This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.mft File: 2VYp3mJDm7AepHisFcom6ZWpeGQ.mft (raw, json) Hash identifier: OwujEmEyAxOCA/2UC+TxbcGG+pAuwWe4w7bxXg2G7/s= Subject key identifier: 3D:24:8E:67:D2:A8:98:1F:BA:E7:D0:6B:03:28:1E:30:82:BD:FA:62 Authority key identifier: D9:56:29:DE:62:43:9B:B0:1E:A4:78:AC:15:CA:26:E9:95:A9:78:64 Certificate issuer: /CN=A913854D/serialNumber=D95629DE62439BB01EA478AC15CA26E995A97864 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VYp3mJDm7AepHisFcom6ZWpeGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.mft Manifest number: BC Signing time: Thu 25 Dec 2025 04:59:25 +0000 Manifest this update: Thu 25 Dec 2025 04:59:24 +0000 Manifest next update: Thu 01 Jan 2026 04:59:24 +0000 Files and hashes: 1: 2VYp3mJDm7AepHisFcom6ZWpeGQ.crl (hash: WH7l/zCxusrGeE/8chnRPKXq+w+eG188aOZGJq8mO4Y=) 2: A999E39EC36C11EFAF838D35C4F9AE02.roa (hash: 1KvDgGWuLyFCN6s+q1kiM6VlBFYXCDfUfEerU6uXVoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.crl rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VYp3mJDm7AepHisFcom6ZWpeGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 04:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913854D, serialNumber=D95629DE62439BB01EA478AC15CA26E995A97864 Validity Not Before: Dec 25 04:59:24 2025 GMT Not After : Jan 1 04:59:24 2026 GMT Subject: CN=694cc4ac-8337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:04:46:92:8d:8c:e5:9a:18:f4:c9:b5:3a:d7: 44:bb:d3:03:8a:c0:7f:78:52:a9:74:8a:10:bd:e3: 53:ad:5f:0e:41:22:e3:30:82:68:1d:d2:fb:2b:b6: 44:b1:66:15:d9:4d:3b:6a:da:7b:34:5d:a6:d7:fa: 44:2d:06:9f:45:49:d1:8b:d1:29:a6:ea:5b:ef:f6: 6a:1e:f7:f6:04:90:52:fd:b1:9e:b7:f0:70:07:7a: f1:07:08:4b:2f:cd:b3:80:25:f6:bc:f1:b4:52:fa: 8e:82:50:06:1a:cc:cc:38:ba:a0:1c:b1:6f:8c:5a: 0a:07:26:ea:0f:bf:16:21:a5:34:48:bc:ae:b3:d0: 70:c0:6d:d3:78:cc:9d:c0:5f:02:cb:8c:aa:48:49: 45:92:c8:47:ac:07:85:85:d9:31:71:9c:68:27:39: f6:29:a5:d7:0c:79:b8:6c:c9:84:10:67:0b:64:86: b4:0f:54:9d:87:09:78:e6:b7:fa:f1:d2:b8:3c:7e: e4:48:a7:59:d0:1c:30:41:69:13:05:d6:75:e8:52: 65:4a:bf:cf:62:16:ee:fe:d6:4d:3e:81:3c:8c:1b: ff:76:19:36:d8:eb:20:e3:8d:3c:12:bd:be:08:9e: d7:1e:ae:a6:47:80:c2:32:1e:78:33:ba:a8:e6:2e: 3c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:24:8E:67:D2:A8:98:1F:BA:E7:D0:6B:03:28:1E:30:82:BD:FA:62 X509v3 Authority Key Identifier: