This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft File: 2TIL_awMkLNCikT8fcoOL3kJd0E.mft (raw, json) Hash identifier: r57Tw6bwpXY7mT2OSxXZPz/9wvL59ZWePHEKXJoPffg= Subject key identifier: 6C:8A:AF:69:A7:34:65:65:F3:6E:4A:7D:68:F8:D4:44:D8:23:E9:2C Authority key identifier: D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 Certificate issuer: /CN=A9197ADE/serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft Manifest number: 8B Signing time: Fri 05 Dec 2025 04:32:24 +0000 Manifest this update: Fri 05 Dec 2025 04:32:23 +0000 Manifest next update: Fri 12 Dec 2025 04:32:23 +0000 Files and hashes: 1: 2TIL_awMkLNCikT8fcoOL3kJd0E.crl (hash: ZsG4b9BEEh6kwukFpfNNPgDDrx6PBJxQGtvwFtNrMGw=) 2: E0CFA54EFE4D11EF8274971BC4F9AE02.roa (hash: xErSiwEVGbEN6QlFmGLkFVWsdMEkeNM0TxyRejXCRHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197ADE, serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Validity Not Before: Dec 5 04:32:23 2025 GMT Not After : Dec 12 04:32:23 2025 GMT Subject: CN=69326058-9de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:66:bc:ff:54:32:59:94:43:d3:1c:2e:81:f4: c4:07:b0:bb:6b:cf:14:97:46:e5:9e:1b:04:31:57: dd:67:ca:ec:c9:0e:71:13:ad:3e:45:c7:68:ee:94: cc:89:c0:c2:78:16:ba:b0:c9:06:19:ff:df:1a:07: 23:61:01:92:fb:74:7e:fb:b8:97:ac:f8:50:69:9a: 2c:23:ab:e9:26:7a:95:54:0c:bc:7f:80:14:e7:c8: dd:ab:78:2f:22:ed:d0:0b:9f:28:9e:c1:0c:b4:f2: f4:90:90:42:aa:13:70:b3:70:30:6f:ff:87:e9:46: 00:ce:3f:c1:f0:93:62:8b:73:77:7a:df:a2:98:ca: da:74:98:99:bc:6a:3c:b6:6e:b3:99:46:38:bb:b0: c8:a1:4d:c3:e4:e4:69:bb:f4:f7:3d:4d:35:51:fa: 4a:28:dd:b9:fc:29:0a:38:23:48:a6:13:42:2e:fa: c3:15:cd:23:93:da:3a:23:2f:e7:cc:85:1a:4d:cb: 8b:68:92:81:6a:12:c3:5b:cd:51:19:cc:45:2d:3d: 6d:4a:e2:12:aa:80:67:0b:38:75:7d:7a:cf:0d:f4: 79:7e:2c:84:ed:90:7e:4d:15:7f:f2:90:bc:8e:af: 25:ae:64:62:fc:ee:ea:95:e2:c9:80:b8:ba:ec:ce: cb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8A:AF:69:A7:34:65:65:F3:6E:4A:7D:68:F8:D4:44:D8:23:E9:2C X509v3 Authority Key Identifier: keyid:D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:b8:cf:3c:79:3d:3a:bf:6e:a1:73:23:fc:ea:1b:06:d7:0b: 90:5e:39:b7:e7:8d:e7:6a:44:76:f5:8c:58:b0:f9:20:60:18: 02:bd:fd:99:43:5a:80:87:6a:c0:31:43:39:6e:a1:09:3d:00: 8d:01:1f:2f:5f:11:96:62:b1:b7:de:ed:6b:09:41:ee:25:8e: 1f:5b:6b:b5:c0:17:e9:fa:9a:dd:62:48:72:9a:83:9b:74:2a: 52:03:50:7e:7e:40:f9:ef:e2:2f:a1:2b:63:77:d6:d9:d3:45: 21:e8:29:b6:36:2b:c5:bf:24:30:41:2e:70:ae:20:e3:19:5f: 87:a4:b4:4b:09:d5:42:a1:1c:c5:31:61:55:5c:92:6a:d8:f6: 6e:cd:ce:55:17:87:bf:9a:15:88:d3:4f:3a:3e:cc:8c:44:2d: a7:80:22:90:41:6e:d4:c4:b3:1b:40:6a:b7:2d:e1:cb:ec:cd: 74:0a:9f:fb:ec:bd:c9:34:eb:df:05:e5:61:7a:62:37:b8:09: 72:54:cd:ed:97:b7:91:cb:4c:d4:aa:32:65:82:d1:6b:12:94: 83:d6:fe:7a:73:1a:88:63:c2:de:95:18:30:b7:b2:38:8b:79: 77:52:4e:96:5d:10:a5:df:f5:f0:dc:e6:77:a0:3c:91:a2:92: 7a:76:13:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdBREUxMTAvBgNVBAUTKEQ5MzIwQkZEQUMwQzkwQjM0MjhBNDRGQzdEQ0EwRTJG NzkwOTc3NDEwHhcNMjUxMjA1MDQzMjIzWhcNMjUxMjEyMDQzMjIzWjAYMRYwFAYD VQQDEw02OTMyNjA1OC05ZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGa8/1QyWZRD0xwugfTEB7C7a88Ul0blnhsEMVfdZ8rsyQ5xE60+Rcdo7pTM icDCeBa6sMkGGf/fGgcjYQGS+3R++7iXrPhQaZosI6vpJnqVVAy8f4AU58jdq3gv Iu3QC58onsEMtPL0kJBCqhNws3Awb/+H6UYAzj/B8JNii3N3et+imMradJiZvGo8 tm6zmUY4u7DIoU3D5ORpu/T3PU01UfpKKN25/CkKOCNIphNCLvrDFc0jk9o6Iy/n zIUaTcuLaJKBahLDW81RGcxFLT1tSuISqoBnCzh1fXrPDfR5fiyE7ZB+TRV/8pC8 jq8lrmRi/O7qleLJgLi67M7LYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyKr2mn NGVl825KfWj41ETYI+ksMB8GA1UdIwQYMBaAFNkyC/2sDJCzQopE/H3KDi95CXdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0FERS84OUE0OTNFMkZF NEQxMUVGQTFBRkZDMUFDNEY5QUUwMi8yVElMX2F3TWtMTkNpa1Q4ZmNvT0wza0pk MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJUSUxfYXdNa0xOQ2lrVDhmY29PTDNrSmQwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0FERS84OUE0OTNFMkZFNEQxMUVGQTFBRkZDMUFDNEY5QUUwMi8yVElMX2F3TWtM TkNpa1Q4ZmNvT0wza0pkMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1uM88eT06v26hcyP86hsG1wuQXjm3543nakR29YxYsPkgYBgCvf2Z Q1qAh2rAMUM5bqEJPQCNAR8vXxGWYrG33u1rCUHuJY4fW2u1wBfp+prdYkhymoOb dCpSA1B+fkD57+IvoStjd9bZ00Uh6Cm2NivFvyQwQS5wriDjGV+HpLRLCdVCoRzF MWFVXJJq2PZuzc5VF4e/mhWI0086PsyMRC2ngCKQQW7UxLMbQGq3LeHL7M10Cp/7 7L3JNOvfBeVhemI3uAlyVM3tl7eRy0zUqjJlgtFrEpSD1v56cxqIY8LelRgwt7I4 i3l3Uk6WXRCl3/Xw3OZ3oDyRopJ6dhNU -----END CERTIFICATE-----Generated at Sat Dec 6 20:26:41 2025 by rpki-client