This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft File: 2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft (raw, json) Hash identifier: CYUppYdMgNyrOjQtsafKtLSgxjR3Cy1pt9wz2r4LJpw= Subject key identifier: 78:2A:47:01:D8:07:33:8B:1E:17:A1:31:5E:F0:57:20:1F:71:C4:11 Authority key identifier: DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6 Certificate issuer: /CN=A914BE8E/serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft Manifest number: 0B Signing time: Mon 29 Dec 2025 07:06:39 +0000 Manifest this update: Mon 29 Dec 2025 07:06:39 +0000 Manifest next update: Mon 05 Jan 2026 07:06:39 +0000 Files and hashes: 1: 2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl (hash: d95srQcqo7KANWDy3w9zQNXgFQBb2u4IooutIWf9AP0=) 2: 0FE42DACE16811F0AD117D783A6F56BC.roa (hash: JsUVmDenlNRs0tfS9whRc7Jzv4Yo+z4hCHKowYgJ6Tk=) 3: 21EF23B2E16811F0AE4839883A6F56BC.roa (hash: IplB0gM9Uuw4HNboDvbREthelLfiR2zwPB1/OskSGfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 07:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BE8E, serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6 Validity Not Before: Dec 29 07:06:39 2025 GMT Not After : Jan 5 07:06:39 2026 GMT Subject: CN=6952287f-4139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:50:92:93:31:37:72:24:d8:f7:52:39:dc:2f: 93:d2:91:cf:cd:e4:a6:f2:fa:97:a7:e6:ae:1c:d8: 49:0e:cf:47:e9:2a:7e:01:7e:3f:30:af:61:6b:a3: de:a0:eb:12:1d:8e:20:ff:6f:dc:58:23:09:17:52: 67:79:10:a2:aa:62:9d:8b:6a:30:2a:b4:65:4b:e9: 18:49:8b:87:3e:c3:47:b5:71:1b:47:97:0f:c3:c0: b0:b0:d6:f5:af:e8:4e:5d:db:e2:99:71:e4:d7:70: d5:6d:82:47:c4:9c:bb:64:42:8f:3e:ae:18:81:c3: e0:cd:39:8e:84:8e:4b:e2:8c:b6:4c:60:f7:63:3d: f0:c6:3b:5e:8d:6e:6d:1b:7c:e2:a3:2c:f5:a3:87: b0:0d:e5:5c:18:b5:9f:5d:37:9f:15:de:85:39:de: 05:ed:f6:f2:69:4b:c6:b9:d0:c1:ad:df:00:18:b1: 12:41:b3:75:9e:91:0b:f3:04:cc:6e:58:0d:2d:75: f7:d4:6e:04:38:47:f9:4a:ab:5e:b3:31:3b:ad:00: bf:70:10:82:28:84:d9:33:eb:48:34:a2:d1:dd:29: f9:f8:b1:f0:05:40:3f:3f:0f:7c:7c:0f:88:69:48: fe:f9:89:ea:e4:05:74:e0:8b:19:c9:6c:76:e1:10: 97:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2A:47:01:D8:07:33:8B:1E:17:A1:31:5E:F0:57:20:1F:71:C4:11 X509v3 Authority Key Identifier: keyid:DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d8:72:41:7b:12:24:6c:88:9c:fe:7e:c2:0f:f1:49:e0:3e: 