This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json) Hash identifier: 17PbXC6+I0eEeTsv2lbMA5TyUWZZScHWDCezwAplins= Subject key identifier: 4A:A2:0C:A1:02:A5:0E:CA:48:5D:55:FC:C7:69:AC:73:7E:20:E0:9C Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft Manifest number: 020D Signing time: Sun 07 Dec 2025 00:47:40 +0000 Manifest this update: Sun 07 Dec 2025 00:47:40 +0000 Manifest next update: Sun 14 Dec 2025 00:47:40 +0000 Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: Yb6ZAj1F5w+pnC5VznSVlMh+Me/3AsPVap5eYHfCeUs=) 2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: 1lAKMWWiDhArZBXjlm4IA+8JjIhSP0kfTCYDjl8+xiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Validity Not Before: Dec 7 00:47:40 2025 GMT Not After : Dec 14 00:47:40 2025 GMT Subject: CN=6934ceac-aabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:e6:93:1f:d5:ce:b5:0d:6e:38:6b:9e:9f: 78:16:b5:b9:7d:18:7d:45:66:80:4b:4b:1e:dd:19: 83:b8:11:0a:20:cd:ca:82:1d:f6:5c:84:27:5b:87: bb:a5:d6:ac:c2:a7:fc:6b:2c:ee:a6:0f:98:85:99: 39:b8:63:ec:49:fc:74:97:e9:be:55:cd:34:7e:48: 59:91:96:5a:40:c2:23:d5:be:bb:d4:db:f8:a4:ba: ba:21:ca:89:6c:10:3e:78:a8:82:a1:2c:a9:90:30: 1f:e0:1d:7d:cb:0c:14:33:00:b4:cd:d4:3c:66:6b: 94:39:0b:83:50:80:4a:78:ef:ca:96:bb:87:a0:c3: 61:33:e0:18:4c:30:3b:8a:a6:a2:aa:7e:8a:b8:62: 3c:7e:db:e8:8f:87:fd:fd:b2:fe:f5:e3:69:5e:9d: 8f:38:30:c9:6f:3b:e5:25:33:cf:70:f5:01:87:51: 86:3f:6f:89:36:84:fa:99:00:5e:09:b3:83:b5:4c: fb:9e:d6:ce:fe:71:04:c5:e8:c0:5b:5b:11:01:d3: e7:5d:27:d8:b7:fb:88:33:5f:b7:9b:47:0b:cf:4d: e0:be:23:c8:ad:a9:b0:70:bd:93:76:16:82:2d:5f: e2:44:7a:3c:cb:19:7b:a6:7b:62:e7:63:27:3c:c7: 41:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A2:0C:A1:02:A5:0E:CA:48:5D:55:FC:C7:69:AC:73:7E:20:E0:9C X509v3 Authority Key Identifier: keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:20:ac:14:fa:e8:ce:ee:df:3b:75:ff:ef:7e:b7:78:e4:7c: 79:d6:c9:0f:da:d7:10:a0:a0:6d:0f:29:3f:f9:d0:6c:15:97: bc:a5:6c:30:bb:5a:fe:47:91:cd:78:cc:08:07:c1:cb:27:32: 25:d5:b7:95:82:c9:44:b6:1a:4f:86:86:db:3c:5b:a4:b5:24: 62:3e:8b:4c:f4:d5:8f:1c:c6:e5:56:e6:00:d9:fd:5f:90:07: 35:4a:f7:6e:e4:4b:89:dd:c9:9c:c4:20:df:c9:2d:23:81:56: da:56:78:3d:17:27:2a:ea:2a:34:5f:84:d6:57:e8:1e:b3:78: e0:94:ac:12:6a:f6:f8:36:51:6e:78:73:11:21:c4:5e:37:78: ec:cd:6a:e2:0d:96:a8:01:f5:d2:99:53:92:a8:56:6a:7c:12: eb:56:d1:40:1a:94:25:25:42:62:b9:5d:e1:eb:dc:41:6a:03: 1f:52:ff:4e:c2:1e:f9:0c:c5:93:c7:9f:3b:a3:f3:be:75:f3: f7:0d:32:e6:bb:3a:5f:cd:04:7b:97:21:96:26:52:12:b8:1b: 4a:9c:12:98:8e:5b:52:c2:5a:c7:0d:61:cc:22:69:ef:43:0e: 95:b7:1e:ac:1a:ed:7b:77:bb:9e:ba:ec:dc:c6:ee:a7:5b:d0: 3d:dc:83:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUzNzQxMTAvBgNVBAUTKEQ4NEJDRDZDNTgwOTI3OUJDQkNDMEE1NkFENEExNjgz MjMwRjQzM0UwHhcNMjUxMjA3MDA0NzQwWhcNMjUxMjE0MDA0NzQwWjAYMRYwFAYD VQQDEw02OTM0Y2VhYy1hYWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyHmkx/VzrUNbjhrnp94FrW5fRh9RWaAS0se3RmDuBEKIM3Kgh32XIQnW4e7 pdaswqf8ayzupg+YhZk5uGPsSfx0l+m+Vc00fkhZkZZaQMIj1b671Nv4pLq6IcqJ bBA+eKiCoSypkDAf4B19ywwUMwC0zdQ8ZmuUOQuDUIBKeO/KlruHoMNhM+AYTDA7 iqaiqn6KuGI8ftvoj4f9/bL+9eNpXp2PODDJbzvlJTPPcPUBh1GGP2+JNoT6mQBe CbODtUz7ntbO/nEExejAW1sRAdPnXSfYt/uIM1+3m0cLz03gviPIramwcL2TdhaC LV/iRHo8yxl7pnti52MnPMdB2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqiDKEC pQ7KSF1V/MdprHN+IOCcMB8GA1UdIwQYMBaAFNhLzWxYCSeby8wKVq1KFoMjD0M+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTM3NC80MDYwMzU2MkFD MzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1dkx6QXBXclVvV2d5TVBR ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJFdk5iRmdKSjV2THpBcFdyVW9XZ3lNUFF6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTM3NC80MDYwMzU2MkFDMzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1 dkx6QXBXclVvV2d5TVBRejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfIKwU+ujO7t87df/vfrd45Hx51skP2tcQoKBtDyk/+dBsFZe8pWww u1r+R5HNeMwIB8HLJzIl1beVgslEthpPhobbPFuktSRiPotM9NWPHMblVuYA2f1f kAc1Svdu5EuJ3cmcxCDfyS0jgVbaVng9Fycq6io0X4TWV+ges3jglKwSavb4NlFu eHMRIcReN3jszWriDZaoAfXSmVOSqFZqfBLrVtFAGpQlJUJiuV3h69xBagMfUv9O wh75DMWTx587o/O+dfP3DTLmuzpfzQR7lyGWJlISuBtKnBKYjltSwlrHDWHMImnv Qw6Vtx6sGu17d7ueuuzcxu6nW9A93IPJ -----END CERTIFICATE-----Generated at Sun Dec 7 05:10:14 2025 by rpki-client