This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft File: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft (raw, json) Hash identifier: 7q9hqazGfvqH1CBvzLXo/crqb+WGnvuU6i5Uv6FOstY= Subject key identifier: 2F:BF:E7:3C:80:4B:BF:BD:CB:03:87:D3:33:7C:14:8B:A6:03:62:84 Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 Certificate issuer: /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Certificate serial: 09A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft Manifest number: 099B Signing time: Mon 22 Dec 2025 19:25:25 +0000 Manifest this update: Mon 22 Dec 2025 19:25:24 +0000 Manifest next update: Mon 29 Dec 2025 19:25:24 +0000 Files and hashes: 1: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl (hash: kBn6lXcyJbpaPOVClbVPTwi2FxfWrt8RrmUm8oE9py8=) 2: 33CDE41E5A4711EFA5ED8487C4F9AE02.roa (hash: 4ExF2O2Frz9RSsUL7YBwRkgASJlP9BcJdkByxRonGSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2468 (0x9a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D687, serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Validity Not Before: Dec 22 19:25:24 2025 GMT Not After : Dec 29 19:25:24 2025 GMT Subject: CN=69499b24-efbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b0:d2:da:58:ab:3a:a6:77:5d:1f:c7:11:e0: 8c:2c:da:d2:b5:50:f0:d8:07:fc:e5:c0:79:54:80: 7b:5d:cc:88:f7:7d:50:ac:47:9a:ad:73:3d:0a:0d: 9c:d2:71:26:7e:36:be:bd:1c:c7:36:1e:27:16:bb: ef:70:01:66:a0:9c:c2:22:e8:6a:c5:a8:b6:44:89: d0:c4:d7:0a:e8:83:3b:67:78:f2:2d:8f:bd:93:80: 17:09:31:0c:4b:0b:0a:25:88:54:44:06:a1:f0:fd: 2c:c1:b2:9e:7c:6a:45:16:f4:1d:a6:92:56:f2:5d: 24:37:83:e1:77:69:ae:7c:68:4f:25:d9:3d:7e:57: ac:cd:db:6a:ee:d3:c9:65:d8:52:da:87:ad:c2:1a: 7f:e1:4b:cd:58:1a:aa:db:6c:31:89:9e:54:09:9d: c2:8f:a5:8b:c2:b3:bd:ec:42:01:37:b3:60:66:94: 33:e2:2e:8b:19:5a:23:fb:db:5f:52:97:42:fb:45: 30:7d:4e:4d:66:c3:dc:e8:be:a2:cf:82:bf:25:bc: 31:18:c8:8c:41:8e:8b:e6:18:ce:8f:5f:66:de:7a: 40:97:64:fe:e6:37:59:43:78:10:08:0e:69:ee:f8: 8c:75:fc:e3:2a:11:55:b0:5c:80:18:17:36:0b:f7: 0a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BF:E7:3C:80:4B:BF:BD:CB:03:87:D3:33:7C:14:8B:A6:03:62:84 X509v3 Authority Key Identifier: keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f1:50:8d:57:e5:6d:a4:9e:bf:20:5c:e8:f8:aa:1d:6d:30: 58:3b:6f:a3:1c:6b:8a:ea:6e:33:2a:8a:59:55:8d:ca:94:8e: 40:d1:d7:ea:23:33:17:b3:4d:4f:72:23:00:e5:69:70:4a:49: c3:e1:58:1b:48:4f:b7:8b:26:4b:6f:c0:4c:25:9b:62:e3:c1: 4e:f0:c7:01:9e:34:3e:a3:e5:f3:45:9c:63:12:9f:b6:96:6c: 8f:89:2b:d7:63:f5:e0:64:05:7f:88:d3:65:c6:29:e1:10:8a: 5d:24:bf:d8:7b:05:cc:15:f1:8c:ce:54:8c:f5:49:2e:d7:9a: bc:ca:21:f2:3d:70:2e:d2:c2:b9:82:4f:24:e7:1b:96:ff:17: 0b:2b:c7:cb:08:02:3b:73:2a:3c:98:d0:8c:45:2a:c1:ec:fd: b7:91:a4:30:27:e8:e5:9f:c3:93:d2:cd:c6:ab:a8:75:b1:09: 46:b9:3c:b5:39:35:fb:6c:d9:72:cb:66:4e:ee:97:f6:90:32: 06:cf:a0:54:be:ff:65:b9:1b:b0:77:e5:af:04:ef:fa:63:b7: 88:bc:07:a4:fc:4b:bf:da:e2:ab:07:13:e6:6d:9b:dc:84:6e: 18:bc:e8:f8:82:bf:c2:2b:ca:88:d0:80:e2:4f:d1:34:59:25: 31:bb:f4:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2ODcxMTAvBgNVBAUTKERBQkIxNjlEOUU5RDc3RTY1NzZDMDE4MTAxMjUyQ0Iw QjQ4NTdGNjIwHhcNMjUxMjIyMTkyNTI0WhcNMjUxMjI5MTkyNTI0WjAYMRYwFAYD VQQDDA02OTQ5OWIyNC1lZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLDS2lirOqZ3XR/HEeCMLNrStVDw2Af85cB5VIB7XcyI931QrEearXM9Cg2c 0nEmfja+vRzHNh4nFrvvcAFmoJzCIuhqxai2RInQxNcK6IM7Z3jyLY+9k4AXCTEM SwsKJYhURAah8P0swbKefGpFFvQdppJW8l0kN4Phd2mufGhPJdk9fleszdtq7tPJ ZdhS2oetwhp/4UvNWBqq22wxiZ5UCZ3Cj6WLwrO97EIBN7NgZpQz4i6LGVoj+9tf UpdC+0UwfU5NZsPc6L6iz4K/JbwxGMiMQY6L5hjOj19m3npAl2T+5jdZQ3gQCA5p 7viMdfzjKhFVsFyAGBc2C/cK3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+/5zyA S7+9ywOH0zN8FIumA2KEMB8GA1UdIwQYMBaAFNq7Fp2enXfmV2wBgQElLLC0hX9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDY4Ny83NkI0M0I2NDlG NDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQtWlhiQUdCQVNVc3NMU0Zm MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyc1duWjZkZC1aWGJBR0JBU1Vzc0xTRmYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDY4Ny83NkI0M0I2NDlGNDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQt WlhiQUdCQVNVc3NMU0ZmMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK8VCNV+VtpJ6/IFzo+KodbTBYO2+jHGuK6m4zKopZVY3KlI5A0dfq IzMXs01PciMA5WlwSknD4VgbSE+3iyZLb8BMJZti48FO8McBnjQ+o+XzRZxjEp+2 lmyPiSvXY/XgZAV/iNNlxinhEIpdJL/YewXMFfGMzlSM9Uku15q8yiHyPXAu0sK5 gk8k5xuW/xcLK8fLCAI7cyo8mNCMRSrB7P23kaQwJ+jln8OT0s3Gq6h1sQlGuTy1 OTX7bNlyy2ZO7pf2kDIGz6BUvv9luRuwd+WvBO/6Y7eIvAek/Eu/2uKrBxPmbZvc hG4YvOj4gr/CK8qI0IDiT9E0WSUxu/QU -----END CERTIFICATE-----Generated at Tue Dec 23 02:40:30 2025 by rpki-client