This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft File: F2vOFchi1HunYKH2ZTj4HVxJO4E.mft (raw, json) Hash identifier: 2s4l0NVgMLs3fwyerGwYK/HYYUZQZsObR0w2ewvW7CM= Subject key identifier: 7D:71:20:2B:F0:13:9C:D8:75:BB:91:E2:19:B0:85:B4:57:4D:23:C8 Authority key identifier: 17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81 Certificate issuer: /CN=A91706E4/serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft Manifest number: CE Signing time: Mon 29 Dec 2025 04:50:08 +0000 Manifest this update: Mon 29 Dec 2025 04:50:07 +0000 Manifest next update: Mon 05 Jan 2026 04:50:07 +0000 Files and hashes: 1: F2vOFchi1HunYKH2ZTj4HVxJO4E.crl (hash: G3MNvztL+QSKD68P9tn+TFhklm4CLDufZeQ3I3DgDy8=) 2: 2CE10886A68511EFB0CF9981C4F9AE02.roa (hash: veK+ihHT7rgGehPtR5m7GK/hbNWI81sjRNiKcGQwWGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 04:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706E4, serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81 Validity Not Before: Dec 29 04:50:07 2025 GMT Not After : Jan 5 04:50:07 2026 GMT Subject: CN=6952087f-0935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:58:db:d7:ff:a0:41:c0:15:1a:4b:f9:13:2e: f0:02:25:40:b2:e4:02:f3:3d:29:9c:27:11:dc:84: 68:85:77:2e:ac:c8:0c:98:39:99:ec:5c:8f:45:a7: 1d:f2:89:ac:a9:a9:45:8c:21:a1:14:49:44:b8:71: 49:b8:75:64:9d:23:6e:bc:ee:09:9a:fa:cc:84:f8: 7a:8e:a3:92:53:c8:28:e4:8d:fc:2e:f0:22:af:13: 15:ae:4d:ec:16:c7:c0:90:9b:e6:0b:cc:1c:22:02: 47:f7:4a:d2:4b:a5:65:97:70:ae:45:da:e9:09:1d: 4e:0d:81:3d:8f:a2:b2:18:d2:c1:5b:66:2e:bf:78: cf:dc:8a:67:91:4e:96:00:63:9e:5c:27:92:f1:56: 71:05:a7:3c:81:bc:c1:ff:7c:e9:41:76:84:59:c5: 18:fe:ae:f8:6c:64:7f:93:c2:01:81:d9:15:01:2f: b9:39:07:70:8c:c7:04:73:c5:27:f2:30:f7:7e:f1: 9c:38:ce:d9:a7:61:8e:32:35:0f:0a:a9:24:f3:ee: c8:11:b6:d2:1d:58:06:ca:30:0e:d2:94:93:0f:d6: 81:34:83:48:fc:6e:a4:cc:09:17:d1:44:1b:e6:20: 29:e9:11:51:72:07:3a:4d:7e:eb:67:a5:b3:c9:7f: 13:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:71:20:2B:F0:13:9C:D8:75:BB:91:E2:19:B0:85:B4:57:4D:23:C8 X509v3 Authority Key Identifier: keyid:17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:e4:94:0e:8a:ab:85:99:f8:cb:66:96:b7:fe:67:33:5f:fe: 82:4c:ac:40:13:d8:26:ea:7a:5f:0e:1f:ec:bf:75:99:e9:09: 29:a2:74:af:eb:05:70:f0:08:2e:a9:56:3c:a5:62:6a:5d:d1: 22:23:b3:d2:b4:37:08:39:20:95:fd:e4:65:61:a1:83:77:06: f4:4e:8b:46:74:2b:42:6d:3b:2b:1f:88:c8:6c:59:16:4f:3f: e0:b7:b5:31:b6:16:49:66:39:d0:11:52:cf:f6:14:9d:34:5e: 0d:90:8e:3c:2b:78:45:e2:66:fd:92:06:64:a5:ea:c5:73:59: bc:58:87:21:fb:c8:49:cf:48:79:e9:1e:55:a9:7a:b5:f0:bb: bf:b2:67:ce:0b:5c:1a:20:45:cf:8c:ae:90:72:ab:11:16:ec: 7b:3d:9a:7a:aa:cc:24:1a:5d:21:9b:ad:03:22:46:80:e8:ac: b1:c4:ff:a5:27:e3:8e:c6:c9:b9:56:3c:1a:65:9d:ba:b4:e6: 81:31:8d:7f:4f:90:76:1a:94:71:af:68:91:1c:1d:1c:9e:df: 93:f7:66:ca:92:9f:6f:8c:a2:b6:83:60:63:11:a2:a8:c4:a1: a8:a4:79:fc:b7:95:3f:c3:5c:bc:c5:47:6e:30:77:be:17:93: de:78:3e:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2RTQxMTAvBgNVBAUTKDE3NkJDRTE1Qzg2MkQ0N0JBNzYwQTFGNjY1MzhGODFE NUM0OTNCODEwHhcNMjUxMjI5MDQ1MDA3WhcNMjYwMTA1MDQ1MDA3WjAYMRYwFAYD VQQDDA02OTUyMDg3Zi0wOTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Fjb1/+gQcAVGkv5Ey7wAiVAsuQC8z0pnCcR3IRohXcurMgMmDmZ7FyPRacd 8omsqalFjCGhFElEuHFJuHVknSNuvO4JmvrMhPh6jqOSU8go5I38LvAirxMVrk3s FsfAkJvmC8wcIgJH90rSS6Vll3CuRdrpCR1ODYE9j6KyGNLBW2Yuv3jP3IpnkU6W AGOeXCeS8VZxBac8gbzB/3zpQXaEWcUY/q74bGR/k8IBgdkVAS+5OQdwjMcEc8Un 8jD3fvGcOM7Zp2GOMjUPCqkk8+7IEbbSHVgGyjAO0pSTD9aBNINI/G6kzAkX0UQb 5iAp6RFRcgc6TX7rZ6WzyX8TUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1xICvw E5zYdbuR4hmwhbRXTSPIMB8GA1UdIwQYMBaAFBdrzhXIYtR7p2Ch9mU4+B1cSTuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZFNC8zMkU5OTNDMEE2 ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9GMnZPRmNoaTFIdW5ZS0gyWlRqNEhWeEpP NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Yydk9GY2hpMUh1bllLSDJaVGo0SFZ4Sk80RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZFNC8zMkU5OTNDMEE2ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9GMnZPRmNoaTFI dW5ZS0gyWlRqNEhWeEpPNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ5JQOiquFmfjLZpa3/mczX/6CTKxAE9gm6npfDh/sv3WZ6QkponSv 6wVw8AguqVY8pWJqXdEiI7PStDcIOSCV/eRlYaGDdwb0TotGdCtCbTsrH4jIbFkW Tz/gt7UxthZJZjnQEVLP9hSdNF4NkI48K3hF4mb9kgZkperFc1m8WIch+8hJz0h5 6R5VqXq18Lu/smfOC1waIEXPjK6QcqsRFux7PZp6qswkGl0hm60DIkaA6KyxxP+l J+OOxsm5VjwaZZ26tOaBMY1/T5B2GpRxr2iRHB0cnt+T92bKkp9vjKK2g2BjEaKo xKGopHn8t5U/w1y8xUduMHe+F5PeeD7N -----END CERTIFICATE-----Generated at Mon Dec 29 08:25:50 2025 by rpki-client