This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft File: 2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft (raw, json) Hash identifier: TJb8t6Hn41y4Ncc6Jc+UoanXlFAOiKYBAaVThACQcMQ= Subject key identifier: 23:AD:BD:E7:B8:37:E9:29:65:00:92:1A:D1:06:36:22:08:DB:7A:4B Authority key identifier: DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19 Certificate issuer: /CN=A91E802C/serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft Manifest number: 1C Signing time: Fri 05 Dec 2025 05:38:02 +0000 Manifest this update: Fri 05 Dec 2025 05:38:01 +0000 Manifest next update: Fri 12 Dec 2025 05:38:01 +0000 Files and hashes: 1: 2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl (hash: h/W2m6J+ufWClNcPql5eIIaGEJ1e+LyYOMIafeo0hbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E802C, serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119 Validity Not Before: Dec 5 05:38:01 2025 GMT Not After : Dec 12 05:38:01 2025 GMT Subject: CN=69326fb9-5511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ad:d4:b9:5f:5c:e7:e6:eb:47:d0:d2:1b:68: b8:fa:4b:b3:78:09:cc:40:2f:b4:9e:38:35:54:30: e4:82:53:63:cd:7c:d9:44:f1:16:7d:4b:0e:00:94: e2:3e:6e:52:33:8d:b0:21:fa:9a:9b:d8:e5:9f:1e: c4:d5:8e:6f:30:61:ef:28:4d:a7:0d:bd:8f:d5:90: b4:85:24:cb:41:f5:3f:46:98:24:08:de:71:19:db: 6a:d4:68:69:fe:95:03:cd:df:65:7e:f5:87:58:c5: 91:f9:74:5d:e4:1c:2d:6e:d3:7a:8d:4b:4d:4e:3e: b9:e3:b0:22:4f:4f:b3:e0:4a:b8:6b:82:38:c4:2f: ee:ba:c7:a3:9d:6e:84:fb:c0:95:93:12:82:8b:6c: 68:00:c4:ca:8a:ea:17:fc:dd:b9:db:1a:bc:78:a7: 90:61:cf:21:ba:2f:cd:3c:4e:f3:7a:48:0a:31:e2: 91:59:94:e2:26:ed:7d:17:88:2c:d6:a3:9e:d9:b2: 01:e5:c6:b6:70:ad:1b:fc:e0:3e:0e:2f:b4:4a:ca: 31:ca:8e:59:74:9c:7f:dd:fd:2c:87:f1:99:d6:99: 85:f2:e0:9f:6e:63:2f:c3:40:68:06:aa:b4:71:25: 74:98:b5:9d:95:95:d4:a9:96:60:5d:4d:10:96:af: 89:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AD:BD:E7:B8:37:E9:29:65:00:92:1A:D1:06:36:22:08:DB:7A:4B X509v3 Authority Key Identifier: keyid:DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:66:40:f7:09:42:d7:e7:7d:ba:35:e0:40:0b:51:fa:e3:da: 96:1b:ac:3f:05:e6:5f:0a:74:15:36:92:df:74:56:2d:07:59: e8:5e:0b:d2:ca:55:d3:e0:c5:08:2c:4f:b9:18:a0:2b:23:10: 60:85:8f:56:f7:1a:00:f2:59:81:db:94:92:09:9a:0f:a9:f0: 4a:ef:c2:c8:32:b1:09:47:d2:35:70:30:88:bc:43:37:3d:5f: 97:2b:61:cd:0d:fb:0d:1b:f6:1d:db:bb:bc:c2:49:1b:6c:62: ae:a5:57:b6:f9:9e:fc:e9:6e:db:0f:23:1e:6e:69:2e:33:be: db:21:e3:f8:03:9d:3d:12:dc:db:a7:56:64:d9:09:f8:60:5f: 54:13:b1:bf:34:75:ea:89:58:3b:41:aa:04:dc:72:15:a4:dc: 41:ae:70:39:b6:cd:d6:a3:18:1a:30:03:87:85:e3:36:ed:21: 1b:78:50:02:ed:f7:03:19:79:b3:2e:e9:b2:85:71:29:d5:3b: ca:68:0a:b0:44:81:50:2e:b5:35:5b:39:ef:c0:b0:05:34:12: 3a:ed:38:02:e2:c4:85:2b:d0:63:c4:80:e1:a9:16:54:e9:1d: c5:50:fe:ec:d2:2a:6f:37:5d:d9:06:06:3f:5a:8f:b3:cd:d0: fa:41:d4:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODAyQzExMC8GA1UEBRMoREEwQTUxQkEyNjMxNTc3OUJGNkY4M0VGRjAzNEYyNjAx MDVDNTExOTAeFw0yNTEyMDUwNTM4MDFaFw0yNTEyMTIwNTM4MDFaMBgxFjAUBgNV BAMTDTY5MzI2ZmI5LTU1MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXrdS5X1zn5utH0NIbaLj6S7N4CcxAL7SeODVUMOSCU2PNfNlE8RZ9Sw4AlOI+ blIzjbAh+pqb2OWfHsTVjm8wYe8oTacNvY/VkLSFJMtB9T9GmCQI3nEZ22rUaGn+ lQPN32V+9YdYxZH5dF3kHC1u03qNS01OPrnjsCJPT7PgSrhrgjjEL+66x6OdboT7 wJWTEoKLbGgAxMqK6hf83bnbGrx4p5BhzyG6L808TvN6SAox4pFZlOIm7X0XiCzW o57ZsgHlxrZwrRv84D4OL7RKyjHKjll0nH/d/SyH8ZnWmYXy4J9uYy/DQGgGqrRx JXSYtZ2VldSplmBdTRCWr4lPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUI62957g3 6SllAJIa0QY2IgjbekswHwYDVR0jBBgwFoAU2gpRuiYxV3m/b4Pv8DTyYBBcURkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4MDJDLzAyMzQ1Rjk0QTlC QzExRjA5NzU2NEQxQkM0RjlBRTAyLzJncFJ1aVl4VjNtX2I0UHY4RFR5WUJCY1VS ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmdwUnVpWXhWM21fYjRQdjhEVHlZQkJjVVJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 MDJDLzAyMzQ1Rjk0QTlCQzExRjA5NzU2NEQxQkM0RjlBRTAyLzJncFJ1aVl4VjNt X2I0UHY4RFR5WUJCY1VSay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIZmQPcJQtfnfbo14EALUfrj2pYbrD8F5l8KdBU2kt90Vi0HWeheC9LK VdPgxQgsT7kYoCsjEGCFj1b3GgDyWYHblJIJmg+p8ErvwsgysQlH0jVwMIi8Qzc9 X5crYc0N+w0b9h3bu7zCSRtsYq6lV7b5nvzpbtsPIx5uaS4zvtsh4/gDnT0S3Nun VmTZCfhgX1QTsb80deqJWDtBqgTcchWk3EGucDm2zdajGBowA4eF4zbtIRt4UALt 9wMZebMu6bKFcSnVO8poCrBEgVAutTVbOe/AsAU0EjrtOALixIUr0GPEgOGpFlTp HcVQ/uzSKm83XdkGBj9aj7PN0PpB1GY= -----END CERTIFICATE-----Generated at Sat Dec 6 14:28:55 2025 by rpki-client