This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft File: _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json) Hash identifier: iYw0PqQldfMcq/V8gKBXJOFGR3dqGNFsTs5Xfs6XVnQ= Subject key identifier: 73:8F:BB:69:69:26:E3:F4:67:D0:12:FE:A3:34:67:AC:A6:CE:09:B0 Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 06B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft Manifest number: 0684 Signing time: Thu 18 Dec 2025 22:08:18 +0000 Manifest this update: Thu 18 Dec 2025 22:08:17 +0000 Manifest next update: Thu 25 Dec 2025 22:08:17 +0000 Files and hashes: 1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: vutCIG2iYEw+XtjAONhJvTMWvW77tynEpwZ1Cuu5iRI=) 2: 617AEF02C0A211F0834F0B2EC4F9AE02.roa (hash: e2cBgK3GRmfDjSm1Qqg4IoisAWAPLTjuVCxKZ4c2zQ4=) 3: 845606CEC0A211F08C07402EC4F9AE02.roa (hash: 60O5q/M3Zhbupf4irny02ti/wPSXEWKTgiVbupEbwmY=) 4: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: CKUqvOaMRoHUuvk0O3ZRuqOU8HxzjagSOpCtfnM7DSk=) 5: 1F642722FE4811EF9909DE6BC4F9AE02.roa (hash: 50SJ1VD5Mg9u7/s+ykx+b/EGgkeu1R+I/i5QtPiDi1Q=) 6: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: lXdiATosqgnGw9iwMqgeyMFFlsqTM6dHLhkV++SdnXI=) 7: A19BECB47DC011F0907B9458C4F9AE02.roa (hash: PV6jY777/SNCb3xfvV4u3m3ixy1j9fHX09H2Nm4Vk4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: Dec 18 22:08:17 2025 GMT Not After : Dec 25 22:08:17 2025 GMT Subject: CN=69447b52-77f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:18:1b:77:18:d2:ca:d1:10:33:ee:46:2c:45: 72:d9:7b:a0:0b:77:6c:8a:b6:c1:15:49:8c:ad:16: f0:15:a6:a3:f9:12:e8:45:c1:7a:ac:62:16:51:4b: a3:00:66:55:82:62:4c:1b:60:f1:03:df:f3:fc:6a: 43:34:55:ae:42:d1:e8:6a:57:33:39:f6:06:53:f0: be:2c:af:96:95:8a:72:30:50:7d:84:a4:24:ee:a6: d3:bc:43:51:ae:53:5b:79:8e:de:b8:2a:c8:44:f2: e6:87:b7:63:db:7d:69:42:29:92:4c:91:42:b5:64: ae:a1:77:ea:3c:96:09:8d:ac:6e:40:df:75:0b:e0: 44:0b:59:95:e2:ba:ca:99:ed:ba:19:fc:7c:87:e9: b7:e6:6c:73:c2:77:07:87:1e:f2:05:20:57:65:ea: 37:b3:df:3c:b2:5d:0a:60:30:ea:21:64:ad:0d:e4: f9:85:e1:6e:de:be:68:08:c5:b6:77:38:a2:b2:9a: 29:62:79:fd:62:5e:ba:76:51:40:a9:33:2d:8c:30: 06:ff:47:17:ad:52:2a:f8:c1:d3:ba:f0:77:b2:59: 42:f1:94:8b:f2:10:a8:ce:c6:96:eb:cf:a3:58:93: 8a:78:c5:3f:40:e4:78:ab:c3:44:65:70:10:d5:46: a8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8F:BB:69:69:26:E3:F4:67:D0:12:FE:A3:34:67:AC:A6:CE:09:B0 X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:41:c9:c9:dc:84:1d:e3:e1:8f:1b:d7:0a:9a:d1:90:79:81: 69:07:da:a6:72:6e:a0:c1:f3:d2:32:c9:69:e5:75:66:c0:81: bb:03:5c:5f:c1:f2:c1:5c:1b:18:e5:9c:27:fa:82:f3:0f:0e: a4:ad:c0:06:f8:21:48:8b:8c:22:4e:13:ce:6d:d5:05:71:7e: bb:9c:ba:3f:79:27:85:f7:6d:58:d1:8c:81:7f:5e:cc:0c:5b: cb:66:ac:2d:7b:5c:7e:c8:f9:95:a9:aa:96:0e:8f:34:09:7e: e8:fc:a8:a5:b7:cd:c9:ee:d6:1c:0e:8b:1e:0f:20:d9:15:38: 88:a6:95:13:ef:fe:8d:2e:61:7e:61:2c:e7:a1:95:e5:b8:56: 47:5a:ce:e9:4f:ed:57:89:97:ba:94:8f:9e:02:bc:72:8a:3a: bc:af:81:9c:a3:e4:63:65:9c:f8:3c:a5:d4:f0:31:e7:c0:e1: 78:80:a5:f8:1a:c4:fe:5d:32:7f:d1:59:ed:d0:34:80:eb:20: ee:c9:b0:ac:e4:82:20:2a:15:bd:01:78:04:fc:7e:b6:57:56: d6:b1:98:65:f8:87:c8:70:94:44:cb:42:d9:b5:c3:cf:e8:39: 27:e7:d8:4a:35:1b:2c:bd:89:61:6a:44:17:e1:ea:48:fa:a8: 34:89:46:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjUxMjE4MjIwODE3WhcNMjUxMjI1MjIwODE3WjAYMRYwFAYD VQQDDA02OTQ0N2I1Mi03N2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhgbdxjSytEQM+5GLEVy2XugC3dsirbBFUmMrRbwFaaj+RLoRcF6rGIWUUuj AGZVgmJMG2DxA9/z/GpDNFWuQtHoalczOfYGU/C+LK+WlYpyMFB9hKQk7qbTvENR rlNbeY7euCrIRPLmh7dj231pQimSTJFCtWSuoXfqPJYJjaxuQN91C+BEC1mV4rrK me26Gfx8h+m35mxzwncHhx7yBSBXZeo3s988sl0KYDDqIWStDeT5heFu3r5oCMW2 dziispopYnn9Yl66dlFAqTMtjDAG/0cXrVIq+MHTuvB3sllC8ZSL8hCozsaW68+j WJOKeMU/QOR4q8NEZXAQ1UaoKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOPu2lp JuP0Z9AS/qM0Z6ymzgmwMB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDZCMC8zMkU5ODczQ0JGQzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpM TkIyY3Q3YkFaWnZfcXN5Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChQcnJ3IQd4+GPG9cKmtGQeYFpB9qmcm6gwfPSMslp5XVmwIG7A1xf wfLBXBsY5Zwn+oLzDw6krcAG+CFIi4wiThPObdUFcX67nLo/eSeF921Y0YyBf17M DFvLZqwte1x+yPmVqaqWDo80CX7o/Kilt83J7tYcDoseDyDZFTiIppUT7/6NLmF+ YSznoZXluFZHWs7pT+1XiZe6lI+eArxyijq8r4Gco+RjZZz4PKXU8DHnwOF4gKX4 GsT+XTJ/0Vnt0DSA6yDuybCs5IIgKhW9AXgE/H62V1bWsZhl+IfIcJREy0LZtcPP 6Dkn59hKNRssvYlhakQX4epI+qg0iUaX -----END CERTIFICATE-----Generated at Sat Dec 20 08:01:04 2025 by rpki-client