This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft File: 2TXs95kTG-wkONqd6CtoWJY8cFw.mft (raw, json) Hash identifier: 89SZ8Z7EqXynBSO/RaOMPcf4Bw27NxENQe7EGfZ6FSA= Subject key identifier: 39:08:6A:28:8D:B6:16:C4:E9:7C:ED:48:23:A3:F1:84:53:94:25:AF Authority key identifier: D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C Certificate issuer: /CN=A91547E4/serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft Manifest number: 0F Signing time: Fri 19 Dec 2025 06:55:25 +0000 Manifest this update: Fri 19 Dec 2025 06:55:25 +0000 Manifest next update: Fri 26 Dec 2025 06:55:25 +0000 Files and hashes: 1: 2TXs95kTG-wkONqd6CtoWJY8cFw.crl (hash: 7jmDDzH6huoGoluLU/2kbZyx33PchLCaaELNHxU8m5c=) 2: EDD5097ECB7411F0A2C24D4FC4F9AE02.roa (hash: HCkuebr9HV42wP4+Tkes5jAKhv3pdZCIfJI8PjfVHow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:55:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547E4, serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C Validity Not Before: Dec 19 06:55:25 2025 GMT Not After : Dec 26 06:55:25 2025 GMT Subject: CN=6944f6dd-01bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3b:b0:9e:4c:f4:de:08:db:39:ce:06:04:b7: 95:e9:0b:a1:26:1a:90:2e:d4:67:ef:c9:13:2b:44: d2:98:8f:95:83:8c:12:13:02:56:df:4a:a1:46:87: 28:c0:1b:55:e4:92:c8:51:61:d6:13:c8:43:39:f7: 24:d5:4b:83:96:28:05:6f:9d:53:9a:10:3a:9c:82: 88:3d:ec:70:a7:a6:b2:18:9d:57:34:b6:93:78:cd: fc:6f:4a:fb:7a:60:38:ad:d6:7e:02:f4:00:70:d6: b8:e2:92:49:6c:ae:cd:af:01:7a:cd:ba:cc:9d:4d: 3c:61:fc:96:11:49:16:07:f0:3d:b6:96:e6:00:86: 40:82:84:77:21:59:28:3c:3f:90:94:42:34:c3:ad: 6b:cc:9e:fa:1f:c1:7c:f1:18:e9:5d:04:8e:41:6d: 6d:83:20:12:dd:fd:e4:a7:e0:d8:73:34:37:3b:04: ad:4c:27:40:34:1d:23:9c:d5:c7:17:2f:ca:8e:b4: d8:7f:44:3c:c8:46:44:4a:2c:ee:df:c9:9e:fd:98: db:7b:8c:75:30:1d:9b:da:9c:a9:c2:45:f6:62:c9: 82:cc:93:06:2d:ef:db:2e:7d:49:87:22:77:0e:b5: d7:16:3c:da:99:78:12:6a:07:2b:18:2d:5c:19:d1: e7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:08:6A:28:8D:B6:16:C4:E9:7C:ED:48:23:A3:F1:84:53:94:25:AF X509v3 Authority Key Identifier: keyid:D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:e0:fc:1f:6f:56:61:93:38:c6:55:cd:be:d4:c7:b4:3e:b0: 64:33:12:97:25:f6:29:23:ac:af:9c:8c:b2:fc:01:37:60:74: 3b:c3:c6:ec:4a:1b:a4:e6:47:0e:29:c5:4a:69:98:36:97:c7: b0:1d:e5:1b:ae:2d:52:82:0e:65:65:4a:10:cc:6a:a2:39:cd: 21:eb:33:49:a4:92:b2:28:ab:1f:da:26:46:51:29:e0:f6:19: fd:1b:69:5c:8f:8b:f2:67:8b:fd:4c:f1:b8:04:17:b1:86:37: 67:a0:9d:2d:c8:54:5e:b8:4d:75:81:b6:c4:23:f4:08:da:53: 67:e5:d9:10:61:ae:ba:b2:a3:c7:16:3f:dc:e3:f9:38:98:68: dd:de:6e:15:b8:87:bb:01:71:44:3e:7e:08:83:b6:8d:28:59: 6a:8e:01:9d:3e:d2:e1:ac:93:bc:a4:c8:68:e8:b4:9a:91:2a: 66:3c:b9:61:58:5e:56:e0:63:c9:53:03:49:a8:04:1f:6c:df: 54:98:f6:6f:bf:87:b5:40:39:66:67:d8:4b:57:b0:eb:0c:3f: 9a:7a:ef:3c:a5:39:47:33:b1:ed:6b:52:f4:ed:ac:c1:bb:f0: e1:33:de:fe:21:90:56:be:0a:67:a0:30:f1:3e:0b:9b:da:81: 7e:e4:29:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDdFNDExMC8GA1UEBRMoRDkzNUVDRjc5OTEzMUJFQzI0MzhEQTlERTgyQjY4NTg5 NjNDNzA1QzAeFw0yNTEyMTkwNjU1MjVaFw0yNTEyMjYwNjU1MjVaMBgxFjAUBgNV BAMMDTY5NDRmNmRkLTAxYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCO7CeTPTeCNs5zgYEt5XpC6EmGpAu1GfvyRMrRNKYj5WDjBITAlbfSqFGhyjA G1XkkshRYdYTyEM59yTVS4OWKAVvnVOaEDqcgog97HCnprIYnVc0tpN4zfxvSvt6 YDit1n4C9ABw1rjikklsrs2vAXrNusydTTxh/JYRSRYH8D22luYAhkCChHchWSg8 P5CUQjTDrWvMnvofwXzxGOldBI5BbW2DIBLd/eSn4NhzNDc7BK1MJ0A0HSOc1ccX L8qOtNh/RDzIRkRKLO7fyZ79mNt7jHUwHZvanKnCRfZiyYLMkwYt79sufUmHIncO tdcWPNqZeBJqBysYLVwZ0ed1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOQhqKI22 FsTpfO1II6PxhFOUJa8wHwYDVR0jBBgwFoAU2TXs95kTG+wkONqd6CtoWJY8cFww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0U0LzAyMzJFNTQ4Q0I3 MTExRjBBNUFERUQyMkM0RjlBRTAyLzJUWHM5NWtURy13a09OcWQ2Q3RvV0pZOGNG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMlRYczk1a1RHLXdrT05xZDZDdG9XSlk4Y0Z3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 N0U0LzAyMzJFNTQ4Q0I3MTExRjBBNUFERUQyMkM0RjlBRTAyLzJUWHM5NWtURy13 a09OcWQ2Q3RvV0pZOGNGdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFfg/B9vVmGTOMZVzb7Ux7Q+sGQzEpcl9ikjrK+cjLL8ATdgdDvDxuxK G6TmRw4pxUppmDaXx7Ad5RuuLVKCDmVlShDMaqI5zSHrM0mkkrIoqx/aJkZRKeD2 Gf0baVyPi/Jni/1M8bgEF7GGN2egnS3IVF64TXWBtsQj9AjaU2fl2RBhrrqyo8cW P9zj+TiYaN3ebhW4h7sBcUQ+fgiDto0oWWqOAZ0+0uGsk7ykyGjotJqRKmY8uWFY XlbgY8lTA0moBB9s31SY9m+/h7VAOWZn2EtXsOsMP5p67zylOUczse1rUvTtrMG7 8OEz3v4hkFa+CmegMPE+C5vagX7kKRc= -----END CERTIFICATE-----Generated at Sat Dec 20 03:02:24 2025 by rpki-client