This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft File: 2MZzCV6Cqbfn381GWA94MajRiso.mft (raw, json) Hash identifier: EwQcSDwRXkhNKtJLjR5Xg1tu5lNryy94drEomnRtlbE= Subject key identifier: 1A:BF:76:DF:ED:5D:35:C2:E7:53:28:AD:1C:F5:B8:84:2A:70:20:6F Authority key identifier: D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA Certificate issuer: /CN=A911862D/serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA Certificate serial: 17AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 16:22:46 +0000 Manifest this update: Sat 20 Dec 2025 16:22:46 +0000 Manifest next update: Sat 27 Dec 2025 16:22:46 +0000 Files and hashes: 1: 2MZzCV6Cqbfn381GWA94MajRiso.crl (hash: x9/MRUcwvGnsRAf/o0Fc6MkT1c2Fo1hktxbY56c+70U=) 2: EE9AC4A2CF3E11F0BD67F029C4F9AE02.roa (hash: ukdO87WAf/HOAmSfdD0XwhgfXedlsv2aXlEz1cOk5UE=) 3: 07FF86DACF3F11F0AF94352AC4F9AE02.roa (hash: h+Bf/dSTxmYNIw4E2dr2Pk1RCT+hYqXsNKneahGznRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6059 (0x17ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911862D, serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA Validity Not Before: Dec 20 16:22:46 2025 GMT Not After : Dec 27 16:22:46 2025 GMT Subject: CN=6946cd56-2c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8e:ee:6c:8d:f5:02:73:8b:2a:50:b9:de:03: 1e:2e:14:fb:a6:de:7f:50:b4:8b:07:9c:f6:b7:30: 1b:4b:f7:6f:e4:6d:f2:84:2c:43:a6:d2:07:93:d6: 54:24:63:38:aa:09:e6:fc:f4:a2:86:7e:90:ac:6d: df:71:80:17:70:96:f8:8c:29:fa:58:e8:d7:0d:f3: 80:9c:73:5d:12:26:3d:db:b2:a0:b9:ce:1c:07:5e: 44:7d:ba:33:a8:72:6e:2d:c2:97:1a:38:58:40:7b: 9b:9c:f9:b6:25:dd:3f:b0:62:48:6b:9f:b8:b7:cf: 34:86:0b:26:a3:bc:92:4f:90:1d:ee:91:f0:77:55: b2:dc:aa:56:db:e1:3f:a6:22:05:88:f1:80:38:07: b8:40:c4:0c:0a:d0:dd:61:ce:c4:ab:43:b6:31:9f: 4f:ff:1b:95:0d:77:e8:5f:e1:5d:b3:cd:1c:c4:4d: 28:ac:40:d0:5e:95:f1:e9:94:6f:86:19:c6:8f:74: dd:27:77:23:b0:50:38:33:af:30:4f:57:90:e6:69: 1e:c4:95:e5:84:a6:60:6e:c6:c0:2e:fe:70:90:63: 0b:c9:f3:68:8b:2b:99:0a:cf:ed:3c:fc:b2:83:23: 94:9d:a2:99:24:a9:f5:f8:0c:3e:31:87:5e:f3:2d: 64:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BF:76:DF:ED:5D:35:C2:E7:53:28:AD:1C:F5:B8:84:2A:70:20:6F X509v3 Authority Key Identifier: keyid:D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:70:38:5f:40:ee:1e:0a:96:d4:55:95:2c:d1:e7:c6:1a:b8: