This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft File: M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json) Hash identifier: xqST2oI5q/cb+Tlvk6+8SbJco9JnydE/ErRsE88Np/w= Subject key identifier: 0A:7E:BD:4B:BF:6B:E8:E7:97:BA:F5:4E:22:46:BC:67:29:A6:17:0D Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft Manifest number: 0211 Signing time: Sun 21 Dec 2025 01:32:06 +0000 Manifest this update: Sun 21 Dec 2025 01:32:06 +0000 Manifest next update: Sun 28 Dec 2025 01:32:06 +0000 Files and hashes: 1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: d30nC7X5h/Mk56Yi77NhM/fNZM8wX73hpLO1kNSu6to=) 2: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: I8QRLy7bWP4fbAGVj59B+J8khscdNsGKDUZD21ickSM=) 3: B6522520CA6311F09583DE23C4F9AE02.roa (hash: 1YhygoOSmbNE2xaBfUv9pbWbrWh51R4fOwDAgWkQlyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Validity Not Before: Dec 21 01:32:06 2025 GMT Not After : Dec 28 01:32:06 2025 GMT Subject: CN=69474e16-7256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:44:d1:02:aa:0e:1d:17:ea:31:01:5d:53:8c: 09:01:cb:20:7f:43:90:ef:8b:96:a0:e2:b1:bf:19: bf:34:3f:0d:b3:f9:86:57:6c:d3:be:6e:34:7f:0f: 6e:45:a0:41:40:10:90:78:79:05:71:d7:75:59:7c: 8b:e1:d4:16:ae:3e:ce:58:e3:49:75:d5:1c:c2:ad: 4b:4c:1e:f6:ed:a3:57:8a:54:c7:ad:5c:47:19:3f: aa:88:49:c3:5a:86:42:ee:0d:02:c5:23:9e:5f:35: a4:1e:30:89:5f:b1:8c:15:54:20:18:39:5d:99:c6: 71:51:26:56:11:4b:f6:3a:d1:62:0f:bc:1f:aa:3d: 48:92:bc:c4:80:84:14:ac:b8:03:05:69:dd:60:30: 37:25:26:40:1a:27:78:36:51:05:b7:f0:60:99:ea: 5b:81:6d:e3:b7:89:76:38:9a:cd:33:67:10:4d:39: 4f:b1:05:58:f4:55:c4:84:77:54:86:8a:a2:27:e1: cf:ca:0c:f2:93:5e:39:7f:16:93:56:de:3c:cc:40: 97:26:01:03:da:6e:1d:4a:a5:3c:12:09:5a:32:9c: a5:b8:f2:ad:91:56:0a:84:64:87:09:b5:9e:00:82: ab:56:27:18:f2:a6:c4:63:9e:cd:a9:5a:89:86:c1: 35:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7E:BD:4B:BF:6B:E8:E7:97:BA:F5:4E:22:46:BC:67:29:A6:17:0D X509v3 Authority Key Identifier: keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:41:c3:6b:e7:ff:b8:24:a3:67:cc:83:51:ab:bf:f5:cc:c8: 4d:55:cb:8a:bf:ed:59:21:e2:39:63:27:0b:a8:c5:90:0d:6e: 3e:35:f0:c0:8c:c0:bd:7a:b2:b4:1b:c8:cc:d4:78:30:a5:27: 69:4f:a0:4d:a4:ae:74:da:e9:5e:b4:cd:32:99:63:45:7e:c5: f9:1d:06:88:5d:32:e7:23:f8:25:00:cd:8c:9a:da:bd:c3:8d: 35:9b:18:d8:de:75:95:4a:bf:c0:c5:45:4a:c3:61:7c:0a:a1: 96:ab:22:27:cf:a2:49:2a:18:66:22:d2:33:a9:18:31:eb:89: d8:7b:c2:f4:b1:e1:8d:7c:3d:43:65:c3:9a:82:bf:6d:75:e5: ef:02:e0:39:5d:97:e3:70:e0:a9:94:c8:3f:0c:6d:d3:9d:f6: 7e:3e:6d:46:d4:6e:0e:37:38:b9:66:74:3d:32:1e:2e:d6:f6: fc:f9:41:7d:da:1e:88:d7:95:b1:f6:33:9d:31:fe:6f:d5:76: 4b:c6:77:64:1f:cc:f4:e8:23:55:5d:15:f3:38:b8:2b:b4:99: 1a:01:cd:08:fd:52:a2:42:1d:4b:e1:8b:ed:1a:7e:9e:6d:f5: 6c:00:2c:98:ba:41:bb:84:44:91:e7:77:c0:ef:23:51:87:93: dd:61:11:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQUIxMTAvBgNVBAUTKDMzNjYxNzlCMkQ3Qzk3QjgyNjZGOUI0MzE4MDRBOEM2 RDJEMDkwRUIwHhcNMjUxMjIxMDEzMjA2WhcNMjUxMjI4MDEzMjA2WjAYMRYwFAYD VQQDDA02OTQ3NGUxNi03MjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUTRAqoOHRfqMQFdU4wJAcsgf0OQ74uWoOKxvxm/ND8Ns/mGV2zTvm40fw9u RaBBQBCQeHkFcdd1WXyL4dQWrj7OWONJddUcwq1LTB727aNXilTHrVxHGT+qiEnD WoZC7g0CxSOeXzWkHjCJX7GMFVQgGDldmcZxUSZWEUv2OtFiD7wfqj1IkrzEgIQU rLgDBWndYDA3JSZAGid4NlEFt/BgmepbgW3jt4l2OJrNM2cQTTlPsQVY9FXEhHdU hoqiJ+HPygzyk145fxaTVt48zECXJgED2m4dSqU8EglaMpyluPKtkVYKhGSHCbWe AIKrVicY8qbEY57NqVqJhsE1fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAp+vUu/ a+jnl7r1TiJGvGcpphcNMB8GA1UdIwQYMBaAFDNmF5stfJe4Jm+bQxgEqMbS0JDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJBQi8yQjk5ODU0RUI4 QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3Z21iNXRER0FTb3h0TFFr T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yWVhteTE4bDdnbWI1dERHQVNveHRMUWtPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJBQi8yQjk5ODU0RUI4QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3 Z21iNXRER0FTb3h0TFFrT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAQcNr5/+4JKNnzINRq7/1zMhNVcuKv+1ZIeI5YycLqMWQDW4+NfDA jMC9erK0G8jM1HgwpSdpT6BNpK502uletM0ymWNFfsX5HQaIXTLnI/glAM2Mmtq9 w401mxjY3nWVSr/AxUVKw2F8CqGWqyInz6JJKhhmItIzqRgx64nYe8L0seGNfD1D ZcOagr9tdeXvAuA5XZfjcOCplMg/DG3TnfZ+Pm1G1G4ONzi5ZnQ9Mh4u1vb8+UF9 2h6I15Wx9jOdMf5v1XZLxndkH8z06CNVXRXzOLgrtJkaAc0I/VKiQh1L4YvtGn6e bfVsACyYukG7hESR53fA7yNRh5PdYRFR -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:33 2025 by rpki-client