This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft File: g2LSOGrBMH7vi7_YdPc45tqjVXI.mft (raw, json) Hash identifier: Ba9Gg8vI44tM90DET7Wj+ZseBh1MT3DFhIlCVCOn5VY= Subject key identifier: A0:52:4E:3D:D7:72:BD:EC:EB:04:F0:66:AD:32:75:26:B8:91:8E:02 Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 Certificate issuer: /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Certificate serial: 0D7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft Manifest number: 0D76 Signing time: Thu 04 Dec 2025 17:28:48 +0000 Manifest this update: Thu 04 Dec 2025 17:28:48 +0000 Manifest next update: Thu 11 Dec 2025 17:28:48 +0000 Files and hashes: 1: g2LSOGrBMH7vi7_YdPc45tqjVXI.crl (hash: xDk0chUT/gLbewaYx18zOQDobAgWD6hU9DcGNdIkCb4=) 2: D11C8B12DB7111E981104A54C4F9AE02.roa (hash: b+YvMULskW1aqcLGiau9z7PDlxuascZM6xtTvuLKH/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3453 (0xd7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F5, serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Validity Not Before: Dec 4 17:28:48 2025 GMT Not After : Dec 11 17:28:48 2025 GMT Subject: CN=6931c4d0-9b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f0:fc:7d:e6:65:a6:51:68:83:1e:fa:a8:d9: 96:e6:3d:d9:58:9b:b5:cc:a0:11:f4:47:32:72:f2: 70:b1:80:cf:ca:9c:ea:0c:8e:70:c3:09:e5:a9:fa: 6f:2c:b1:21:3a:4c:41:24:09:77:f9:99:11:a0:b9: 91:6d:f3:59:0e:b7:af:0f:11:40:87:db:12:fd:12: c1:7f:7e:d9:40:f9:46:e3:3d:b4:a0:95:46:6e:18: 5a:0c:c9:5d:b6:54:39:e9:af:24:73:98:7b:85:3a: 50:78:a3:e7:d9:59:95:4a:48:b7:17:93:ec:8f:a2: 4e:07:8d:e9:87:97:50:77:af:2d:0d:82:d7:c1:fd: b9:61:68:89:89:1e:da:6c:79:87:23:18:f7:99:fc: 8b:3c:48:ca:22:bc:0d:e5:8e:2f:a8:84:b8:76:49: 5c:37:9a:e0:0d:34:d3:69:cd:e6:35:91:8a:28:f8: da:a0:41:f4:bb:dc:fb:ec:da:f7:f5:ee:01:e5:d0: 5f:84:27:ce:aa:58:db:78:c0:88:4b:21:ab:c2:2f: ee:9d:d5:4f:d2:4e:c0:55:12:99:d8:21:18:67:bc: a3:d2:b3:cf:f2:7e:e7:96:3e:cb:ad:20:25:87:c4: e5:49:ff:36:f4:ee:62:2a:bd:bf:72:62:16:07:e5: fa:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:52:4E:3D:D7:72:BD:EC:EB:04:F0:66:AD:32:75:26:B8:91:8E:02 X509v3 Authority Key Identifier: keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:d8:29:41:e2:00:fa:b7:ae:4c:da:9e:17:80:41:73:99:39: 1e:0c:0f:d1:0f:33:ef:3d:ca:cc:7c:5b:5d:fc:69:b1:09:79: 76:97:0c:43:24:5e:bd:19:90:b4:ab:58:01:b2:b9:a8:e3:41: 19:f8:d7:45:65:83:dc:4c:d8:27:eb:69:1f:ab:25:43:00:8b: 5c:6d:5c:8f:c3:ce:c9:44:f1:75:e5:af:41:fd:da:65:1f:4c: 03:30:a3:a1:1a:88:a4:7c:36:cf:ae:3a:7b:8d:1c:27:00:20: 7d:74:3d:86:57:19:bf:c8:bd:a3:72:a6:38:63:f6:eb:1b:ec: 4c:40:61:ea:65:b4:a2:05:b8:b2:b4:01:da:fe:dd:83:f2:1e: 8f:00:9e:40:58:21:7b:9f:94:d7:3d:f7:29:82:8f:59:5d:f8: 85:76:d2:7b:dc:dd:56:9b:fd:d3:60:f8:86:53:5f:c3:ae:99: 23:b9:33:88:ea:5e:e5:5f:f4:c8:ba:a9:91:2e:69:06:b1:fa: cf:82:a3:95:53:db:9e:22:7f:dc:07:65:07:60:d7:ea:16:a2: 82:1b:16:03:85:54:7b:24:11:5c:b6:53:13:e4:ba:65:09:ae: 2b:33:0b:a7:05:9f:f6:fb:bd:92:8b:19:e5:a9:7d:7b:ae:6e: f3:31:20:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MwRjUxMTAvBgNVBAUTKDgzNjJEMjM4NkFDMTMwN0VFRjhCQkZEODc0RjczOEU2 REFBMzU1NzIwHhcNMjUxMjA0MTcyODQ4WhcNMjUxMjExMTcyODQ4WjAYMRYwFAYD VQQDEw02OTMxYzRkMC05Yjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvD8feZlplFogx76qNmW5j3ZWJu1zKAR9EcycvJwsYDPypzqDI5wwwnlqfpv LLEhOkxBJAl3+ZkRoLmRbfNZDrevDxFAh9sS/RLBf37ZQPlG4z20oJVGbhhaDMld tlQ56a8kc5h7hTpQeKPn2VmVSki3F5Psj6JOB43ph5dQd68tDYLXwf25YWiJiR7a bHmHIxj3mfyLPEjKIrwN5Y4vqIS4dklcN5rgDTTTac3mNZGKKPjaoEH0u9z77Nr3 9e4B5dBfhCfOqljbeMCISyGrwi/undVP0k7AVRKZ2CEYZ7yj0rPP8n7nlj7LrSAl h8TlSf829O5iKr2/cmIWB+X6NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBSTj3X cr3s6wTwZq0ydSa4kY4CMB8GA1UdIwQYMBaAFINi0jhqwTB+74u/2HT3OObao1Vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGNS8xRUM0RTA5QURC NzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1IN3ZpN19ZZFBjNDV0cWpW WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cyTFNPR3JCTUg3dmk3X1lkUGM0NXRxalZYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzBGNS8xRUM0RTA5QURCNzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1I N3ZpN19ZZFBjNDV0cWpWWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy2ClB4gD6t65M2p4XgEFzmTkeDA/RDzPvPcrMfFtd/GmxCXl2lwxD JF69GZC0q1gBsrmo40EZ+NdFZYPcTNgn62kfqyVDAItcbVyPw87JRPF15a9B/dpl H0wDMKOhGoikfDbPrjp7jRwnACB9dD2GVxm/yL2jcqY4Y/brG+xMQGHqZbSiBbiy tAHa/t2D8h6PAJ5AWCF7n5TXPfcpgo9ZXfiFdtJ73N1Wm/3TYPiGU1/DrpkjuTOI 6l7lX/TIuqmRLmkGsfrPgqOVU9ueIn/cB2UHYNfqFqKCGxYDhVR7JBFctlMT5Lpl Ca4rMwunBZ/2+72SixnlqX17rm7zMSAi -----END CERTIFICATE-----Generated at Sat Dec 6 15:59:39 2025 by rpki-client