This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft File: C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft (raw, json) Hash identifier: NsfJyvOg0pfDsgylZVluGhb153lCc/WnL9J6epdkIic= Subject key identifier: 04:04:33:4C:C3:F2:CA:6E:AC:9D:3F:E4:F0:B5:5F:6A:C2:FF:03:D9 Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 Certificate issuer: /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Certificate serial: 0652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft Manifest number: 0634 Signing time: Thu 18 Dec 2025 22:10:25 +0000 Manifest this update: Thu 18 Dec 2025 22:10:24 +0000 Manifest next update: Thu 25 Dec 2025 22:10:24 +0000 Files and hashes: 1: C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl (hash: UnssMJguE9tYjC5IX0/B52In8Ojbl17kfzkkgFHKc5k=) 2: 1DE394187C2F11F0902A5A0CC4F9AE02.roa (hash: R8MAXcI9/yvxzT89z1WDBO8OZ5lHOE8A6WUOtaaft6k=) 3: 4FF7919CA3AE11F08498344CC4F9AE02.roa (hash: AWiL7Ku+LhuTzw8yYOes8DFZCiFrs+UOfXRiEC5RaE4=) 4: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (hash: JjwRM28UWpqUpm8V4jbamMbdEhJ8x26HdODuQra73JI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Validity Not Before: Dec 18 22:10:24 2025 GMT Not After : Dec 25 22:10:24 2025 GMT Subject: CN=69447bd1-512d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b2:a5:70:d6:c8:4a:ce:12:ad:2e:25:f3:a8: a4:c2:e4:a8:64:69:e4:d8:f7:e8:1c:a8:25:e6:30: 45:41:1c:25:91:d0:b5:2f:60:b5:45:6c:bf:c5:b1: 70:c2:a7:92:93:1c:70:a6:a1:0f:a0:83:f4:21:f8: 0b:1b:ae:fa:70:47:e3:0a:52:9f:58:3e:8f:0f:10: d2:a4:04:b3:9e:e0:01:85:13:84:9c:07:7d:c5:b1: be:1c:f9:fe:73:b8:ee:d8:ce:b2:f9:ae:a7:65:5e: 9c:01:c3:52:d6:16:27:23:fc:3d:ef:17:73:1f:68: a6:88:02:34:06:45:66:cf:1b:da:6b:e6:ac:c7:4a: 21:55:c3:94:88:43:c7:84:db:e3:a9:c7:e7:d8:14: 90:32:ab:cf:3d:ce:de:c6:02:d4:1e:63:b6:cc:f3: 2f:c9:cc:ce:ca:59:62:19:27:94:d8:e6:eb:0e:d0: e2:3e:d1:2e:e4:d6:2f:84:21:96:ce:33:92:e9:f8: 8a:78:36:e2:75:2d:50:1b:6f:de:3f:a7:3d:f8:63: a0:ad:da:b5:99:43:4b:31:26:5d:a4:40:c2:64:c9: 37:7a:be:f4:85:36:f8:fe:57:5d:9e:75:ea:49:9f: 9c:48:2b:4c:e5:26:52:cc:e7:fc:9b:ea:a0:e0:7d: 4e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:04:33:4C:C3:F2:CA:6E:AC:9D:3F:E4:F0:B5:5F:6A:C2:FF:03:D9 X509v3 Authority Key Identifier: keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:e8:47:06:ae:da:60:07:e4:54:ce:1c:5d:f2:a5:e2:78:27: 8c:c7:f0:3d:e4:25:b4:46:57:b7:85:ad:b1:2e:48:e3:ac:4f: 7b:f1:4f:34:03:05:c1:da:c6:d5:51:20:66:a2:6b:1b:9a:2d: ee:b8:f4:c5:18:c1:5a:89:68:a4:f5:39:d7:f0:2d:dc:d6:cf: 6c:50:cf:c8:47:7b:9f:7a:b8:1f:55:a1:79:26:1c:0c:c2:be: c5:61:42:d1:1a:fb:9b:8a:3e:6e:a9:80:b6:3f:26:8c:bb:cd: 8e:89:2f:ff:09:53:8a:85:37:df:79:aa:ac:da:dc:b3:d6:1b: 41:39:82:94:e4:c8:1e:a8:15:82:a5:cd:03:84:d4:d4:55:8f: b7:03:84:91:4c:53:54:5e:00:f6:9d:09:c5:2e:26:9d:11:14: 2b:78:77:7d:21:ce:99:5f:7f:b4:c8:74:43:0f:99:07:43:0a: ab:ce:a3:27:c9:74:8c:76:1c:a6:a8:59:b9:d9:bd:41:bf:27: 8b:e1:03:c6:01:14:df:33:09:ab:0c:97:96:58:a8:cd:34:c6: 31:cc:35:5b:12:10:96:c5:8e:fd:82:9e:b0:a2:bf:49:7d:1b: 63:fb:e9:20:fc:7d:f7:19:f7:6c:f8:3f:31:2b:fc:d7:9d:78: 48:0d:b0:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyRUIxMTAvBgNVBAUTKDBCNkNERjNGQUNDNjgwQjc4NjkyNkRFMTM5RjFFMEY2 NzQ0NDA2NTQwHhcNMjUxMjE4MjIxMDI0WhcNMjUxMjI1MjIxMDI0WjAYMRYwFAYD VQQDDA02OTQ0N2JkMS01MTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlrKlcNbISs4SrS4l86ikwuSoZGnk2PfoHKgl5jBFQRwlkdC1L2C1RWy/xbFw wqeSkxxwpqEPoIP0IfgLG676cEfjClKfWD6PDxDSpASznuABhROEnAd9xbG+HPn+ c7ju2M6y+a6nZV6cAcNS1hYnI/w97xdzH2imiAI0BkVmzxvaa+asx0ohVcOUiEPH hNvjqcfn2BSQMqvPPc7exgLUHmO2zPMvyczOylliGSeU2ObrDtDiPtEu5NYvhCGW zjOS6fiKeDbidS1QG2/eP6c9+GOgrdq1mUNLMSZdpEDCZMk3er70hTb4/lddnnXq SZ+cSCtM5SZSzOf8m+qg4H1O0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQEM0zD 8spurJ0/5PC1X2rC/wPZMB8GA1UdIwQYMBaAFAts3z+sxoC3hpJt4Tnx4PZ0RAZU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTJFQi9GRDAwODFERUM1 NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dMZUdrbTNoT2ZIZzluUkVC bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyemZQNnpHZ0xlR2ttM2hPZkhnOW5SRUJsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTJFQi9GRDAwODFERUM1NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dM ZUdrbTNoT2ZIZzluUkVCbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh6EcGrtpgB+RUzhxd8qXieCeMx/A95CW0Rle3ha2xLkjjrE978U80 AwXB2sbVUSBmomsbmi3uuPTFGMFaiWik9TnX8C3c1s9sUM/IR3ufergfVaF5JhwM wr7FYULRGvubij5uqYC2PyaMu82OiS//CVOKhTffeaqs2tyz1htBOYKU5MgeqBWC pc0DhNTUVY+3A4SRTFNUXgD2nQnFLiadERQreHd9Ic6ZX3+0yHRDD5kHQwqrzqMn yXSMdhymqFm52b1BvyeL4QPGARTfMwmrDJeWWKjNNMYxzDVbEhCWxY79gp6wor9J fRtj++kg/H33Gfds+D8xK/zXnXhIDbC9 -----END CERTIFICATE-----Generated at Fri Dec 19 23:51:09 2025 by rpki-client