This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft File: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft (raw, json) Hash identifier: 7rA3D3QSCKSSj7WK6hbLGumA8G87bP1eyEzKva6/tU0= Subject key identifier: E1:27:67:14:86:69:39:9C:90:15:16:C4:5B:04:7B:D9:7F:69:28:AA Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 Certificate issuer: /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft Manifest number: 72 Signing time: Thu 01 Jan 2026 06:21:14 +0000 Manifest this update: Thu 01 Jan 2026 06:21:14 +0000 Manifest next update: Thu 08 Jan 2026 06:21:14 +0000 Files and hashes: 1: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl (hash: 4sU0b2E1JdXvVX2+NMSL61PkQR18fz3MSeOrbCjW5xk=) 2: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (hash: bLk6e/8BG0U0y63z7FNoru0rpVQQjPyy298/glBy1OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 06:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Validity Not Before: Jan 1 06:21:14 2026 GMT Not After : Jan 8 06:21:14 2026 GMT Subject: CN=6956125a-121a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0e:40:a8:74:08:e2:75:15:04:40:62:c6:4d: b2:ea:07:5d:32:e4:b4:21:e8:ea:49:9c:3a:db:cb: 97:a1:a6:11:bd:37:df:af:6e:05:27:6f:bf:24:71: 24:0a:a2:3a:df:63:e5:b5:26:c6:a8:6e:a0:bd:38: 28:61:90:36:ab:d3:ac:f6:21:37:c0:52:e4:07:01: a3:92:47:93:19:f2:93:d7:86:21:d1:cf:1c:58:2b: 3b:de:ae:26:d9:23:a0:dc:22:0f:1c:de:07:be:2c: ce:ec:21:c7:a4:2e:3a:1a:39:45:b4:25:4c:50:e2: 6b:5a:91:ab:e2:61:5b:7a:a0:cd:89:a9:e8:a5:68: 84:d4:33:4f:ed:af:87:3a:16:5b:2e:4f:8e:d4:e5: 54:ec:e0:bf:12:c8:ce:ef:73:e2:a1:0e:43:6e:98: 1d:23:9a:1b:f8:75:29:29:a5:3d:09:3b:76:d6:ca: 3f:df:c3:dd:55:b4:1c:1e:10:57:66:1a:16:f2:ec: 0e:fd:35:ba:73:15:60:28:55:56:de:fb:41:2f:ff: f0:31:c4:21:80:f0:2d:25:f2:ec:32:eb:89:b6:18: cf:3e:f6:12:86:3f:33:4a:92:6a:f5:86:05:00:d9: 82:53:dd:68:7a:c6:ee:e2:b4:ac:a5:92:96:f7:d9: 4b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:27:67:14:86:69:39:9C:90:15:16:C4:5B:04:7B:D9:7F:69:28:AA X509v3 Authority Key Identifier: keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:81:9d:cf:71:c5:61:34:74:ce:c8:90:a8:fa:78:0b:5f:21: 67:2f:11:2e:94:37:5e:07:e6:1b:3e:96:a6:b0:6b:23:98:78: 9d:21:70:e3:ec:72:41:da:54:35:a8:60:10:e6:a8:fd:fe:91: bd:1b:5a:58:94:56:d8:3b:59:32:ca:59:d5:11:df:5b:39:51: 20:98:54:7d:d4:e7:75:23:cf:12:1e:b9:f9:ce:c7:4b:98:80: 44:76:2a:dd:68:71:76:39:57:3c:a4:c1:f4:35:1a:07:d0:16: cf:ec:b4:ff:1a:cf:75:f2:2b:0b:78:04:d0:07:09:7a:98:f3: d9:35:bc:de:de:9a:2b:70:1d:92:72:57:7e:bd:5d:48:47:2c: 41:32:9e:43:9f:6e:d4:ce:74:14:5c:d6:79:24:39:3a:48:fc: ef:a4:26:4a:c0:f5:25:eb:de:ab:e3:4a:0c:fe:43:b0:a0:41: f1:6c:49:70:01:1f:e4:e8:d2:f5:5e:6d:d6:44:e9:14:4b:ca: 25:87:aa:c1:5d:8f:00:f8:1f:4a:05:c7:f5:3f:62:7b:f1:09: 0a:82:42:12:8c:e2:d1:42:3e:36:bf:7f:c1:de:f0:6d:c7:7f: e4:52:ef:9c:22:44:8d:8f:74:34:98:67:39:b3:ee:71:be:33: bb:b8:22:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RUY4NzExMC8GA1UEBRMoMEI2Q0QxMjdEMDRFRUMzRThFRTQxODM5MTk0MTRGRDdF RjM5RDkyNDAeFw0yNjAxMDEwNjIxMTRaFw0yNjAxMDgwNjIxMTRaMBgxFjAUBgNV BAMMDTY5NTYxMjVhLTEyMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhDkCodAjidRUEQGLGTbLqB10y5LQh6OpJnDrby5ehphG9N9+vbgUnb78kcSQK ojrfY+W1JsaobqC9OChhkDar06z2ITfAUuQHAaOSR5MZ8pPXhiHRzxxYKzveribZ I6DcIg8c3ge+LM7sIcekLjoaOUW0JUxQ4mtakaviYVt6oM2JqeilaITUM0/tr4c6 FlsuT47U5VTs4L8SyM7vc+KhDkNumB0jmhv4dSkppT0JO3bWyj/fw91VtBweEFdm Ghby7A79NbpzFWAoVVbe+0Ev//AxxCGA8C0l8uwy64m2GM8+9hKGPzNKkmr1hgUA 2YJT3Wh6xu7itKylkpb32UvVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4SdnFIZp OZyQFRbEWwR72X9pKKowHwYDVR0jBBgwFoAUC2zRJ9BO7D6O5Bg5GUFP1+852SQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFRjg3LzNDQkUzOUEyMzhC MzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2TzVCZzVHVUZQMS04NTJT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzJ6Uko5Qk83RDZPNUJnNUdVRlAxLTg1MlNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF Rjg3LzNDQkUzOUEyMzhCMzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2 TzVCZzVHVUZQMS04NTJTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE6Bnc9xxWE0dM7IkKj6eAtfIWcvES6UN14H5hs+lqawayOYeJ0hcOPs ckHaVDWoYBDmqP3+kb0bWliUVtg7WTLKWdUR31s5USCYVH3U53UjzxIeufnOx0uY gER2Kt1ocXY5VzykwfQ1GgfQFs/stP8az3XyKwt4BNAHCXqY89k1vN7emitwHZJy V369XUhHLEEynkOfbtTOdBRc1nkkOTpI/O+kJkrA9SXr3qvjSgz+Q7CgQfFsSXAB H+To0vVebdZE6RRLyiWHqsFdjwD4H0oFx/U/YnvxCQqCQhKM4tFCPja/f8He8G3H f+RS75wiRI2PdDSYZzmz7nG+M7u4ImY= -----END CERTIFICATE-----Generated at Thu Jan 1 15:39:19 2026 by rpki-client