This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft File: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft (raw, json) Hash identifier: Js84wGLHi2i/xdJuU7YccRgojix/QOiCHXbnN924n1M= Subject key identifier: 99:54:60:3B:B0:95:5F:22:03:F7:4A:48:CF:EF:06:6F:66:0B:E2:37 Authority key identifier: D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84 Certificate issuer: /CN=A91F89A2/serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft Manifest number: 0158 Signing time: Fri 05 Dec 2025 02:17:57 +0000 Manifest this update: Fri 05 Dec 2025 02:17:57 +0000 Manifest next update: Fri 12 Dec 2025 02:17:57 +0000 Files and hashes: 1: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl (hash: Hf0aTEw6fTGM7dwaOr0q9ue1QoB1Wy0d39cpppONrEc=) 2: 6C363C0CF85911EE9EAE731BC4F9AE02.roa (hash: G8LAWFDM7ySLTe/ZJTkJCLPXRoKFmaYaIusDW3bZoi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89A2, serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84 Validity Not Before: Dec 5 02:17:57 2025 GMT Not After : Dec 12 02:17:57 2025 GMT Subject: CN=693240d5-94cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:50:7e:f7:97:fa:70:af:a2:8b:36:a4:c3:e8: 71:52:e5:02:eb:db:45:e6:cc:70:d5:20:7b:6e:90: 7e:01:c4:5e:9f:a1:55:74:1f:b4:69:e8:e6:28:39: 3b:21:9f:50:c8:b3:bb:52:42:cf:92:c9:1d:4e:d4: d0:8d:d0:59:38:16:7a:b5:be:4e:fd:88:4b:ee:f2: 19:c2:e5:3d:80:b3:a4:52:d5:9f:d1:b1:f8:59:30: 15:56:c3:27:9f:9f:1a:02:c5:d4:e9:29:da:74:7e: 32:49:2e:cd:05:b7:9e:21:ca:16:85:d9:2f:90:94: 03:87:57:dc:e8:f3:67:34:22:6d:02:20:2c:ab:1f: 55:3a:82:0e:a1:d4:a0:fe:fe:df:fc:78:6b:2d:11: e5:f8:e1:81:23:a1:cd:a7:16:c8:75:ce:8f:65:a8: b1:42:f5:11:82:5f:52:c7:17:e1:84:1b:7f:fd:7f: b6:54:d4:3e:0b:b7:de:7f:ae:e9:5f:e4:fb:ec:ee: 44:18:4c:9b:81:a2:8c:05:a8:f6:e2:80:2e:33:3e: 9f:19:30:02:bb:6c:d6:b7:24:d9:aa:55:b1:9d:b6: a0:7e:3a:e1:d3:68:a5:4f:ca:66:0e:d0:69:0a:dd: a4:85:c0:33:ec:cc:9a:53:0a:62:9d:43:bd:c7:7a: 94:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:54:60:3B:B0:95:5F:22:03:F7:4A:48:CF:EF:06:6F:66:0B:E2:37 X509v3 Authority Key Identifier: keyid:D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e2:6d:61:a0:12:22:d6:41:46:57:eb:12:2c:83:1c:1d:b6: ab:26:ed:d6:35:14:e2:89:8b:18:e5:1c:e2:50:db:e7:fb:c6: 87:5e:45:81:67:f1:1e:e6:8a:31:9b:49:fb:f9:01:22:cd:7d: c1:0e:61:83:70:b4:5f:a2:cc:f4:ee:7e:51:3c:69:99:7b:a9: fa:65:84:09:73:fd:fb:85:7e:58:38:92:d4:ea:71:59:41:0e: af:9f:57:55:98:75:80:30:f8:8c:52:ca:66:39:1b:6d:db:a5: df:09:a4:09:18:89:8d:88:4d:6f:3d:26:9a:56:b0:26:d9:a2: 4f:d2:6c:88:9f:89:60:47:db:ca:1d:18:b8:bf:c4:1c:7e:3c: 2c:c3:55:40:71:b3:4c:1e:4b:c9:a4:00:c1:26:8c:2a:65:b2: 05:76:f1:63:f8:4a:a8:15:b4:20:65:05:88:19:5a:9e:5a:60: 29:16:6a:ed:94:bc:07:7a:26:44:28:e7:a3:a9:9e:93:fe:1b: f3:0c:c7:a7:44:5f:49:45:af:a5:f1:04:26:75:7b:d5:db:84: 13:b3:72:f6:7e:1d:9f:ba:e8:11:61:ff:0f:a4:ae:4b:0d:5e: a2:92:68:e2:30:41:65:c0:be:f1:e8:82:b4:ea:1b:b8:8e:87: 6f:50:97:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QTIxMTAvBgNVBAUTKEQ4RkM3OTVCNjNDQzQyNTczRkQ1REI0NEYwQTgzODZD OEQ2NDNCODQwHhcNMjUxMjA1MDIxNzU3WhcNMjUxMjEyMDIxNzU3WjAYMRYwFAYD VQQDEw02OTMyNDBkNS05NGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVB+95f6cK+iizakw+hxUuUC69tF5sxw1SB7bpB+AcRen6FVdB+0aejmKDk7 IZ9QyLO7UkLPkskdTtTQjdBZOBZ6tb5O/YhL7vIZwuU9gLOkUtWf0bH4WTAVVsMn n58aAsXU6SnadH4ySS7NBbeeIcoWhdkvkJQDh1fc6PNnNCJtAiAsqx9VOoIOodSg /v7f/HhrLRHl+OGBI6HNpxbIdc6PZaixQvURgl9SxxfhhBt//X+2VNQ+C7fef67p X+T77O5EGEybgaKMBaj24oAuMz6fGTACu2zWtyTZqlWxnbagfjrh02ilT8pmDtBp Ct2khcAz7MyaUwpinUO9x3qUvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlUYDuw lV8iA/dKSM/vBm9mC+I3MB8GA1UdIwQYMBaAFNj8eVtjzEJXP9XbRPCoOGyNZDuE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlBMi9CMzk2RjNDMEM1 NDExMUVFQUJDMkMzODVDNEY5QUUwMi8yUHg1VzJQTVFsY18xZHRFOEtnNGJJMWtP NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJQeDVXMlBNUWxjXzFkdEU4S2c0Ykkxa080US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlBMi9CMzk2RjNDMEM1NDExMUVFQUJDMkMzODVDNEY5QUUwMi8yUHg1VzJQTVFs Y18xZHRFOEtnNGJJMWtPNFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+4m1hoBIi1kFGV+sSLIMcHbarJu3WNRTiiYsY5RziUNvn+8aHXkWB Z/Ee5ooxm0n7+QEizX3BDmGDcLRfosz07n5RPGmZe6n6ZYQJc/37hX5YOJLU6nFZ QQ6vn1dVmHWAMPiMUspmORtt26XfCaQJGImNiE1vPSaaVrAm2aJP0myIn4lgR9vK HRi4v8Qcfjwsw1VAcbNMHkvJpADBJowqZbIFdvFj+EqoFbQgZQWIGVqeWmApFmrt lLwHeiZEKOejqZ6T/hvzDMenRF9JRa+l8QQmdXvV24QTs3L2fh2fuugRYf8PpK5L DV6ikmjiMEFlwL7x6IK06hu4jodvUJdf -----END CERTIFICATE-----Generated at Sat Dec 6 13:56:29 2025 by rpki-client