This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft File: C2HEdIlppE_IPIiCoCV50NWSO2E.mft (raw, json) Hash identifier: FQWAG1mKRBthRS+hd8Q+yLVDvZ5XPof/W/sKVU8wtl8= Subject key identifier: 84:98:7E:4C:90:A7:C9:C7:05:41:AA:03:29:06:84:75:66:32:A2:62 Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61 Certificate issuer: /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft Manifest number: 01FB Signing time: Fri 05 Dec 2025 00:56:32 +0000 Manifest this update: Fri 05 Dec 2025 00:56:31 +0000 Manifest next update: Fri 12 Dec 2025 00:56:31 +0000 Files and hashes: 1: C2HEdIlppE_IPIiCoCV50NWSO2E.crl (hash: WqLhi5MYJDDTy+kByniNNGPokP29s+f708Yril8iLOk=) 2: 9816AE202ED111EF9B668069C4F9AE02.roa (hash: yNjhdAnLRCwNWiJ1nMJfINPCaK225vWnJCXkmet4kyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B092, serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61 Validity Not Before: Dec 5 00:56:31 2025 GMT Not After : Dec 12 00:56:31 2025 GMT Subject: CN=69322dbf-8ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:07:eb:63:8f:dc:bc:a9:9d:18:b6:6d:70:85: cd:03:07:c4:03:f0:53:b0:6d:9e:60:7c:a8:03:40: 5f:3b:c1:e2:5d:d5:db:7c:c9:b5:14:f1:5c:d6:90: 0b:e9:8b:14:3b:ef:66:7e:ab:45:6f:1e:75:d2:33: 9e:69:c5:44:d6:61:80:99:a5:d4:01:73:2e:e5:a9: 27:6c:aa:3e:cc:0f:eb:8f:97:7a:2a:3f:18:c9:92: 75:48:4e:e8:51:07:a8:91:7e:fe:8f:a7:33:cb:79: ad:6d:01:8a:44:0e:ed:18:c6:c0:d8:cc:22:c8:ea: 59:d3:5d:d9:47:b2:bb:21:87:ab:c6:42:68:89:b5: 91:ab:58:91:d2:6a:d9:09:b1:db:0c:0f:1a:37:6f: 1f:c2:db:b6:71:10:24:35:ff:7a:c5:b0:a6:05:fc: be:d9:79:2b:46:4b:3d:68:b7:5c:bb:da:ba:f7:fe: d8:ca:de:a7:4a:91:74:b9:1e:13:66:f5:ed:4f:f6: 8f:72:7e:17:c4:28:d8:40:02:85:42:bf:29:13:20: 51:36:1a:6c:3b:48:b3:e1:db:7d:d5:a6:7b:e3:5a: e3:76:b9:e1:b5:a0:4a:71:ba:a2:ee:37:fd:9c:d7: 79:37:d4:e2:e0:3f:57:35:d1:51:ac:8f:3b:55:f9: 30:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:98:7E:4C:90:A7:C9:C7:05:41:AA:03:29:06:84:75:66:32:A2:62 X509v3 Authority Key Identifier: keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:fb:db:a8:51:0d:4a:6d:c8:ba:48:b3:9d:19:8c:e9:57:04: 89:2a:88:44:7d:d4:26:29:4c:c5:d8:86:21:62:d7:57:47:71: 4f:fb:4b:b9:2b:8f:67:4c:1c:e6:05:a4:5b:f6:33:22:72:1e: fc:ef:5f:e6:26:07:fe:37:82:86:68:a1:4d:eb:c1:ef:38:f8: 2e:46:14:5b:62:34:20:89:04:98:55:b8:59:2a:db:39:a6:6a: 1f:07:b1:0d:89:ca:ac:33:d4:d5:fd:7e:58:64:ea:dd:64:21: 5b:e7:77:41:1e:fd:bc:ba:39:b1:2a:13:4c:80:9e:91:c1:b0: dd:2c:d3:10:dd:8a:32:74:82:fb:62:d6:57:7e:e4:91:77:7b: 02:c6:d6:6b:23:71:05:53:b2:77:73:58:16:c6:db:4f:68:87: 45:c3:1d:72:d3:b5:80:1b:e8:31:08:46:6b:9a:53:d7:99:3b: 57:41:54:a3:64:e4:37:10:48:b7:2f:2e:c2:f5:c7:69:5f:a2: f6:f1:79:79:3e:3a:d8:aa:7e:f3:8b:ab:c7:c9:21:b1:02:8e: 8c:cb:99:a9:4c:97:88:9c:89:14:3c:06:31:4c:ef:17:12:a2: 38:32:69:27:38:e0:f2:77:4a:cf:83:1b:e2:bc:b9:fd:78:a1: b7:36:cc:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IwOTIxMTAvBgNVBAUTKDBCNjFDNDc0ODk2OUE0NEZDODNDODg4MkEwMjU3OUQw RDU5MjNCNjEwHhcNMjUxMjA1MDA1NjMxWhcNMjUxMjEyMDA1NjMxWjAYMRYwFAYD VQQDEw02OTMyMmRiZi04ZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQfrY4/cvKmdGLZtcIXNAwfEA/BTsG2eYHyoA0BfO8HiXdXbfMm1FPFc1pAL 6YsUO+9mfqtFbx510jOeacVE1mGAmaXUAXMu5aknbKo+zA/rj5d6Kj8YyZJ1SE7o UQeokX7+j6czy3mtbQGKRA7tGMbA2MwiyOpZ013ZR7K7IYerxkJoibWRq1iR0mrZ CbHbDA8aN28fwtu2cRAkNf96xbCmBfy+2XkrRks9aLdcu9q69/7Yyt6nSpF0uR4T ZvXtT/aPcn4XxCjYQAKFQr8pEyBRNhpsO0iz4dt91aZ741rjdrnhtaBKcbqi7jf9 nNd5N9Ti4D9XNdFRrI87VfkwFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISYfkyQ p8nHBUGqAykGhHVmMqJiMB8GA1UdIwQYMBaAFAthxHSJaaRPyDyIgqAledDVkjth MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjA5Mi8yODIzMDk5NkVF MjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBFX0lQSWlDb0NWNTBOV1NP MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MySEVkSWxwcEVfSVBJaUNvQ1Y1ME5XU08yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjA5Mi8yODIzMDk5NkVFMjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBF X0lQSWlDb0NWNTBOV1NPMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl+9uoUQ1Kbci6SLOdGYzpVwSJKohEfdQmKUzF2IYhYtdXR3FP+0u5 K49nTBzmBaRb9jMich7871/mJgf+N4KGaKFN68HvOPguRhRbYjQgiQSYVbhZKts5 pmofB7ENicqsM9TV/X5YZOrdZCFb53dBHv28ujmxKhNMgJ6RwbDdLNMQ3YoydIL7 YtZXfuSRd3sCxtZrI3EFU7J3c1gWxttPaIdFwx1y07WAG+gxCEZrmlPXmTtXQVSj ZOQ3EEi3Ly7C9cdpX6L28Xl5PjrYqn7zi6vHySGxAo6My5mpTJeInIkUPAYxTO8X EqI4MmknOODyd0rPgxvivLn9eKG3Nsz2 -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:15 2025 by rpki-client