This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json) Hash identifier: YvB6B5w+tKKmpl2CawuXPde87YPvweKUemDll7WQWKg= Subject key identifier: 89:D0:2E:F6:02:9C:62:E3:F8:73:92:6B:DA:26:1B:65:57:65:7D:06 Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft Manifest number: 0100 Signing time: Fri 19 Dec 2025 04:13:04 +0000 Manifest this update: Fri 19 Dec 2025 04:13:03 +0000 Manifest next update: Fri 26 Dec 2025 04:13:03 +0000 Files and hashes: 1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: XL0DAQu/Q7VTOBLi0LYvxCEauO5LpH8lSuPpDq2aitU=) 2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: yG8pJzZvCKmicDw0dwhTP12v3DvDJugGeiv6wIDOe9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Validity Not Before: Dec 19 04:13:03 2025 GMT Not After : Dec 26 04:13:03 2025 GMT Subject: CN=6944d0cf-65fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3a:da:ca:79:3e:6f:e5:30:50:3b:de:c1:2f: e0:85:fb:f7:0c:e1:a9:35:c6:68:99:f7:de:e6:a9: 7d:e5:d5:67:c1:95:f7:b6:f4:2f:f6:49:9a:96:b7: d9:d4:e2:8e:26:65:30:dc:c5:9d:1a:d0:99:d0:96: a2:0e:2b:6d:19:69:b6:8f:73:d5:d2:5f:df:df:ea: d5:33:5b:f2:79:a6:a5:9a:21:48:1c:ca:f9:cf:97: 2e:24:90:18:8e:26:ed:b5:54:2f:f1:d1:2f:98:cd: 03:bf:16:56:dd:16:29:09:68:df:3e:59:e9:c6:74: 2d:32:d1:12:2e:98:fd:10:1a:3d:18:37:0f:d9:cf: d9:2a:de:84:c8:a6:9b:dc:2c:5f:76:73:6b:8f:a5: 52:17:17:d8:3b:b0:fb:bb:da:66:b8:71:6b:e5:c8: 12:9e:87:5f:2a:7c:92:34:f9:4a:cf:99:c4:e4:fe: 8c:ee:64:de:ad:21:e6:bb:ce:2b:d4:f7:54:c8:a0: b9:f8:e6:3c:ae:cf:7c:5c:98:f2:1e:d7:63:7f:7e: 7d:92:07:3d:c9:d9:85:03:9c:af:6e:02:f4:72:a8: 46:af:3b:d3:b8:93:fd:d9:73:c1:1d:11:8c:18:56: 87:06:95:e4:78:92:af:91:5d:38:8e:5a:ee:0b:af: d5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D0:2E:F6:02:9C:62:E3:F8:73:92:6B:DA:26:1B:65:57:65:7D:06 X509v3 Authority Key Identifier: keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:7a:c1:e6:ae:88:ed:56:48:1f:c7:bf:3b:a8:c1:4d:a2:bd: 61:18:72:c4:35:47:80:12:4a:b4:44:8e:b3:f9:8d:7d:19:bd: 7f:e4:fe:25:42:4a:3b:d4:5c:2e:7d:78:61:44:26:7a:28:4e: af:2a:94:f2:40:3e:b2:e4:d6:29:fd:5e:1c:e5:11:a6:24:66: 1e:37:f8:61:56:7d:f4:22:bf:eb:7c:fe:d1:71:75:f4:db:e8: 23:26:5f:71:12:b5:0c:28:f1:5a:ca:9b:35:4d:15:03:f1:62: 57:e7:bb:44:3a:1b:c7:95:c3:5d:46:bd:17:10:a0:16:2a:c8: 3f:49:3c:01:93:8b:a1:6d:72:71:12:f7:84:68:e7:e3:53:d8: 75:ea:c8:53:4f:52:22:24:48:54:5b:2e:ce:0f:11:32:e7:2c: 31:e2:1b:a3:48:c1:4c:62:6a:27:f6:b2:43:3c:c3:7e:7d:78: 32:3b:2a:89:46:72:60:f8:fd:b1:85:40:17:d0:50:71:ab:07: 52:7d:5c:5e:b0:5a:f6:4b:13:49:7c:b0:a2:35:75:7d:fa:cf: e9:24:19:44:0a:f4:9f:52:3c:b4:f0:31:36:35:0a:79:24:c7: 8d:6e:06:5e:a0:44:b9:a7:41:4e:11:08:e6:c6:b5:6d:21:b3: cf:1f:68:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBNTcxMTAvBgNVBAUTKEQ5QzVEODJBQkQzMEZERDIwRkE5Q0FGM0QxRUQ4NjdE QjA3Njk1NkIwHhcNMjUxMjE5MDQxMzAzWhcNMjUxMjI2MDQxMzAzWjAYMRYwFAYD VQQDDA02OTQ0ZDBjZi02NWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDraynk+b+UwUDvewS/ghfv3DOGpNcZomffe5ql95dVnwZX3tvQv9kmalrfZ 1OKOJmUw3MWdGtCZ0JaiDittGWm2j3PV0l/f3+rVM1vyeaalmiFIHMr5z5cuJJAY jibttVQv8dEvmM0DvxZW3RYpCWjfPlnpxnQtMtESLpj9EBo9GDcP2c/ZKt6EyKab 3CxfdnNrj6VSFxfYO7D7u9pmuHFr5cgSnodfKnySNPlKz5nE5P6M7mTerSHmu84r 1PdUyKC5+OY8rs98XJjyHtdjf359kgc9ydmFA5yvbgL0cqhGrzvTuJP92XPBHRGM GFaHBpXkeJKvkV04jlruC6/VEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInQLvYC nGLj+HOSa9omG2VXZX0GMB8GA1UdIwQYMBaAFNnF2Cq9MP3SD6nK89Hthn2wdpVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE1Ny82RTc0ODMxMDU2 RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19kSVBxY3J6MGUyR2ZiQjJs V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJjWFlLcjB3X2RJUHFjcnowZTJHZmJCMmxXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE1Ny82RTc0ODMxMDU2RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19k SVBxY3J6MGUyR2ZiQjJsV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiesHmrojtVkgfx787qMFNor1hGHLENUeAEkq0RI6z+Y19Gb1/5P4l Qko71FwufXhhRCZ6KE6vKpTyQD6y5NYp/V4c5RGmJGYeN/hhVn30Ir/rfP7RcXX0 2+gjJl9xErUMKPFayps1TRUD8WJX57tEOhvHlcNdRr0XEKAWKsg/STwBk4uhbXJx EveEaOfjU9h16shTT1IiJEhUWy7ODxEy5ywx4hujSMFMYmon9rJDPMN+fXgyOyqJ RnJg+P2xhUAX0FBxqwdSfVxesFr2SxNJfLCiNXV9+s/pJBlECvSfUjy08DE2NQp5 JMeNbgZeoES5p0FOEQjmxrVtIbPPH2hv -----END CERTIFICATE-----Generated at Sat Dec 20 00:56:16 2025 by rpki-client