This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft File: r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft (raw, json) Hash identifier: uDR7hZPSizi4XIPZKCME5btnFFk3p4C6ri0hTcYR11U= Subject key identifier: 68:34:51:C1:F3:AB:FB:15:3E:4E:62:E6:69:29:17:CE:F9:32:8A:C9 Authority key identifier: AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D Certificate issuer: /CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D Certificate serial: 0367 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft Manifest number: 0356 Signing time: Thu 25 Dec 2025 00:04:52 +0000 Manifest this update: Thu 25 Dec 2025 00:04:52 +0000 Manifest next update: Thu 01 Jan 2026 00:04:52 +0000 Files and hashes: 1: r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl (hash: 4W3e+AnNGjXEZGLAqaXKAPjMVsYrUvTYopUVOC58a3A=) 2: 67E15AC4E40611EC8410A53CC4F9AE02.roa (hash: AGoeYBgdKLfYPPhkahztTiG7JYdEMPn9wa46SQhvMmw=) 3: 41C460BE1BE911ED81DB667EC4F9AE02.roa (hash: utZX5ySaw+fRg+Lh06bBkb/YXcN+yf0Mo1jgBt8t3jI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 00:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 871 (0x367) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917414E, serialNumber=AF67132D837D576FFF777227A3725D601ED9105D Validity Not Before: Dec 25 00:04:52 2025 GMT Not After : Jan 1 00:04:52 2026 GMT Subject: CN=694c7fa4-3712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8f:7e:69:3f:54:b9:55:15:7a:5f:a0:f2:3a: 0d:9c:01:cc:86:3d:55:bb:50:1b:9c:e2:bb:ef:6d: 0c:a5:f7:b1:9e:95:81:3b:73:29:3d:17:d6:b3:1e: 02:ec:9e:f0:fa:71:5e:8b:97:a5:a2:59:2c:5d:37: 24:db:cc:c5:d1:5c:5c:ce:44:38:92:2e:48:85:b6: 59:0e:0a:4d:79:50:00:d6:ba:3f:55:a8:33:4a:e1: 66:b4:c1:b5:8d:e6:99:16:0f:0f:0b:e5:88:cb:b1: d1:f9:2d:9a:33:0a:a5:86:2b:4e:65:84:74:24:76: 93:81:12:e6:9d:80:0f:d5:cc:ca:e9:6d:b3:23:0a: 0b:f7:24:3b:72:b5:eb:43:34:ba:71:c3:91:2a:89: d7:9f:81:27:b6:8a:8f:7c:1f:3b:f7:e8:26:8e:1e: 81:cb:65:ff:6a:f9:6c:d3:54:ad:cf:07:be:a0:8b: c1:61:d9:cc:7b:9f:28:af:76:fa:85:9c:ad:41:0d: bd:d1:8e:f8:1e:aa:4b:0d:63:2c:e9:f2:4c:6e:e3: f7:c8:be:01:ee:a4:bb:06:2d:6c:e7:1c:db:e6:cd: 7b:36:bf:8f:46:95:19:d7:52:7d:fc:17:57:af:41: da:1f:83:6f:d2:6b:4b:c9:8b:75:bd:4f:dd:c6:46: 6c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:34:51:C1:F3:AB:FB:15:3E:4E:62:E6:69:29:17:CE:F9:32:8A:C9 X509v3 Authority Key Identifier: