This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft File: 2kcELjdqlHP8Dt_IRFc53RMorg4.mft (raw, json) Hash identifier: 9DF6xQyYxWM3T8NGA3ohzp7b1wLLF5hM6dd7+RUYD6o= Subject key identifier: 54:AE:ED:3D:B8:EE:3F:A2:2C:D2:E2:D2:CB:B4:A7:83:1B:CC:23:EB Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Certificate serial: 0E6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft Manifest number: 0E52 Signing time: Sat 06 Dec 2025 17:14:06 +0000 Manifest this update: Sat 06 Dec 2025 17:14:05 +0000 Manifest next update: Sat 13 Dec 2025 17:14:05 +0000 Files and hashes: 1: 2kcELjdqlHP8Dt_IRFc53RMorg4.crl (hash: juadHCapdw+CBiv8wzgRGsvPp9d5HYSwBcwuJmjIXYs=) 2: B5D4A156598B11EC82C8685CC4F9AE02.roa (hash: 4QYUWAD8mV7goqY2eyB8OTjIn05Ok4IHRMJOhxEL9Q0=) 3: B922DB22E84211EA918B8F09C4F9AE02.roa (hash: WrORF911HLcFuZdH0HRCb0Ilepojo6I2DwL+ZjMpcO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3691 (0xe6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DF4, serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Validity Not Before: Dec 6 17:14:05 2025 GMT Not After : Dec 13 17:14:05 2025 GMT Subject: CN=6934645e-6072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f2:18:18:97:3b:74:9c:dc:dd:62:08:a3:8c: 71:14:7a:2b:8f:40:d6:b3:40:8c:c7:2c:ca:cd:c4: 8a:15:47:c5:a6:f0:c6:5a:aa:43:6f:d3:84:e9:2f: 7f:73:08:3b:79:03:b9:11:8f:b7:8e:ec:d5:39:6f: 00:15:5d:1b:3b:e3:fd:04:80:10:51:ec:30:ba:a1: 88:31:e8:db:f7:00:ed:5d:79:09:73:7f:5e:17:32: 4e:19:b1:6e:39:9b:9f:a3:9d:3a:f7:61:ce:1f:f7: fb:f0:8b:79:24:5d:25:1f:6c:e2:66:0a:e3:2b:2a: db:f6:fb:73:a0:a0:86:74:9e:50:ce:d7:23:6f:16: c8:05:9c:48:d1:e9:ef:54:5c:06:bf:e3:0b:cf:97: 17:dd:e6:bd:f4:56:9b:12:9f:61:c9:30:71:89:56: 6c:ba:29:1c:15:0f:06:77:a7:e5:c2:23:1b:f4:64: e4:28:1d:27:2b:77:3e:26:7d:19:dd:9f:48:24:5a: 5d:b2:91:69:95:2a:a0:82:82:08:e5:d8:b4:88:c7: 0b:fe:f4:31:1e:f5:4f:e4:1d:c3:a5:73:84:a6:b4: 55:2f:70:6e:95:27:fc:b2:e4:c5:09:4f:75:4f:30: ba:b7:c1:6a:49:ff:27:5e:c9:8a:02:94:0f:3c:ab: ba:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AE:ED:3D:B8:EE:3F:A2:2C:D2:E2:D2:CB:B4:A7:83:1B:CC:23:EB X509v3 Authority Key Identifier: keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:06:2d:d7:f8:f5:72:06:dc:c7:3e:3b:68:3a:1c:c7:cd:ac: 65:83:ab:d7:53:6f:ce:57:19:ac:1e:27:42:37:d3:9f:fc:62: 00:27:f8:ca:f1:56:b6:6f:cd:46:52:00:1e:7d:d5:93:f8:7d: ed:79:5d:e9:cf:1e:55:29:2c:5a:1b:dd:c5:8b:f9:b1:3e:71: ce:62:bc:ee:46:5b:a9:cb:c5:a2:24:51:0a:eb:bf:bc:5c:5d: c5:b4:51:7a:b7:e6:7a:11:f2:62:b8:6f:c5:1e:79:ab:a8:68: e6:cf:5d:7a:1a:46:91:f7:a4:c4:50:05:64:ec:f7:35:a7:93: 7d:37:ee:74:b2:ef:d9:27:8e:66:a0:d8:ee:d3:c4:de:79:9e: f8:5e:fd:ab:c6:02:c6:23:fe:46:50:e3:83:03:40:89:09:14: b0:d9:eb:c1:26:3d:74:bd:b6:e2:cb:23:01:3d:b4:f2:68:ee: 66:37:3f:ec:87:c7:92:6e:83:91:30:e3:f6:d4:c4:a7:77:c6: d4:2a:87:77:a2:7c:ba:dd:0d:d4:2b:ef:ca:cd:1b:e4:eb:11: 0d:95:15:81:00:d9:c3:9e:03:fd:03:55:d1:64:d1:c8:43:7e: e6:e1:0b:99:28:4d:67:75:fb:98:63:46:b5:a5:d0:3d:2a:91: 47:3b:8d:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE MTMyOEFFMEUwHhcNMjUxMjA2MTcxNDA1WhcNMjUxMjEzMTcxNDA1WjAYMRYwFAYD VQQDEw02OTM0NjQ1ZS02MDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPIYGJc7dJzc3WIIo4xxFHorj0DWs0CMxyzKzcSKFUfFpvDGWqpDb9OE6S9/ cwg7eQO5EY+3juzVOW8AFV0bO+P9BIAQUewwuqGIMejb9wDtXXkJc39eFzJOGbFu OZufo50692HOH/f78It5JF0lH2ziZgrjKyrb9vtzoKCGdJ5QztcjbxbIBZxI0env VFwGv+MLz5cX3ea99FabEp9hyTBxiVZsuikcFQ8Gd6flwiMb9GTkKB0nK3c+Jn0Z 3Z9IJFpdspFplSqggoII5di0iMcL/vQxHvVP5B3DpXOEprRVL3BulSf8suTFCU91 TzC6t8FqSf8nXsmKApQPPKu6OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSu7T24 7j+iLNLi0su0p4MbzCPrMB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURGNC9GNDFEMUMxOEIzOEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxI UDhEdF9JUkZjNTNSTW9yZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOBi3X+PVyBtzHPjtoOhzHzaxlg6vXU2/OVxmsHidCN9Of/GIAJ/jK 8Va2b81GUgAefdWT+H3teV3pzx5VKSxaG93Fi/mxPnHOYrzuRlupy8WiJFEK67+8 XF3FtFF6t+Z6EfJiuG/FHnmrqGjmz116GkaR96TEUAVk7Pc1p5N9N+50su/ZJ45m oNju08TeeZ74Xv2rxgLGI/5GUOODA0CJCRSw2evBJj10vbbiyyMBPbTyaO5mNz/s h8eSboORMOP21MSnd8bUKod3ony63Q3UK+/KzRvk6xENlRWBANnDngP9A1XRZNHI Q37m4QuZKE1ndfuYY0a1pdA9KpFHO42y -----END CERTIFICATE-----Generated at Sun Dec 7 00:14:26 2025 by rpki-client