This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft File: 2kdUAUEh0yaH2X05LZBgSagU_MM.mft (raw, json) Hash identifier: EcqapgwKmO1jGAimnSE+Y3nRuH3tHOwNiiUHxtkA6hc= Subject key identifier: C3:C6:2E:C4:15:E7:26:CE:B4:96:19:97:8F:FA:37:06:2E:39:A6:20 Authority key identifier: DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3 Certificate issuer: /CN=A91777A6/serialNumber=DA4754014121D32687D97D392D906049A814FCC3 Certificate serial: 02AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft Manifest number: 02A8 Signing time: Sun 21 Dec 2025 00:42:28 +0000 Manifest this update: Sun 21 Dec 2025 00:42:27 +0000 Manifest next update: Sun 28 Dec 2025 00:42:27 +0000 Files and hashes: 1: 2kdUAUEh0yaH2X05LZBgSagU_MM.crl (hash: H4vC9kvWK0v9rGe/17JJCJGn4ToIR+i/gBjEg4+BAI8=) 2: 930770F4244C11ED95AA5569C4F9AE02.roa (hash: ULGKwEOFyOrsmtR9RLcNHZ1T/UHrIBp7ZTGPrjal32s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 685 (0x2ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777A6, serialNumber=DA4754014121D32687D97D392D906049A814FCC3 Validity Not Before: Dec 21 00:42:27 2025 GMT Not After : Dec 28 00:42:27 2025 GMT Subject: CN=69474274-24a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:35:a8:7a:12:27:f1:20:af:4a:df:c8:f2:22: 4f:7d:0b:7a:46:f3:1b:ae:1a:a6:22:e1:e0:a5:13: 9c:34:ab:a2:9c:9a:53:0b:f3:30:a0:c3:28:b8:4d: af:99:af:95:de:d7:ad:4c:bb:68:f0:11:43:da:39: f0:ba:46:5f:41:f9:c3:32:44:f4:1f:e1:f6:da:09: 0a:5c:80:5b:1c:75:84:cd:6c:05:1a:79:52:d7:1f: 3f:ec:5d:46:a7:b7:fa:50:ff:bc:bf:6e:80:4d:fa: 57:1b:4c:0e:f2:97:5c:5a:65:ab:f6:fd:97:b9:69: 72:83:43:90:07:da:01:03:dc:0a:5f:bb:68:90:f9: 8a:63:a9:f8:6c:37:fc:58:33:2d:d4:4e:47:95:69: 26:80:1a:8f:b4:3e:76:dd:e4:1c:0f:18:6f:20:6c: 6d:5f:67:4f:04:fc:67:c5:19:a0:a5:a5:3d:93:2e: ef:a8:0f:b3:64:62:b6:0b:87:8a:a9:c9:e0:16:81: df:a1:21:4e:d8:5d:4e:ce:a2:91:9d:56:18:10:36: ef:99:30:8e:cd:ae:30:2b:3e:4d:8c:54:98:65:41: fb:a4:0b:97:b3:6a:e4:05:2f:bf:b0:d5:c3:6e:4e: 6c:1a:03:cf:20:08:d6:23:90:fc:0e:54:88:73:36: f0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C6:2E:C4:15:E7:26:CE:B4:96:19:97:8F:FA:37:06:2E:39:A6:20 X509v3 Authority Key Identifier: keyid:DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:29:a7:d2:0a:7a:b9:7a:64:8c:13:6b:ad:60:01:de:09:cc: 