This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft File: 2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft (raw, json) Hash identifier: QosT6ux17/jOHABTEK+f/eEAiUCtbltkMmLm65toRyU= Subject key identifier: CE:AE:14:BB:69:BB:BC:ED:0D:15:7F:8A:52:10:4D:44:C6:5D:23:D5 Authority key identifier: D8:AF:F5:03:FE:8C:5B:D2:26:6A:A2:EC:AB:E5:52:CA:75:14:7F:66 Certificate issuer: /CN=A918049D/serialNumber=D8AFF503FE8C5BD2266AA2ECABE552CA75147F66 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft Manifest number: 16 Signing time: Fri 05 Dec 2025 05:41:26 +0000 Manifest this update: Fri 05 Dec 2025 05:41:26 +0000 Manifest next update: Fri 12 Dec 2025 05:41:26 +0000 Files and hashes: 1: 2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl (hash: H/cubgk2LuquKdcvM5puYWviwc06hHo7Gxygytudr3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918049D, serialNumber=D8AFF503FE8C5BD2266AA2ECABE552CA75147F66 Validity Not Before: Dec 5 05:41:26 2025 GMT Not After : Dec 12 05:41:26 2025 GMT Subject: CN=69327086-9528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:00:69:4a:b6:9f:7e:83:20:32:df:d5:82:39: ce:76:3e:53:20:66:6d:df:28:7a:eb:35:b9:9d:fd: b3:dc:6d:a0:28:1d:0f:48:8b:5a:a4:3b:c7:b0:e0: 14:bf:e0:92:c8:76:e8:63:c2:d7:e9:19:2f:ac:ac: 09:a7:5f:b9:cc:98:3a:36:9e:7f:ae:70:f6:e9:a0: e2:ee:10:31:a7:f0:a2:08:11:dc:17:6d:fa:86:6b: 73:62:83:a0:cd:9f:60:7c:a5:40:72:fa:dc:d5:aa: f9:d5:a5:92:bf:36:e6:6a:48:b0:c0:6e:c1:c1:4c: 7c:94:44:b1:06:2e:56:7a:c5:c6:70:64:25:ba:52: f0:94:dc:f2:3e:fb:d5:6a:d8:f6:21:40:c0:42:a9: e9:c9:a5:1b:88:10:9c:6a:a7:c2:81:39:e1:67:71: 51:27:a5:48:95:bf:fa:68:ae:83:db:bc:1c:9b:fb: bf:3d:c2:e6:16:07:a9:e1:1f:5e:89:4f:0f:8a:f3: 15:2a:b8:cc:be:55:b6:15:0a:29:37:d9:9e:ff:3b: 89:ff:f0:db:69:b3:cc:a2:21:05:6c:90:10:e6:9e: 4d:8d:5d:ea:86:a3:6d:19:cb:41:ee:10:f1:68:10: f9:3d:fa:f3:ed:24:0c:ae:6a:c3:3d:aa:db:4a:d0: c4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AE:14:BB:69:BB:BC:ED:0D:15:7F:8A:52:10:4D:44:C6:5D:23:D5 X509v3 Authority Key Identifier: keyid:D8:AF:F5:03:FE:8C:5B:D2:26:6A:A2:EC:AB:E5:52:CA:75:14:7F:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:85:c3:16:67:92:8e:9b:54:d1:44:0c:f5:43:1f:3a:19:15: 19:dc:66:d7:12:a9:b2:ac:f6:d2:c8:f0:16:7e:3e:0a:64:4e: