This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft File: 2rx4_BTzDLhy7ADtak_0dtlMsng.mft (raw, json) Hash identifier: a/FQPCbeE+TS1jGIzUb2YKeMlkvqITeZ17hok1XfBWg= Subject key identifier: 14:3F:25:FC:4F:80:7E:3B:6E:18:13:E5:E0:44:DA:D3:4F:FB:3C:4B Authority key identifier: DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 Certificate issuer: /CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Certificate serial: 0331 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft Manifest number: 032D Signing time: Thu 04 Dec 2025 23:26:42 +0000 Manifest this update: Thu 04 Dec 2025 23:26:41 +0000 Manifest next update: Thu 11 Dec 2025 23:26:41 +0000 Files and hashes: 1: 2rx4_BTzDLhy7ADtak_0dtlMsng.crl (hash: YoR6QScB6xDSmNAL9JhV4Y5mmuWf9HT6aBJKjqHRXa4=) 2: F585ED70EBB511ECA410BF6DC4F9AE02.roa (hash: FDgCbVEtaiF6hhOlzAuEf/7GQvnyK8/vB0MpeqREr6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 817 (0x331) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE1E6, serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Validity Not Before: Dec 4 23:26:41 2025 GMT Not After : Dec 11 23:26:41 2025 GMT Subject: CN=693218b2-17c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:19:86:4f:83:77:7a:3e:32:55:8e:8f:d2: 7f:f9:bc:63:04:92:5e:f8:b1:f1:d0:61:ae:7f:cb: be:de:6c:00:ec:6b:a4:01:28:0f:68:bd:99:a6:1e: d9:53:6f:75:d3:87:44:da:ce:8e:6b:8a:56:cb:16: 2a:61:8e:79:a1:4f:a2:67:51:0b:ad:44:7a:d6:6d: 8d:9d:bf:87:e6:81:d2:87:57:25:03:2c:51:25:c7: 30:ec:38:9e:76:46:bf:f6:e8:72:db:a4:ee:7e:97: 47:a9:96:89:19:d6:55:3f:27:d1:fa:e0:99:e8:98: e8:6c:ac:d5:e9:60:f7:07:aa:9a:98:55:4b:dd:95: 11:f2:c6:33:da:47:a8:ca:3f:b8:8c:93:71:b9:5e: 39:bb:6b:77:fb:ae:06:33:c8:72:73:36:63:79:42: 1d:e1:62:52:1b:37:3b:84:b5:91:60:7c:c2:64:9a: 32:ed:13:28:45:8d:d1:f8:36:65:31:10:02:c2:1a: cd:13:89:a3:d1:dd:5d:36:2d:ad:ae:71:f6:ee:f4: da:63:0c:34:83:76:0e:dd:9f:58:37:02:5f:d5:fe: 3f:11:ea:df:6d:40:f8:0d:5f:42:df:de:75:18:16: 1c:2c:69:e1:ef:22:07:66:90:58:a8:bc:08:79:77: 5e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3F:25:FC:4F:80:7E:3B:6E:18:13:E5:E0:44:DA:D3:4F:FB:3C:4B X509v3 Authority Key Identifier: keyid:DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:33:61:1f:92:2f:97:88:33:fe:d6:27:4a:4b:ae:85:fe:1f: c1:a8:45:0e:4a:fe:14:8b:dc:e1:9b:08:f2:1b:d0:49:2d:42: 6b:d1:53:fd:0a:e2:c5:2d:36:1e:8c:26:e6:7b:1d:0f:96:fc: 1b:67:13:71:b8:39:7a:7b:61:c9:ac:82:a9:55:27:fc:b7:c9: 18:e1:6c:fd:d3:0f:b0:9b:b9:af:47:50:02:99:08:ae:6a:3c: 8d:66:79:a6:18:76:a1:71:48:ec:5f:cd:4d:30:00:f6:0d:c3: a2:fb:ab:81:a1:ed:75:a0:c4:c4:6a:db:88:00:60:63:0a:c8: 17:17:48:fc:20:c2:fd:8f:05:88:bc:75:ec:ae:b1:82:46:d7: 82:4f:6c:1e:9e:f3:c6:1d:cc:87:83:bb:9e:9e:35:c8:00:f5: 59:e5:d9:f5:07:f9:60:77:bd:fe:73:87:5a:be:0b:24:2a:b2: c3:61:f3:d8:23:34:cc:c2:70:e5:11:00:b6:d8:19:72:cd:0d: 00:0f:16:29:ed:14:40:15:84:a4:b8:75:a6:60:60:56:72:ec: e4:e8:a7:cd:ee:e4:24:16:ad:d9:e8:06:d8:5d:be:5e:37:ec: c1:93:62:6f:c1:a2:80:fd:32:ca:0e:10:e0:c1:20:90:22:50: 18:d9:d1:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UxRTYxMTAvBgNVBAUTKERBQkM3OEZDMTRGMzBDQjg3MkVDMDBFRDZBNEZGNDc2 RDk0Q0IyNzgwHhcNMjUxMjA0MjMyNjQxWhcNMjUxMjExMjMyNjQxWjAYMRYwFAYD VQQDEw02OTMyMThiMi0xN2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulEZhk+Dd3o+MlWOj9J/+bxjBJJe+LHx0GGuf8u+3mwA7GukASgPaL2Zph7Z U29104dE2s6Oa4pWyxYqYY55oU+iZ1ELrUR61m2Nnb+H5oHSh1clAyxRJccw7Die dka/9uhy26TufpdHqZaJGdZVPyfR+uCZ6JjobKzV6WD3B6qamFVL3ZUR8sYz2keo yj+4jJNxuV45u2t3+64GM8hyczZjeUId4WJSGzc7hLWRYHzCZJoy7RMoRY3R+DZl MRACwhrNE4mj0d1dNi2trnH27vTaYww0g3YO3Z9YNwJf1f4/EerfbUD4DV9C3951 GBYcLGnh7yIHZpBYqLwIeXdeOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQ/JfxP gH47bhgT5eBE2tNP+zxLMB8GA1UdIwQYMBaAFNq8ePwU8wy4cuwA7WpP9HbZTLJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTFFNi9DRDk0QjhCOEVC QjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRMaHk3QUR0YWtfMGR0bE1z bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyeDRfQlR6RExoeTdBRHRha18wZHRsTXNuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTFFNi9DRDk0QjhCOEVCQjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRM aHk3QUR0YWtfMGR0bE1zbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsM2Efki+XiDP+1idKS66F/h/BqEUOSv4Ui9zhmwjyG9BJLUJr0VP9 CuLFLTYejCbmex0PlvwbZxNxuDl6e2HJrIKpVSf8t8kY4Wz90w+wm7mvR1ACmQiu ajyNZnmmGHahcUjsX81NMAD2DcOi+6uBoe11oMTEatuIAGBjCsgXF0j8IML9jwWI vHXsrrGCRteCT2wenvPGHcyHg7uenjXIAPVZ5dn1B/lgd73+c4davgskKrLDYfPY IzTMwnDlEQC22BlyzQ0ADxYp7RRAFYSkuHWmYGBWcuzk6KfN7uQkFq3Z6AbYXb5e N+zBk2JvwaKA/TLKDhDgwSCQIlAY2dEe -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:02 2025 by rpki-client