This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft File: u2XjT0_eqStZoyVHozggimCJHgk.mft (raw, json) Hash identifier: xDzjU7NN4rbWdFC5CKVxoeKzx9xIX01HP5YW2HoNRL8= Subject key identifier: 3D:DE:90:55:57:86:25:3C:DF:0B:8E:1E:4A:A9:51:2C:E3:09:7B:6E Authority key identifier: BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09 Certificate issuer: /CN=A917F224/serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09 Certificate serial: 0C23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft Manifest number: 0C1A Signing time: Sat 06 Dec 2025 18:05:46 +0000 Manifest this update: Sat 06 Dec 2025 18:05:46 +0000 Manifest next update: Sat 13 Dec 2025 18:05:46 +0000 Files and hashes: 1: u2XjT0_eqStZoyVHozggimCJHgk.crl (hash: dPsLQUI9q1GZvGP0HMhfnnvEit7XICYzOg1h0NU/bc4=) 2: A46E4EAC205911EAAB6ECF1FC4F9AE02.roa (hash: 6VuhUdY4wX4JtAdDLdZ6VRCxsSJ2dhl5mfVJFdysXwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3107 (0xc23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F224, serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09 Validity Not Before: Dec 6 18:05:46 2025 GMT Not After : Dec 13 18:05:46 2025 GMT Subject: CN=6934707a-2b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:37:e4:99:8b:e2:00:10:cc:86:ac:00:a9:59: 8e:01:5c:ac:24:d2:76:5d:27:94:71:c7:41:12:a4: ca:00:6d:ad:fe:7f:fc:bd:8f:7d:19:54:33:19:3e: ff:6f:7b:1a:7d:79:62:34:06:67:8b:dd:ce:f3:5c: e2:81:1a:3f:e5:2c:77:77:f2:d2:88:47:2c:f9:36: 5a:57:be:fe:96:51:2f:6e:b1:a4:20:e7:ed:06:c8: 8c:8f:8a:e2:20:dd:a7:00:17:9b:a0:4d:4c:8f:67: db:a7:38:30:20:dd:49:db:2e:22:76:e3:1b:cc:de: 1c:bd:ae:3b:eb:22:5a:71:ae:22:e1:b1:ef:2c:65: 52:7f:13:c0:a3:8a:7c:03:70:da:ad:d2:51:7b:17: 9b:f4:75:fa:13:56:f8:ab:87:73:9c:93:af:53:20: 56:20:1a:7a:60:62:46:03:3c:11:57:9e:96:5e:22: fe:e0:db:ad:98:59:21:90:a0:52:23:f8:6a:d9:c0: 4f:46:b6:84:19:2d:c2:60:67:7e:f1:17:fd:e0:78: 2d:69:84:bd:aa:ac:5b:30:ec:47:97:2b:72:df:3e: 6a:ce:5c:26:0c:95:78:88:9d:00:23:7a:2c:22:fe: ed:c6:c4:6f:80:65:c4:c3:30:ac:a6:49:6b:ba:d2: 2d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DE:90:55:57:86:25:3C:DF:0B:8E:1E:4A:A9:51:2C:E3:09:7B:6E X509v3 Authority Key Identifier: keyid:BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:8f:26:2c:6f:00:7d:0d:1a:58:d4:44:9c:4b:44:43:2c:1d: e2:af:90:01:d5:d9:4f:b0:fc:c8:21:2d:60:04:d2:f8:5c:bd: 82:3c:5d:1d:3a:2f:b9:71:5c:53:ec:e6:91:11:94:83:87:a4: c7:43:b7:8f:15:80:2b:1c:62:4e:53:6c:98:ac:61:12:5d:e8: 27:08:02:ac:d9:6b:07:83:30:17:e8:ab:fd:17:88:55:a4:a0: 57:d6:e5:64:61:7e:cd:77:8c:f5:c8:89:92:af:79:ff:ba:83: fa:83:58:5b:2e:78:d9:5c:11:76:9e:51:30:06:7d:34:54:31: ff:a9:8a:14:3e:0f:1b:88:6e:2a:8a:bf:04:68:63:fd:ae:df: d7:69:6f:56:64:a7:21:55:0e:e2:a7:6c:b8:e5:b0:ba:78:ae: 39:f8:ea:64:3c:bd:91:fb:fb:b2:49:d2:df:ed:dc:97:bd:0f: 43:2d:ae:b4:76:32:04:42:05:2c:91:a6:df:22:3f:af:5d:7d: 9c:c6:5c:3c:2b:81:29:c2:d2:2b:01:74:99:85:05:c0:ce:4c: 04:a1:58:94:d5:53:dc:5d:a2:09:49:a1:9d:6a:81:5a:60:b7: 20:11:98:ff:f2:a2:51:0e:91:4d:56:87:a7:18:af:59:86:88: 7f:f8:20:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyMjQxMTAvBgNVBAUTKEJCNjVFMzRGNEZERUE5MkI1OUEzMjU0N0EzMzgyMDhB NjA4OTFFMDkwHhcNMjUxMjA2MTgwNTQ2WhcNMjUxMjEzMTgwNTQ2WjAYMRYwFAYD VQQDEw02OTM0NzA3YS0yYjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTfkmYviABDMhqwAqVmOAVysJNJ2XSeUccdBEqTKAG2t/n/8vY99GVQzGT7/ b3safXliNAZni93O81zigRo/5Sx3d/LSiEcs+TZaV77+llEvbrGkIOftBsiMj4ri IN2nABeboE1Mj2fbpzgwIN1J2y4iduMbzN4cva476yJaca4i4bHvLGVSfxPAo4p8 A3DardJRexeb9HX6E1b4q4dznJOvUyBWIBp6YGJGAzwRV56WXiL+4NutmFkhkKBS I/hq2cBPRraEGS3CYGd+8Rf94HgtaYS9qqxbMOxHlyty3z5qzlwmDJV4iJ0AI3os Iv7txsRvgGXEwzCspklrutItrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3ekFVX hiU83wuOHkqpUSzjCXtuMB8GA1UdIwQYMBaAFLtl409P3qkrWaMlR6M4IIpgiR4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjIyNC82RTlCQTQxQTIw NTgxMUVBQjcxNzcyMUJDNEY5QUUwMi91MlhqVDBfZXFTdFpveVZIb3pnZ2ltQ0pI Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UyWGpUMF9lcVN0Wm95VkhvemdnaW1DSkhnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjIyNC82RTlCQTQxQTIwNTgxMUVBQjcxNzcyMUJDNEY5QUUwMi91MlhqVDBfZXFT dFpveVZIb3pnZ2ltQ0pIZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3jyYsbwB9DRpY1EScS0RDLB3ir5AB1dlPsPzIIS1gBNL4XL2CPF0d Oi+5cVxT7OaREZSDh6THQ7ePFYArHGJOU2yYrGESXegnCAKs2WsHgzAX6Kv9F4hV pKBX1uVkYX7Nd4z1yImSr3n/uoP6g1hbLnjZXBF2nlEwBn00VDH/qYoUPg8biG4q ir8EaGP9rt/XaW9WZKchVQ7ip2y45bC6eK45+OpkPL2R+/uySdLf7dyXvQ9DLa60 djIEQgUskabfIj+vXX2cxlw8K4EpwtIrAXSZhQXAzkwEoViU1VPcXaIJSaGdaoFa YLcgEZj/8qJRDpFNVoenGK9Zhoh/+CDo -----END CERTIFICATE-----Generated at Sun Dec 7 05:19:43 2025 by rpki-client