This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft File: 2szbgPh19VKJMaiCXRqvoYCpsXk.mft (raw, json) Hash identifier: hgjNSsr5XRUfuuV/Gk+VGV7Xuk12M6sm3rJNntq0zns= Subject key identifier: CF:6E:77:17:88:82:10:8C:35:00:4D:A9:74:96:1D:1B:2D:79:65:04 Authority key identifier: DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 Certificate issuer: /CN=A918D701/serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft Manifest number: 0205 Signing time: Fri 19 Dec 2025 01:36:38 +0000 Manifest this update: Fri 19 Dec 2025 01:36:37 +0000 Manifest next update: Fri 26 Dec 2025 01:36:37 +0000 Files and hashes: 1: 2szbgPh19VKJMaiCXRqvoYCpsXk.crl (hash: MeOsx6GrQ5XIVEnQZT4H4yQsCJn1doavVpLoIKaoV/s=) 2: 98D5AE30C88C11ED907C1C0EC4F9AE02.roa (hash: YcDeh2t6Hw3AD0IzEUacGsgBDExXh3a14o3dMVwYFKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D701, serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Validity Not Before: Dec 19 01:36:37 2025 GMT Not After : Dec 26 01:36:37 2025 GMT Subject: CN=6944ac26-5dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:d6:d3:21:91:3c:89:f6:00:92:bd:9e:1b: d7:a6:9e:df:2d:17:f2:62:7d:0f:0e:20:4a:05:d6: 93:f0:f8:9d:7e:43:e3:45:3b:98:9b:85:04:7a:b3: 34:fd:24:09:88:27:d9:b1:ae:d9:cc:47:fc:53:7c: 17:d8:c8:8d:a0:38:2c:0c:e3:e5:56:e1:78:b4:8e: 20:d7:a8:62:a1:6d:6a:44:d4:45:80:5e:57:01:03: df:64:af:37:f5:64:b8:24:66:eb:2c:5c:6a:67:86: 4d:5a:78:37:e7:ff:63:a0:a0:8f:50:68:9a:dc:3d: cf:8b:b5:cb:05:9f:53:d8:ea:8d:50:5c:c7:45:25: 30:c1:47:16:c1:92:08:6c:d7:ff:09:e0:b4:54:8b: 37:cb:42:36:81:09:0a:25:0d:d7:69:74:f2:75:93: e1:0d:9b:bd:f9:03:47:4a:2c:b4:3f:57:e1:35:19: 3d:27:0d:dc:73:75:7e:37:c0:41:9e:91:5a:cc:78: f9:6e:1c:03:74:36:e3:d2:fc:60:db:33:f1:ba:6e: 55:b4:b9:b4:10:f6:fc:24:84:1e:e3:9c:e4:7e:e6: ae:ce:95:96:7d:4b:f5:71:24:ff:8a:fe:28:69:85: 88:e1:4d:51:c5:10:7b:87:67:2d:95:c6:63:0d:6c: 5b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6E:77:17:88:82:10:8C:35:00:4D:A9:74:96:1D:1B:2D:79:65:04 X509v3 Authority Key Identifier: keyid:DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:a2:54:44:d4:54:a9:e2:fa:e2:86:f9:ac:50:4a:5d:07:ee: 89:31:10:68:be:a1:9c:fc:3b:e0:78:c8:67:ad:de:96:87:40: 3b:e5:09:1f:b7:55:28:db:61:9a:ab:a2:d3:52:67:95:e8:78: fd:0b:a5:da:cc:e0:ce:5e:f6:f1:8c:e9:33:fa:39:82:f0:ca: f8:f3:91:00:99:35:54:81:b1:31:54:59:ec:72:46:57:c7:68: c4:e6:7e:5a:3c:0a:a0:7b:c4:43:7d:bd:be:94:55:5c:de:ea: 9f:30:4c:1b:60:b6:52:0c:62:12:57:ca:f4:0c:0a:fb:2c:e8: 31:b4:72:86:92:7a:42:65:6c:aa:e9:be:47:65:a9:02:35:b8: 9b:78:1e:85:9b:09:96:fe:4d:9d:d4:e6:d0:f7:85:cb:10:7d: 72:96:16:01:2c:ed:41:9f:0e:fd:f2:e4:49:04:7f:c6:a6:21: a7:47:6c:63:de:f9:e1:ce:9c:8c:2c:88:11:6a:1e:50:1a:e1: c0:8c:19:95:ea:d2:cf:55:64:9c:25:62:42:20:81:e1:e5:6d: 4f:dd:eb:80:7b:bd:1e:41:a4:b0:ba:be:c1:4f:b7:a1:6f:97: a8:cd:50:cd:c1:5e:06:90:24:39:f1:75:3c:0a:81:f8:d8:be: c4:a9:59:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3MDExMTAvBgNVBAUTKERBQ0NEQjgwRjg3NUY1NTI4OTMxQTg4MjVEMUFBRkEx ODBBOUIxNzkwHhcNMjUxMjE5MDEzNjM3WhcNMjUxMjI2MDEzNjM3WjAYMRYwFAYD VQQDDA02OTQ0YWMyNi01ZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuo3W0yGRPIn2AJK9nhvXpp7fLRfyYn0PDiBKBdaT8PidfkPjRTuYm4UEerM0 /SQJiCfZsa7ZzEf8U3wX2MiNoDgsDOPlVuF4tI4g16hioW1qRNRFgF5XAQPfZK83 9WS4JGbrLFxqZ4ZNWng35/9joKCPUGia3D3Pi7XLBZ9T2OqNUFzHRSUwwUcWwZII bNf/CeC0VIs3y0I2gQkKJQ3XaXTydZPhDZu9+QNHSiy0P1fhNRk9Jw3cc3V+N8BB npFazHj5bhwDdDbj0vxg2zPxum5VtLm0EPb8JIQe45zkfuauzpWWfUv1cST/iv4o aYWI4U1RxRB7h2ctlcZjDWxbhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9udxeI ghCMNQBNqXSWHRsteWUEMB8GA1UdIwQYMBaAFNrM24D4dfVSiTGogl0ar6GAqbF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDcwMS9EMTg3OEVGNkM4 ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlWS0pNYWlDWFJxdm9ZQ3Bz WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzemJnUGgxOVZLSk1haUNYUnF2b1lDcHNYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDcwMS9EMTg3OEVGNkM4ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlW S0pNYWlDWFJxdm9ZQ3BzWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiolRE1FSp4vrihvmsUEpdB+6JMRBovqGc/DvgeMhnrd6Wh0A75Qkf t1Uo22Gaq6LTUmeV6Hj9C6XazODOXvbxjOkz+jmC8Mr485EAmTVUgbExVFnsckZX x2jE5n5aPAqge8RDfb2+lFVc3uqfMEwbYLZSDGISV8r0DAr7LOgxtHKGknpCZWyq 6b5HZakCNbibeB6FmwmW/k2d1ObQ94XLEH1ylhYBLO1Bnw798uRJBH/GpiGnR2xj 3vnhzpyMLIgRah5QGuHAjBmV6tLPVWScJWJCIIHh5W1P3euAe70eQaSwur7BT7eh b5eozVDNwV4GkCQ58XU8CoH42L7EqVmN -----END CERTIFICATE-----Generated at Fri Dec 19 20:15:44 2025 by rpki-client