d3:0a:d5:f6:ec:2e:83:27:81:77:ab:5d:53:80:2b:12:59:2a: 84:03:d3:eb:5d:24:dc:d2:b5:99:f6:a5:ae:f9:4b:7f:f5:e5: c1:5b:a2:af:02:67:0a:9c:bd:5a:f5:43:1a:7c:69:25:e3:43: a6:69:9c:76:a7:41:94:f8:f8:00:21:77:70:9e:17:22:71:d2: 8c:d2:97:3a:93:b0:92:40:f2:9d:26:95:21:ae:27:76:b3:9f: 3a:ae:c8:dc:bc:61:e6:fb:a7:18:a8:9d:17:c7:11:4e:26:b6: 38:fb:49:1a:0f:e4:7a:c8:c5:84:83:f8:81:79:b8:0c:af:3e: 67:13:00:41:82:af:c6:2b:ec:32:02:b4:e2:d0:86:79:f0:69: a8:7f:85:30:a0:45:64:f2:f1:57:e4:94:41:35:ef:a2:8e:4f: cd:ca:c7:58:9e:7d:d4:7a:4d:08:79:68:03:64:28:34:3f:d0: 8f:85:75:76:2a:6a:6a:57:b4:b5:f5:ab:c7:86:b2:b9:ca:27: 54:1d:7c:dd:d1:e3:f5:54:80:af:01:bf:28:ce:d9:82:46:e4: a4:21:34:cb:8d:b7:8c:3f:6c:5e:ea:eb:44:c2:6b:2d:da:d6: f0:ee:04:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg2MkQxMTAvBgNVBAUTKEQ4QzY3MzA5NUU4MkE5QjdFN0RGQ0Q0NjU4MEY3ODMx QThEMThBQ0EwHhcNMjUxMjIwMTYyMjQ2WhcNMjUxMjI3MTYyMjQ2WjAYMRYwFAYD VQQDDA02OTQ2Y2Q1Ni0yYzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAho7ubI31AnOLKlC53gMeLhT7pt5/ULSLB5z2tzAbS/dv5G3yhCxDptIHk9ZU JGM4qgnm/PSihn6QrG3fcYAXcJb4jCn6WOjXDfOAnHNdEiY927Kguc4cB15Efboz qHJuLcKXGjhYQHubnPm2Jd0/sGJIa5+4t880hgsmo7yST5Ad7pHwd1Wy3KpW2+E/ piIFiPGAOAe4QMQMCtDdYc7Eq0O2MZ9P/xuVDXfoX+Fds80cxE0orEDQXpXx6ZRv hhnGj3TdJ3cjsFA4M68wT1eQ5mkexJXlhKZgbsbALv5wkGMLyfNoiyuZCs/tPPyy gyOUnaKZJKn1+Aw+MYde8y1k/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBq/dt/t XTXC51MorRz1uIQqcCBvMB8GA1UdIwQYMBaAFNjGcwlegqm359/NRlgPeDGo0YrK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODYyRC8zMjg3OUQzQUU4 QkExMUU3OEE2QTcwNDJDNEY5QUUwMi8yTVp6Q1Y2Q3FiZm4zODFHV0E5NE1halJp c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJNWnpDVjZDcWJmbjM4MUdXQTk0TWFqUmlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODYyRC8zMjg3OUQzQUU4QkExMUU3OEE2QTcwNDJDNEY5QUUwMi8yTVp6Q1Y2Q3Fi Zm4zODFHV0E5NE1halJpc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWcDhfQO4eCpbUVZUs0efGGrjTCtX27C6DJ4F3q11TgCsSWSqEA9Pr XSTc0rWZ9qWu+Ut/9eXBW6KvAmcKnL1a9UMafGkl40OmaZx2p0GU+PgAIXdwnhci cdKM0pc6k7CSQPKdJpUhrid2s586rsjcvGHm+6cYqJ0XxxFOJrY4+0kaD+R6yMWE g/iBebgMrz5nEwBBgq/GK+wyArTi0IZ58Gmof4UwoEVk8vFX5JRBNe+ijk/NysdY nn3Uek0IeWgDZCg0P9CPhXV2KmpqV7S19avHhrK5yidUHXzd0eP1VICvAb8oztmC RuSkITTLjbeMP2xe6utEwmst2tbw7gS/ -----END CERTIFICATE-----Generated at Sun Dec 21 13:05:14 2025 by rpki-client