycl2Kpymg+E+sCxwj5x4kV87MEHHOJz Wa/1IsITCPphqy7nTDfP/kGR6zezw+ZeCe1YmR0uFOEGvASsqFIIue9JQ6YtUJ6z 7ek5v/zjZ/raF+o5TM/JhUtj/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmRPFz8 vdtfCiD6lid8yPrP4IpuMB8GA1UdIwQYMBaAFNsbluBamNgov1fqCnFVrx0zIj4s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjAxRC84NUI4QzI5MDAz RjExMUYwQUI4NUVDNTJDNEY5QUUwMi8yeHVXNEZxWTJDaV9WLW9LY1ZXdkhUTWlQ aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4dVc0RnFZMkNpX1Ytb0tjVld2SFRNaVBpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjAxRC84NUI4QzI5MDAzRjExMUYwQUI4NUVDNTJDNEY5QUUwMi8yeHVXNEZxWTJD aV9WLW9LY1ZXdkhUTWlQaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXTFK8ZG/r8OTPrnvw7Z5KEVH43FapJ6M14e6UxojjsndjypUiVThh rirbRTKsteBEZE5andf7agUU74Ku3Ze1FsC2zhl+pGGh1YRpsMG6PqZxjwTCp/o+ r7r8BhdBYpFT9o6Q6n80Wuk0p4M9AXoqb++UMRjsfL1h48PyzFTx1s13NIOup87P p9uOh3UqVrdB8UIC6A2XwcWg3AYvUOSRglRjAI97aLg/PZS0JhNSoeDUcm1N6hxz YRc5zi+Je/qNtfDHwEQfjaf2DLHfCaewXuNhq4NNf6XWsz1/n3TovuAhYhoXEPpO kdjw3vYJNaLg3nuOsHrKyF56KfY2x7ZF -----END CERTIFICATE-----Generated at Sat Dec 6 23:26:01 2025 by rpki-client