6d:99:93:b0:19:89:86:0f:5a:62:66:96:19:66:f0:1f:2f:a7: cb:1a:a6:11:c3:2f:60:57:01:c1:b0:f6:f7:cc:d2:a9:c8:5b: fc:87:a0:d4:b5:9d:2b:95:4d:63:37:8c:0d:75:c9:23:6b:e9: 7f:2d:20:38:d5:50:35:0d:ad:cf:09:aa:fe:05:c3:61:bb:d3: 50:ca:ad:df:b8:c3:17:97:ac:34:e9:a7:40:11:44:25:4a:63: db:d8:cb:a0:1a:3a:1e:24:66:c4:d2:3f:38:d6:ea:da:22:1c: 02:fc:c0:c7:ed:f5:be:90:a8:00:99:67:c3:be:78:38:79:aa: eb:ac:1e:96:7f:7d:60:dd:47:25:a7:4c:7f:b7:8e:fd:2e:a4: 9c:fa:05:3d:cf:94:db:af:30:9e:de:6d:0c:e0:5c:77:d3:8f: 17:53:60:0f:b6:62:b7:e9:85:74:ff:a9:3c:03:b4:ca:90:2e: 43:3b:2f:80:40:e2:24:bb:ba:25:93:74:5f:11:f6:1f:e7:3c: f4:80:13:f6:16:1d:af:39:85:5d:a2:d5:8f:28:35:2e:70:61: 0c:a3:af:a9:03:51:5a:a5:72:a5:93:8d:1b:b3:f4:de:b5:b5: 41:5d:70:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE0 QkU4RTExMC8GA1UEBRMoREIwODg3RTI1Q0MwRDBDRjc2ODhEQjVERERGNDE5NjUz MkNENDdBNjAeFw0yNTEyMjkwNzA2MzlaFw0yNjAxMDUwNzA2MzlaMBgxFjAUBgNV BAMMDTY5NTIyODdmLTQxMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsUJKTMTdyJNj3UjncL5PSkc/N5Kby+pen5q4c2EkOz0fpKn4Bfj8wr2Fro96g 6xIdjiD/b9xYIwkXUmd5EKKqYp2LajAqtGVL6RhJi4c+w0e1cRtHlw/DwLCw1vWv 6E5d2+KZceTXcNVtgkfEnLtkQo8+rhiBw+DNOY6EjkvijLZMYPdjPfDGO16Nbm0b fOKjLPWjh7AN5VwYtZ9dN58V3oU53gXt9vJpS8a50MGt3wAYsRJBs3WekQvzBMxu WA0tdffUbgQ4R/lKq16zMTutAL9wEIIohNkz60g0otHdKfn4sfAFQD8/D3x8D4hp SP75ierkBXTgixnJbHbhEJdbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeCpHAdgH M4seF6ExXvBXIB9xxBEwHwYDVR0jBBgwFoAU2wiH4lzA0M92iNtd3fQZZTLNR6Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCRThFLzQ5Qzc3NDg4RTE0 NjExRjA5MTY0RTBBODcxNkY1NkJDLzJ3aUg0bHpBME05MmlOdGQzZlFaWlRMTlI2 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMndpSDRsekEwTTkyaU50ZDNmUVpaVExOUjZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC RThFLzQ5Qzc3NDg4RTE0NjExRjA5MTY0RTBBODcxNkY1NkJDLzJ3aUg0bHpBME05 MmlOdGQzZlFaWlRMTlI2WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ7YckF7EiRsiJz+fsIP8UngPm2Zk7AZiYYPWmJmlhlm8B8vp8saphHD L2BXAcGw9vfM0qnIW/yHoNS1nSuVTWM3jA11ySNr6X8tIDjVUDUNrc8Jqv4Fw2G7 01DKrd+4wxeXrDTpp0ARRCVKY9vYy6AaOh4kZsTSPzjW6toiHAL8wMft9b6QqACZ Z8O+eDh5quusHpZ/fWDdRyWnTH+3jv0upJz6BT3PlNuvMJ7ebQzgXHfTjxdTYA+2 YrfphXT/qTwDtMqQLkM7L4BA4iS7uiWTdF8R9h/nPPSAE/YWHa85hV2i1Y8oNS5w YQyjr6kDUVqlcqWTjRuz9N61tUFdcMs= -----END CERTIFICATE-----Generated at Mon Dec 29 16:58:43 2025 by rpki-client