This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft File: C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft (raw, json) Hash identifier: piqn0r7CFTuB/U5AipfK4t3S4VnRmbCoBnIJHDiiH+8= Subject key identifier: EB:A9:D9:47:01:6C:8E:70:07:C0:F8:59:17:0E:BE:37:14:17:BF:B2 Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF Certificate issuer: /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft Manifest number: 01E4 Signing time: Fri 19 Dec 2025 01:55:08 +0000 Manifest this update: Fri 19 Dec 2025 01:55:07 +0000 Manifest next update: Fri 26 Dec 2025 01:55:07 +0000 Files and hashes: 1: C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl (hash: T992tieIkzSpdn6yBn5UASQ/9krXpJJYB+MnlMAtFUw=) 2: F276575AA81411EFACD1214BC4F9AE02.roa (hash: VF+Qy3jNNDjRyR500naqK22zDcvwaaWbguSS+FWiTSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91432F2, serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Validity Not Before: Dec 19 01:55:07 2025 GMT Not After : Dec 26 01:55:07 2025 GMT Subject: CN=6944b07c-ce4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:eb:5e:32:4b:78:ee:98:1b:8c:b6:f4:ee:9f: 17:53:d0:f3:bd:45:f4:c5:bc:6c:c2:b6:f6:4c:3d: 47:43:5e:31:0d:cb:f6:13:b7:17:dc:e6:78:8e:c0: 7a:0a:be:e6:d5:ff:9c:e1:4c:46:09:e8:3f:fc:dd: 92:1a:ff:83:5a:49:b0:f7:a8:ed:16:f9:50:f0:94: e2:6e:b0:ab:0d:96:04:ca:f4:7d:49:8e:bd:00:f1: 90:fb:3a:45:c0:a8:f6:df:e5:a0:c4:c9:2f:4b:a4: aa:60:92:0c:f4:01:9f:64:b4:ae:30:6b:23:f0:ba: 63:42:2f:bf:95:94:15:ab:1e:6d:f7:aa:18:25:ec: fd:1b:21:84:27:e8:38:24:af:73:d2:84:71:53:34: c5:17:58:93:c7:f6:36:58:d9:35:a8:d3:08:be:55: 0a:90:a4:94:42:91:75:9b:f2:aa:d0:07:e5:0a:f8: 1c:6f:9c:b1:47:3e:f7:31:0f:42:91:4e:92:38:88: 5d:9e:42:dd:e1:2c:89:99:ad:04:07:c1:59:a7:7f: 13:78:13:5f:67:d9:9b:5f:78:01:86:38:3f:b4:fc: 4c:44:b0:69:20:ca:ec:4a:58:92:0f:17:f6:02:7b: e5:6d:af:45:c0:71:f6:23:09:d3:ca:96:32:8b:56: 4c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A9:D9:47:01:6C:8E:70:07:C0:F8:59:17:0E:BE:37:14:17:BF:B2 X509v3 Authority Key Identifier: keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:97:96:75:97:cf:06:f7:37:ae:f5:f2:f5:4b:91:0e:f6:f9: 7a:0f:e2:98:04:11:8d:ba:0f:6a:6b:ef:17:5a:4d:65:2a:50: 4b:18:03:d7:ef:95:e0:8a:c3:40:97:83:4b:7c:f9:d9:a6:88: fc:b5:c1:84:8f:d6:de:01:86:09:53:e7:c4:f7:83:2a:f6:fd: f6:27:b4:ea:a3:72:39:5d:17:2e:b4:44:6b:d5:ba:c0:6a:0c: da:6d:a0:b2:fc:87:8c:43:43:ce:c9:95:9f:13:0a:cc:e3:ff: 2c:9c:b4:b9:60:c9:2e:71:ba:58:b9:ee:aa:49:09:d3:65:78: c3:c3:11:27:33:29:3e:24:8e:e7:17:57:10:f9:c0:1e:01:23: 3f:1f:33:21:8f:5d:a6:c2:6b:b8:68:b6:db:cc:31:b2:c5:9c: 7e:fa:d3:09:12:ed:a3:45:67:3d:27:42:c1:a7:b0:bb:5f:c5: da:11:66:4c:09:2c:42:63:1f:96:8b:a4:aa:d1:6c:d6:ac:aa: 99:a8:03:ac:bb:0e:5f:d1:ac:a0:8c:5b:c2:f0:b9:bc:36:7e: 9d:0d:56:8f:83:4a:58:65:0c:26:40:c3:3a:7e:9f:10:77:3e: b3:5f:dd:b5:23:fc:60:d2:47:68:44:02:51:82:15:56:43:a9: 87:f8:a9:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMyRjIxMTAvBgNVBAUTKDBCNjFBMDc0Rjg0MkE0NzE4QkFCMUQ4NDUyQTZDQjY4 MkU2RkVEREYwHhcNMjUxMjE5MDE1NTA3WhcNMjUxMjI2MDE1NTA3WjAYMRYwFAYD VQQDDA02OTQ0YjA3Yy1jZTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eteMkt47pgbjLb07p8XU9DzvUX0xbxswrb2TD1HQ14xDcv2E7cX3OZ4jsB6 Cr7m1f+c4UxGCeg//N2SGv+DWkmw96jtFvlQ8JTibrCrDZYEyvR9SY69APGQ+zpF wKj23+WgxMkvS6SqYJIM9AGfZLSuMGsj8LpjQi+/lZQVqx5t96oYJez9GyGEJ+g4 JK9z0oRxUzTFF1iTx/Y2WNk1qNMIvlUKkKSUQpF1m/Kq0AflCvgcb5yxRz73MQ9C kU6SOIhdnkLd4SyJma0EB8FZp38TeBNfZ9mbX3gBhjg/tPxMRLBpIMrsSliSDxf2 Anvlba9FwHH2IwnTypYyi1ZMXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOup2UcB bI5wB8D4WRcOvjcUF7+yMB8GA1UdIwQYMBaAFAthoHT4QqRxi6sdhFKmy2gub+3f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzJGMi80MjFFMDVGMkZF Q0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BIR0xxeDJFVXFiTGFDNXY3 ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyR2dkUGhDcEhHTHF4MkVVcWJMYUM1djdkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzJGMi80MjFFMDVGMkZFQ0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BI R0xxeDJFVXFiTGFDNXY3ZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIl5Z1l88G9zeu9fL1S5EO9vl6D+KYBBGNug9qa+8XWk1lKlBLGAPX 75XgisNAl4NLfPnZpoj8tcGEj9beAYYJU+fE94Mq9v32J7Tqo3I5XRcutERr1brA agzabaCy/IeMQ0POyZWfEwrM4/8snLS5YMkucbpYue6qSQnTZXjDwxEnMyk+JI7n F1cQ+cAeASM/HzMhj12mwmu4aLbbzDGyxZx++tMJEu2jRWc9J0LBp7C7X8XaEWZM CSxCYx+Wi6Sq0WzWrKqZqAOsuw5f0aygjFvC8Lm8Nn6dDVaPg0pYZQwmQMM6fp8Q dz6zX921I/xg0kdoRAJRghVWQ6mH+Knh -----END CERTIFICATE-----Generated at Fri Dec 19 17:44:00 2025 by rpki-client