This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft File: 2en59z7k9bHN8XYsLfODKVCja30.mft (raw, json) Hash identifier: ZotDFEU2jO6HiYEXXNqNBzCn1RKV3IrJ4aXOGbQlzWA= Subject key identifier: F3:B3:BB:30:66:CF:A4:72:1B:F7:11:14:6C:77:4B:04:67:A5:F0:67 Authority key identifier: D9:E9:F9:F7:3E:E4:F5:B1:CD:F1:76:2C:2D:F3:83:29:50:A3:6B:7D Certificate issuer: /CN=A91AACB2/serialNumber=D9E9F9F73EE4F5B1CDF1762C2DF3832950A36B7D Certificate serial: 34F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft Manifest number: 34F2 Signing time: Thu 18 Dec 2025 14:54:49 +0000 Manifest this update: Thu 18 Dec 2025 14:54:49 +0000 Manifest next update: Thu 25 Dec 2025 14:54:49 +0000 Files and hashes: 1: 2en59z7k9bHN8XYsLfODKVCja30.crl (hash: L06lzWeAcQ3qiXejuXce7HVxocq5puyLOLOlxrz2Wuo=) 2: 76B5C744B45E11EAB71DF94AC4F9AE02.roa (hash: RzsyMG8grNRl/TU/HKZlXJ7ZiLnl0fu14E8Z0lJpa0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.crl rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13560 (0x34f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AACB2, serialNumber=D9E9F9F73EE4F5B1CDF1762C2DF3832950A36B7D Validity Not Before: Dec 18 14:54:49 2025 GMT Not After : Dec 25 14:54:49 2025 GMT Subject: CN=694415b9-b630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c9:b2:e7:cf:27:53:19:de:33:04:4d:31:17: 9d:56:d9:0b:23:b6:fc:c0:25:f9:00:21:86:05:64: e7:af:02:1e:06:a0:d0:e3:85:d8:8d:b8:11:47:78: a3:d6:69:a9:6e:bb:2f:5b:dd:6e:35:5b:f0:65:f3: e5:96:90:04:64:1c:a2:49:44:2e:70:3a:be:76:f7: f9:da:b9:36:fd:e4:3d:63:6d:91:ed:f5:5d:77:24: 26:e8:4d:31:33:d5:6c:8f:b6:54:f4:d7:ae:c0:15: 5d:ed:a5:b7:ea:a8:ad:64:35:9f:79:54:e0:70:1e: fa:cf:16:e8:1b:88:47:83:ac:9d:24:4f:f7:43:ed: 10:f4:83:ec:a2:04:35:63:d3:9a:6e:52:c3:e6:c4: a2:a8:7f:d4:89:ac:b9:a7:7d:16:d5:e2:65:d4:4f: ae:9d:6d:2a:43:06:b7:c8:50:c7:6b:d8:5f:63:47: 20:7c:ed:86:65:30:3d:a1:7e:e9:e2:8e:1d:80:47: 3b:31:2e:0a:ae:1e:9e:ff:31:a0:99:50:de:3c:10: b0:4f:45:7d:b5:46:58:b4:46:b6:ae:75:7e:d9:76: 5e:b1:f6:09:6f:78:e6:53:f1:71:7b:3b:b0:e2:f5: 01:5e:b6:e4:a1:f9:fa:57:c7:b8:71:ee:87:42:61: 02:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B3:BB:30:66:CF:A4:72:1B:F7:11:14:6C:77:4B:04:67:A5:F0:67 X509v3 Authority Key Identifier: keyid:D9:E9:F9:F7:3E:E4:F5:B1:CD:F1:76:2C:2D:F3:83:29:50:A3:6B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:cb:be:39:63:bd:b2:b0:51:ae:25:cf:10:7d:d0:a3:8a:60: