This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft File: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft (raw, json) Hash identifier: YOrn/lbfg2GC+W25YhgNtADZfMhmIU51GYxQaBxkv8A= Subject key identifier: 96:68:57:2A:1A:BA:0B:4B:61:3A:D9:B6:30:2C:4C:05:71:A9:50:84 Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 Certificate issuer: /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft Manifest number: 0116 Signing time: Sun 21 Dec 2025 04:02:39 +0000 Manifest this update: Sun 21 Dec 2025 04:02:38 +0000 Manifest next update: Sun 28 Dec 2025 04:02:38 +0000 Files and hashes: 1: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl (hash: G5PJYrYwon5vCmlZ5q/MSZ99yHFjulr4mLEM64UM4ug=) 2: 5E9461285DB711EF8AB66F0EC4F9AE02.roa (hash: CBgoWvrmHvyFdXC0BLyQHHm9awpAM5FPWyknUbzVkgo=) 3: 40BC278038EB11EF9AD66E7FC4F9AE02.roa (hash: r+E4tv3uimhBOzrNZaN5fn8Ync8wrwOD2GgwaX3Fu0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91610DD, serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Validity Not Before: Dec 21 04:02:38 2025 GMT Not After : Dec 28 04:02:38 2025 GMT Subject: CN=6947715f-05c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:42:a3:60:31:0a:cf:38:85:b1:45:d2:be:67: 6b:c1:4b:28:21:50:89:71:38:43:85:7f:f2:cc:d9: f9:28:d9:1d:a6:9a:34:64:c4:e4:43:5e:11:b4:18: 65:39:73:90:68:a8:31:c3:b7:ad:01:a2:3d:40:10: bf:a3:99:59:28:5c:9a:c6:53:4f:27:1e:ec:df:59: 44:62:53:bb:76:c4:c3:69:e4:3d:f1:58:f0:b1:43: 36:7b:89:a6:9a:91:26:5d:7f:9d:45:dc:a4:2c:00: 1b:5b:f0:99:c6:c6:01:42:82:f9:35:ee:90:5b:b5: 69:11:52:ab:c4:85:16:31:03:d7:12:13:d5:fa:d1: a4:e6:cc:79:52:38:d4:1b:95:91:6b:27:ce:25:35: bd:48:8b:0e:49:4c:14:85:38:5c:a1:3e:91:ed:5f: c1:66:d3:2d:32:57:6c:33:f0:6b:54:9c:6f:de:ac: 24:16:de:96:1d:9f:f8:79:a3:94:66:e9:e6:3c:60: 2d:38:b2:be:46:7a:c2:a3:00:54:3c:17:f2:15:3b: e8:e8:2c:67:45:66:92:09:38:72:d5:0b:bb:e7:39: d9:36:6f:f8:56:3c:9a:f5:20:e7:f0:12:b3:7d:88: d0:94:7a:a4:ee:67:17:78:69:9b:a3:0a:f5:8a:82: bb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:68:57:2A:1A:BA:0B:4B:61:3A:D9:B6:30:2C:4C:05:71:A9:50:84 X509v3 Authority Key Identifier: keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:6f:08:8b:da:c9:ae:b8:d0:1f:b9:13:9f:3e:c9:7f:a4:2b: c3:e8:88:8b:12:9f:d6:82:32:8b:86:c4:32:0f:70:a6:d9:dd: 8c:e8:6e:68:12:aa:e5:cf:6d:ed:3e:01:94:d5:ef:09:2f:ed: 8e:67:32:29:26:49:99:32:95:27:8d:2d:40:f9:f2:23:98:8a: be:74:b2:ea:7a:23:ef:41:21:a8:5f:b1:05:42:c0:21:57:52: 64:93:49:b2:02:bf:0f:3c:53:e9:c1:67:e4:5d:df:3f:aa:8c: aa:53:ee:77:6f:77:bc:48:fb:be:a4:8f:e8:0e:34:3f:92:4d: f3:20:02:df:85:63:97:7c:6d:d5:64:81:2d:72:30:8c:41:58: 5b:53:1b:49:94:62:69:ab:a3:09:c2:36:f1:b0:82:46:52:86: 48:29:01:b2:39:7d:e0:0f:e4:1c:12:4f:df:eb:86:5d:77:7a: d1:40:47:80:be:75:65:89:f4:87:9c:a7:0c:41:f6:82:5a:c3: b5:d9:b3:99:0b:f9:15:aa:5c:c7:49:50:4d:6e:48:21:f8:30: 90:7c:87:46:50:e5:aa:97:a1:55:0d:47:73:c6:31:77:8b:59: 64:6d:fd:e6:d5:dd:9f:05:7c:bf:a5:f8:76:69:83:02:80:79: 5f:1d:fa:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwREQxMTAvBgNVBAUTKEQ4QkQ2NzY1MTgzNjYwMzRCODg4ODQ4QjNCNTcxOEZB OTA3MEUxOTIwHhcNMjUxMjIxMDQwMjM4WhcNMjUxMjI4MDQwMjM4WjAYMRYwFAYD VQQDDA02OTQ3NzE1Zi0wNWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmUKjYDEKzziFsUXSvmdrwUsoIVCJcThDhX/yzNn5KNkdppo0ZMTkQ14RtBhl OXOQaKgxw7etAaI9QBC/o5lZKFyaxlNPJx7s31lEYlO7dsTDaeQ98VjwsUM2e4mm mpEmXX+dRdykLAAbW/CZxsYBQoL5Ne6QW7VpEVKrxIUWMQPXEhPV+tGk5sx5UjjU G5WRayfOJTW9SIsOSUwUhThcoT6R7V/BZtMtMldsM/BrVJxv3qwkFt6WHZ/4eaOU ZunmPGAtOLK+RnrCowBUPBfyFTvo6CxnRWaSCThy1Qu75znZNm/4Vjya9SDn8BKz fYjQlHqk7mcXeGmbowr1ioK7/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZoVyoa ugtLYTrZtjAsTAVxqVCEMB8GA1UdIwQYMBaAFNi9Z2UYNmA0uIiEiztXGPqQcOGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTBERC82NTYzMjRGNDM4 RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllEUzRpSVNMTzFjWS1wQnc0 WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMMW5aUmcyWURTNGlJU0xPMWNZLXBCdzRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTBERC82NTYzMjRGNDM4RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllE UzRpSVNMTzFjWS1wQnc0WkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYbwiL2smuuNAfuROfPsl/pCvD6IiLEp/WgjKLhsQyD3Cm2d2M6G5o Eqrlz23tPgGU1e8JL+2OZzIpJkmZMpUnjS1A+fIjmIq+dLLqeiPvQSGoX7EFQsAh V1Jkk0myAr8PPFPpwWfkXd8/qoyqU+53b3e8SPu+pI/oDjQ/kk3zIALfhWOXfG3V ZIEtcjCMQVhbUxtJlGJpq6MJwjbxsIJGUoZIKQGyOX3gD+QcEk/f64Zdd3rRQEeA vnVlifSHnKcMQfaCWsO12bOZC/kVqlzHSVBNbkgh+DCQfIdGUOWql6FVDUdzxjF3 i1lkbf3m1d2fBXy/pfh2aYMCgHlfHfoC -----END CERTIFICATE-----Generated at Sun Dec 21 07:43:53 2025 by rpki-client