keyid:D9:56:29:DE:62:43:9B:B0:1E:A4:78:AC:15:CA:26:E9:95:A9:78:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VYp3mJDm7AepHisFcom6ZWpeGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:6c:b0:09:20:8e:b7:ed:00:ee:78:9c:30:61:13:f4:bb:db: cf:a3:6f:88:40:63:85:3a:23:49:d6:c5:67:ef:6c:27:96:96: 11:96:3d:fb:b8:d9:78:bc:86:09:85:d7:09:c6:a0:ee:b6:4b: 45:46:c5:47:b4:4b:2d:d9:16:c7:f4:ec:45:d8:ea:9a:2a:99: 1b:22:c6:3d:66:60:d6:a9:12:cd:51:58:e9:cb:ee:75:09:1c: 46:c1:54:7c:06:f7:d0:d6:6b:37:3b:20:10:3d:fb:30:5d:70: 80:e2:9f:7c:b0:0a:e9:c4:64:d0:ae:20:bb:62:03:ef:f0:74: 65:4a:a8:13:54:10:67:3b:0a:eb:10:fb:f8:20:bf:49:d7:60: 34:39:b6:fa:33:d8:06:12:9b:57:f7:d8:ad:74:32:0a:20:b2: d4:a8:19:07:59:51:66:74:e6:67:b0:fe:77:c0:5f:0b:1b:d9: 84:90:ca:0a:ea:9f:cc:ec:75:b6:8b:40:c0:b5:d6:60:32:1a: ea:a5:dd:4e:f2:c9:39:08:5a:a0:d3:ca:4f:07:1e:df:61:71: bf:7a:b0:52:7f:ad:9d:b2:66:5c:14:ca:c2:91:27:fd:e6:18: 16:ce:6d:d5:a1:f2:af:2a:f6:aa:d9:92:42:04:3c:ed:cb:5b: 80:db:17:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1NEQxMTAvBgNVBAUTKEQ5NTYyOURFNjI0MzlCQjAxRUE0NzhBQzE1Q0EyNkU5 OTVBOTc4NjQwHhcNMjUxMjI1MDQ1OTI0WhcNMjYwMTAxMDQ1OTI0WjAYMRYwFAYD VQQDDA02OTRjYzRhYy04MzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQRGko2M5ZoY9Mm1OtdEu9MDisB/eFKpdIoQveNTrV8OQSLjMIJoHdL7K7ZE sWYV2U07atp7NF2m1/pELQafRUnRi9Eppupb7/ZqHvf2BJBS/bGet/BwB3rxBwhL L82zgCX2vPG0UvqOglAGGszMOLqgHLFvjFoKBybqD78WIaU0SLyus9BwwG3TeMyd wF8Cy4yqSElFkshHrAeFhdkxcZxoJzn2KaXXDHm4bMmEEGcLZIa0D1Sdhwl45rf6 8dK4PH7kSKdZ0BwwQWkTBdZ16FJlSr/PYhbu/tZNPoE8jBv/dhk22Osg4408Er2+ CJ7XHq6mR4DCMh54M7qo5i48swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0kjmfS qJgfuufQawMoHjCCvfpiMB8GA1UdIwQYMBaAFNlWKd5iQ5uwHqR4rBXKJumVqXhk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODU0RC9FN0M4REQyRUMz NkIxMUVGQkNCQzVCMTZDNEY5QUUwMi8yVllwM21KRG03QWVwSGlzRmNvbTZaV3Bl R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJWWXAzbUpEbTdBZXBIaXNGY29tNlpXcGVHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODU0RC9FN0M4REQyRUMzNkIxMUVGQkNCQzVCMTZDNEY5QUUwMi8yVllwM21KRG03 QWVwSGlzRmNvbTZaV3BlR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJbLAJII637QDueJwwYRP0u9vPo2+IQGOFOiNJ1sVn72wnlpYRlj37 uNl4vIYJhdcJxqDutktFRsVHtEst2RbH9OxF2OqaKpkbIsY9ZmDWqRLNUVjpy+51 CRxGwVR8BvfQ1ms3OyAQPfswXXCA4p98sArpxGTQriC7YgPv8HRlSqgTVBBnOwrr EPv4IL9J12A0Obb6M9gGEptX99itdDIKILLUqBkHWVFmdOZnsP53wF8LG9mEkMoK 6p/M7HW2i0DAtdZgMhrqpd1O8sk5CFqg08pPBx7fYXG/erBSf62dsmZcFMrCkSf9 5hgWzm3VofKvKvaq2ZJCBDzty1uA2xfL -----END CERTIFICATE-----Generated at Thu Dec 25 09:14:26 2025 by rpki-client