This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft File: 2OexX5y5FnTlEn_UBtfZ5xjgirA.mft (raw, json) Hash identifier: iuwJI0bBpG0NLDnlUUvl7/jYUgAS+fwdqzNk0Coa3bY= Subject key identifier: 21:BE:70:D7:58:D4:6E:22:00:75:C8:20:A5:7B:86:44:54:74:FE:6F Authority key identifier: D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0 Certificate issuer: /CN=A917E27F/serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft Manifest number: 48 Signing time: Fri 19 Dec 2025 06:20:02 +0000 Manifest this update: Fri 19 Dec 2025 06:20:02 +0000 Manifest next update: Fri 26 Dec 2025 06:20:02 +0000 Files and hashes: 1: 2OexX5y5FnTlEn_UBtfZ5xjgirA.crl (hash: B1XZiTuX/i/04siKTow7uEhQSc2w6ycSZy6DZlStRKc=) 2: 4197AB74735611F080D68151C4F9AE02.roa (hash: uw93y6FGovmGq+bi/XnqUmoXwqLRFeM+9sTlrsvluUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.crl rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E27F, serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0 Validity Not Before: Dec 19 06:20:02 2025 GMT Not After : Dec 26 06:20:02 2025 GMT Subject: CN=6944ee92-cb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f4:e7:21:f9:bd:ff:48:79:41:34:67:8e:50: d3:94:f9:9b:03:70:52:fd:8a:9a:c0:c6:31:4e:69: 4c:82:6f:d2:be:10:8e:dd:cc:dc:f8:27:9d:80:7d: fe:01:6f:7f:b9:ba:ad:a5:db:b4:89:60:46:5d:75: 6e:ce:fa:e7:70:28:59:a3:21:83:ad:f7:30:1e:e8: 95:3b:c0:54:88:56:4e:e0:41:9c:86:29:ed:18:c9: 55:1f:d9:22:be:16:cf:f7:91:25:02:e0:b6:9e:7c: 52:69:fe:d9:7d:fa:d3:a2:7e:db:d7:31:e0:e3:a5: 70:20:7e:7c:6a:3b:44:12:a4:48:f5:ef:97:26:76: a0:36:d5:d5:87:84:ad:0f:93:93:87:31:95:43:4f: 1b:5d:64:2b:e5:1a:82:cb:99:18:78:4a:86:57:e6: 4a:87:f8:54:93:5a:23:91:10:7e:67:41:d4:d7:57: 99:3f:96:f9:86:c7:21:69:93:5e:53:aa:3a:a5:70: b5:a8:ac:65:ff:5c:b7:40:74:6c:15:ff:ef:96:5c: cb:b0:ed:19:72:24:57:d5:1d:b9:80:f6:5f:bb:3e: 00:e9:41:86:fa:b8:11:a9:64:fb:4b:23:59:ca:d0: 4e:b2:a1:39:30:9e:ea:12:ce:9c:4b:e1:b2:18:49: d3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BE:70:D7:58:D4:6E:22:00:75:C8:20:A5:7B:86:44:54:74:FE:6F X509v3 Authority Key Identifier: keyid:D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:5c:3d:79:69:be:5b:d0:28:fc:3f:43:76:82:44:37:49:11: 36:b9:bc:84:40:c5:6d:f4:33:bf:64:2c:14:af:33:d0:8a:69: 29:df:30:61:f5:b6:ed:b7:67:f5:e5:87:79:9d:f5:4a:7b:75: f3:29:33:15:db:fd:39:e9:a6:56:53:1a:66:53:ff:f0:ca:a0: 19:b4:f6:a2:f0:c4:0a:cb:4b:56:30:16:8a:30:83:70:f7:17: 67:d8:2c:84:52:e6:18:81:a7:a6:23:5c:53:7b:49:86:29:ba: f5:5c:85:09:45:cb:86:9c:c1:7b:0f:b2:14:08:59:86:11:04: 3d:8b:72:6b:db:6c:b8:7d:11:20:68:36:38:fe:b8:54:1f:68: de:1c:c7:a5:04:21:1a:c9:c8:2f:e9:14:0a:44:53:94:03:3a: 40:9c:46:07:80:21:26:54:4a:21:99:d8:4e:2f:e0:78:6b:db: b3:bb:f4:77:0d:56:6a:20:dd:a2:3b:51:28:07:c2:49:d7:e0: f9:a1:3c:7a:64:bf:00:59:79:5f:54:3d:34:13:6b:93:28:4a: 6e:94:ba:2a:76:71:de:94:dc:92:8b:f3:04:0c:af:bd:2c:b7: 0b:55:ac:50:81:0b:c9:ad:be:21:48:d1:54:1c:81:ee:50:1a: d0:2a:c2:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTI3RjExMC8GA1UEBRMoRDhFN0IxNUY5Q0I5MTY3NEU1MTI3RkQ0MDZEN0Q5RTcx OEUwOEFCMDAeFw0yNTEyMTkwNjIwMDJaFw0yNTEyMjYwNjIwMDJaMBgxFjAUBgNV BAMMDTY5NDRlZTkyLWNiNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDV9Och+b3/SHlBNGeOUNOU+ZsDcFL9iprAxjFOaUyCb9K+EI7dzNz4J52Aff4B b3+5uq2l27SJYEZddW7O+udwKFmjIYOt9zAe6JU7wFSIVk7gQZyGKe0YyVUf2SK+ Fs/3kSUC4LaefFJp/tl9+tOiftvXMeDjpXAgfnxqO0QSpEj175cmdqA21dWHhK0P k5OHMZVDTxtdZCvlGoLLmRh4SoZX5kqH+FSTWiOREH5nQdTXV5k/lvmGxyFpk15T qjqlcLWorGX/XLdAdGwV/++WXMuw7RlyJFfVHbmA9l+7PgDpQYb6uBGpZPtLI1nK 0E6yoTkwnuoSzpxL4bIYSdNfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIb5w11jU biIAdcggpXuGRFR0/m8wHwYDVR0jBBgwFoAU2OexX5y5FnTlEn/UBtfZ5xjgirAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMjdGLzc2OUQyRDY2NzJC NzExRjA5QzA0NjkwREM0RjlBRTAyLzJPZXhYNXk1Rm5UbEVuX1VCdGZaNXhqZ2ly QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMk9leFg1eTVGblRsRW5fVUJ0Zlo1eGpnaXJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MjdGLzc2OUQyRDY2NzJCNzExRjA5QzA0NjkwREM0RjlBRTAyLzJPZXhYNXk1Rm5U bEVuX1VCdGZaNXhqZ2lyQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ9cPXlpvlvQKPw/Q3aCRDdJETa5vIRAxW30M79kLBSvM9CKaSnfMGH1 tu23Z/Xlh3md9Up7dfMpMxXb/TnpplZTGmZT//DKoBm09qLwxArLS1YwFoowg3D3 F2fYLIRS5hiBp6YjXFN7SYYpuvVchQlFy4acwXsPshQIWYYRBD2LcmvbbLh9ESBo Njj+uFQfaN4cx6UEIRrJyC/pFApEU5QDOkCcRgeAISZUSiGZ2E4v4Hhr27O79HcN Vmog3aI7USgHwknX4PmhPHpkvwBZeV9UPTQTa5MoSm6Uuip2cd6U3JKL8wQMr70s twtVrFCBC8mtviFI0VQcge5QGtAqwuA= -----END CERTIFICATE-----Generated at Sat Dec 20 08:24:21 2025 by rpki-client