This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft File: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft (raw, json) Hash identifier: MiB05SB9dlFGLrjz6FmZ24bZYUCbHh9y5l6Ym4Ui6LI= Subject key identifier: E7:02:1F:DE:BC:CB:74:F1:D4:69:AC:BC:D5:58:47:C9:C5:03:02:12 Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 Certificate issuer: /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft Manifest number: 01F8 Signing time: Sun 21 Dec 2025 01:46:04 +0000 Manifest this update: Sun 21 Dec 2025 01:46:04 +0000 Manifest next update: Sun 28 Dec 2025 01:46:04 +0000 Files and hashes: 1: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl (hash: riLLwymEsT53yfQzf90+/0d0lNyfac9KbAM4bFxWYig=) 2: 45F398E6EA6C11EE9C6A0650C4F9AE02.roa (hash: uGfo/5fIxDdDsFC6pdFYD34hICtnXrNFqQZCf34GVx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912764F, serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Validity Not Before: Dec 21 01:46:04 2025 GMT Not After : Dec 28 01:46:04 2025 GMT Subject: CN=6947515c-cc25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:03:3a:9e:28:28:32:7d:5c:be:5a:ea:99:39: e1:7b:c3:02:de:4c:a6:be:21:7e:9e:72:cb:8e:c3: 08:42:b0:96:aa:48:06:3e:2f:f1:18:a5:63:44:98: 8f:f1:b9:9c:18:ab:8c:f7:df:fc:60:71:0f:6b:d1: 33:17:da:54:b8:35:57:49:98:93:1b:43:dd:c5:32: 40:c0:9b:b4:47:58:d0:e0:4f:40:e4:ec:51:82:3c: 4e:d9:ae:92:06:15:59:0b:de:a2:aa:ca:cd:be:9d: e0:f4:3c:83:71:48:26:e9:21:b7:69:90:30:9b:7d: d9:ca:30:5e:5e:36:e1:75:12:83:5e:ab:d3:a3:05: ea:ce:c3:96:dc:2b:33:58:fc:b4:ea:34:fd:2f:d2: 9c:ea:3a:c4:57:51:c0:ea:99:b2:a5:bd:62:67:22: d0:0f:c1:58:d5:ef:dc:95:86:4a:d8:47:30:35:ea: 3d:e3:38:bc:88:77:b1:f9:ac:85:53:9a:d1:48:bd: 5d:03:c5:66:8b:0d:53:5e:cc:2b:b0:ce:b6:6a:27: dd:64:04:6f:a4:73:35:9b:94:7f:94:bb:3d:09:0e: 30:24:58:fb:43:5f:8b:21:71:b2:a7:73:0b:81:14: 7a:83:75:38:3d:5d:c8:ff:db:cb:96:88:94:8d:87: 0e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:02:1F:DE:BC:CB:74:F1:D4:69:AC:BC:D5:58:47:C9:C5:03:02:12 X509v3 Authority Key Identifier: keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:26:65:64:d8:6b:1c:66:a0:13:25:b5:1f:fe:30:40:f1:e3: e7:c1:60:5a:55:60:d8:85:25:29:6d:dd:31:bc:9b:80:0a:3a: c5:3e:b4:9b:f1:37:b7:a8:dd:60:8d:10:be:db:3b:4e:5d:2a: 25:f3:84:82:a3:cd:35:b9:fc:f5:bc:7c:b6:11:60:de:ee:53: 7d:08:3e:8b:c4:88:66:f6:c8:00:25:12:6e:ad:34:a3:6d:7a: 77:d8:0e:43:b0:d4:da:94:9a:5c:6b:8d:8e:f1:33:47:eb:e0: d5:86:35:f9:b1:b7:89:09:35:6b:ed:0f:6f:cf:c6:d3:68:af: 80:a7:eb:22:14:72:62:2b:60:f0:a5:71:d1:17:15:f1:5e:16: 41:df:af:ab:5f:25:be:97:15:3b:11:10:3c:24:ec:1a:e4:00: 34:f0:df:04:17:41:3f:7d:40:23:39:28:60:51:dc:1d:45:17: cb:bb:b6:16:f4:4f:f5:23:b1:19:1f:37:05:4a:e2:3c:ef:0d: 5e:2e:43:72:b6:55:59:25:3e:c9:76:b9:0d:17:aa:94:26:f4: c7:16:9d:bc:b3:9b:a7:80:ec:32:1c:c1:f9:65:c9:8d:9d:38: d0:b6:8b:e9:90:32:a7:06:88:5f:5a:b7:3d:13:5e:4f:6e:4f: ea:51:fa:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NEYxMTAvBgNVBAUTKERBQTEzRkIxNUEwNDU2NkM0QjM1OTM2Mzg2QThCMjVD MDE1NDhDQzYwHhcNMjUxMjIxMDE0NjA0WhcNMjUxMjI4MDE0NjA0WjAYMRYwFAYD VQQDDA02OTQ3NTE1Yy1jYzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAM6nigoMn1cvlrqmTnhe8MC3kymviF+nnLLjsMIQrCWqkgGPi/xGKVjRJiP 8bmcGKuM99/8YHEPa9EzF9pUuDVXSZiTG0PdxTJAwJu0R1jQ4E9A5OxRgjxO2a6S BhVZC96iqsrNvp3g9DyDcUgm6SG3aZAwm33ZyjBeXjbhdRKDXqvTowXqzsOW3Csz WPy06jT9L9Kc6jrEV1HA6pmypb1iZyLQD8FY1e/clYZK2EcwNeo94zi8iHex+ayF U5rRSL1dA8Vmiw1TXswrsM62aifdZARvpHM1m5R/lLs9CQ4wJFj7Q1+LIXGyp3ML gRR6g3U4PV3I/9vLloiUjYcOxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcCH968 y3Tx1GmsvNVYR8nFAwISMB8GA1UdIwQYMBaAFNqhP7FaBFZsSzWTY4aoslwBVIzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY0Ri9DRUQwRjg3RURE MTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZteExOWk5qaHFpeVhBRlVq TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxRV9zVm9FVm14TE5aTmpocWl5WEFGVWpNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY0Ri9DRUQwRjg3RUREMTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZt eExOWk5qaHFpeVhBRlVqTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxJmVk2GscZqATJbUf/jBA8ePnwWBaVWDYhSUpbd0xvJuACjrFPrSb 8Te3qN1gjRC+2ztOXSol84SCo801ufz1vHy2EWDe7lN9CD6LxIhm9sgAJRJurTSj bXp32A5DsNTalJpca42O8TNH6+DVhjX5sbeJCTVr7Q9vz8bTaK+Ap+siFHJiK2Dw pXHRFxXxXhZB36+rXyW+lxU7ERA8JOwa5AA08N8EF0E/fUAjOShgUdwdRRfLu7YW 9E/1I7EZHzcFSuI87w1eLkNytlVZJT7JdrkNF6qUJvTHFp28s5ungOwyHMH5ZcmN nTjQtovpkDKnBohfWrc9E15Pbk/qUfrs -----END CERTIFICATE-----Generated at Sun Dec 21 17:14:22 2025 by rpki-client