This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft File: 2Qg5PFuoA1r2i37ACVWOgS7QleA.mft (raw, json) Hash identifier: sjoP3DZxWxxQ+HqASSDQZ2u2GHJsoqPmsDv1ftng1TI= Subject key identifier: 53:8C:2A:71:5C:5E:00:BB:68:D6:77:F6:C8:D3:AC:7A:AC:A6:13:15 Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 Certificate issuer: /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft Manifest number: DF Signing time: Fri 05 Dec 2025 03:46:12 +0000 Manifest this update: Fri 05 Dec 2025 03:46:11 +0000 Manifest next update: Fri 12 Dec 2025 03:46:11 +0000 Files and hashes: 1: 2Qg5PFuoA1r2i37ACVWOgS7QleA.crl (hash: HlM9XdFUOPVPSMq76zJ74pnv61qJ9piHWelzd8kqLHo=) 2: C532393AB3A811F084597180C4F9AE02.roa (hash: o4oPa/VR1ZzvKNpiFYPWoNxHBNTzGR5FC/LSckFDAgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Validity Not Before: Dec 5 03:46:11 2025 GMT Not After : Dec 12 03:46:11 2025 GMT Subject: CN=69325584-ad93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:46:d4:a6:c1:58:14:66:70:44:a1:22:fe:5d: a4:0a:66:10:24:9c:3e:c8:5e:47:f1:4e:6c:9d:1f: c5:6e:e2:7b:c3:ee:a4:9c:8b:93:9b:0c:9e:d4:08: 65:70:b7:d9:88:ff:f8:74:39:c3:d0:f7:62:75:65: 19:96:2c:62:9b:80:c5:62:4c:06:90:ab:b5:16:0d: 98:d1:b3:24:ea:6e:d4:d3:e2:9b:f9:db:1d:a2:6e: 7f:2a:97:f6:df:d9:4c:c5:5f:83:1d:e3:0c:ac:be: 38:05:2b:22:43:59:79:7d:cd:a4:89:07:b6:4d:ce: 30:cc:6e:7d:04:5a:43:8a:60:b1:0f:ab:43:a9:19: ee:c1:fc:d2:39:d3:3f:08:90:5c:70:b1:60:11:88: 9c:f0:9e:35:d9:4c:ca:f4:66:74:41:a8:b7:12:3d: 25:4f:97:4c:c5:4d:a9:95:a8:bc:59:88:69:48:3d: 9a:9e:38:e8:34:08:92:cd:97:fb:06:8a:63:54:94: dc:ae:b5:84:b2:83:d4:23:78:36:21:68:f5:a2:03: 40:96:6a:24:0b:36:b3:05:a4:a5:3d:e7:1a:ca:e0: d5:7c:69:f2:4b:85:5b:4c:c6:fd:f3:1a:b5:93:03: 90:99:fa:4e:b2:5f:ac:15:33:c4:86:9b:93:de:cb: 2b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8C:2A:71:5C:5E:00:BB:68:D6:77:F6:C8:D3:AC:7A:AC:A6:13:15 X509v3 Authority Key Identifier: keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:94:b0:5f:a0:34:65:72:e4:62:fd:5b:36:00:b0:0e:39:35: da:01:70:c6:41:bc:ca:c8:2e:5c:ce:b1:ee:28:29:b3:aa:81: 7d:14:ce:bb:9a:56:57:a5:01:03:81:64:3e:4e:5e:8b:1e:5b: 39:10:40:42:ef:12:04:c8:b0:da:0d:d7:d7:d4:03:3e:f3:d7: bc:c9:36:18:b2:38:44:ac:59:11:7a:79:6c:40:52:cf:49:22: bb:b2:55:7b:e7:c3:d1:fe:b4:83:ef:ef:6b:0a:46:31:f9:52: c2:3c:db:11:6a:a1:e7:b6:ac:62:21:c9:86:d0:c9:28:2a:a5: bf:cd:73:ae:fd:bc:b5:50:64:24:13:8d:10:e2:ca:03:c5:f8: 74:38:e5:0e:30:56:94:ee:f8:a5:b7:ce:8b:6e:7a:e3:4a:cb: 27:6c:cc:00:1b:ed:35:04:02:39:b1:72:c8:19:46:d5:82:16: 11:15:9a:a9:93:0e:06:b6:66:e1:00:a9:84:02:01:07:66:22: 57:95:7d:62:a5:04:a9:17:9f:2d:47:6b:d2:3d:2f:66:ff:5a: 95:7f:52:27:85:88:48:18:9b:b1:ea:3d:92:4d:cb:19:dc:24: 9d:2f:5e:f1:ce:e8:cc:0d:76:8a:ab:a2:40:ca:3d:72:5a:70: 94:10:27:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2OUExMTAvBgNVBAUTKEQ5MDgzOTNDNUJBODAzNUFGNjhCN0VDMDA5NTU4RTgx MkVEMDk1RTAwHhcNMjUxMjA1MDM0NjExWhcNMjUxMjEyMDM0NjExWjAYMRYwFAYD VQQDEw02OTMyNTU4NC1hZDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8UbUpsFYFGZwRKEi/l2kCmYQJJw+yF5H8U5snR/FbuJ7w+6knIuTmwye1Ahl cLfZiP/4dDnD0PdidWUZlixim4DFYkwGkKu1Fg2Y0bMk6m7U0+Kb+dsdom5/Kpf2 39lMxV+DHeMMrL44BSsiQ1l5fc2kiQe2Tc4wzG59BFpDimCxD6tDqRnuwfzSOdM/ CJBccLFgEYic8J412UzK9GZ0Qai3Ej0lT5dMxU2plai8WYhpSD2anjjoNAiSzZf7 BopjVJTcrrWEsoPUI3g2IWj1ogNAlmokCzazBaSlPecayuDVfGnyS4VbTMb98xq1 kwOQmfpOsl+sFTPEhpuT3ssriQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOMKnFc XgC7aNZ39sjTrHqsphMVMB8GA1UdIwQYMBaAFNkIOTxbqANa9ot+wAlVjoEu0JXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDY5QS8yRUI2MDc5NjlC RjAxMUVGODFDOTAyNjdDNEY5QUUwMi8yUWc1UEZ1b0ExcjJpMzdBQ1ZXT2dTN1Fs ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJRZzVQRnVvQTFyMmkzN0FDVldPZ1M3UWxlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDY5QS8yRUI2MDc5NjlCRjAxMUVGODFDOTAyNjdDNEY5QUUwMi8yUWc1UEZ1b0Ex cjJpMzdBQ1ZXT2dTN1FsZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBslLBfoDRlcuRi/Vs2ALAOOTXaAXDGQbzKyC5czrHuKCmzqoF9FM67 mlZXpQEDgWQ+Tl6LHls5EEBC7xIEyLDaDdfX1AM+89e8yTYYsjhErFkRenlsQFLP SSK7slV758PR/rSD7+9rCkYx+VLCPNsRaqHntqxiIcmG0MkoKqW/zXOu/by1UGQk E40Q4soDxfh0OOUOMFaU7vilt86LbnrjSssnbMwAG+01BAI5sXLIGUbVghYRFZqp kw4GtmbhAKmEAgEHZiJXlX1ipQSpF58tR2vSPS9m/1qVf1InhYhIGJux6j2STcsZ 3CSdL17xzujMDXaKq6JAyj1yWnCUECfi -----END CERTIFICATE-----Generated at Sat Dec 6 21:25:47 2025 by rpki-client