e7:f3:eb:1a:07:99:3a:c6:e5:2a:c2:26:74:7d:35:20:de:e6: 0e:5e:d1:20:de:07:34:e4:41:67:b0:c7:6a:e1:6e:fb:94:08: 77:ae:02:5e:ef:3d:fe:5b:15:b3:54:31:4c:78:45:80:a1:16: 23:d6:9d:8f:f5:19:89:d7:08:81:d9:b4:a2:01:f8:6d:9b:a8: 4e:99:ce:7b:0c:88:01:1e:82:7c:0c:05:20:7e:1c:93:6e:ab: 95:42:aa:cb:84:99:97:e8:f5:8b:50:db:86:9c:68:84:b6:5f: a6:0e:dd:bf:ba:ad:15:a1:ea:c7:98:91:42:93:03:a6:7b:9f: 32:39:e2:1a:36:b3:98:fb:f1:53:d4:05:f7:d0:46:ca:60:09: 1f:9b:43:6d:53:42:68:01:f2:b6:ea:33:d9:48:b9:1c:8c:1d: 79:f9:53:a8:eb:71:db:74:44:dd:e7:26:9f:56:7e:da:4b:b9: 2d:8c:b6:8f:20:ae:db:54:80:89:87:c3:50:2c:76:cf:bc:34: d6:76:fc:71:6b:5e:1d:88:8f:0d:eb:52:82:4e:43:af:bf:d7: f0:06:25:9c:95:2f:c4:87:d6:fb:41:8b:81:09:01:b1:2b:5c: 0e:ae:b7:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFDQjIxMTAvBgNVBAUTKEQ5RTlGOUY3M0VFNEY1QjFDREYxNzYyQzJERjM4MzI5 NTBBMzZCN0QwHhcNMjUxMjE4MTQ1NDQ5WhcNMjUxMjI1MTQ1NDQ5WjAYMRYwFAYD VQQDDA02OTQ0MTViOS1iNjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8my588nUxneMwRNMRedVtkLI7b8wCX5ACGGBWTnrwIeBqDQ44XYjbgRR3ij 1mmpbrsvW91uNVvwZfPllpAEZByiSUQucDq+dvf52rk2/eQ9Y22R7fVddyQm6E0x M9Vsj7ZU9NeuwBVd7aW36qitZDWfeVTgcB76zxboG4hHg6ydJE/3Q+0Q9IPsogQ1 Y9OablLD5sSiqH/Uiay5p30W1eJl1E+unW0qQwa3yFDHa9hfY0cgfO2GZTA9oX7p 4o4dgEc7MS4Krh6e/zGgmVDePBCwT0V9tUZYtEa2rnV+2XZesfYJb3jmU/Fxezuw 4vUBXrbkofn6V8e4ce6HQmECawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOzuzBm z6RyG/cRFGx3SwRnpfBnMB8GA1UdIwQYMBaAFNnp+fc+5PWxzfF2LC3zgylQo2t9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUNCMi8zN0Q1QTNERTFE OUMxMUUyODkyRThCOEEwOEIwMkNEMi8yZW41OXo3azliSE44WFlzTGZPREtWQ2ph MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJlbjU5ejdrOWJITjhYWXNMZk9ES1ZDamEzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUNCMi8zN0Q1QTNERTFEOUMxMUUyODkyRThCOEEwOEIwMkNEMi8yZW41OXo3azli SE44WFlzTGZPREtWQ2phMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6y745Y72ysFGuJc8QfdCjimDn8+saB5k6xuUqwiZ0fTUg3uYOXtEg 3gc05EFnsMdq4W77lAh3rgJe7z3+WxWzVDFMeEWAoRYj1p2P9RmJ1wiB2bSiAfht m6hOmc57DIgBHoJ8DAUgfhyTbquVQqrLhJmX6PWLUNuGnGiEtl+mDt2/uq0VoerH mJFCkwOme58yOeIaNrOY+/FT1AX30EbKYAkfm0NtU0JoAfK26jPZSLkcjB15+VOo 63HbdETd5yafVn7aS7ktjLaPIK7bVICJh8NQLHbPvDTWdvxxa14diI8N61KCTkOv v9fwBiWclS/Eh9b7QYuBCQGxK1wOrrcX -----END CERTIFICATE-----Generated at Sat Dec 20 08:23:11 2025 by rpki-client