This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft File: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json) Hash identifier: 4qfwuDQ2AgU3tf1266n2MEhMzzQznDILzzdpzmLOCno= Subject key identifier: CF:1A:2A:EC:8F:E2:05:CA:71:98:31:2D:03:9D:57:97:F3:D6:B4:59 Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 Certificate issuer: /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Certificate serial: 04A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft Manifest number: 04A2 Signing time: Mon 22 Dec 2025 23:04:13 +0000 Manifest this update: Mon 22 Dec 2025 23:04:13 +0000 Manifest next update: Mon 29 Dec 2025 23:04:13 +0000 Files and hashes: 1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: PPaxtfxq4Z71GScvTCWB0GWlIE5ogkG9XBAPxis/uv0=) 2: 90065F424DB511F0A1C8D30DC4F9AE02.roa (hash: wqkVYDxZ6HBCzKePRiH5zEB/9I/WLKOX58mvYx8PpGA=) 3: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: XCMHw1WVIEMLU74HMo1cPz+oPVQmbB2z+VPLna5yZDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1192 (0x4a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Validity Not Before: Dec 22 23:04:13 2025 GMT Not After : Dec 29 23:04:13 2025 GMT Subject: CN=6949ce6d-ede8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fd:63:ef:a5:31:6b:90:00:72:45:5b:2a:ae: a7:4e:05:60:1b:b4:71:62:ca:66:8d:ad:74:d4:ec: 30:6d:86:18:02:98:56:f0:b5:b1:58:09:01:e4:70: 68:1e:00:a5:4a:80:58:75:16:1c:5b:19:ab:3b:5a: 6d:92:bc:5a:bb:9a:12:a3:b4:c8:63:4b:4d:70:4d: 4a:2b:03:32:3d:e6:2a:32:ea:99:28:76:50:31:d3: b8:6e:97:a3:8a:2e:88:e5:f3:50:c0:9e:4d:8c:4b: 64:da:bb:4b:e6:6d:08:16:a8:17:1f:75:bc:e6:80: 25:9e:e1:82:63:b0:12:1b:55:aa:4b:96:ff:87:e0: 6a:6e:2b:d0:c0:53:16:4e:76:2d:54:c9:ee:a9:4a: 45:4f:5b:c1:c0:34:d9:63:d1:b9:11:80:97:a4:81: 11:d1:ae:5d:75:2f:19:ef:5d:34:7b:22:92:f6:ad: e7:ee:02:4b:96:c0:67:62:3a:16:34:1b:0b:7c:96: 94:c3:b9:9c:10:40:1f:58:60:17:cb:b1:25:e5:e9: 09:dc:c4:21:57:ee:69:a4:3c:41:ec:46:67:f6:87: 65:ce:5c:46:64:48:15:5e:55:af:6e:7b:e4:a2:e7: 53:03:c8:59:4a:99:22:61:59:f1:80:06:6b:29:c7: fc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1A:2A:EC:8F:E2:05:CA:71:98:31:2D:03:9D:57:97:F3:D6:B4:59 X509v3 Authority Key Identifier: keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:f6:c5:7b:79:e4:23:95:64:b9:9a:c1:0b:83:ba:91:ed:6d: 40:77:43:b1:50:3e:ac:19:c6:26:b4:90:91:46:61:91:5e:c6: aa:d6:24:6a:f8:36:e7:5c:d5:1b:11:55:27:c6:cb:95:15:a0: 75:33:4c:8d:98:f7:22:0d:87:57:40:24:e5:e4:bb:6c:fe:7e: ba:98:be:5f:36:95:1f:ef:b7:47:71:db:4f:f9:b3:95:27:18: 32:d6:1f:a3:ba:8c:b5:62:17:d8:66:7c:01:6b:53:eb:4f:d0: e0:e7:70:c8:e3:d3:cf:69:d1:19:48:59:e3:fb:ad:a7:6f:f4: 7c:37:09:17:03:84:11:6c:69:48:f1:fe:c7:26:d4:c4:55:ba: 40:d4:09:03:59:bb:80:fe:c7:52:c1:b2:50:e8:e4:3a:3d:79: d9:c4:63:3a:ce:01:a4:82:c8:77:5a:8c:00:f4:6b:46:8e:10: 44:1f:e0:f1:ab:e3:37:d6:c4:a4:53:bd:41:b8:47:37:ee:96: 68:e1:24:50:ed:70:51:fb:16:fa:df:db:8d:58:a7:91:07:e1: 15:af:f7:f8:fd:0b:60:df:8b:39:4a:99:7e:bd:33:10:f0:73: cd:78:c1:f0:86:73:d5:12:c9:c5:11:f3:68:f8:ea:ea:b0:93: e4:53:7c:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwMEYxMTAvBgNVBAUTKERCRUVFQkMyNUE3QTlCOUI2NzVBMDRFMkY0MjFFRkU0 NkVBNzI1MjAwHhcNMjUxMjIyMjMwNDEzWhcNMjUxMjI5MjMwNDEzWjAYMRYwFAYD VQQDDA02OTQ5Y2U2ZC1lZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApf1j76Uxa5AAckVbKq6nTgVgG7RxYspmja101OwwbYYYAphW8LWxWAkB5HBo HgClSoBYdRYcWxmrO1ptkrxau5oSo7TIY0tNcE1KKwMyPeYqMuqZKHZQMdO4bpej ii6I5fNQwJ5NjEtk2rtL5m0IFqgXH3W85oAlnuGCY7ASG1WqS5b/h+BqbivQwFMW TnYtVMnuqUpFT1vBwDTZY9G5EYCXpIER0a5ddS8Z7100eyKS9q3n7gJLlsBnYjoW NBsLfJaUw7mcEEAfWGAXy7El5ekJ3MQhV+5ppDxB7EZn9odlzlxGZEgVXlWvbnvk oudTA8hZSpkiYVnxgAZrKcf8pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8aKuyP 4gXKcZgxLQOdV5fz1rRZMB8GA1UdIwQYMBaAFNvu68JaepubZ1oE4vQh7+RupyUg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzAwRi8xQUQ1QUY3NDVE OTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01dG5XZ1RpOUNIdjVHNm5K U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItN3J3bHA2bTV0bldnVGk5Q0h2NUc2bkpTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzAwRi8xQUQ1QUY3NDVEOTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01 dG5XZ1RpOUNIdjVHNm5KU0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDM9sV7eeQjlWS5msELg7qR7W1Ad0OxUD6sGcYmtJCRRmGRXsaq1iRq +DbnXNUbEVUnxsuVFaB1M0yNmPciDYdXQCTl5Lts/n66mL5fNpUf77dHcdtP+bOV Jxgy1h+juoy1YhfYZnwBa1PrT9Dg53DI49PPadEZSFnj+62nb/R8NwkXA4QRbGlI 8f7HJtTEVbpA1AkDWbuA/sdSwbJQ6OQ6PXnZxGM6zgGkgsh3WowA9GtGjhBEH+Dx q+M31sSkU71BuEc37pZo4SRQ7XBR+xb639uNWKeRB+EVr/f4/Qtg34s5Spl+vTMQ 8HPNeMHwhnPVEsnFEfNo+OrqsJPkU3zx -----END CERTIFICATE-----Generated at Wed Dec 24 10:31:14 2025 by rpki-client