This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft File: 2nNptJciuhObe2DznIi0m9uzXz0.mft (raw, json) Hash identifier: eKs9YZrxljKOtL41LUozQEsM1plbFBHmYkE88AsNaKs= Subject key identifier: D1:FD:48:36:ED:9A:6A:0A:99:43:31:FE:EE:87:84:41:D8:64:D9:65 Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft Manifest number: 01B1 Signing time: Fri 05 Dec 2025 01:30:58 +0000 Manifest this update: Fri 05 Dec 2025 01:30:57 +0000 Manifest next update: Fri 12 Dec 2025 01:30:57 +0000 Files and hashes: 1: 2nNptJciuhObe2DznIi0m9uzXz0.crl (hash: VoUmOaicBYaJKgeVh+4xlbWYKiJRNeFXm8bSnuTlV2k=) 2: C12ACE6AC17E11EE95D6821CC4F9AE02.roa (hash: lULpYxQ3gZ5K9JeyYCVmHd0kWgLx0IwVRgcAaZxSkdk=) 3: BBBEDEF46C8211EE866F5A78C4F9AE02.roa (hash: rX9KVe2qszOUPjT1pbGC+LrjEbspt/xxl2Uq6dePAdc=) 4: 585745526BC111EEA163E774C4F9AE02.roa (hash: Ks2Urn2far+/DcyQBS8MOk0s9n2RR8VYAIzSipmPvMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Validity Not Before: Dec 5 01:30:57 2025 GMT Not After : Dec 12 01:30:57 2025 GMT Subject: CN=693235d1-ccda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:59:2b:0a:c6:89:d6:72:76:70:a3:56:62:77: ec:44:c5:59:7a:f0:c2:84:75:10:a1:b5:f3:c7:e8: dc:02:ae:17:a5:15:6c:92:d6:a1:bc:28:5c:92:fb: 62:ab:44:93:53:f2:0d:c8:e2:57:b4:c4:b6:51:98: 97:ce:87:bc:51:41:72:85:b8:78:bc:5c:5d:b8:ae: a4:ec:a2:e6:77:de:57:bc:a5:5c:6f:1b:29:50:5c: 21:57:62:4f:d1:b1:39:6e:f8:3c:c7:c0:85:29:33: 61:8e:5c:67:b4:28:3b:31:37:b9:d4:14:bd:ca:3f: 3c:1e:24:e4:a0:90:4b:41:cb:ac:cb:60:70:1a:37: 3e:29:85:6f:7b:1f:14:b5:ee:4b:e0:57:f0:48:65: 7d:7f:60:e6:da:e7:24:b8:79:b7:79:22:1a:24:c6: e5:ee:f6:f4:cf:0b:bc:b5:74:2c:b3:21:85:f4:78: ec:ea:5e:70:26:f6:13:de:be:cd:91:55:99:c3:b0: fe:a1:99:e2:73:e9:cd:97:f9:5b:01:36:b0:d6:bf: e3:b3:ab:84:65:7a:dc:76:22:88:e3:75:3a:54:0d: de:b6:63:93:94:3a:81:84:96:1c:ec:5d:7c:ec:32: 85:2d:8e:43:74:78:ae:ae:b4:74:8c:86:ad:5a:35: 74:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FD:48:36:ED:9A:6A:0A:99:43:31:FE:EE:87:84:41:D8:64:D9:65 X509v3 Authority Key Identifier: keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:18:89:2d:87:7c:f5:53:84:28:52:3a:56:8c:a0:50:cf:7c: da:60:54:69:0f:c1:57:ac:31:2e:bd:93:4a:8a:a2:b9:c9:41: eb:14:fd:49:8e:90:ec:db:9c:ac:03:17:08:26:45:f5:e6:7d: cf:a5:6d:0f:6a:4f:e8:40:d8:c3:69:41:18:83:4c:4d:14:29: f1:37:0a:62:61:c6:35:8a:bb:d0:ce:02:dc:83:30:c3:4c:4d: 0f:cb:fe:74:18:e3:ed:cb:41:62:36:10:a5:f2:44:5e:08:86: b7:b7:e0:17:2d:cc:ee:9e:42:da:2c:ae:15:3b:49:09:62:d3: d5:4f:71:fa:9d:64:8d:41:6b:e9:e4:ff:06:72:3e:01:4d:cb: 8c:66:f3:e0:9e:88:e1:0d:cf:e0:b8:98:65:b0:aa:cc:5d:c8: 49:59:ff:3a:2c:56:9a:67:9f:4f:3c:ef:86:26:a9:8a:73:dc: 61:00:29:3f:94:38:a8:34:a3:ec:80:63:8d:f6:92:b7:4a:d3: f7:e7:96:40:c3:8c:56:cb:5e:e2:6d:19:3c:d8:df:aa:0b:26: 12:fc:94:31:6e:8d:49:3c:de:e6:b8:57:2b:c2:12:39:4d:dd: cd:56:6e:c4:ea:84:44:9f:4a:0e:c6:20:b1:df:d4:39:4e:fe: f9:b6:d2:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2MjMxMTAvBgNVBAUTKERBNzM2OUI0OTcyMkJBMTM5QjdCNjBGMzlDODhCNDlC REJCMzVGM0QwHhcNMjUxMjA1MDEzMDU3WhcNMjUxMjEyMDEzMDU3WjAYMRYwFAYD VQQDEw02OTMyMzVkMS1jY2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFkrCsaJ1nJ2cKNWYnfsRMVZevDChHUQobXzx+jcAq4XpRVsktahvChckvti q0STU/INyOJXtMS2UZiXzoe8UUFyhbh4vFxduK6k7KLmd95XvKVcbxspUFwhV2JP 0bE5bvg8x8CFKTNhjlxntCg7MTe51BS9yj88HiTkoJBLQcusy2BwGjc+KYVvex8U te5L4FfwSGV9f2Dm2uckuHm3eSIaJMbl7vb0zwu8tXQssyGF9Hjs6l5wJvYT3r7N kVWZw7D+oZnic+nNl/lbATaw1r/js6uEZXrcdiKI43U6VA3etmOTlDqBhJYc7F18 7DKFLY5DdHiurrR0jIatWjV0xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNH9SDbt mmoKmUMx/u6HhEHYZNllMB8GA1UdIwQYMBaAFNpzabSXIroTm3tg85yItJvbs189 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTYyMy9BMjVENDg5RTUw NDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVoT2JlMkR6bklpMG05dXpY ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJuTnB0SmNpdWhPYmUyRHpuSWkwbTl1elh6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTYyMy9BMjVENDg5RTUwNDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVo T2JlMkR6bklpMG05dXpYejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkGIkth3z1U4QoUjpWjKBQz3zaYFRpD8FXrDEuvZNKiqK5yUHrFP1J jpDs25ysAxcIJkX15n3PpW0Pak/oQNjDaUEYg0xNFCnxNwpiYcY1irvQzgLcgzDD TE0Py/50GOPty0FiNhCl8kReCIa3t+AXLczunkLaLK4VO0kJYtPVT3H6nWSNQWvp 5P8Gcj4BTcuMZvPgnojhDc/guJhlsKrMXchJWf86LFaaZ59PPO+GJqmKc9xhACk/ lDioNKPsgGON9pK3StP355ZAw4xWy17ibRk82N+qCyYS/JQxbo1JPN7muFcrwhI5 Td3NVm7E6oREn0oOxiCx39Q5Tv75ttKL -----END CERTIFICATE-----Generated at Sat Dec 6 21:25:58 2025 by rpki-client