This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft File: C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft (raw, json) Hash identifier: 7rxLzWCmpOqUJPUdJ/OGxJLYtMhMYxvdWsNvT/Kp9TI= Subject key identifier: FB:61:1C:06:10:F3:8A:75:17:81:3C:A0:8A:7C:CD:8D:DE:E4:0A:0F Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF Certificate issuer: /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft Manifest number: 01EB Signing time: Thu 01 Jan 2026 02:15:09 +0000 Manifest this update: Thu 01 Jan 2026 02:15:08 +0000 Manifest next update: Thu 08 Jan 2026 02:15:08 +0000 Files and hashes: 1: C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl (hash: b+YlsA9MDsY2dwGHcF3KIXN8QTdMSv/pDJfo9SwAAzU=) 2: F276575AA81411EFACD1214BC4F9AE02.roa (hash: VF+Qy3jNNDjRyR500naqK22zDcvwaaWbguSS+FWiTSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 02:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91432F2, serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Validity Not Before: Jan 1 02:15:08 2026 GMT Not After : Jan 8 02:15:08 2026 GMT Subject: CN=6955d8ad-991a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:4e:1a:33:d4:de:5b:43:d4:07:eb:5c:37: 0c:af:84:fd:47:80:d7:af:00:9c:1d:bb:e1:ec:a1: 28:ca:6a:bd:d6:36:53:0e:df:4e:c3:d5:76:f4:66: 1f:1c:40:9f:98:49:02:62:20:72:41:49:89:9a:01: 00:19:87:b5:53:f0:1c:5a:c1:b5:b6:43:fb:bc:77: 3a:64:ce:9e:7c:31:16:43:b2:cc:e1:3d:d7:2c:63: ac:39:12:b2:3e:4c:3c:ae:9d:3b:1a:94:14:25:cb: 11:58:df:ce:66:e3:bf:5e:fc:15:1a:f5:da:52:29: 8a:3c:48:9e:60:84:ce:1c:76:ee:9e:e2:00:75:ad: c2:e5:ce:4b:5d:2b:9f:88:99:dd:48:b0:a9:0c:d0: 87:7f:9b:32:fc:5c:25:22:d7:d0:72:87:18:c5:cf: 88:17:cc:29:11:76:df:31:e4:39:50:d6:f1:33:74: e4:7d:75:9f:6b:5f:dd:c3:3e:6b:b7:f9:77:76:b6: 41:4e:26:7c:81:eb:3a:94:60:1c:38:6b:e6:49:86: 03:cc:a7:38:7c:d0:58:4d:f7:6b:26:e3:a5:c8:b2: 69:8a:e9:a4:e6:3b:47:0d:0e:aa:f2:32:d5:b4:31: 48:36:95:7e:21:9a:b2:75:38:fe:02:f6:c8:29:f9: 95:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:61:1C:06:10:F3:8A:75:17:81:3C:A0:8A:7C:CD:8D:DE:E4:0A:0F X509v3 Authority Key Identifier: keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:27:f7:f2:c6:53:42:09:57:1e:c5:68:06:e3:ff:66:bd:e7: c3:12:ac:75:aa:6c:52:5e:02:af:bc:39:44:29:f6:70:c2:0d: 22:cd:be:30:e9:80:a6:7b:2f:00:78:ed:7a:b0:cb:10:f7:35: de:9c:1a:19:55:8e:f0:54:e0:fb:17:bd:52:e7:02:ae:01:07: 1a:13:6e:d0:a7:34:6e:2b:80:9c:ec:0c:3a:9a:92:a8:23:84: f1:e8:2a:ed:fa:b4:cb:9a:4b:f1:a7:69:d4:d5:88:ef:93:0d: da:bf:7b:82:84:21:90:42:f2:d0:fa:93:f9:33:a6:9d:90:07: e9:7d:37:04:d3:80:f1:eb:6c:92:69:f1:74:92:8c:ab:18:65: 5d:fa:3d:05:e2:d8:e1:5a:70:48:8e:4a:ae:c1:09:7f:55:de: a7:98:07:13:73:f1:d8:a1:e9:fc:4a:aa:68:e6:f2:3f:51:b6: 03:c6:6c:19:a5:73:68:83:9a:32:9d:27:fd:88:d7:96:26:88: ae:13:55:db:d3:a5:de:c7:9e:06:d3:8a:b5:78:46:c8:db:1c: 08:33:02:f7:aa:c2:5b:91:da:c1:7b:f7:94:99:ca:73:a9:51: d9:d6:ea:20:2e:31:3d:a2:a1:f1:6a:d2:2d:1f:96:4e:91:17: bb:99:5a:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMyRjIxMTAvBgNVBAUTKDBCNjFBMDc0Rjg0MkE0NzE4QkFCMUQ4NDUyQTZDQjY4 MkU2RkVEREYwHhcNMjYwMTAxMDIxNTA4WhcNMjYwMTA4MDIxNTA4WjAYMRYwFAYD VQQDDA02OTU1ZDhhZC05OTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukROGjPU3ltD1AfrXDcMr4T9R4DXrwCcHbvh7KEoymq91jZTDt9Ow9V29GYf HECfmEkCYiByQUmJmgEAGYe1U/AcWsG1tkP7vHc6ZM6efDEWQ7LM4T3XLGOsORKy Pkw8rp07GpQUJcsRWN/OZuO/XvwVGvXaUimKPEieYITOHHbunuIAda3C5c5LXSuf iJndSLCpDNCHf5sy/FwlItfQcocYxc+IF8wpEXbfMeQ5UNbxM3TkfXWfa1/dwz5r t/l3drZBTiZ8ges6lGAcOGvmSYYDzKc4fNBYTfdrJuOlyLJpiumk5jtHDQ6q8jLV tDFINpV+IZqydTj+AvbIKfmVbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPthHAYQ 84p1F4E8oIp8zY3e5AoPMB8GA1UdIwQYMBaAFAthoHT4QqRxi6sdhFKmy2gub+3f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzJGMi80MjFFMDVGMkZF Q0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BIR0xxeDJFVXFiTGFDNXY3 ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyR2dkUGhDcEhHTHF4MkVVcWJMYUM1djdkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzJGMi80MjFFMDVGMkZFQ0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BI R0xxeDJFVXFiTGFDNXY3ZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnJ/fyxlNCCVcexWgG4/9mvefDEqx1qmxSXgKvvDlEKfZwwg0izb4w 6YCmey8AeO16sMsQ9zXenBoZVY7wVOD7F71S5wKuAQcaE27QpzRuK4Cc7Aw6mpKo I4Tx6Crt+rTLmkvxp2nU1Yjvkw3av3uChCGQQvLQ+pP5M6adkAfpfTcE04Dx62yS afF0koyrGGVd+j0F4tjhWnBIjkquwQl/Vd6nmAcTc/HYoen8Sqpo5vI/UbYDxmwZ pXNog5oynSf9iNeWJoiuE1Xb06Xex54G04q1eEbI2xwIMwL3qsJbkdrBe/eUmcpz qVHZ1uogLjE9oqHxatItH5ZOkRe7mVqG -----END CERTIFICATE-----Generated at Thu Jan 1 05:46:32 2026 by rpki-client