This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft File: C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft (raw, json) Hash identifier: 4eUYaMJ4wx98B3Yb8aEbAq0yHXn1oe8q6ORyCNw0Eyc= Subject key identifier: EA:B2:40:05:D5:80:62:88:9D:56:7E:CB:C7:CC:CD:46:51:2D:13:AC Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 Certificate issuer: /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Certificate serial: 0658 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft Manifest number: 063A Signing time: Tue 30 Dec 2025 22:02:45 +0000 Manifest this update: Tue 30 Dec 2025 22:02:44 +0000 Manifest next update: Tue 06 Jan 2026 22:02:44 +0000 Files and hashes: 1: C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl (hash: giVtnEZ8IxhClnLnEyE1aRm+oZux42GgK7e0wheRhv4=) 2: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (hash: JjwRM28UWpqUpm8V4jbamMbdEhJ8x26HdODuQra73JI=) 3: 4FF7919CA3AE11F08498344CC4F9AE02.roa (hash: AWiL7Ku+LhuTzw8yYOes8DFZCiFrs+UOfXRiEC5RaE4=) 4: 1DE394187C2F11F0902A5A0CC4F9AE02.roa (hash: R8MAXcI9/yvxzT89z1WDBO8OZ5lHOE8A6WUOtaaft6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 22:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1624 (0x658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Validity Not Before: Dec 30 22:02:44 2025 GMT Not After : Jan 6 22:02:44 2026 GMT Subject: CN=69544c04-747e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:42:3e:5c:93:ec:dd:88:4e:da:35:8a:0d:a6: a8:d8:7e:a5:56:04:45:72:fa:77:6b:83:ac:2b:e0: 74:21:42:1b:c0:45:9d:a0:50:df:72:e1:10:33:98: ae:28:20:3f:aa:61:0c:56:46:41:fb:9c:7f:b2:07: 4a:85:49:6c:ca:9c:d3:70:20:62:bd:6e:ca:35:1b: d3:d2:f5:d9:f9:02:d5:5c:5c:71:66:d9:a5:46:d3: f8:b4:2f:8e:cc:a6:2f:18:2c:bb:de:f3:cd:b3:02: ca:c2:0c:6b:2b:bc:66:01:67:70:34:9e:cd:24:60: a7:c4:bd:3b:18:89:04:d6:16:25:f3:35:5e:ca:b0: 11:3e:f4:cd:f9:0a:6f:2d:80:ed:7a:1c:91:b9:8f: 27:02:be:6e:ee:fe:c0:c8:ee:3a:89:aa:b3:2c:da: 63:a0:67:6b:22:40:96:cb:96:eb:de:7c:b0:4e:24: bb:de:89:43:39:cb:cf:49:7b:d8:fc:74:e2:6c:b1: e1:8e:a2:c0:ba:e6:66:dd:4f:ed:6c:54:43:57:98: f6:14:33:fb:8c:18:69:c7:e6:5b:b7:3b:dd:e9:ec: a4:21:7b:e1:9f:2a:88:d5:e7:38:ae:e6:36:0c:4a: 45:2c:c3:bf:99:2a:e0:79:a8:28:9c:f7:0e:99:46: 19:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B2:40:05:D5:80:62:88:9D:56:7E:CB:C7:CC:CD:46:51:2D:13:AC X509v3 Authority Key Identifier: keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:32:e6:d7:ec:40:fe:5f:73:46:a1:60:05:6f:0a:d3:b0:d8: dd:59:64:ea:23:7c:0f:9e:5e:ca:8a:2d:e9:5e:bd:15:4f:b1: 58:7b:49:4d:a0:27:df:fe:23:36:8a:d0:e7:68:fb:9a:36:2c: 36:8c:04:22:14:24:a0:81:5a:25:11:66:9a:a5:ca:26:44:30: 0a:df:bc:c9:42:91:78:67:f5:e9:d3:f9:a0:40:6a:dd:ef:4e: fa:49:69:14:87:f7:5d:d9:bd:f5:8c:6d:ee:e1:c5:c4:e2:8e: ae:a0:b1:cc:bf:5a:e3:ac:44:b9:3f:8e:6f:a2:80:ef:58:df: 77:d6:54:16:0d:f4:60:f2:ad:80:c3:1c:34:35:92:2d:76:a7: 01:d2:b0:be:d2:05:dd:e3:27:ae:a4:ef:29:4a:df:01:67:75: 3f:45:5f:68:40:ef:0c:7a:00:52:9c:86:f6:35:4c:c8:ea:f8: 31:01:ca:4e:c5:d8:96:71:26:81:54:68:dd:cc:75:e3:2f:08: 73:0b:49:09:44:14:a4:24:e8:c6:bc:dc:7d:14:0c:15:b6:cb: 11:27:50:ff:8d:3d:0b:98:7c:13:9d:7f:20:90:5f:5e:18:76: ca:3b:e5:a1:0a:4d:e3:fe:0e:94:a4:75:c7:2e:e6:2b:25:b8: f2:f3:e2:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyRUIxMTAvBgNVBAUTKDBCNkNERjNGQUNDNjgwQjc4NjkyNkRFMTM5RjFFMEY2 NzQ0NDA2NTQwHhcNMjUxMjMwMjIwMjQ0WhcNMjYwMTA2MjIwMjQ0WjAYMRYwFAYD VQQDDA02OTU0NGMwNC03NDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EI+XJPs3YhO2jWKDaao2H6lVgRFcvp3a4OsK+B0IUIbwEWdoFDfcuEQM5iu KCA/qmEMVkZB+5x/sgdKhUlsypzTcCBivW7KNRvT0vXZ+QLVXFxxZtmlRtP4tC+O zKYvGCy73vPNswLKwgxrK7xmAWdwNJ7NJGCnxL07GIkE1hYl8zVeyrARPvTN+Qpv LYDtehyRuY8nAr5u7v7AyO46iaqzLNpjoGdrIkCWy5br3nywTiS73olDOcvPSXvY /HTibLHhjqLAuuZm3U/tbFRDV5j2FDP7jBhpx+Zbtzvd6eykIXvhnyqI1ec4ruY2 DEpFLMO/mSrgeagonPcOmUYZ4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqyQAXV gGKInVZ+y8fMzUZRLROsMB8GA1UdIwQYMBaAFAts3z+sxoC3hpJt4Tnx4PZ0RAZU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTJFQi9GRDAwODFERUM1 NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dMZUdrbTNoT2ZIZzluUkVC bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyemZQNnpHZ0xlR2ttM2hPZkhnOW5SRUJsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTJFQi9GRDAwODFERUM1NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dM ZUdrbTNoT2ZIZzluUkVCbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4MubX7ED+X3NGoWAFbwrTsNjdWWTqI3wPnl7Kii3pXr0VT7FYe0lN oCff/iM2itDnaPuaNiw2jAQiFCSggVolEWaapcomRDAK37zJQpF4Z/Xp0/mgQGrd 7076SWkUh/dd2b31jG3u4cXE4o6uoLHMv1rjrES5P45vooDvWN931lQWDfRg8q2A wxw0NZItdqcB0rC+0gXd4yeupO8pSt8BZ3U/RV9oQO8MegBSnIb2NUzI6vgxAcpO xdiWcSaBVGjdzHXjLwhzC0kJRBSkJOjGvNx9FAwVtssRJ1D/jT0LmHwTnX8gkF9e GHbKO+WhCk3j/g6UpHXHLuYrJbjy8+IV -----END CERTIFICATE-----Generated at Wed Dec 31 03:46:59 2025 by rpki-client