This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft File: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json) Hash identifier: XScrHVtEmEtZXXl1XjP389Nh8vnAgRHcqU2PWAyFufs= Subject key identifier: CA:8F:40:5E:F0:BB:86:E2:22:02:F1:EC:32:A6:B1:65:C6:82:30:11 Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40 Certificate issuer: /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft Manifest number: 01A4 Signing time: Sun 07 Dec 2025 01:48:52 +0000 Manifest this update: Sun 07 Dec 2025 01:48:51 +0000 Manifest next update: Sun 14 Dec 2025 01:48:51 +0000 Files and hashes: 1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: h5scqTT7RvmnTXEDxSfydv4zW713aC04T8KQOgVxTvs=) 2: 337F4584817E11F08861A82EC4F9AE02.roa (hash: KuMW19KH73/hFw8JKl9ArAOUwXbSFArQygkA6LoPJk4=) 3: 4B2AA57A817E11F09C78E12EC4F9AE02.roa (hash: REOJoaqVdrJhNGonqBJNmT+BZxMjjyhTcxLRbt3wFv8=) 4: C45AC058825811F09D83BD57C4F9AE02.roa (hash: awWR/tTohg7Dk0K+TdJ2AhHUsvle/tzHsjESu5B0y7w=) 5: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: R7rPLcu7KBIwwKHWQWTFZ/O5x8NWRmyKksg1gxkuSH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 01:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740 Validity Not Before: Dec 7 01:48:51 2025 GMT Not After : Dec 14 01:48:51 2025 GMT Subject: CN=6934dd04-f43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:19:47:09:b5:b1:15:b6:66:20:cc:af:99:27: 5e:a0:7e:3e:b7:2b:ff:b4:82:0f:c2:c3:69:8d:43: 83:47:d6:26:67:c8:d7:7b:68:78:e3:24:65:95:10: e6:9b:73:3e:93:86:c7:12:d4:97:7c:03:08:77:e1: 3f:14:fb:e6:0c:bd:f3:91:4d:dc:35:a6:4a:11:dc: 31:26:53:a7:d5:0f:6e:86:15:72:58:d3:f1:ed:d2: 0f:ae:a5:bb:33:de:34:40:59:13:54:0e:65:0c:6a: 6b:69:fd:64:93:33:86:04:f7:9b:91:75:d7:ba:a8: 31:46:11:fc:1b:f7:29:53:39:ef:62:c6:5b:9e:db: 87:b9:21:14:86:57:e7:86:0e:a1:b2:63:25:9d:a1: b7:4f:bd:ea:4d:38:03:4b:a3:ba:5d:df:6f:85:99: e7:ce:be:04:ae:09:fb:f7:09:13:cc:cd:24:62:7b: ea:73:1a:6e:e4:27:c9:ea:0c:d7:5e:3b:ad:2a:97: f7:9a:e0:b7:4a:8a:e8:a2:a6:89:fc:08:06:22:cc: 63:da:10:3a:7d:03:94:b3:19:b5:b8:31:cf:d5:a2: 72:d6:35:62:f0:11:c7:6c:0c:22:fc:5a:ed:66:4f: 8f:21:b9:e9:e2:dc:d2:2f:97:17:cc:05:04:26:6d: 56:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8F:40:5E:F0:BB:86:E2:22:02:F1:EC:32:A6:B1:65:C6:82:30:11 X509v3 Authority Key Identifier: keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:bb:77:48:89:e8:88:dd:6e:12:8e:e6:8c:8a:65:c9:76:9c: a0:a3:79:88:94:a9:c3:7f:fd:99:42:90:02:88:20:d1:ed:8d: 19:30:bd:e4:8c:f8:72:14:12:bc:bc:6e:ad:75:3c:33:53:ef: 6b:6c:52:a7:a2:f9:eb:48:24:81:bb:b6:5b:ec:2f:63:0a:d9: c2:ea:dc:30:64:c2:61:6a:6a:f9:54:e2:1c:60:a4:49:84:96: b9:17:49:52:2f:32:1d:37:06:07:1c:03:b4:1d:6d:66:94:f2: cd:ae:5b:81:20:21:f8:19:93:cf:f2:bc:38:e6:a4:89:2f:ab: 64:bb:ea:b4:35:39:ee:b8:39:13:a6:c0:38:ad:e1:87:53:59: b6:ee:6e:00:10:7e:2d:2a:5a:5f:9a:1c:18:89:97:73:1c:66: 4c:ee:4e:41:49:d7:d8:70:23:f8:6e:5f:da:93:f7:70:c5:2f: ec:bb:9a:21:3c:8a:59:b5:79:69:0e:a9:2d:ff:53:a8:0b:6a: 25:83:e7:73:61:e9:4c:f5:37:80:e9:4a:8d:04:05:7c:9e:ad: 8c:4b:7c:ac:ce:aa:c1:1f:e2:bd:26:95:30:18:db:a2:d6:5a: 14:3e:3b:aa:56:4b:4e:e1:17:e1:5c:d7:ad:4c:38:31:e2:8d: 37:ae:cb:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA3NTMxMTAvBgNVBAUTKERBRDc4Q0FDMzZEMTQzRjE3NEFCRTExMkQ0OTVFRDVB MDZFQ0E3NDAwHhcNMjUxMjA3MDE0ODUxWhcNMjUxMjE0MDE0ODUxWjAYMRYwFAYD VQQDEw02OTM0ZGQwNC1mNDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhlHCbWxFbZmIMyvmSdeoH4+tyv/tIIPwsNpjUODR9YmZ8jXe2h44yRllRDm m3M+k4bHEtSXfAMId+E/FPvmDL3zkU3cNaZKEdwxJlOn1Q9uhhVyWNPx7dIPrqW7 M940QFkTVA5lDGpraf1kkzOGBPebkXXXuqgxRhH8G/cpUznvYsZbntuHuSEUhlfn hg6hsmMlnaG3T73qTTgDS6O6Xd9vhZnnzr4Ergn79wkTzM0kYnvqcxpu5CfJ6gzX XjutKpf3muC3SorooqaJ/AgGIsxj2hA6fQOUsxm1uDHP1aJy1jVi8BHHbAwi/Frt Zk+PIbnp4tzSL5cXzAUEJm1WMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqPQF7w u4biIgLx7DKmsWXGgjARMB8GA1UdIwQYMBaAFNrXjKw20UPxdKvhEtSV7VoG7KdA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDc1My84RUYyNEExMjVC NkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFfRjBxLUVTMUpYdFdnYnNw MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ0ZU1yRGJSUV9GMHEtRVMxSlh0V2dic3AwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDc1My84RUYyNEExMjVCNkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFf RjBxLUVTMUpYdFdnYnNwMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqu3dIieiI3W4SjuaMimXJdpygo3mIlKnDf/2ZQpACiCDR7Y0ZML3k jPhyFBK8vG6tdTwzU+9rbFKnovnrSCSBu7Zb7C9jCtnC6twwZMJhamr5VOIcYKRJ hJa5F0lSLzIdNwYHHAO0HW1mlPLNrluBICH4GZPP8rw45qSJL6tku+q0NTnuuDkT psA4reGHU1m27m4AEH4tKlpfmhwYiZdzHGZM7k5BSdfYcCP4bl/ak/dwxS/su5oh PIpZtXlpDqkt/1OoC2olg+dzYelM9TeA6UqNBAV8nq2MS3yszqrBH+K9JpUwGNui 1loUPjuqVktO4RfhXNetTDgx4o03rstO -----END CERTIFICATE-----Generated at Sun Dec 7 04:46:51 2025 by rpki-client