This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft File: _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json) Hash identifier: ZSb446N+zsVi2O6UQVD+9lzC0PNcmi+QhQqeGu0KszI= Subject key identifier: 28:A3:2F:BC:AB:E3:9E:D8:B7:D1:BE:E8:DF:DF:D5:4B:E4:0E:F5:8D Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 06B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft Manifest number: 0685 Signing time: Sat 20 Dec 2025 22:05:03 +0000 Manifest this update: Sat 20 Dec 2025 22:05:03 +0000 Manifest next update: Sat 27 Dec 2025 22:05:03 +0000 Files and hashes: 1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: 3f7gWC/kv1kILldR190onmzkenrjDae+HNcMO2XNqoU=) 2: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: lXdiATosqgnGw9iwMqgeyMFFlsqTM6dHLhkV++SdnXI=) 3: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: CKUqvOaMRoHUuvk0O3ZRuqOU8HxzjagSOpCtfnM7DSk=) 4: 1F642722FE4811EF9909DE6BC4F9AE02.roa (hash: 50SJ1VD5Mg9u7/s+ykx+b/EGgkeu1R+I/i5QtPiDi1Q=) 5: A19BECB47DC011F0907B9458C4F9AE02.roa (hash: PV6jY777/SNCb3xfvV4u3m3ixy1j9fHX09H2Nm4Vk4s=) 6: 617AEF02C0A211F0834F0B2EC4F9AE02.roa (hash: e2cBgK3GRmfDjSm1Qqg4IoisAWAPLTjuVCxKZ4c2zQ4=) 7: 845606CEC0A211F08C07402EC4F9AE02.roa (hash: 60O5q/M3Zhbupf4irny02ti/wPSXEWKTgiVbupEbwmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1719 (0x6b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: Dec 20 22:05:03 2025 GMT Not After : Dec 27 22:05:03 2025 GMT Subject: CN=69471d8f-180b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a9:54:9b:ca:58:24:8b:b6:fc:eb:42:a6:15: cc:70:55:41:51:55:cf:0b:b1:d6:5b:42:58:9f:4b: 2f:3f:23:65:73:98:a0:d9:96:89:34:2e:58:36:1b: b9:80:94:8a:a6:55:6c:4b:04:9b:27:ff:f5:5a:3e: da:10:e0:1e:dd:d0:20:70:55:29:c4:c2:45:c6:52: 50:28:a1:9a:93:e0:1b:30:68:ea:73:57:bc:6d:d8: ee:88:92:94:cb:46:61:14:55:20:a7:fb:44:c4:03: 4b:40:d0:7a:bc:68:b3:75:be:75:a6:cf:b2:c6:b3: bd:28:90:83:c9:f9:a0:0b:f0:da:9a:a0:5c:e5:55: 4f:a9:77:0a:a9:17:f2:a7:3e:22:b0:32:7b:cd:6f: 55:96:94:80:68:45:6e:f7:63:8e:46:ab:b3:96:bf: 9a:14:92:83:11:97:a8:bd:80:16:64:d9:20:8c:30: 58:10:f2:15:62:1a:96:c5:86:57:62:81:4f:be:1e: d5:38:eb:28:47:29:7d:48:95:fd:83:99:ac:e1:18: 4f:ea:8d:dc:66:a6:68:fc:f3:99:5d:86:81:a7:99: 11:45:3c:94:45:d7:b3:94:e7:92:e7:20:77:e0:21: db:c6:b0:ff:3c:5f:7e:9b:6d:84:e1:79:0a:c3:82: 9e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A3:2F:BC:AB:E3:9E:D8:B7:D1:BE:E8:DF:DF:D5:4B:E4:0E:F5:8D X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:cc:7b:df:6f:eb:52:49:72:3a:b7:14:1e:49:01:65:cb:f7: bb:be:e0:6a:87:e8:f8:df:01:04:01:20:02:9a:95:24:a0:6a: 3a:c5:90:43:0c:44:58:40:5d:47:82:33:e2:a5:70:b0:3d:48: e7:fe:d4:f5:32:8a:d1:40:53:f4:8f:f5:b8:ca:30:32:5b:4e: f7:6a:1c:a6:b4:23:93:dc:b8:24:29:0e:82:bc:d2:ba:a8:12: 38:ba:d6:ec:4c:a9:1a:1f:7a:f6:64:05:54:cf:7b:d1:d1:f0: 2b:50:a0:cf:18:ce:ef:96:16:87:4d:a4:5f:ae:e9:89:d8:52: 51:00:52:4c:13:1c:68:db:ed:f6:0e:b0:e7:40:d4:40:2a:d7: b3:29:3d:1c:5f:11:02:17:c0:53:aa:94:00:a1:b6:fc:69:48: 5d:88:0c:19:7e:cc:c6:97:6c:e7:0e:28:4c:ae:09:f8:14:bf: e9:0e:ae:0a:dc:32:e2:95:f2:18:b2:74:58:4e:ba:c9:e8:9e: d6:69:7a:b5:10:64:54:38:51:29:fc:aa:3a:00:be:6b:03:94: 29:6f:35:80:4f:2a:70:8d:ad:f3:d3:40:64:83:1d:6b:b9:9b: ac:3c:87:e0:d6:7c:ec:98:41:f8:8c:02:12:ef:5b:12:cc:d9: 28:fc:c9:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjUxMjIwMjIwNTAzWhcNMjUxMjI3MjIwNTAzWjAYMRYwFAYD VQQDDA02OTQ3MWQ4Zi0xODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKlUm8pYJIu2/OtCphXMcFVBUVXPC7HWW0JYn0svPyNlc5ig2ZaJNC5YNhu5 gJSKplVsSwSbJ//1Wj7aEOAe3dAgcFUpxMJFxlJQKKGak+AbMGjqc1e8bdjuiJKU y0ZhFFUgp/tExANLQNB6vGizdb51ps+yxrO9KJCDyfmgC/DamqBc5VVPqXcKqRfy pz4isDJ7zW9VlpSAaEVu92OORquzlr+aFJKDEZeovYAWZNkgjDBYEPIVYhqWxYZX YoFPvh7VOOsoRyl9SJX9g5ms4RhP6o3cZqZo/POZXYaBp5kRRTyURdezlOeS5yB3 4CHbxrD/PF9+m22E4XkKw4Ke7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCijL7yr 457Yt9G+6N/f1UvkDvWNMB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDZCMC8zMkU5ODczQ0JGQzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpM TkIyY3Q3YkFaWnZfcXN5Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2zHvfb+tSSXI6txQeSQFly/e7vuBqh+j43wEEASACmpUkoGo6xZBD DERYQF1HgjPipXCwPUjn/tT1MorRQFP0j/W4yjAyW073ahymtCOT3LgkKQ6CvNK6 qBI4utbsTKkaH3r2ZAVUz3vR0fArUKDPGM7vlhaHTaRfrumJ2FJRAFJMExxo2+32 DrDnQNRAKtezKT0cXxECF8BTqpQAobb8aUhdiAwZfszGl2znDihMrgn4FL/pDq4K 3DLilfIYsnRYTrrJ6J7WaXq1EGRUOFEp/Ko6AL5rA5QpbzWATypwja3z00Bkgx1r uZusPIfg1nzsmEH4jAIS71sSzNko/MnO -----END CERTIFICATE-----Generated at Sun Dec 21 00:54:02 2025 by rpki-client