This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft File: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft (raw, json) Hash identifier: jhTFbU0igJ2U/VKjacLVnFenohaeVTzy4i37MYB/myY= Subject key identifier: 42:7F:83:F3:CF:78:33:20:11:A4:90:D5:AA:CE:72:26:50:92:48:0F Authority key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3 Certificate issuer: /CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3 Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft Manifest number: 023F Signing time: Thu 18 Dec 2025 23:53:07 +0000 Manifest this update: Thu 18 Dec 2025 23:53:06 +0000 Manifest next update: Thu 25 Dec 2025 23:53:06 +0000 Files and hashes: 1: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl (hash: LzgS+OQR/2u14/lndWZQHKkZyL3x0a0QccG4FhPmigQ=) 2: F060FF0E720D11EDA84BE02EC4F9AE02.roa (hash: MTvQaAV2j4a15rRSTpoB41scqYTwrnry9bJaizx2K5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED, serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3 Validity Not Before: Dec 18 23:53:06 2025 GMT Not After : Dec 25 23:53:06 2025 GMT Subject: CN=694493e3-1174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:48:8f:6a:a5:ba:e8:4a:b0:c8:53:e5:da:f0: 62:12:15:31:d9:20:26:81:4e:ab:35:e9:14:9e:a9: 01:23:d1:d2:3a:ad:16:3a:16:6e:a5:ac:74:33:4f: 9e:a4:5b:74:e5:e9:5d:6a:da:97:9d:45:b4:0d:36: f4:d9:51:2e:ac:76:0d:54:50:18:30:ba:0e:ff:7a: e3:16:7f:13:95:86:09:b7:28:4d:c1:5b:b7:4b:76: 73:08:4a:3a:ab:ab:cf:a9:94:a6:bf:32:84:5f:2c: 40:4f:8d:cc:35:a4:91:d4:47:fb:98:c5:b3:08:2c: fe:52:41:f5:0f:6e:d1:67:14:a4:28:99:f8:ba:21: cf:11:50:f2:8d:05:8a:19:c7:19:9e:0c:6e:ef:45: 11:90:ec:19:16:d2:2c:08:b9:f6:23:9e:d2:43:c3: 59:fb:9c:9e:a4:35:f7:70:e9:91:a0:d9:d5:76:7d: c0:07:33:cf:1d:50:5e:73:7b:8d:4c:e3:24:d6:ec: 63:18:55:db:1c:37:f1:35:ed:ea:05:7b:38:5f:56: 84:16:0c:22:5e:d7:60:c2:f4:1b:45:07:79:a4:60: ea:7f:a3:f3:50:b6:f1:b4:de:a4:37:ea:b7:2a:95: 27:c2:52:33:75:f0:f0:25:5e:0b:15:82:95:2f:71: ee:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7F:83:F3:CF:78:33:20:11:A4:90:D5:AA:CE:72:26:50:92:48:0F X509v3 Authority Key Identifier: keyid:D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:9e:69:5e:bb:7c:68:38:62:f3:4e:d1:32:ad:dc:fd:e2:bc: 5b:28:db:1e:97:a0:5a:27:fa:14:24:f1:5e:aa:56:49:7a:0d: f2:a2:9a:7a:cd:96:e4:a2:02:cb:6e:69:c7:f4:a2:f8:7f:5e: 59:f3:50:09:9d:58:c1:fa:34:19:b3:b9:76:a2:82:e4:69:74: 26:b3:87:a8:97:be:83:71:c4:d6:28:fa:35:37:f1:fe:7c:b8: d8:5e:2d:ee:ad:47:f7:1a:da:42:c7:51:43:76:0d:6c:ce:51: 8f:f8:44:1e:34:f8:fc:38:15:35:fd:a1:bf:14:8d:1f:0e:d1: f4:72:c3:b5:6c:55:9e:3a:a2:8c:f1:d5:54:0f:40:b7:ed:f7: 04:ff:45:0e:aa:52:be:22:c0:89:f2:a2:a3:82:72:fe:0a:d9: b5:a6:52:65:54:dc:e0:b7:d3:87:c1:95:33:8d:55:e8:03:cf: be:ad:75:95:55:51:5f:c8:6a:d8:c9:33:ae:2b:77:a2:cd:2a: 48:1c:37:5e:29:3e:a2:80:80:8f:d0:d1:0e:7a:5e:32:76:0d: 76:7b:cc:b3:8a:12:e7:f5:1e:39:a7:a7:8f:fa:94:5c:e1:2c: eb:ee:4e:54:03:57:be:1d:9e:2d:8a:82:ff:62:1c:70:8e:e6: 30:a1:05:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKEQ5ODUyOTE0OENCQTVEREVEM0I3M0Q2MDUyRUUwNTE2 QzAyNEM0RjMwHhcNMjUxMjE4MjM1MzA2WhcNMjUxMjI1MjM1MzA2WjAYMRYwFAYD VQQDDA02OTQ0OTNlMy0xMTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEiPaqW66EqwyFPl2vBiEhUx2SAmgU6rNekUnqkBI9HSOq0WOhZupax0M0+e pFt05eldatqXnUW0DTb02VEurHYNVFAYMLoO/3rjFn8TlYYJtyhNwVu3S3ZzCEo6 q6vPqZSmvzKEXyxAT43MNaSR1Ef7mMWzCCz+UkH1D27RZxSkKJn4uiHPEVDyjQWK GccZngxu70URkOwZFtIsCLn2I57SQ8NZ+5yepDX3cOmRoNnVdn3ABzPPHVBec3uN TOMk1uxjGFXbHDfxNe3qBXs4X1aEFgwiXtdgwvQbRQd5pGDqf6PzULbxtN6kN+q3 KpUnwlIzdfDwJV4LFYKVL3Hu1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJ/g/PP eDMgEaSQ1arOciZQkkgPMB8GA1UdIwQYMBaAFNmFKRSMul3e07c9YFLuBRbAJMTz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC83NTk4NDQ0NDcy MEQxMUVEQjU0NUUwMzBDNEY5QUUwMi8yWVVwRkl5NlhkN1R0ejFnVXU0RkZzQWt4 UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJZVXBGSXk2WGQ3VHR6MWdVdTRGRnNBa3hQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC83NTk4NDQ0NDcyMEQxMUVEQjU0NUUwMzBDNEY5QUUwMi8yWVVwRkl5Nlhk N1R0ejFnVXU0RkZzQWt4UE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBinmleu3xoOGLzTtEyrdz94rxbKNsel6BaJ/oUJPFeqlZJeg3yopp6 zZbkogLLbmnH9KL4f15Z81AJnVjB+jQZs7l2ooLkaXQms4eol76DccTWKPo1N/H+ fLjYXi3urUf3GtpCx1FDdg1szlGP+EQeNPj8OBU1/aG/FI0fDtH0csO1bFWeOqKM 8dVUD0C37fcE/0UOqlK+IsCJ8qKjgnL+Ctm1plJlVNzgt9OHwZUzjVXoA8++rXWV VVFfyGrYyTOuK3eizSpIHDdeKT6igICP0NEOel4ydg12e8yzihLn9R45p6eP+pRc 4Szr7k5UA1e+HZ4tioL/YhxwjuYwoQXc -----END CERTIFICATE-----Generated at Sat Dec 20 00:56:17 2025 by rpki-client