This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft File: 2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft (raw, json) Hash identifier: n9GXpeTvOfQliaqtsoSA7dSnRUniND7KXMi3+7vxaV4= Subject key identifier: 85:C5:8C:48:84:AC:B5:EB:D0:55:A4:0C:6F:E3:F7:D3:CA:B8:E0:30 Authority key identifier: DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F Certificate issuer: /CN=A915ACE2/serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft Manifest number: 60 Signing time: Sun 21 Dec 2025 06:23:27 +0000 Manifest this update: Sun 21 Dec 2025 06:23:27 +0000 Manifest next update: Sun 28 Dec 2025 06:23:27 +0000 Files and hashes: 1: 2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl (hash: MLd2mCD2o2VjgaixG4Tf5uhiT/dJsFTBca+UB5WoB0c=) 2: 6C8EEADA8FE011F0A1C6120DC4F9AE02.roa (hash: 2rgWm34cnuxHOcyBHT+NDpf6UPxP1/T5rN2Gb9Zi9ZI=) 3: F0458520DB1F11F0BA85C19B87D3641D.roa (hash: WA87UPJRq96s6OLP9jcJhBSDKr1z70JCl7NRHIyVd4o=) 4: 0B4068BEC55D11F0B9FDE586C4F9AE02.roa (hash: d/+adXM53jhzhnOgosOvMBJYAel7wXf5omaL/+hpgK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ACE2, serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F Validity Not Before: Dec 21 06:23:27 2025 GMT Not After : Dec 28 06:23:27 2025 GMT Subject: CN=6947925f-281d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:9b:36:42:85:37:3d:b4:56:a1:52:51:99: f7:44:b6:39:d3:ee:41:91:62:b9:3c:ba:a0:0e:0f: f9:bb:8f:2b:30:96:a8:07:25:eb:ce:e4:9f:ce:a4: c2:ae:48:91:c0:d9:a9:94:e6:be:ba:f9:68:53:ae: 9d:2a:2d:97:04:04:8a:67:0e:f8:74:34:5a:f7:94: 53:16:02:06:c0:e6:2a:2c:4e:c5:47:05:1b:76:ea: db:0d:ba:f5:53:d9:dd:08:c3:40:39:4a:93:00:60: 85:6b:14:37:9f:c7:d5:a0:6e:25:f9:98:36:31:59: b6:35:bf:ef:79:05:d2:e9:70:c0:07:73:c4:29:0f: cb:a6:d2:39:69:b2:bc:0f:1d:6a:b2:75:ea:7e:e1: cd:25:9d:d4:df:73:89:f6:9d:a9:3b:0b:3f:06:7f: df:f9:83:c2:39:ce:2c:84:11:31:11:eb:bb:eb:a4: 87:1e:a6:78:4f:fd:10:cc:8b:3a:99:ac:41:b2:de: 39:c6:89:c1:6d:94:55:59:b7:ac:4f:96:47:19:97: dd:10:80:01:c4:1e:05:60:79:80:f8:64:e8:00:00: 45:5f:9e:df:be:08:8e:51:ba:52:e2:07:4e:62:9d: 21:6c:69:35:9c:d1:fd:dd:c8:c9:ad:6f:2a:64:45: aa:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C5:8C:48:84:AC:B5:EB:D0:55:A4:0C:6F:E3:F7:D3:CA:B8:E0:30 X509v3 Authority Key Identifier: keyid:DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:30:00:25:24:07:d5:8d:07:a7:8b:a8:6e:e2:db:6e:09:a7: 