This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft File: f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft (raw, json) Hash identifier: KoTxIly7o0r3wj5n4TkO7jfqF+Hur5x0bufxSCmrHUI= Subject key identifier: BC:73:D9:77:A0:B3:43:F6:6B:CF:6B:3E:D3:BB:EC:91:42:03:94:43 Authority key identifier: 7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7 Certificate issuer: /CN=A915BA28/serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7 Certificate serial: 1125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft Manifest number: 1114 Signing time: Thu 18 Dec 2025 17:06:35 +0000 Manifest this update: Thu 18 Dec 2025 17:06:35 +0000 Manifest next update: Thu 25 Dec 2025 17:06:35 +0000 Files and hashes: 1: f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl (hash: 51bjkt1OLeRZOxhIvqyRqgC26RHf2zLH4z16qsB7eSI=) 2: C90C4476FBA611E9BA00AB33C4F9AE02.roa (hash: Cm3DQhbEayghF/7ogKNgiTb/7gIXNNRsWelKhE6uB7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4389 (0x1125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BA28, serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7 Validity Not Before: Dec 18 17:06:35 2025 GMT Not After : Dec 25 17:06:35 2025 GMT Subject: CN=6944349b-3bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:31:52:50:05:b1:1b:34:30:b4:ef:52:7f:f7: b0:a3:36:0e:b5:17:00:0f:09:93:04:81:11:9d:bd: 8c:2b:26:96:81:2d:b7:97:28:d4:e4:b4:28:21:77: d7:a6:6f:43:3e:e6:cb:8f:c5:3a:94:65:a4:a8:5f: 44:a1:b1:88:83:c7:d7:d9:ff:59:53:06:c4:63:f9: 3a:a9:bb:da:b0:87:70:58:3a:71:d7:9a:d5:eb:28: 99:18:86:87:8b:a6:a5:20:be:0a:7c:af:01:15:4d: 85:45:5f:4e:20:3e:f1:1e:5f:9a:52:1e:8f:a9:10: f5:1a:7b:13:e0:7a:d5:0e:ea:6b:5b:96:06:06:ca: b1:0e:d2:61:50:05:52:c9:9f:a5:88:6f:ef:1e:30: e1:58:59:05:d8:1d:4a:37:d3:f9:bc:b5:6e:27:b8: cc:76:10:ea:97:a0:97:73:fe:e8:2e:63:22:49:d5: 6c:da:6c:33:2d:ec:e6:14:8c:a2:5d:81:22:3f:3e: 93:f5:6f:64:9d:7e:a6:d5:33:83:45:6c:20:0d:8c: d7:9e:48:5b:aa:66:0f:ee:68:54:28:a8:57:cf:73: df:bc:0d:cd:07:ef:e7:27:6d:d4:1f:66:59:2e:99: f4:01:03:40:04:4c:2d:08:f8:1b:48:a1:92:c9:ae: 99:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:73:D9:77:A0:B3:43:F6:6B:CF:6B:3E:D3:BB:EC:91:42:03:94:43 X509v3 Authority Key Identifier: keyid:7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:3d:5f:0b:f5:43:e3:46:27:a1:99:d0:4a:0d:eb:71:73:8e: d5:f0:24:29:10:44:d8:86:d6:c6:fc:75:67:18:93:9e:bd:bb: 39:93:a4:ca:77:0d:f4:f2:2f:2d:2d:6d:67:78:b0:9f:b9:b9: 1a:6e:8f:08:a0:3b:10:bb:98:f3:c9:4d:e6:e5:fe:a2:a4:e5: 74:eb:09:af:7e:3f:e1:e7:9e:89:e5:53:3d:40:ff:e3:41:57: 39:ad:67:4d:19:ab:7a:83:45:e9:3c:16:e0:2d:15:d8:2a:ec: ce:1c:fe:5a:13:cc:77:bf:d6:1b:37:13:fe:c8:6f:74:5a:ab: 8c:4d:04:83:30:a4:fa:f2:fa:ea:f0:fb:a0:9e:9b:27:71:78: 2b:60:b4:0d:2e:c1:32:70:34:fd:6f:6c:54:b6:aa:06:33:93: 12:bb:4c:fd:9d:e4:af:79:dc:eb:44:8e:72:fc:fc:46:a8:75: 17:c8:d5:ec:5e:f2:16:10:7b:e7:c3:45:f7:63:7f:97:cc:d5: 70:1d:54:e9:2f:07:4d:75:7a:00:36:92:6c:f9:96:08:0f:eb: 71:7b:fd:ed:56:25:ba:5b:df:c5:4a:a3:33:6d:45:f2:a9:77: 68:a6:83:c4:30:78:e2:f1:c0:c3:d5:69:9c:84:d8:2d:66:cd: e7:61:6a:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICESUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJBMjgxMTAvBgNVBAUTKDdGNjA0NUEzNzY3NjVCRjgyNzkyQUE3MDVCQkQ4OTk1 MTlDQjE5QzcwHhcNMjUxMjE4MTcwNjM1WhcNMjUxMjI1MTcwNjM1WjAYMRYwFAYD VQQDDA02OTQ0MzQ5Yi0zYmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDFSUAWxGzQwtO9Sf/ewozYOtRcADwmTBIERnb2MKyaWgS23lyjU5LQoIXfX pm9DPubLj8U6lGWkqF9EobGIg8fX2f9ZUwbEY/k6qbvasIdwWDpx15rV6yiZGIaH i6alIL4KfK8BFU2FRV9OID7xHl+aUh6PqRD1GnsT4HrVDuprW5YGBsqxDtJhUAVS yZ+liG/vHjDhWFkF2B1KN9P5vLVuJ7jMdhDql6CXc/7oLmMiSdVs2mwzLezmFIyi XYEiPz6T9W9knX6m1TODRWwgDYzXnkhbqmYP7mhUKKhXz3PfvA3NB+/nJ23UH2ZZ Lpn0AQNABEwtCPgbSKGSya6Z2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxz2Xeg s0P2a89rPtO77JFCA5RDMB8GA1UdIwQYMBaAFH9gRaN2dlv4J5KqcFu9iZUZyxnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkEyOC9BNDdEMjAyODI4 NTUxMUU5QUQzODExNTFDNEY5QUUwMi9mMkJGbzNaMldfZ25rcXB3VzcySmxSbkxH Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyQkZvM1oyV19nbmtxcHdXNzJKbFJuTEdjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkEyOC9BNDdEMjAyODI4NTUxMUU5QUQzODExNTFDNEY5QUUwMi9mMkJGbzNaMldf Z25rcXB3VzcySmxSbkxHY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuPV8L9UPjRiehmdBKDetxc47V8CQpEETYhtbG/HVnGJOevbs5k6TK dw308i8tLW1neLCfubkabo8IoDsQu5jzyU3m5f6ipOV06wmvfj/h556J5VM9QP/j QVc5rWdNGat6g0XpPBbgLRXYKuzOHP5aE8x3v9YbNxP+yG90WquMTQSDMKT68vrq 8PugnpsncXgrYLQNLsEycDT9b2xUtqoGM5MSu0z9neSvedzrRI5y/PxGqHUXyNXs XvIWEHvnw0X3Y3+XzNVwHVTpLwdNdXoANpJs+ZYID+txe/3tViW6W9/FSqMzbUXy qXdopoPEMHji8cDD1WmchNgtZs3nYWoH -----END CERTIFICATE-----Generated at Fri Dec 19 17:46:46 2025 by rpki-client