This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft File: 2S2tTXbh9aAmwn8tuRxE-62OSHw.mft (raw, json) Hash identifier: 5N2ukyovDNCIKZlKkay9qwTvtFTGnuSpWZEUgfoXETo= Subject key identifier: BB:11:8D:3A:93:69:EF:11:81:B5:6F:22:E2:D0:F1:01:F7:F8:02:B2 Authority key identifier: D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C Certificate issuer: /CN=A91F5143/serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Certificate serial: 0E87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft Manifest number: 0E7E Signing time: Sat 06 Dec 2025 17:10:43 +0000 Manifest this update: Sat 06 Dec 2025 17:10:42 +0000 Manifest next update: Sat 13 Dec 2025 17:10:42 +0000 Files and hashes: 1: 2S2tTXbh9aAmwn8tuRxE-62OSHw.crl (hash: eGgoyE+4xyEGdKcRgLfqWj/42sLQDqx9xU7uifdMmmg=) 2: FBBFC6D8A86B11E9A1385758C4F9AE02.roa (hash: XTPvOUtwwqNSor3+lvQAUp+XHkA+OuKa7+XgiPm/si4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3719 (0xe87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5143, serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Validity Not Before: Dec 6 17:10:42 2025 GMT Not After : Dec 13 17:10:42 2025 GMT Subject: CN=69346392-4a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8e:d6:03:8d:37:bd:ae:9b:5c:aa:55:b4:26: 70:58:9d:62:16:37:59:ad:ee:06:26:0c:d9:de:9e: 21:ef:b4:67:7f:26:30:c9:62:e9:01:62:6a:f1:4b: cb:03:d0:40:a6:11:56:7b:60:58:c7:b9:43:d6:9b: 9e:92:c1:5e:be:66:5c:fa:3b:d7:77:21:80:1c:90: 0a:ef:3f:22:45:18:b3:1e:da:cd:77:af:6c:c1:ab: 39:22:14:d5:48:19:00:12:91:6f:ef:f9:36:a2:ed: b7:17:d3:47:21:1f:c9:2f:6e:af:a4:2e:26:e0:31: 62:bd:12:4f:aa:57:46:f1:0a:ef:01:02:b0:85:20: 7a:9a:18:ec:5d:15:6d:36:57:93:15:41:1f:48:d7: 30:e7:2b:3a:bb:99:c7:37:fe:f7:e3:f2:a8:61:a3: 70:70:f3:a2:7a:7f:18:aa:24:7d:f1:d8:53:9d:66: f9:7a:7a:43:94:77:6a:12:12:0d:d3:2b:ff:ba:5c: 5a:d6:59:46:30:de:4f:f1:a6:08:37:f5:b3:b7:b5: 38:70:87:0a:87:17:9c:6c:40:50:2a:8e:ff:a2:a9: b9:b1:ad:62:69:93:0b:98:c6:2c:95:81:d5:05:d8: 38:17:47:b4:e6:4b:3a:0f:df:fc:8a:f7:70:59:a0: 07:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:11:8D:3A:93:69:EF:11:81:B5:6F:22:E2:D0:F1:01:F7:F8:02:B2 X509v3 Authority Key Identifier: keyid:D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:cc:c3:1d:b0:ed:73:00:82:39:0e:9f:5a:db:38:e3:cb:60: 2f:19:e2:44:17:de:55:08:d1:0b:04:18:b1:67:1d:19:7c:e2: df:93:a8:8e:ac:48:f5:b6:f5:6c:55:06:c9:c4:8a:33:ac:94: a9:47:24:87:66:46:3d:2f:f7:9c:64:71:7c:0b:32:c0:30:d2: 6c:e1:7a:16:cc:ea:6d:d4:36:13:ad:08:fa:b9:c9:a8:c0:1d: 32:49:84:a5:7b:c2:bd:33:07:bc:25:e2:89:42:c7:fb:c9:90: 10:d6:33:e7:59:9a:0d:8d:c9:6e:1f:3b:23:eb:c0:1c:f8:23: f8:39:04:00:ad:64:dc:67:44:1b:fe:86:84:c0:0e:38:9a:22: 24:dd:28:19:ba:64:19:91:2d:82:d2:91:9b:95:1d:12:50:a2: 12:00:e1:48:aa:8d:e0:79:7e:84:cb:7a:81:09:e6:1d:fc:89: 54:a0:92:f0:30:c6:e6:e1:8a:2e:92:f0:f5:6f:23:cd:75:99: 8d:b8:5a:51:d3:1d:24:6a:26:41:6d:6f:f8:9c:5f:9d:50:36: 3d:09:34:1a:d1:40:17:c5:d9:df:b1:15:77:9d:74:e9:43:a5: 61:81:36:e6:78:e3:bd:5c:fd:fe:32:d2:0f:a6:c6:c0:aa:82: 5c:ec:59:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUxNDMxMTAvBgNVBAUTKEQ5MkRBRDRENzZFMUY1QTAyNkMyN0YyREI5MUM0NEZC QUQ4RTQ4N0MwHhcNMjUxMjA2MTcxMDQyWhcNMjUxMjEzMTcxMDQyWjAYMRYwFAYD VQQDEw02OTM0NjM5Mi00YTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwo7WA403va6bXKpVtCZwWJ1iFjdZre4GJgzZ3p4h77RnfyYwyWLpAWJq8UvL A9BAphFWe2BYx7lD1pueksFevmZc+jvXdyGAHJAK7z8iRRizHtrNd69swas5IhTV SBkAEpFv7/k2ou23F9NHIR/JL26vpC4m4DFivRJPqldG8QrvAQKwhSB6mhjsXRVt NleTFUEfSNcw5ys6u5nHN/734/KoYaNwcPOien8YqiR98dhTnWb5enpDlHdqEhIN 0yv/ulxa1llGMN5P8aYIN/Wzt7U4cIcKhxecbEBQKo7/oqm5sa1iaZMLmMYslYHV Bdg4F0e05ks6D9/8ivdwWaAH/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsRjTqT ae8RgbVvIuLQ8QH3+AKyMB8GA1UdIwQYMBaAFNktrU124fWgJsJ/LbkcRPutjkh8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTE0My8wREU5Rjc3NkE4 NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlhQW13bjh0dVJ4RS02Mk9T SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJTMnRUWGJoOWFBbXduOHR1UnhFLTYyT1NIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTE0My8wREU5Rjc3NkE4NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlh QW13bjh0dVJ4RS02Mk9TSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9zMMdsO1zAII5Dp9a2zjjy2AvGeJEF95VCNELBBixZx0ZfOLfk6iO rEj1tvVsVQbJxIozrJSpRySHZkY9L/ecZHF8CzLAMNJs4XoWzOpt1DYTrQj6ucmo wB0ySYSle8K9Mwe8JeKJQsf7yZAQ1jPnWZoNjcluHzsj68Ac+CP4OQQArWTcZ0Qb /oaEwA44miIk3SgZumQZkS2C0pGblR0SUKISAOFIqo3geX6Ey3qBCeYd/IlUoJLw MMbm4YoukvD1byPNdZmNuFpR0x0kaiZBbW/4nF+dUDY9CTQa0UAXxdnfsRV3nXTp Q6VhgTbmeOO9XP3+MtIPpsbAqoJc7Fk7 -----END CERTIFICATE-----Generated at Sun Dec 7 01:58:55 2025 by rpki-client