This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft File: 2TXs95kTG-wkONqd6CtoWJY8cFw.mft (raw, json) Hash identifier: q4NX6YI6Q/ysY90cGV7CNVXtkxktGPD9C8lnyVvBtJM= Subject key identifier: 8D:49:DE:32:6A:0B:1E:CC:8C:1B:77:9B:05:22:B4:07:01:0F:DC:FA Authority key identifier: D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C Certificate issuer: /CN=A91547E4/serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft Manifest number: 08 Signing time: Fri 05 Dec 2025 05:54:42 +0000 Manifest this update: Fri 05 Dec 2025 05:54:42 +0000 Manifest next update: Fri 12 Dec 2025 05:54:42 +0000 Files and hashes: 1: 2TXs95kTG-wkONqd6CtoWJY8cFw.crl (hash: J7iPXJZSATaZhwpJ92IkX6Ckvh8mZ+6UO31kDgUhuXA=) 2: EDD5097ECB7411F0A2C24D4FC4F9AE02.roa (hash: HCkuebr9HV42wP4+Tkes5jAKhv3pdZCIfJI8PjfVHow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547E4, serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C Validity Not Before: Dec 5 05:54:42 2025 GMT Not After : Dec 12 05:54:42 2025 GMT Subject: CN=693273a2-129b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a8:b3:be:a1:c9:b0:f4:9f:82:58:03:77:01: 9f:f4:45:6e:07:fc:60:89:04:1b:cc:e4:9f:ad:d1: d5:70:64:d4:ee:a5:45:0a:ac:3b:ab:ac:31:5e:2f: 94:48:cf:de:7d:d7:4c:f2:18:a4:98:c8:e1:1d:85: a9:c0:4b:49:80:0a:5e:70:b0:4b:36:9f:67:9d:6d: b7:dd:c6:5c:8f:57:e5:86:4d:9b:ad:1b:f1:16:f0: cf:25:bb:9f:d0:9b:f4:ce:c8:74:b9:7e:7c:ff:b4: b5:9f:a5:2b:a1:a3:ad:a3:80:cf:a2:63:0a:76:ed: 32:3c:4c:b6:7a:cc:de:76:f9:d6:9d:be:22:0d:cf: 0f:34:d7:f7:43:77:fe:c9:41:39:36:d4:2d:45:e2: 5e:6f:75:d4:94:35:ff:ca:04:9c:3c:d9:5b:d9:a2: 57:ed:c5:f8:0c:79:e3:5f:02:58:53:71:64:08:24: 4c:9a:28:89:d4:3e:5b:6d:43:ca:65:d9:b9:91:d2: e8:4d:30:0c:fe:7e:f6:34:e1:d7:3a:06:55:87:d3: 69:1c:d8:18:2c:ae:fa:c2:34:f6:8d:0c:4e:49:46: 42:5e:9e:55:13:a6:99:8e:33:b1:55:89:14:c4:95: 3f:21:45:23:4e:c5:ae:c8:39:29:d2:ef:a6:48:af: c6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:49:DE:32:6A:0B:1E:CC:8C:1B:77:9B:05:22:B4:07:01:0F:DC:FA X509v3 Authority Key Identifier: keyid:D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:a9:24:6f:a8:55:d2:2a:8d:61:84:7b:10:ef:41:44:dc:cc: a4:a4:78:84:ce:82:2f:f9:00:60:e4:0c:77:13:da:5d:cb:2e: 38:3d:24:fd:27:9a:cd:19:7c:c7:76:e2:08:d3:76:9f:2d:ac: 4d:04:c2:81:eb:cc:f5:36:cf:00:05:38:a8:be:30:8c:6e:e5: 53:4c:6b:68:99:88:01:1f:b3:7f:90:36:51:08:cb:12:45:34: 29:64:02:6d:7d:85:60:2d:0c:af:03:f1:cf:8c:d0:b8:82:4c: 00:4c:0e:c9:7c:56:58:3f:4c:ec:49:5b:b5:cd:04:e5:93:87: 49:e1:d4:2e:60:39:5c:d3:2c:2a:15:ec:13:a6:28:33:11:b2: ca:fa:de:4d:93:39:83:87:b7:6c:dc:82:af:cf:6d:da:c4:3a: 50:58:2d:cc:4b:26:33:54:1b:b2:96:4d:fb:b8:d6:2a:27:39: 2f:ba:cf:c2:2f:4f:79:1b:03:2b:6b:f8:9c:77:cf:04:9d:e2: 66:d6:ae:b2:4e:86:0f:a4:e1:84:3d:70:de:74:a1:7c:75:0c: 6b:ff:fb:f3:bd:18:7a:db:db:e7:6a:89:0e:9c:cc:ba:86:de: f1:df:04:d0:30:7d:5f:46:11:2c:33:71:e3:cd:c0:ad:34:f8: bb:e8:36:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDdFNDExMC8GA1UEBRMoRDkzNUVDRjc5OTEzMUJFQzI0MzhEQTlERTgyQjY4NTg5 NjNDNzA1QzAeFw0yNTEyMDUwNTU0NDJaFw0yNTEyMTIwNTU0NDJaMBgxFjAUBgNV BAMTDTY5MzI3M2EyLTEyOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaqLO+ocmw9J+CWAN3AZ/0RW4H/GCJBBvM5J+t0dVwZNTupUUKrDurrDFeL5RI z95910zyGKSYyOEdhanAS0mACl5wsEs2n2edbbfdxlyPV+WGTZutG/EW8M8lu5/Q m/TOyHS5fnz/tLWfpSuho62jgM+iYwp27TI8TLZ6zN52+dadviINzw801/dDd/7J QTk21C1F4l5vddSUNf/KBJw82VvZolftxfgMeeNfAlhTcWQIJEyaKInUPlttQ8pl 2bmR0uhNMAz+fvY04dc6BlWH02kc2BgsrvrCNPaNDE5JRkJenlUTppmOM7FViRTE lT8hRSNOxa7IOSnS76ZIr8ZjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjUneMmoL HsyMG3ebBSK0BwEP3PowHwYDVR0jBBgwFoAU2TXs95kTG+wkONqd6CtoWJY8cFww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0U0LzAyMzJFNTQ4Q0I3 MTExRjBBNUFERUQyMkM0RjlBRTAyLzJUWHM5NWtURy13a09OcWQ2Q3RvV0pZOGNG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMlRYczk1a1RHLXdrT05xZDZDdG9XSlk4Y0Z3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 N0U0LzAyMzJFNTQ4Q0I3MTExRjBBNUFERUQyMkM0RjlBRTAyLzJUWHM5NWtURy13 a09OcWQ2Q3RvV0pZOGNGdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAKpJG+oVdIqjWGEexDvQUTczKSkeITOgi/5AGDkDHcT2l3LLjg9JP0n ms0ZfMd24gjTdp8trE0EwoHrzPU2zwAFOKi+MIxu5VNMa2iZiAEfs3+QNlEIyxJF NClkAm19hWAtDK8D8c+M0LiCTABMDsl8Vlg/TOxJW7XNBOWTh0nh1C5gOVzTLCoV 7BOmKDMRssr63k2TOYOHt2zcgq/PbdrEOlBYLcxLJjNUG7KWTfu41ionOS+6z8Iv T3kbAytr+Jx3zwSd4mbWrrJOhg+k4YQ9cN50oXx1DGv/+/O9GHrb2+dqiQ6czLqG 3vHfBNAwfV9GESwzcePNwK00+LvoNlw= -----END CERTIFICATE-----Generated at Sat Dec 6 15:50:03 2025 by rpki-client