53:6d:ec:92:60:37:30:01:28:1c:e7:19:bf:ea:5d:4e:b1:7b: 67:8c:73:d0:4a:91:c3:11:06:63:d8:c5:92:74:ff:8b:5e:1b: 42:23:77:89:58:fc:fc:70:f1:64:f5:87:06:40:ea:20:8c:5b: d2:70:3c:f5:67:c2:7f:67:09:e0:10:1e:f7:a9:58:d5:f5:b9: 38:dd:91:a5:13:ab:a2:1b:42:47:27:36:bb:7e:c6:45:19:96: 98:e1:03:bf:d3:d7:24:55:17:b5:e7:69:c8:f7:1c:10:c2:53: 89:07:5c:fd:dd:1c:cd:be:a7:c4:3e:d8:ea:28:b2:c2:32:ad: d0:83:cf:dc:a7:24:0e:9c:8a:e1:c5:fd:86:97:88:97:88:e7: f9:92:fb:04:69:d0:af:7d:09:aa:70:0d:1c:9d:5f:35:bd:39: 9b:d7:b7:ff:99:9c:9b:45:90:23:4b:43:c0:4a:f5:a2:97:c0: a3:7e:f4:5d:5b:eb:56:65:2c:42:fe:d1:36:7f:fe:3c:9f:18: 8f:ec:9d:ff:e1:89:26:1f:2a:a8:15:10:66:73:ae:9e:bb:49: fd:be:3e:2d:ef:9a:ff:a6:b3:bd:d2:42:21:4a:13:8a:cb:e9: 4f:c3:74:64 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QUNFMjExMC8GA1UEBRMoREFFMUNFMEFEQTY3QjQ0NzEzQzYxQjFGQUVDNEY1RDRE NjdBMTU5RjAeFw0yNTEyMjEwNjIzMjdaFw0yNTEyMjgwNjIzMjdaMBgxFjAUBgNV BAMMDTY5NDc5MjVmLTI4MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrwZs2QoU3PbRWoVJRmfdEtjnT7kGRYrk8uqAOD/m7jyswlqgHJevO5J/OpMKu SJHA2amU5r66+WhTrp0qLZcEBIpnDvh0NFr3lFMWAgbA5iosTsVHBRt26tsNuvVT 2d0Iw0A5SpMAYIVrFDefx9WgbiX5mDYxWbY1v+95BdLpcMAHc8QpD8um0jlpsrwP HWqydep+4c0lndTfc4n2nak7Cz8Gf9/5g8I5ziyEETER67vrpIcepnhP/RDMizqZ rEGy3jnGicFtlFVZt6xPlkcZl90QgAHEHgVgeYD4ZOgAAEVfnt++CI5RulLiB05i nSFsaTWc0f3dyMmtbypkRarBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhcWMSISs tevQVaQMb+P308q44DAwHwYDVR0jBBgwFoAU2uHOCtpntEcTxhsfrsT11NZ6FZ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBQ0UyLzUxQ0Q3RkJBNzJD RTExRjA4NDIxQUE0OEM0RjlBRTAyLzJ1SE9DdHBudEVjVHhoc2Zyc1QxMU5aNkZa OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnVIT0N0cG50RWNUeGhzZnJzVDExTlo2Rlo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB Q0UyLzUxQ0Q3RkJBNzJDRTExRjA4NDIxQUE0OEM0RjlBRTAyLzJ1SE9DdHBudEVj VHhoc2Zyc1QxMU5aNkZaOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALcwACUkB9WNB6eLqG7i224Jp1Nt7JJgNzABKBznGb/qXU6xe2eMc9BK kcMRBmPYxZJ0/4teG0Ijd4lY/Pxw8WT1hwZA6iCMW9JwPPVnwn9nCeAQHvepWNX1 uTjdkaUTq6IbQkcnNrt+xkUZlpjhA7/T1yRVF7Xnacj3HBDCU4kHXP3dHM2+p8Q+ 2OoossIyrdCDz9ynJA6ciuHF/YaXiJeI5/mS+wRp0K99CapwDRydXzW9OZvXt/+Z nJtFkCNLQ8BK9aKXwKN+9F1b61ZlLEL+0TZ//jyfGI/snf/hiSYfKqgVEGZzrp67 Sf2+Pi3vmv+ms73SQiFKE4rL6U/DdGQ= -----END CERTIFICATE-----Generated at Sun Dec 21 08:37:30 2025 by rpki-client