04:cf:fb:07:fc:e0:7a:26:6f:db:9e:de:69:8e:01:ca:f7:b9: 73:9c:ca:da:7f:62:e3:7a:3c:4c:bd:36:5f:a5:aa:76:ce:fa: 4a:e5:f2:8f:86:6d:0f:a6:5c:40:7a:c3:04:f0:80:b5:cc:b2: 9c:32:66:48:66:76:3a:2f:cd:bd:5f:8b:d3:db:a8:d5:65:30: f6:c7:d6:a8:77:f0:9e:cc:c3:5a:57:98:6d:c2:67:44:89:24: e9:21:86:1f:30:e5:cd:99:de:60:0e:70:6d:8d:df:cf:c7:dc: 09:58:19:e5:f7:39:08:9e:45:89:0a:ed:20:8a:ee:d4:ba:f7: cd:14:c2:e7:ea:18:ba:f9:66:83:a8:f1:86:88:95:4f:12:1c: 43:00:65:f6:cb:95:ad:0c:14:a9:26:7a:25:2d:48:af:1f:c3: 7d:59:07:40:01:15:ca:75:74:26:c8:8a:86:0c:26:61:a7:00: f0:37:b9:55:7c:6f:4e:2a:27:df:3b:c4:f0:d4:c6:17:0c:ed: 4e:0a:45:b8:1e:a0:36:22:ac:d6:11:f7:96:2b:04:97:2e:c7: b7:91:27:4d:5d:e0:1b:e8:32:7f:62:3e:67:27:17:35:6a:ea: 3e:09:83:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QTYxMTAvBgNVBAUTKERBNDc1NDAxNDEyMUQzMjY4N0Q5N0QzOTJEOTA2MDQ5 QTgxNEZDQzMwHhcNMjUxMjIxMDA0MjI3WhcNMjUxMjI4MDA0MjI3WjAYMRYwFAYD VQQDDA02OTQ3NDI3NC0yNGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkDWoehIn8SCvSt/I8iJPfQt6RvMbrhqmIuHgpROcNKuinJpTC/MwoMMouE2v ma+V3tetTLto8BFD2jnwukZfQfnDMkT0H+H22gkKXIBbHHWEzWwFGnlS1x8/7F1G p7f6UP+8v26ATfpXG0wO8pdcWmWr9v2XuWlyg0OQB9oBA9wKX7tokPmKY6n4bDf8 WDMt1E5HlWkmgBqPtD523eQcDxhvIGxtX2dPBPxnxRmgpaU9ky7vqA+zZGK2C4eK qcngFoHfoSFO2F1OzqKRnVYYEDbvmTCOza4wKz5NjFSYZUH7pAuXs2rkBS+/sNXD bk5sGgPPIAjWI5D8DlSIczbwQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPGLsQV 5ybOtJYZl4/6NwYuOaYgMB8GA1UdIwQYMBaAFNpHVAFBIdMmh9l9OS2QYEmoFPzD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdBNi9DOEE3OTlEMjI0 NDcxMUVEQjE2NTUwNTNDNEY5QUUwMi8ya2RVQVVFaDB5YUgyWDA1TFpCZ1NhZ1Vf TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrZFVBVUVoMHlhSDJYMDVMWkJnU2FnVV9NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdBNi9DOEE3OTlEMjI0NDcxMUVEQjE2NTUwNTNDNEY5QUUwMi8ya2RVQVVFaDB5 YUgyWDA1TFpCZ1NhZ1VfTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGKafSCnq5emSME2utYAHeCcwEz/sH/OB6Jm/bnt5pjgHK97lznMra f2LjejxMvTZfpap2zvpK5fKPhm0PplxAesME8IC1zLKcMmZIZnY6L829X4vT26jV ZTD2x9aod/CezMNaV5htwmdEiSTpIYYfMOXNmd5gDnBtjd/Px9wJWBnl9zkInkWJ Cu0giu7UuvfNFMLn6hi6+WaDqPGGiJVPEhxDAGX2y5WtDBSpJnolLUivH8N9WQdA ARXKdXQmyIqGDCZhpwDwN7lVfG9OKiffO8Tw1MYXDO1OCkW4HqA2IqzWEfeWKwSX Lse3kSdNXeAb6DJ/Yj5nJxc1auo+CYP+ -----END CERTIFICATE-----Generated at Sun Dec 21 01:50:58 2025 by rpki-client