keyid:AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:85:dc:26:1a:3d:78:d5:79:df:27:8f:b9:0f:36:a1:1a:bb: 75:73:3f:90:3c:2e:72:5b:c5:62:7d:91:05:94:e2:58:31:73: 28:a7:32:d2:db:59:fc:2f:04:90:15:38:30:ad:d8:6c:f3:1c: 01:d4:95:e7:60:8b:cc:15:88:72:f2:61:50:88:a0:72:e3:8b: 1a:e8:4b:25:b0:44:0d:7f:a2:71:a5:b4:6d:34:ff:6e:f8:29: 6f:49:b3:74:38:d2:e9:73:26:2b:7a:93:ca:d8:0a:24:7c:a4: c4:16:3d:0d:0a:03:7a:52:61:70:f8:39:5a:7b:fa:b2:90:cc: 53:0c:ce:c5:ab:c6:39:9e:f4:49:93:cf:ef:2d:b4:e1:15:93: b7:4f:19:49:b8:59:c2:6f:7e:e1:f1:83:40:68:59:1a:c3:f4: 80:01:c0:62:94:42:e0:f1:2c:82:18:4a:1e:56:4e:85:9f:85: 34:62:d1:df:62:f2:5a:8c:42:1d:db:d2:3f:86:e7:f8:21:2b: 0c:1f:14:b1:02:ef:48:57:ef:ed:6f:72:6d:6e:39:5f:f9:8f: c9:cd:0d:b6:8d:3c:6c:af:72:14:21:6d:48:0d:aa:19:b8:af: 2f:ef:d3:cc:1c:75:a6:c0:ec:5e:cc:b3:91:d3:6b:96:94:9f: 2b:d9:0c:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxNEUxMTAvBgNVBAUTKEFGNjcxMzJEODM3RDU3NkZGRjc3NzIyN0EzNzI1RDYw MUVEOTEwNUQwHhcNMjUxMjI1MDAwNDUyWhcNMjYwMTAxMDAwNDUyWjAYMRYwFAYD VQQDDA02OTRjN2ZhNC0zNzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2o9+aT9UuVUVel+g8joNnAHMhj1Vu1AbnOK7720MpfexnpWBO3MpPRfWsx4C 7J7w+nFei5elolksXTck28zF0VxczkQ4ki5IhbZZDgpNeVAA1ro/VagzSuFmtMG1 jeaZFg8PC+WIy7HR+S2aMwqlhitOZYR0JHaTgRLmnYAP1czK6W2zIwoL9yQ7crXr QzS6ccORKonXn4EntoqPfB879+gmjh6By2X/avls01Stzwe+oIvBYdnMe58or3b6 hZytQQ290Y74HqpLDWMs6fJMbuP3yL4B7qS7Bi1s5xzb5s17Nr+PRpUZ11J9/BdX r0HaH4Nv0mtLyYt1vU/dxkZsiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGg0UcHz q/sVPk5i5mkpF875MorJMB8GA1UdIwQYMBaAFK9nEy2DfVdv/3dyJ6NyXWAe2RBd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE0RS80QzVFMkZCOEUz RkYxMUVDQUMyMTA1NzJDNEY5QUUwMi9yMmNUTFlOOVYyX19kM0lubzNKZFlCN1pF RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IyY1RMWU45VjJfX2QzSW5vM0pkWUI3WkVGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDE0RS80QzVFMkZCOEUzRkYxMUVDQUMyMTA1NzJDNEY5QUUwMi9yMmNUTFlOOVYy X19kM0lubzNKZFlCN1pFRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZhdwmGj141XnfJ4+5DzahGrt1cz+QPC5yW8VifZEFlOJYMXMopzLS 21n8LwSQFTgwrdhs8xwB1JXnYIvMFYhy8mFQiKBy44sa6EslsEQNf6JxpbRtNP9u +ClvSbN0ONLpcyYrepPK2AokfKTEFj0NCgN6UmFw+Dlae/qykMxTDM7Fq8Y5nvRJ k8/vLbThFZO3TxlJuFnCb37h8YNAaFkaw/SAAcBilELg8SyCGEoeVk6Fn4U0YtHf YvJajEId29I/huf4ISsMHxSxAu9IV+/tb3Jtbjlf+Y/JzQ22jTxsr3IUIW1IDaoZ uK8v79PMHHWmwOxezLOR02uWlJ8r2QyW -----END CERTIFICATE-----Generated at Thu Dec 25 18:06:46 2025 by rpki-client