This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft File: 2kcELjdqlHP8Dt_IRFc53RMorg4.mft (raw, json) Hash identifier: IB4KtwWAOIIwZAftK3TB4n2EcpAMJ9GFVHJtjIIfeWk= Subject key identifier: 2F:B3:3A:88:C5:49:14:1F:A7:93:28:29:EB:FF:56:31:74:8D:4B:6B Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Certificate serial: 0E71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft Manifest number: 0E58 Signing time: Thu 18 Dec 2025 17:35:28 +0000 Manifest this update: Thu 18 Dec 2025 17:35:27 +0000 Manifest next update: Thu 25 Dec 2025 17:35:27 +0000 Files and hashes: 1: 2kcELjdqlHP8Dt_IRFc53RMorg4.crl (hash: 5iBtgL7+ocO53HArk2BP9O5Dedp6uoEyPzOQ0HzJkVA=) 2: B922DB22E84211EA918B8F09C4F9AE02.roa (hash: WrORF911HLcFuZdH0HRCb0Ilepojo6I2DwL+ZjMpcO0=) 3: B5D4A156598B11EC82C8685CC4F9AE02.roa (hash: 4QYUWAD8mV7goqY2eyB8OTjIn05Ok4IHRMJOhxEL9Q0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3697 (0xe71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DF4, serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Validity Not Before: Dec 18 17:35:27 2025 GMT Not After : Dec 25 17:35:27 2025 GMT Subject: CN=69443b60-eda6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:31:c5:5d:07:58:4d:c8:6b:25:9d:e3:ba:f1: 64:ec:e1:e2:d2:50:37:02:29:6c:7a:6c:6d:80:a9: 0d:14:00:fc:01:de:14:c2:42:ce:da:d3:38:42:25: 4f:c8:4c:f0:e7:d5:cf:7e:51:c0:a1:b2:47:1b:81: c4:36:0d:b2:67:16:1b:d0:13:29:14:08:4d:64:d9: ed:65:31:24:29:fe:47:cf:f8:29:89:38:ea:1c:e3: b7:d3:a8:bd:10:72:b3:7c:81:53:c3:49:b5:e2:09: 7c:e4:6d:98:a3:af:2d:95:c8:2c:01:d1:fe:a1:a3: a9:70:3e:53:99:96:b4:68:39:82:80:c6:6f:72:12: d7:d6:87:ec:b9:03:51:ec:b6:40:7f:e5:5d:41:1a: 1a:5f:fa:60:37:bd:31:22:ad:ab:a7:65:cf:8b:42: 42:03:72:77:66:7d:b6:02:74:f0:41:65:d8:93:d7: 5e:91:7f:f2:9f:a5:4c:6a:bd:0a:94:21:60:b8:71: 70:7e:0e:88:2c:4e:bf:b4:ff:12:a7:6d:5c:22:5d: 1c:81:0a:96:44:b9:2d:02:6f:f2:c3:15:28:06:bb: 03:53:af:c2:21:78:f3:b8:e1:e1:e8:03:89:0d:a4: 51:63:82:44:23:8d:52:ab:d0:51:13:ab:da:c9:e8: c7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B3:3A:88:C5:49:14:1F:A7:93:28:29:EB:FF:56:31:74:8D:4B:6B X509v3 Authority Key Identifier: keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:dc:b4:c4:df:92:48:da:af:9d:b6:29:87:f8:88:b7:9e:34: 4f:08:b9:e5:d1:21:ee:1f:b2:3c:93:ea:67:e9:2f:21:19:db: 32:0d:90:61:9d:96:b7:24:8d:39:74:13:53:91:ae:d3:ab:53: 49:e0:14:67:eb:d3:3b:68:be:29:93:c9:35:89:4e:6d:08:dd: 64:3e:2f:29:91:91:b2:03:36:b3:81:a7:42:cf:9f:ee:cb:7a: 16:b6:1c:60:ed:79:d3:f7:49:c7:c7:f0:a4:77:89:24:44:c9: 22:eb:92:b6:51:dc:bc:bf:a4:f2:78:57:1a:8c:0c:7a:16:c2: 64:f1:fb:00:f0:11:7c:ca:c6:e5:9d:a2:c3:c8:f0:35:c3:08: 93:a4:c9:71:1c:54:16:83:60:7b:28:1b:7e:13:72:60:cb:a7: 3f:2c:d3:85:f4:4f:b1:69:7b:ea:2d:c1:40:0a:a9:6b:60:00: 96:e5:dd:4f:36:7e:5d:da:15:e7:58:c0:7a:36:2a:81:07:eb: 5e:20:9c:82:5f:19:dd:3e:3e:21:b6:9b:e7:a9:3e:20:14:96: 55:eb:ef:15:43:9a:91:de:f0:df:ff:92:ee:fc:84:aa:31:4b: c7:d6:c0:63:23:65:0f:7f:b3:70:03:53:90:9f:62:7c:10:5e: 05:29:ca:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE MTMyOEFFMEUwHhcNMjUxMjE4MTczNTI3WhcNMjUxMjI1MTczNTI3WjAYMRYwFAYD VQQDDA02OTQ0M2I2MC1lZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DHFXQdYTchrJZ3juvFk7OHi0lA3AilsemxtgKkNFAD8Ad4UwkLO2tM4QiVP yEzw59XPflHAobJHG4HENg2yZxYb0BMpFAhNZNntZTEkKf5Hz/gpiTjqHOO306i9 EHKzfIFTw0m14gl85G2Yo68tlcgsAdH+oaOpcD5TmZa0aDmCgMZvchLX1ofsuQNR 7LZAf+VdQRoaX/pgN70xIq2rp2XPi0JCA3J3Zn22AnTwQWXYk9dekX/yn6VMar0K lCFguHFwfg6ILE6/tP8Sp21cIl0cgQqWRLktAm/ywxUoBrsDU6/CIXjzuOHh6AOJ DaRRY4JEI41Sq9BRE6vayejHBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+zOojF SRQfp5MoKev/VjF0jUtrMB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURGNC9GNDFEMUMxOEIzOEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxI UDhEdF9JUkZjNTNSTW9yZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA13LTE35JI2q+dtimH+Ii3njRPCLnl0SHuH7I8k+pn6S8hGdsyDZBh nZa3JI05dBNTka7Tq1NJ4BRn69M7aL4pk8k1iU5tCN1kPi8pkZGyAzazgadCz5/u y3oWthxg7XnT90nHx/Ckd4kkRMki65K2Udy8v6TyeFcajAx6FsJk8fsA8BF8ysbl naLDyPA1wwiTpMlxHFQWg2B7KBt+E3Jgy6c/LNOF9E+xaXvqLcFACqlrYACW5d1P Nn5d2hXnWMB6NiqBB+teIJyCXxndPj4htpvnqT4gFJZV6+8VQ5qR3vDf/5Lu/ISq MUvH1sBjI2UPf7NwA1OQn2J8EF4FKcr4 -----END CERTIFICATE-----Generated at Thu Dec 18 23:08:39 2025 by rpki-client