This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft File: 2-ETC8fG27LbfLvxTgH2GG_9vRA.mft (raw, json) Hash identifier: YNWzSMQ6OnXJN/C/HniOzk2wDq7fyNoTiz0VZ+c1ERs= Subject key identifier: D8:7B:73:E0:23:30:5B:DD:7A:FE:07:AE:FD:D3:3E:6B:6E:CF:0F:8B Authority key identifier: DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10 Certificate issuer: /CN=A9115480/serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10 Certificate serial: 02DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft Manifest number: 02D6 Signing time: Fri 19 Dec 2025 00:34:44 +0000 Manifest this update: Fri 19 Dec 2025 00:34:44 +0000 Manifest next update: Fri 26 Dec 2025 00:34:44 +0000 Files and hashes: 1: 2-ETC8fG27LbfLvxTgH2GG_9vRA.crl (hash: BK9XQwEkF0T+IMG38VpG8h+ultmdIhUxG/xzXD8kztg=) 2: D1D6719A10DD11EDBC7EA35FC4F9AE02.roa (hash: l25pt6xsGqTRyB7Z9iKfisGtCqvwzSPP/vuUSztNwvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 730 (0x2da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115480, serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10 Validity Not Before: Dec 19 00:34:44 2025 GMT Not After : Dec 26 00:34:44 2025 GMT Subject: CN=69449da4-c8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:12:d3:18:ca:69:a9:a2:ed:1f:64:0d:15:b2: a1:ae:e4:e5:74:77:d9:c8:14:de:f3:2d:ad:7a:e2: 48:ed:fd:4a:61:62:a5:b4:00:fe:62:77:62:5b:55: f1:4a:a2:2d:0f:6e:de:e1:47:e1:76:8d:ba:da:3c: 91:c1:41:59:4e:d9:90:00:5b:65:1f:e9:dc:09:b0: 2d:68:e9:03:5d:1c:70:b0:2b:34:a0:63:7f:64:8b: 53:00:48:aa:d0:55:a4:41:d8:25:0c:84:69:d1:e1: 83:d7:f1:9c:0f:d8:79:7b:aa:f1:1b:1c:2a:f2:5a: b8:07:07:61:70:ba:dc:06:4f:d6:d0:31:b6:65:50: 10:e4:63:03:1b:57:cf:95:a6:fd:30:86:a2:9d:db: 45:3e:cb:de:6d:bb:3b:ed:2e:9d:21:6a:3c:04:aa: 07:f6:93:fd:9f:06:c2:a1:53:2a:88:c3:80:92:08: c9:3c:35:27:e0:4d:43:8b:45:5e:62:6b:64:27:80: 82:94:48:39:ff:db:33:51:1c:21:b7:2b:34:76:5b: 8c:eb:24:0f:9a:b9:fe:bc:b2:56:28:f6:f6:6a:15: ee:0d:33:f9:c2:f9:9b:bc:59:98:33:8d:94:dc:5e: cb:a1:54:ca:20:71:a9:8c:e1:8a:6e:8d:60:77:9e: 9f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7B:73:E0:23:30:5B:DD:7A:FE:07:AE:FD:D3:3E:6B:6E:CF:0F:8B X509v3 Authority Key Identifier: keyid:DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:3c:7b:9c:6c:7b:6c:98:2d:5d:48:78:b6:1a:86:c9:e5:7d: c2:60:5c:03:53:45:70:ce:f4:55:53:64:0c:fb:7f:52:8b:d1: 2a:2d:cd:46:a6:66:4b:64:0f:92:35:b6:77:e5:29:82:75:f7: f1:df:51:be:7b:6f:91:8c:7f:67:7b:76:58:9d:59:4c:29:e1: fa:fa:bd:65:d5:00:79:f5:14:bd:45:6f:27:bf:20:a4:df:35: b5:50:83:22:63:1d:c9:cd:e5:13:2d:c7:a1:da:dd:e2:41:7f: 39:7c:48:35:d3:11:9d:ac:66:0c:3b:70:31:3b:0c:1b:8c:14: b6:32:3f:e4:bb:3c:60:6b:a6:71:2c:df:14:ff:b6:0f:10:bb: fe:9d:3f:b8:30:2c:8c:14:38:d0:65:fe:71:5a:40:1d:ff:8a: c2:44:63:44:21:72:f1:9c:8f:57:06:d6:d8:9c:2c:a1:ba:d6: 3d:05:ca:81:50:ed:ae:dc:5c:44:f2:3c:a9:96:32:84:11:ef: 3c:69:3b:dd:b9:6b:a6:78:f1:d0:40:93:f3:8d:0c:76:bf:19: 6f:eb:c1:5b:33:d7:76:7a:36:15:ef:fa:79:2d:de:ba:24:d6: b9:42:0a:d2:29:3b:ca:ff:f1:1e:a9:50:78:5d:0c:12:df:00: 76:34:8c:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0ODAxMTAvBgNVBAUTKERCRTExMzBCQzdDNkRCQjJEQjdDQkJGMTRFMDFGNjE4 NkZGREJEMTAwHhcNMjUxMjE5MDAzNDQ0WhcNMjUxMjI2MDAzNDQ0WjAYMRYwFAYD VQQDDA02OTQ0OWRhNC1jOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRLTGMppqaLtH2QNFbKhruTldHfZyBTe8y2teuJI7f1KYWKltAD+YndiW1Xx SqItD27e4Ufhdo262jyRwUFZTtmQAFtlH+ncCbAtaOkDXRxwsCs0oGN/ZItTAEiq 0FWkQdglDIRp0eGD1/GcD9h5e6rxGxwq8lq4BwdhcLrcBk/W0DG2ZVAQ5GMDG1fP lab9MIaindtFPsvebbs77S6dIWo8BKoH9pP9nwbCoVMqiMOAkgjJPDUn4E1Di0Ve YmtkJ4CClEg5/9szURwhtys0dluM6yQPmrn+vLJWKPb2ahXuDTP5wvmbvFmYM42U 3F7LoVTKIHGpjOGKbo1gd56fnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNh7c+Aj MFvdev4Hrv3TPmtuzw+LMB8GA1UdIwQYMBaAFNvhEwvHxtuy23y78U4B9hhv/b0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTQ4MC85NkYyOEFDNjEw REExMUVEOEE2OTlFMzJDNEY5QUUwMi8yLUVUQzhmRzI3TGJmTHZ4VGdIMkdHXzl2 UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItRVRDOGZHMjdMYmZMdnhUZ0gyR0dfOXZSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTQ4MC85NkYyOEFDNjEwREExMUVEOEE2OTlFMzJDNEY5QUUwMi8yLUVUQzhmRzI3 TGJmTHZ4VGdIMkdHXzl2UkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+PHucbHtsmC1dSHi2GobJ5X3CYFwDU0VwzvRVU2QM+39Si9EqLc1G pmZLZA+SNbZ35SmCdffx31G+e2+RjH9ne3ZYnVlMKeH6+r1l1QB59RS9RW8nvyCk 3zW1UIMiYx3JzeUTLceh2t3iQX85fEg10xGdrGYMO3AxOwwbjBS2Mj/kuzxga6Zx LN8U/7YPELv+nT+4MCyMFDjQZf5xWkAd/4rCRGNEIXLxnI9XBtbYnCyhutY9BcqB UO2u3FxE8jypljKEEe88aTvduWumePHQQJPzjQx2vxlv68FbM9d2ejYV7/p5Ld66 JNa5QgrSKTvK//EeqVB4XQwS3wB2NIzr -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:09 2025 by rpki-client