This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft File: T2scW0K2HdXigZOWenDRiiKP73Y.mft (raw, json) Hash identifier: IA/XglZWweZETjDO1qgAUVH1BgvoDEmTKl5VX8i4Qvo= Subject key identifier: EC:54:F0:1F:31:F9:3B:A5:D1:C5:50:D8:44:25:22:64:73:1B:D2:C3 Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 Certificate issuer: /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Certificate serial: 0CF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft Manifest number: 0CED Signing time: Fri 26 Dec 2025 17:44:51 +0000 Manifest this update: Fri 26 Dec 2025 17:44:51 +0000 Manifest next update: Fri 02 Jan 2026 17:44:51 +0000 Files and hashes: 1: T2scW0K2HdXigZOWenDRiiKP73Y.crl (hash: 5QQM9jsyL1P315snJlazboajWqV3fZm9vnYoDm8KhNg=) 2: 7DF47F46F95611E996377877C4F9AE02.roa (hash: TQudNrBg1tAuuiY/zVaf2qIyDj5AjTY8tAQkyrZyuYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 17:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3317 (0xcf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174DAD, serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Validity Not Before: Dec 26 17:44:51 2025 GMT Not After : Jan 2 17:44:51 2026 GMT Subject: CN=694ec993-8669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4e:c7:6f:ba:e7:ea:e8:d8:d5:1c:e5:62:f5: 0a:09:74:33:0d:e7:a3:d5:fe:9f:9a:e6:ab:b4:91: 96:bf:88:df:de:bc:b1:f1:7a:73:80:76:ca:f1:2c: d7:83:ea:b6:d4:d9:80:37:0b:18:01:71:c5:05:42: 78:f6:53:c2:01:84:e8:ec:d1:af:4d:ba:de:6e:2f: c7:22:c6:04:9f:8f:cd:74:da:16:8e:64:eb:25:b1: 7c:75:1c:a2:45:84:9d:e7:93:8a:e1:79:3e:76:c1: 5e:d5:1c:c6:76:18:c6:cd:1c:54:46:65:49:e9:ef: e7:ed:c6:7e:e6:38:c7:5a:97:02:3f:ef:9b:49:0a: 77:29:13:84:65:36:a7:3d:4e:fd:c7:63:a3:1d:1f: 48:f5:b8:6e:f5:ca:27:58:28:77:cd:70:5a:13:22: 23:76:12:51:d2:11:12:1b:13:ec:a4:86:e5:2f:e4: f0:34:3b:5f:78:d3:ea:e1:5d:28:7c:1f:e4:14:9c: ff:c4:fb:15:dc:e6:fd:d5:ac:9c:02:c1:20:ec:c3: 7b:7d:4b:ec:bf:ce:dd:75:be:89:37:02:fc:71:51: 50:5e:2c:39:55:30:5c:d5:d5:74:ad:6b:9a:40:b5: 42:9a:5e:fa:34:c6:0e:ee:94:b3:a9:c5:61:22:12: 77:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:54:F0:1F:31:F9:3B:A5:D1:C5:50:D8:44:25:22:64:73:1B:D2:C3 X509v3 Authority Key Identifier: keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:3d:45:ec:9c:1b:79:fd:4d:81:32:84:72:b5:9d:8f:52:7a: c1:31:fe:5e:c1:f5:17:ae:0a:d0:28:a6:08:3a:3e:a6:50:9b: 25:8a:f9:19:70:3e:7b:b8:e9:6c:4d:6a:27:3f:78:87:a3:01: c4:c8:e4:57:06:2d:80:11:7c:90:a9:d9:c5:2f:79:58:b6:cd: 9e:96:80:5b:39:4b:04:a8:c0:4b:ea:27:d0:80:48:fb:ea:0a: 9a:74:7b:be:9a:cc:7a:76:4c:bb:8a:08:91:43:3b:88:8c:20: 68:00:ad:58:3b:53:13:80:22:c7:65:e9:0a:a8:08:8d:04:ca: 4d:ac:a7:32:1e:5a:1a:08:56:84:b1:a8:cf:36:fd:1d:72:6a: 4a:37:da:36:c9:0c:04:3c:36:df:1a:ee:63:9a:a6:72:3d:23: 3f:32:c0:21:af:42:e4:1c:b7:13:03:0b:42:08:47:8d:39:98: 8b:dd:10:56:12:ef:1c:94:2d:ca:46:c1:e7:a1:d0:a0:2a:68: 29:bb:31:1d:e5:60:eb:18:ff:77:39:b7:41:18:00:76:ce:bd: 2b:d9:2a:8b:c8:0c:61:f3:a0:1f:25:99:77:e9:0a:7c:07:9d: 1b:17:2e:17:d4:db:25:6e:d8:f3:e9:65:8f:38:78:7f:03:74: f3:8e:1d:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzREQUQxMTAvBgNVBAUTKDRGNkIxQzVCNDJCNjFERDVFMjgxOTM5NjdBNzBEMThB MjI4RkVGNzYwHhcNMjUxMjI2MTc0NDUxWhcNMjYwMTAyMTc0NDUxWjAYMRYwFAYD VQQDDA02OTRlYzk5My04NjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E7Hb7rn6ujY1RzlYvUKCXQzDeej1f6fmuartJGWv4jf3ryx8XpzgHbK8SzX g+q21NmANwsYAXHFBUJ49lPCAYTo7NGvTbrebi/HIsYEn4/NdNoWjmTrJbF8dRyi RYSd55OK4Xk+dsFe1RzGdhjGzRxURmVJ6e/n7cZ+5jjHWpcCP++bSQp3KROEZTan PU79x2OjHR9I9bhu9conWCh3zXBaEyIjdhJR0hESGxPspIblL+TwNDtfeNPq4V0o fB/kFJz/xPsV3Ob91aycAsEg7MN7fUvsv87ddb6JNwL8cVFQXiw5VTBc1dV0rWua QLVCml76NMYO7pSzqcVhIhJ3UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxU8B8x +Tul0cVQ2EQlImRzG9LDMB8GA1UdIwQYMBaAFE9rHFtCth3V4oGTlnpw0Yoij+92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NERBRC9GQzYwRTVCQUY5 NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhkWGlnWk9XZW5EUmlpS1A3 M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Qyc2NXMEsySGRYaWdaT1dlbkRSaWlLUDczWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NERBRC9GQzYwRTVCQUY5NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhk WGlnWk9XZW5EUmlpS1A3M1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTPUXsnBt5/U2BMoRytZ2PUnrBMf5ewfUXrgrQKKYIOj6mUJslivkZ cD57uOlsTWonP3iHowHEyORXBi2AEXyQqdnFL3lYts2eloBbOUsEqMBL6ifQgEj7 6gqadHu+msx6dky7igiRQzuIjCBoAK1YO1MTgCLHZekKqAiNBMpNrKcyHloaCFaE sajPNv0dcmpKN9o2yQwEPDbfGu5jmqZyPSM/MsAhr0LkHLcTAwtCCEeNOZiL3RBW Eu8clC3KRsHnodCgKmgpuzEd5WDrGP93ObdBGAB2zr0r2SqLyAxh86AfJZl36Qp8 B50bFy4X1Nslbtjz6WWPOHh/A3Tzjh0W -----END CERTIFICATE-----Generated at Sat Dec 27 04:27:58 2025 by rpki-client