This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft File: 2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json) Hash identifier: OyFq4psXDK7J/rlEjVTO1ab1GRYiOaLIUTkoE07zgwQ= Subject key identifier: D1:70:E8:8F:2C:FF:6C:4D:35:5D:A3:79:44:B5:5E:0B:40:0D:74:5F Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft Manifest number: 0204 Signing time: Fri 05 Dec 2025 01:00:45 +0000 Manifest this update: Fri 05 Dec 2025 01:00:44 +0000 Manifest next update: Fri 12 Dec 2025 01:00:44 +0000 Files and hashes: 1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: flXuvL2I0KZl0FoVAVa2Ja6aCK29VY/ZtYfx5fCfvDg=) 2: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: FLWPyCCdfmecVu0JHu1esGWqwLx8eepgbZ0pVH/wRzU=) 3: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: +KpPTrvUJ0fhW59fFGMaGeaxnMDX3lJjTA7XrEuSgaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Validity Not Before: Dec 5 01:00:44 2025 GMT Not After : Dec 12 01:00:44 2025 GMT Subject: CN=69322ebd-bbf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4f:30:e5:d5:12:91:5c:57:f8:c2:14:64:b0: 62:90:ce:63:9d:68:41:80:8f:d6:47:5c:6c:4a:5f: c4:9a:c9:52:8e:54:c0:4d:23:a3:7a:1a:2d:26:55: 8b:cf:85:b1:e5:3f:34:98:3a:2d:74:58:ad:4e:f4: c7:86:71:03:5a:07:05:2c:1c:f9:58:31:f9:1b:fa: 78:3f:8e:61:76:78:ba:6b:21:ae:c4:57:1b:f3:c5: f0:8b:3f:35:34:74:d8:8e:9a:88:2f:91:78:a3:cd: 24:d3:d2:33:00:e6:b5:9b:c2:dc:37:ca:e3:62:6c: 8b:3f:0b:a2:32:09:87:85:cb:af:a9:1f:8f:ac:a8: 11:a5:ec:c4:cf:98:38:3c:33:a0:9a:55:43:55:d5: 5f:93:8c:c1:cb:ea:96:d7:af:b6:f8:43:06:c6:4c: 93:d5:33:1b:d1:be:25:c5:9d:3e:a4:c1:9f:8c:20: 2a:89:04:fc:6d:37:68:42:d8:9f:c9:95:ca:7b:48: a2:73:b4:2e:2e:23:a7:f8:c3:1d:46:35:c9:4e:61: a1:c5:53:dd:7d:72:bc:1b:da:47:75:dd:c2:6a:7a: 89:7b:38:96:8b:3b:96:1a:3d:f1:13:f3:a8:c7:6c: ff:5d:7d:4a:8d:c3:91:06:14:5c:c4:27:21:6a:dc: 7d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:70:E8:8F:2C:FF:6C:4D:35:5D:A3:79:44:B5:5E:0B:40:0D:74:5F X509v3 Authority Key Identifier: keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:0a:53:a3:7b:12:64:22:ea:64:c2:0b:0a:15:6f:ec:7b:70: 11:1e:60:5f:06:40:a4:09:30:6a:7e:d7:94:fd:56:cb:c5:d4: 4a:93:f2:0d:83:0a:20:41:d9:c4:44:0f:2c:95:a3:80:48:43: af:d3:af:d2:25:fb:ba:f1:55:1a:a9:1e:94:d2:5e:ed:ae:8f: 39:4e:74:c1:05:59:8c:a5:a5:ac:01:44:5b:c7:91:eb:03:12: a5:3f:8a:43:34:94:b3:da:e7:de:e9:f6:0d:46:55:c5:73:b0: 42:91:14:e1:11:2e:f0:cd:4e:63:d0:ce:eb:39:7c:36:53:25: f1:02:65:f8:72:4d:23:d4:d4:f1:cd:c2:d2:d3:5f:b1:15:dc: df:a5:8b:ef:3c:8b:36:32:35:b1:3f:a4:01:75:f7:de:2f:42: 92:4b:38:8f:de:b9:39:60:11:9f:96:e5:4f:08:d2:ee:d1:6e: 4e:41:4f:ae:ff:0c:17:0d:f3:0c:50:ef:10:bc:e2:25:cf:d7: 5f:0b:57:d7:b7:3a:4f:fe:03:2a:c4:4e:4c:2f:b7:b5:26:15: ec:25:1b:e2:c9:05:4e:a7:d8:21:db:24:22:0c:b1:56:22:91: cd:d2:ba:8a:35:00:bd:68:8c:4a:25:7d:5c:fd:d0:13:aa:e6: 72:f2:32:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEUxMTAvBgNVBAUTKEQ4ODBFRjI2NUI5NDBFMzFERkVEMUM0MkFFRjUxNDRC NjQ0MTM3MTcwHhcNMjUxMjA1MDEwMDQ0WhcNMjUxMjEyMDEwMDQ0WjAYMRYwFAYD VQQDEw02OTMyMmViZC1iYmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA508w5dUSkVxX+MIUZLBikM5jnWhBgI/WR1xsSl/EmslSjlTATSOjehotJlWL z4Wx5T80mDotdFitTvTHhnEDWgcFLBz5WDH5G/p4P45hdni6ayGuxFcb88Xwiz81 NHTYjpqIL5F4o80k09IzAOa1m8LcN8rjYmyLPwuiMgmHhcuvqR+PrKgRpezEz5g4 PDOgmlVDVdVfk4zBy+qW16+2+EMGxkyT1TMb0b4lxZ0+pMGfjCAqiQT8bTdoQtif yZXKe0iic7QuLiOn+MMdRjXJTmGhxVPdfXK8G9pHdd3CanqJeziWizuWGj3xE/Oo x2z/XX1KjcORBhRcxCchatx9fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFw6I8s /2xNNV2jeUS1XgtADXRfMB8GA1UdIwQYMBaAFNiA7yZblA4x3+0cQq71FEtkQTcX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82MUJBRDhFMEY4 N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURqSGY3UnhDcnZVVVMyUkJO eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJJRHZKbHVVRGpIZjdSeENydlVVUzJSQk54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RS82MUJBRDhFMEY4N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURq SGY3UnhDcnZVVVMyUkJOeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzClOjexJkIupkwgsKFW/se3ARHmBfBkCkCTBqfteU/VbLxdRKk/IN gwogQdnERA8slaOASEOv06/SJfu68VUaqR6U0l7tro85TnTBBVmMpaWsAURbx5Hr AxKlP4pDNJSz2ufe6fYNRlXFc7BCkRThES7wzU5j0M7rOXw2UyXxAmX4ck0j1NTx zcLS01+xFdzfpYvvPIs2MjWxP6QBdffeL0KSSziP3rk5YBGfluVPCNLu0W5OQU+u /wwXDfMMUO8QvOIlz9dfC1fXtzpP/gMqxE5ML7e1JhXsJRviyQVOp9gh2yQiDLFW IpHN0rqKNQC9aIxKJX1c/dATquZy8jJI -----END CERTIFICATE-----Generated at Sat Dec 6 22:07:35 2025 by rpki-client