This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft File: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft (raw, json) Hash identifier: hBTGwIYhZT0qj+xUPH6Lr3069WVEOlSvCeIZ8QtxQJY= Subject key identifier: 2C:98:0B:FE:AF:98:64:8E:28:10:2C:6B:CE:10:42:44:AD:FF:54:43 Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1 Certificate issuer: /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft Manifest number: 76 Signing time: Mon 29 Dec 2025 05:51:30 +0000 Manifest this update: Mon 29 Dec 2025 05:51:30 +0000 Manifest next update: Mon 05 Jan 2026 05:51:30 +0000 Files and hashes: 1: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl (hash: m8nvgB1d3PMsAsTRkasaaQ1OERoiAM/lAP6D4sBSaGI=) 2: 7C0B5320D61411F0877B8D3FC4F9AE02.roa (hash: sEqEu4ZHkgzDYvWJDII6WZOgnySzMlBVpuOMflPaWms=) 3: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (hash: n8XUmr5KjS13+kjcxi8G3iN9bzXMPfNq3EcEqckzzBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 05:51:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1 Validity Not Before: Dec 29 05:51:30 2025 GMT Not After : Jan 5 05:51:30 2026 GMT Subject: CN=695216e2-e802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b1:c4:e2:6b:08:d0:bf:2c:95:83:d9:f7:a9: 46:78:96:ef:dc:02:3a:d3:81:d6:94:5e:70:98:4a: 8d:d7:42:2a:59:dc:f8:5c:03:0d:bb:87:c0:b6:df: c0:6a:c6:5f:dd:c2:ce:ec:a9:8c:2e:ab:f7:15:b2: 03:96:ed:d1:1e:27:e5:36:b7:44:d0:8e:d8:c2:0f: 21:84:5b:f7:e0:f4:17:db:62:43:2d:7c:70:08:24: 28:fc:4a:a9:3c:fb:f4:30:62:be:32:b4:b0:83:97: 2a:13:f8:c4:a1:14:2b:ad:14:7d:15:66:72:3e:8a: 6c:c2:e9:b9:a9:eb:41:32:d3:12:f8:46:84:e3:1c: d7:0f:c5:94:f2:49:6a:1f:51:0a:58:32:5e:8d:da: 9b:05:aa:84:05:dc:68:f2:ba:15:9b:79:06:81:85: c7:6f:b0:f2:5e:df:4f:fc:b1:c0:19:26:71:85:ae: ee:83:6e:a4:8f:42:1b:54:92:7c:21:52:6c:a4:1f: 07:2f:60:c5:6b:ec:32:0a:e5:49:a5:0f:ca:e2:0e: 16:de:fc:45:e6:5d:ff:67:e8:b7:16:18:06:d6:ce: 91:79:ca:ca:f2:9c:5a:e5:c9:46:f2:9f:a8:ae:d8: 30:35:3a:e0:d2:a2:57:0d:84:72:86:5a:3a:ac:33: b1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:98:0B:FE:AF:98:64:8E:28:10:2C:6B:CE:10:42:44:AD:FF:54:43 X509v3 Authority Key Identifier: keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:3c:08:8f:ee:29:63:fa:77:c1:ff:09:80:ef:51:25:e4:ef: 36:f4:15:28:a9:c8:c5:aa:36:5f:c6:da:29:2e:bd:54:c1:c2: 9c:81:e6:e3:45:a7:46:b8:5b:41:60:d0:cf:c2:e6:04:43:40: c5:a0:f1:94:f6:c0:15:7f:b1:af:ad:60:0e:b8:8d:fa:a4:77: a7:8e:ec:03:64:e9:ea:60:07:b5:44:bd:fd:aa:ae:d9:23:6c: 42:18:bf:ea:e4:d4:3c:b7:b3:e2:54:1c:5c:e5:99:6a:14:74: 66:6f:21:48:f1:ca:7d:bc:32:d5:0f:94:f0:92:cf:72:a0:26: 73:e0:32:c4:b7:70:2e:94:18:68:eb:c3:da:54:b6:fe:87:fd: 57:a9:72:f4:cb:59:5f:af:5b:84:0b:4a:34:29:f9:5a:3b:7f: b3:4c:ba:aa:ac:2e:bf:1d:e1:04:99:e7:b9:1f:aa:b8:14:ae: a7:da:56:75:b4:00:a9:c8:0f:4d:46:2f:d2:3e:ba:ad:67:2f: 4b:59:59:c0:2c:5b:08:b4:14:ae:04:f7:d4:65:fe:65:2d:db: 80:0e:5c:8a:b9:19:03:9c:28:6a:2f:15:8e:2d:27:52:f8:92: e2:45:a4:8f:ca:3a:08:c9:1a:eb:03:31:0b:a4:4f:2e:71:d1: ae:e8:84:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUVEMjExMC8GA1UEBRMoRDkwNEQ1NTJDMEVGMzJGMjQ5QUJBNDU5N0JEODRBMTVF RTU1NTVDMTAeFw0yNTEyMjkwNTUxMzBaFw0yNjAxMDUwNTUxMzBaMBgxFjAUBgNV BAMMDTY5NTIxNmUyLWU4MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChscTiawjQvyyVg9n3qUZ4lu/cAjrTgdaUXnCYSo3XQipZ3PhcAw27h8C238Bq xl/dws7sqYwuq/cVsgOW7dEeJ+U2t0TQjtjCDyGEW/fg9BfbYkMtfHAIJCj8Sqk8 +/QwYr4ytLCDlyoT+MShFCutFH0VZnI+imzC6bmp60Ey0xL4RoTjHNcPxZTySWof UQpYMl6N2psFqoQF3GjyuhWbeQaBhcdvsPJe30/8scAZJnGFru6DbqSPQhtUknwh UmykHwcvYMVr7DIK5UmlD8riDhbe/EXmXf9n6LcWGAbWzpF5ysrynFrlyUbyn6iu 2DA1OuDSolcNhHKGWjqsM7FXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULJgL/q+Y ZI4oECxrzhBCRK3/VEMwHwYDVR0jBBgwFoAU2QTVUsDvMvJJq6RZe9hKFe5VVcEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1RUQyL0YyNDVCMkQ2MzEx QjExRjBBMkY1MTE2MEM0RjlBRTAyLzJRVFZVc0R2TXZKSnE2UlplOWhLRmU1VlZj RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMlFUVlVzRHZNdkpKcTZSWmU5aEtGZTVWVmNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 RUQyL0YyNDVCMkQ2MzExQjExRjBBMkY1MTE2MEM0RjlBRTAyLzJRVFZVc0R2TXZK SnE2UlplOWhLRmU1VlZjRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABA8CI/uKWP6d8H/CYDvUSXk7zb0FSipyMWqNl/G2ikuvVTBwpyB5uNF p0a4W0Fg0M/C5gRDQMWg8ZT2wBV/sa+tYA64jfqkd6eO7ANk6epgB7VEvf2qrtkj bEIYv+rk1Dy3s+JUHFzlmWoUdGZvIUjxyn28MtUPlPCSz3KgJnPgMsS3cC6UGGjr w9pUtv6H/VepcvTLWV+vW4QLSjQp+Vo7f7NMuqqsLr8d4QSZ57kfqrgUrqfaVnW0 AKnID01GL9I+uq1nL0tZWcAsWwi0FK4E99Rl/mUt24AOXIq5GQOcKGovFY4tJ1L4 kuJFpI/KOgjJGusDMQukTy5x0a7ohDU= -----END CERTIFICATE-----Generated at Tue Dec 30 00:24:54 2025 by rpki-client