This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft File: 2zxJsbLapmnoFyU5XfcR6D-K09E.mft (raw, json) Hash identifier: V5Oexutujof6ZIBvSP6bRdaqIEJ9U4I/3fowKWEWCbc= Subject key identifier: EF:A2:75:7D:84:AF:51:A5:8B:21:56:89:7C:42:FC:65:54:5B:A4:1B Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 Certificate issuer: /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Certificate serial: 042B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft Manifest number: 041F Signing time: Sat 06 Dec 2025 23:01:26 +0000 Manifest this update: Sat 06 Dec 2025 23:01:26 +0000 Manifest next update: Sat 13 Dec 2025 23:01:26 +0000 Files and hashes: 1: 2zxJsbLapmnoFyU5XfcR6D-K09E.crl (hash: zViT9Yck6hyJ9o0Z97ALq4nkec+hB00mwHmHkAHoarU=) 2: 93CBDF448EE111EC9D298C83C4F9AE02.roa (hash: t4RKrujkT/4i2xBpLkewaVM7tHYA1/rkxo1ttRbmyIU=) 3: 48ECA4C48EE411EC9936A210C4F9AE02.roa (hash: Qk6UgrNlEArmTO1RmyrfsNa0aJyJurOhCrFKUSX8MPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1067 (0x42b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Validity Not Before: Dec 6 23:01:26 2025 GMT Not After : Dec 13 23:01:26 2025 GMT Subject: CN=6934b5c6-2f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cf:a4:5b:ea:23:3f:1a:2e:81:37:6f:c7:dc: 47:74:e8:a5:d3:e4:07:56:3f:a9:e1:69:72:87:c8: d8:c6:6f:4f:06:5e:f6:28:e1:4b:21:09:7f:32:55: 5f:78:04:03:73:48:f9:e9:86:66:97:df:97:a6:42: 93:33:a0:42:cd:b0:2b:79:66:9d:75:0d:16:08:10: 05:c0:68:dd:1a:09:c9:f8:bd:40:4f:6d:4e:b9:c5: 3c:ca:28:f1:b8:ec:20:67:4c:10:7c:12:c9:36:b6: 61:3f:0f:7a:44:36:30:85:a3:8c:69:17:70:15:58: 5f:02:59:1a:a3:7b:59:7b:6f:44:70:97:ee:5e:ac: 6d:99:3d:95:98:2b:aa:7f:33:fb:e7:7b:5f:19:08: 5d:f2:d4:a8:d7:db:4f:a8:14:00:83:43:de:3d:70: 28:0b:5c:1e:44:0e:b7:89:41:5d:1e:c5:f1:c9:cb: 98:89:fe:4a:7b:1d:3e:a7:52:8b:49:45:bd:3f:a1: 53:fb:9f:6c:26:c9:e5:68:87:e3:97:9e:05:01:7b: 8f:ef:6b:34:d6:11:eb:42:ae:5b:b0:01:d7:8a:dc: 53:7b:58:22:1a:d3:66:9d:9c:b9:39:c6:f8:d5:91: ed:3d:83:18:26:64:c9:9c:ee:f1:ee:0d:bf:97:30: db:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A2:75:7D:84:AF:51:A5:8B:21:56:89:7C:42:FC:65:54:5B:A4:1B X509v3 Authority Key Identifier: keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:b7:22:61:79:bd:4a:0b:00:2e:9a:ea:c1:cb:fb:2d:60:2b: 35:1b:7c:23:b5:39:05:e2:f7:d8:89:7c:fa:c1:27:57:32:1e: 3e:2f:dc:dc:99:45:14:3e:6f:ae:cc:60:cf:40:d7:7a:1b:5c: 59:a7:c3:1f:b4:4b:ef:da:9f:de:e8:55:4b:cc:bc:25:34:39: d6:b8:28:dd:07:e0:bf:8a:f4:9b:40:04:cf:03:9b:30:fc:dd: e0:19:21:de:33:c3:e8:a3:82:40:ec:bc:19:1c:bc:ef:80:55: 20:4c:16:fc:d0:c0:63:63:33:31:37:06:d3:6e:52:88:66:2b: fc:43:16:24:ca:28:b0:1a:27:ba:d4:4f:49:dc:4f:06:6b:4d: a5:9f:87:16:39:fd:a0:83:c6:fd:a0:03:d8:dc:10:53:db:cf: f4:a2:bd:6a:45:59:36:be:43:5a:04:46:ad:8a:4c:ee:d8:c7: 05:f5:a3:a6:14:a7:2c:65:ee:08:39:7d:8d:4f:af:39:7f:67: 02:9c:8c:8c:bf:68:33:4c:09:0d:10:c4:a1:fd:04:d6:bd:90: a7:5a:26:db:fe:91:99:ff:9c:0c:82:3a:8f:08:e8:d1:f8:9a: f2:b5:0a:56:77:be:1f:0a:a1:05:1d:96:55:57:a6:25:d7:27: 41:21:58:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE4MzMxMTAvBgNVBAUTKERCM0M0OUIxQjJEQUE2NjlFODE3MjUzOTVERjcxMUU4 M0Y4QUQzRDEwHhcNMjUxMjA2MjMwMTI2WhcNMjUxMjEzMjMwMTI2WjAYMRYwFAYD VQQDEw02OTM0YjVjNi0yZjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxc+kW+ojPxougTdvx9xHdOil0+QHVj+p4Wlyh8jYxm9PBl72KOFLIQl/MlVf eAQDc0j56YZml9+XpkKTM6BCzbAreWaddQ0WCBAFwGjdGgnJ+L1AT21OucU8yijx uOwgZ0wQfBLJNrZhPw96RDYwhaOMaRdwFVhfAlkao3tZe29EcJfuXqxtmT2VmCuq fzP753tfGQhd8tSo19tPqBQAg0PePXAoC1weRA63iUFdHsXxycuYif5Kex0+p1KL SUW9P6FT+59sJsnlaIfjl54FAXuP72s01hHrQq5bsAHXitxTe1giGtNmnZy5Ocb4 1ZHtPYMYJmTJnO7x7g2/lzDbOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+idX2E r1GliyFWiXxC/GVUW6QbMB8GA1UdIwQYMBaAFNs8SbGy2qZp6BclOV33Eeg/itPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTgzMy9GRTY4RTBCMjhF MzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBtbm9GeVU1WGZjUjZELUsw OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6eEpzYkxhcG1ub0Z5VTVYZmNSNkQtSzA5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTgzMy9GRTY4RTBCMjhFMzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBt bm9GeVU1WGZjUjZELUswOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCptyJheb1KCwAumurBy/stYCs1G3wjtTkF4vfYiXz6wSdXMh4+L9zc mUUUPm+uzGDPQNd6G1xZp8MftEvv2p/e6FVLzLwlNDnWuCjdB+C/ivSbQATPA5sw /N3gGSHeM8Poo4JA7LwZHLzvgFUgTBb80MBjYzMxNwbTblKIZiv8QxYkyiiwGie6 1E9J3E8Ga02ln4cWOf2gg8b9oAPY3BBT28/0or1qRVk2vkNaBEatikzu2McF9aOm FKcsZe4IOX2NT685f2cCnIyMv2gzTAkNEMSh/QTWvZCnWibb/pGZ/5wMgjqPCOjR +JrytQpWd74fCqEFHZZVV6Yl1ydBIViU -----END CERTIFICATE-----Generated at Sun Dec 7 00:19:42 2025 by rpki-client