ae:4a:68:50:2a:1c:01:cb:c8:0d:65:1a:32:f1:03:39:0b:e0: 43:dc:6d:c3:4d:63:2e:a8:3a:ce:7b:ea:0c:c7:64:fc:2c:a4: 5e:8d:14:b5:34:00:21:2d:d7:a3:75:53:a1:ec:53:5f:fb:ca: 5f:b4:86:4a:a5:a9:bc:a1:2d:5a:d4:66:f4:18:6e:c0:29:e7: 27:b6:87:06:49:e5:e1:f7:9d:26:6b:fe:09:92:d0:9f:59:5d: a1:92:1e:c4:a5:c0:00:e8:1c:3a:93:15:80:b9:62:11:bf:43: c9:0d:2d:c8:b6:10:d1:d9:9d:8b:ca:44:ca:d2:0c:34:18:37: 43:0b:b1:8f:ff:31:6d:1b:19:50:64:e6:42:83:8f:5e:50:63: 18:af:77:9f:b3:da:b4:89:e3:4a:0b:cb:c4:96:c4:ff:76:43: 4a:45:77:e8:11:5c:a6:6e:ff:1f:e1:b0:ff:ec:54:6e:cf:fb: 8b:65:55:c0:49:a2:96:e1:cb:74:a1:4b:c5:0a:99:f3:8c:d7: 5f:36:08:d6:0e:ec:9b:1d:9f:65:69:c4:79:f3:0c:b1:76:ed: b0:19:f3:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDQ5RDExMC8GA1UEBRMoRDhBRkY1MDNGRThDNUJEMjI2NkFBMkVDQUJFNTUyQ0E3 NTE0N0Y2NjAeFw0yNTEyMDUwNTQxMjZaFw0yNTEyMTIwNTQxMjZaMBgxFjAUBgNV BAMTDTY5MzI3MDg2LTk1MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaAGlKtp9+gyAy39WCOc52PlMgZm3fKHrrNbmd/bPcbaAoHQ9Ii1qkO8ew4BS/ 4JLIduhjwtfpGS+srAmnX7nMmDo2nn+ucPbpoOLuEDGn8KIIEdwXbfqGa3Nig6DN n2B8pUBy+tzVqvnVpZK/NuZqSLDAbsHBTHyURLEGLlZ6xcZwZCW6UvCU3PI++9Vq 2PYhQMBCqenJpRuIEJxqp8KBOeFncVEnpUiVv/poroPbvByb+789wuYWB6nhH16J Tw+K8xUquMy+VbYVCik32Z7/O4n/8Ntps8yiIQVskBDmnk2NXeqGo20Zy0HuEPFo EPk9+vPtJAyuasM9qttK0MS3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzq4Uu2m7 vO0NFX+KUhBNRMZdI9UwHwYDVR0jBBgwFoAU2K/1A/6MW9ImaqLsq+VSynUUf2Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwNDlEL0I1N0NBNTU4QjJD NjExRjA5MTM0QkE2REM0RjlBRTAyLzJLXzFBXzZNVzlJbWFxTHNxLVZTeW5VVWYy WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMktfMUFfNk1XOUltYXFMc3EtVlN5blVVZjJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw NDlEL0I1N0NBNTU4QjJDNjExRjA5MTM0QkE2REM0RjlBRTAyLzJLXzFBXzZNVzlJ bWFxTHNxLVZTeW5VVWYyWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHmFwxZnko6bVNFEDPVDHzoZFRncZtcSqbKs9tLI8BZ+PgpkTq5KaFAq HAHLyA1lGjLxAzkL4EPcbcNNYy6oOs576gzHZPwspF6NFLU0ACEt16N1U6HsU1/7 yl+0hkqlqbyhLVrUZvQYbsAp5ye2hwZJ5eH3nSZr/gmS0J9ZXaGSHsSlwADoHDqT FYC5YhG/Q8kNLci2ENHZnYvKRMrSDDQYN0MLsY//MW0bGVBk5kKDj15QYxivd5+z 2rSJ40oLy8SWxP92Q0pFd+gRXKZu/x/hsP/sVG7P+4tlVcBJopbhy3ShS8UKmfOM 1182CNYO7Jsdn2VpxHnzDLF27bAZ8zc= -----END CERTIFICATE-----Generated at Sat Dec 6 15:50:10 2025 by rpki-client