This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft File: 2AV3_jUc7BMvwP-hiIerDHRrFPI.mft (raw, json) Hash identifier: 0P+UIWObutfZrN3jYN8vp3htC9dWuKdKzH77ci83y/w= Subject key identifier: C2:24:8C:D1:AC:D9:93:A5:8F:0C:D8:47:2B:B5:A8:24:3C:21:5D:91 Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 Certificate issuer: /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft Manifest number: 01F1 Signing time: Fri 05 Dec 2025 00:51:17 +0000 Manifest this update: Fri 05 Dec 2025 00:51:17 +0000 Manifest next update: Fri 12 Dec 2025 00:51:17 +0000 Files and hashes: 1: 2AV3_jUc7BMvwP-hiIerDHRrFPI.crl (hash: nyRsaZO4TUujOCjMhS9QdfXML9g2Gv4tuh85XxK0df8=) 2: 732F4132D85E11EDB34ED618C4F9AE02.roa (hash: Xws1Pbqqq0/QFZ02P8d+7Evj6MZMCt/rYpdMr05WU7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:51:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169FA9, serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Validity Not Before: Dec 5 00:51:17 2025 GMT Not After : Dec 12 00:51:17 2025 GMT Subject: CN=69322c85-5595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ec:01:03:cd:9a:5c:67:28:f8:cf:0b:8d:cc: a5:5c:eb:68:7c:03:cb:94:53:8a:22:86:5c:ab:79: a9:af:b7:f9:4a:5d:d9:41:9f:9e:af:2d:77:a2:5c: 42:aa:8a:b3:f1:c8:67:80:4c:8b:35:90:d9:20:a3: 5e:d3:30:44:09:fd:8d:53:5b:e1:91:d4:32:42:0f: bb:c4:a3:b1:d8:02:d3:c1:cf:7a:06:38:c4:1d:9b: 9b:b0:5d:a9:2a:16:2f:5d:81:06:ee:24:ff:a0:9e: 6b:34:27:1e:6f:2b:bb:d2:71:04:e5:00:3b:1a:49: 1e:8a:6a:57:d1:3b:51:35:75:4b:bc:b4:a6:e3:25: df:37:cf:3f:ae:98:d9:9b:7a:0b:57:0e:02:1a:01: d7:a8:81:61:54:27:be:65:4a:af:55:12:9d:24:e0: 33:91:8d:fb:92:0e:96:5b:f5:11:d1:03:df:9a:2e: 29:76:6c:8e:8b:d2:09:dd:4b:ec:00:9f:4f:df:20: 79:ea:2e:95:4b:88:91:f9:1b:e3:a8:80:77:ab:1b: 3c:ea:bf:09:86:8d:c0:ed:f4:88:d6:17:26:d6:0e: a6:82:a9:bc:59:50:ad:32:06:75:81:45:ab:e7:2a: 2f:d9:7e:95:9c:20:e8:dc:e6:c5:bb:af:4f:dd:11: 38:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:24:8C:D1:AC:D9:93:A5:8F:0C:D8:47:2B:B5:A8:24:3C:21:5D:91 X509v3 Authority Key Identifier: keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:6a:98:d2:c6:6a:f5:34:bf:4d:c6:4f:e7:9a:a4:f5:12:42: 37:a9:0f:5f:fd:2d:d0:6e:bd:b7:53:ba:93:38:32:b4:fd:db: 3a:25:53:c0:8f:35:32:cd:13:cc:76:a9:fa:1f:04:74:43:00: fc:ce:d7:c5:1f:58:91:99:8e:8c:62:34:25:6f:7b:29:86:b8: 6f:63:88:2d:2f:dc:99:46:82:11:78:f1:cb:65:1b:cd:f7:3b: 2f:54:ef:d4:50:e7:fa:c1:57:8e:c7:ef:95:8f:6f:95:f4:b6: b8:f5:bc:17:e5:6d:ab:31:01:f4:71:af:07:a6:62:41:37:06: db:6a:20:8e:d8:1f:b1:9f:03:72:fa:46:0b:9a:77:1d:5d:bd: 66:09:b2:b5:ac:8a:1e:3b:7f:ba:f4:af:90:15:36:c2:3e:3e: fb:3d:91:54:03:e7:a0:62:46:da:8b:3d:43:47:47:d0:e5:cb: a0:25:63:70:7b:d2:fe:21:35:5d:8d:d6:53:e1:f5:ce:4c:f4: 59:a2:b4:cd:ce:a9:e0:9f:a0:e6:c8:ec:e4:81:43:a5:b7:f6: 3f:da:55:dc:29:0d:c6:2d:b7:f0:fc:7f:12:3b:4d:f9:2f:8c: d1:28:bd:4c:4f:8c:28:4f:b5:2e:7c:a6:43:47:d8:d6:7d:63: 91:1f:c3:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlGQTkxMTAvBgNVBAUTKEQ4MDU3N0ZFMzUxQ0VDMTMyRkMwRkZBMTg4ODdBQjBD NzQ2QjE0RjIwHhcNMjUxMjA1MDA1MTE3WhcNMjUxMjEyMDA1MTE3WjAYMRYwFAYD VQQDEw02OTMyMmM4NS01NTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4uwBA82aXGco+M8LjcylXOtofAPLlFOKIoZcq3mpr7f5Sl3ZQZ+ery13olxC qoqz8chngEyLNZDZIKNe0zBECf2NU1vhkdQyQg+7xKOx2ALTwc96BjjEHZubsF2p KhYvXYEG7iT/oJ5rNCcebyu70nEE5QA7GkkeimpX0TtRNXVLvLSm4yXfN88/rpjZ m3oLVw4CGgHXqIFhVCe+ZUqvVRKdJOAzkY37kg6WW/UR0QPfmi4pdmyOi9IJ3Uvs AJ9P3yB56i6VS4iR+RvjqIB3qxs86r8Jho3A7fSI1hcm1g6mgqm8WVCtMgZ1gUWr 5yov2X6VnCDo3ObFu69P3RE4OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIkjNGs 2ZOljwzYRyu1qCQ8IV2RMB8GA1UdIwQYMBaAFNgFd/41HOwTL8D/oYiHqwx0axTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUZBOS83QzBGNEQ4MkQ4 NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdCTXZ3UC1oaUllckRIUnJG UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBVjNfalVjN0JNdndQLWhpSWVyREhSckZQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUZBOS83QzBGNEQ4MkQ4NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdC TXZ3UC1oaUllckRIUnJGUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxapjSxmr1NL9Nxk/nmqT1EkI3qQ9f/S3Qbr23U7qTODK0/ds6JVPA jzUyzRPMdqn6HwR0QwD8ztfFH1iRmY6MYjQlb3sphrhvY4gtL9yZRoIRePHLZRvN 9zsvVO/UUOf6wVeOx++Vj2+V9La49bwX5W2rMQH0ca8HpmJBNwbbaiCO2B+xnwNy +kYLmncdXb1mCbK1rIoeO3+69K+QFTbCPj77PZFUA+egYkbaiz1DR0fQ5cugJWNw e9L+ITVdjdZT4fXOTPRZorTNzqngn6DmyOzkgUOlt/Y/2lXcKQ3GLbfw/H8SO035 L4zRKL1MT4woT7UufKZDR9jWfWORH8Oe -----END CERTIFICATE-----Generated at Sun Dec 7 01:55:33 2025 by rpki-client