This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft File: C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json) Hash identifier: wmCTyMrW4czItAJjxyI61ytGajcBsdM9E/AP5ti8zhI= Subject key identifier: 79:4F:AF:7B:70:6A:FA:48:64:CF:B0:F5:E7:50:93:0D:EC:FF:08:58 Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Certificate serial: 2518 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft Manifest number: 2502 Signing time: Thu 18 Dec 2025 15:41:48 +0000 Manifest this update: Thu 18 Dec 2025 15:41:47 +0000 Manifest next update: Thu 25 Dec 2025 15:41:47 +0000 Files and hashes: 1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: DcNXaVwC3wrpvoRNL1GHMH8nSGHzdH75brE78fk9nyo=) 2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: gjGyoU6UehPX0w4evr1O57YIj1TJSqlSY6y93UsHPOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9496 (0x2518) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Validity Not Before: Dec 18 15:41:47 2025 GMT Not After : Dec 25 15:41:47 2025 GMT Subject: CN=694420bc-5ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f9:59:b6:c9:c4:bd:93:bc:09:70:9d:01:57: 38:5e:1b:25:80:02:39:f1:1e:fc:bd:ef:d9:9f:54: d2:42:a2:f5:3b:d5:9e:53:2e:13:6c:f9:6b:58:27: 47:8c:f2:5e:e3:48:3a:f7:fb:90:b0:9e:c5:4f:b6: e1:6f:39:03:c1:60:d9:da:02:77:1f:de:45:ca:9b: 10:e4:d4:8b:05:f6:e9:b4:dd:29:0e:7a:bc:72:46: bc:ce:c1:86:b4:40:6d:5f:80:09:20:37:1d:46:37: 04:4f:9f:1c:58:cf:88:be:0d:b3:70:4d:ab:e6:4c: e6:c5:48:2b:57:5a:92:54:57:b2:4a:52:08:f7:65: d6:37:67:7b:b9:65:3c:36:3f:6a:bb:73:1f:2d:7f: c9:d2:bb:e0:c8:ae:9e:19:b1:98:a8:2a:51:db:33: 26:9b:28:7c:55:71:11:71:3b:76:cc:57:8c:23:17: dc:25:2a:97:f4:87:c7:ce:9b:b5:d2:ed:54:07:e7: b9:2f:c3:9e:84:e6:9c:fd:6e:e6:1c:ab:09:6b:20: 5b:5f:a3:eb:83:5e:a2:8a:5f:47:f9:51:68:02:6d: 76:11:12:1d:3a:31:6f:f0:e9:58:bc:91:1d:27:1e: 69:9c:58:75:80:5a:b6:54:7b:4a:39:1c:cd:92:b8: b5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4F:AF:7B:70:6A:FA:48:64:CF:B0:F5:E7:50:93:0D:EC:FF:08:58 X509v3 Authority Key Identifier: keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:62:8e:d3:bf:59:a5:0d:48:65:5c:68:df:48:82:8b:98:7d: 6b:fb:84:96:d5:04:59:75:69:8a:b9:de:7e:3a:37:f6:ed:eb: 97:3d:59:03:4a:e7:60:e0:9c:f4:29:d7:aa:a2:d8:b4:12:df: c2:3a:ec:09:48:f4:35:f3:b3:ea:7b:1b:99:4a:f9:86:b6:9a: 72:74:2b:83:ee:87:94:8c:a9:02:17:43:c0:48:19:2e:9b:aa: ea:88:98:dc:ce:bb:17:58:df:4b:05:a9:fd:f8:17:f1:16:89: 2e:73:56:89:90:6d:ec:54:ac:f7:17:c2:64:c2:b1:43:04:6c: 9a:07:7d:97:73:38:c1:7a:bf:1c:e9:a6:63:47:61:31:64:01: 40:43:df:f1:86:2b:c9:fc:b9:25:c1:9d:c7:31:c3:ca:2f:68: 9b:83:93:b0:29:64:7e:0c:be:7a:d3:00:70:b0:88:1c:90:25: 2a:95:ac:21:39:a1:14:90:94:3c:da:40:8c:50:f6:5d:cc:77: 49:88:cc:14:19:23:06:92:b2:c1:67:cc:7f:26:fc:3e:8d:f1: 5a:32:78:a3:15:a4:ec:3c:f2:57:2b:47:de:77:c6:98:f9:73: 3e:c7:c2:5c:7b:c5:43:d4:bf:f2:b8:1a:6a:7a:ff:e0:9d:2f: 60:e1:26:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRjQxMTAvBgNVBAUTKDBCNjNFNjNBNUZBM0IyRTNDQ0I5OTMwRThGNkM4Q0VD QzI0NThCNDUwHhcNMjUxMjE4MTU0MTQ3WhcNMjUxMjI1MTU0MTQ3WjAYMRYwFAYD VQQDDA02OTQ0MjBiYy01YWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvlZtsnEvZO8CXCdAVc4XhslgAI58R78ve/Zn1TSQqL1O9WeUy4TbPlrWCdH jPJe40g69/uQsJ7FT7bhbzkDwWDZ2gJ3H95FypsQ5NSLBfbptN0pDnq8cka8zsGG tEBtX4AJIDcdRjcET58cWM+Ivg2zcE2r5kzmxUgrV1qSVFeySlII92XWN2d7uWU8 Nj9qu3MfLX/J0rvgyK6eGbGYqCpR2zMmmyh8VXERcTt2zFeMIxfcJSqX9IfHzpu1 0u1UB+e5L8OehOac/W7mHKsJayBbX6Prg16iil9H+VFoAm12ERIdOjFv8OlYvJEd Jx5pnFh1gFq2VHtKORzNkri1cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlPr3tw avpIZM+w9edQkw3s/whYMB8GA1UdIwQYMBaAFAtj5jpfo7LjzLmTDo9sjOzCRYtF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNGNC8xN0FDMkE3MDQx OUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1UE11Wk1PajJ5TTdNSkZp MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyUG1PbC1qc3VQTXVaTU9qMnlNN01KRmkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNGNC8xN0FDMkE3MDQxOUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1 UE11Wk1PajJ5TTdNSkZpMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVYo7Tv1mlDUhlXGjfSIKLmH1r+4SW1QRZdWmKud5+Ojf27euXPVkD Sudg4Jz0Kdeqoti0Et/COuwJSPQ187PqexuZSvmGtppydCuD7oeUjKkCF0PASBku m6rqiJjczrsXWN9LBan9+BfxFokuc1aJkG3sVKz3F8JkwrFDBGyaB32XczjBer8c 6aZjR2ExZAFAQ9/xhivJ/LklwZ3HMcPKL2ibg5OwKWR+DL560wBwsIgckCUqlawh OaEUkJQ82kCMUPZdzHdJiMwUGSMGkrLBZ8x/Jvw+jfFaMnijFaTsPPJXK0fed8aY +XM+x8Jce8VD1L/yuBpqev/gnS9g4SYA -----END CERTIFICATE-----Generated at Fri Dec 19 13:41:33 2025 by rpki-client