This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft File: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft (raw, json) Hash identifier: +hjgPBUJ8EMbhNwQf3LZzzKuX4tKrBmhpNirOGHwUSY= Subject key identifier: 2D:A4:BD:30:8A:CF:61:A6:1B:01:9F:13:4C:75:9D:EA:8B:A5:1C:99 Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 Certificate issuer: /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Certificate serial: 099C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft Manifest number: 0993 Signing time: Sat 06 Dec 2025 19:14:40 +0000 Manifest this update: Sat 06 Dec 2025 19:14:39 +0000 Manifest next update: Sat 13 Dec 2025 19:14:39 +0000 Files and hashes: 1: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl (hash: GYG/P0UTTZVQtqze9HojT6TZwbgFydyFoz2vviVka3c=) 2: 33CDE41E5A4711EFA5ED8487C4F9AE02.roa (hash: 4ExF2O2Frz9RSsUL7YBwRkgASJlP9BcJdkByxRonGSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2460 (0x99c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D687, serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Validity Not Before: Dec 6 19:14:39 2025 GMT Not After : Dec 13 19:14:39 2025 GMT Subject: CN=6934809f-0071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:da:ff:d4:b5:e6:d2:73:6f:2e:24:2a:7e:2d: 49:2f:b9:c9:5b:e8:9e:82:28:49:bc:c3:9f:a0:aa: c9:bc:1e:5f:ac:ce:ef:22:86:b0:3a:9d:81:45:32: 03:20:ca:49:d9:53:0f:29:d2:68:a3:a8:11:0d:00: 26:7a:d0:1c:e2:91:6c:ed:3c:36:49:fd:46:42:ef: a8:3d:bd:94:28:6f:65:a9:b6:63:22:91:de:85:65: 51:43:03:c1:39:eb:7e:50:d8:0e:e2:9c:7c:f5:1d: 48:63:70:f6:d4:9a:34:12:c6:f8:83:c6:40:27:98: 82:57:68:01:a1:7a:40:2c:0d:06:65:52:81:66:6f: aa:f2:61:e1:b0:45:c5:de:f8:e4:db:93:fa:66:82: 22:17:8f:46:e6:a1:d5:84:da:1c:0d:34:b7:4f:5b: 23:1e:64:eb:2c:f0:a3:3e:dc:5c:61:c6:34:4c:e5: ae:ad:0b:41:85:26:7c:0b:da:9b:4c:14:74:44:cf: ac:d8:4f:58:6d:df:a4:9f:e3:d8:ee:7e:be:ac:62: d6:d8:14:ef:f7:80:56:a3:7b:30:1d:44:35:d0:97: ec:f4:47:21:ef:82:1c:25:dd:f2:ce:99:bf:3f:42: 12:ec:69:3e:ae:84:85:f5:c1:96:cf:42:94:2b:cf: 60:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A4:BD:30:8A:CF:61:A6:1B:01:9F:13:4C:75:9D:EA:8B:A5:1C:99 X509v3 Authority Key Identifier: keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:6e:84:b5:d5:b8:9a:93:f0:8b:05:97:0d:51:26:5e:e9:14: 0d:1a:d2:f0:e9:d4:2f:bd:47:4e:b1:51:0e:36:f1:6a:f5:b9: ea:fd:52:58:1b:2c:90:a6:19:4b:0f:68:58:4c:b6:70:90:2d: e9:40:98:9b:7e:5e:3e:16:61:5a:14:41:ea:63:88:4c:16:47: 69:93:8f:28:1c:d2:82:f4:d5:b1:5f:e3:ea:93:ea:6d:6d:20: 2a:cd:4d:c9:89:ac:51:90:4e:c4:de:da:5d:52:fe:58:53:6e: 85:65:3d:e9:aa:db:a8:8c:f0:8d:30:73:40:14:c3:b4:4e:7c: 5f:6a:9d:d7:33:6b:c2:b5:28:96:f4:26:a6:fa:fd:76:fc:60: d7:7b:77:72:e1:cd:3d:dd:c8:00:96:1c:ec:e6:71:17:73:67: f2:e8:60:4a:f3:7b:cf:d8:1d:ca:1c:8d:a6:e4:f8:7f:15:bd: 08:45:d2:b9:42:53:4f:0e:d0:8d:24:1a:ac:a2:89:ed:50:45: 0c:43:97:a4:05:26:4e:c1:c7:e0:e7:75:22:32:8a:2d:54:82: 06:be:05:c6:dc:c2:57:95:20:97:eb:80:25:cb:44:d3:50:8e: cf:bd:0a:af:25:a9:4f:75:52:57:a1:9c:32:72:7d:7f:46:b0: d3:fa:eb:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2ODcxMTAvBgNVBAUTKERBQkIxNjlEOUU5RDc3RTY1NzZDMDE4MTAxMjUyQ0Iw QjQ4NTdGNjIwHhcNMjUxMjA2MTkxNDM5WhcNMjUxMjEzMTkxNDM5WjAYMRYwFAYD VQQDEw02OTM0ODA5Zi0wMDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudr/1LXm0nNvLiQqfi1JL7nJW+iegihJvMOfoKrJvB5frM7vIoawOp2BRTID IMpJ2VMPKdJoo6gRDQAmetAc4pFs7Tw2Sf1GQu+oPb2UKG9lqbZjIpHehWVRQwPB Oet+UNgO4px89R1IY3D21Jo0Esb4g8ZAJ5iCV2gBoXpALA0GZVKBZm+q8mHhsEXF 3vjk25P6ZoIiF49G5qHVhNocDTS3T1sjHmTrLPCjPtxcYcY0TOWurQtBhSZ8C9qb TBR0RM+s2E9Ybd+kn+PY7n6+rGLW2BTv94BWo3swHUQ10Jfs9Ech74IcJd3yzpm/ P0IS7Gk+roSF9cGWz0KUK89gfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2kvTCK z2GmGwGfE0x1neqLpRyZMB8GA1UdIwQYMBaAFNq7Fp2enXfmV2wBgQElLLC0hX9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDY4Ny83NkI0M0I2NDlG NDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQtWlhiQUdCQVNVc3NMU0Zm MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyc1duWjZkZC1aWGJBR0JBU1Vzc0xTRmYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDY4Ny83NkI0M0I2NDlGNDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQt WlhiQUdCQVNVc3NMU0ZmMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQboS11biak/CLBZcNUSZe6RQNGtLw6dQvvUdOsVEONvFq9bnq/VJY GyyQphlLD2hYTLZwkC3pQJibfl4+FmFaFEHqY4hMFkdpk48oHNKC9NWxX+Pqk+pt bSAqzU3JiaxRkE7E3tpdUv5YU26FZT3pqtuojPCNMHNAFMO0Tnxfap3XM2vCtSiW 9Cam+v12/GDXe3dy4c093cgAlhzs5nEXc2fy6GBK83vP2B3KHI2m5Ph/Fb0IRdK5 QlNPDtCNJBqsoontUEUMQ5ekBSZOwcfg53UiMootVIIGvgXG3MJXlSCX64Aly0TT UI7PvQqvJalPdVJXoZwycn1/RrDT+utX -----END CERTIFICATE-----Generated at Sun Dec 7 02:37:04 2025 by rpki-client