This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft File: 2gE-F4NYyzWot2XJvAkK6c8cT74.mft (raw, json) Hash identifier: 5opaVnEsp2LYnavcMlVpweCoWDgP7y6j6UKrH+IJJzs= Subject key identifier: D8:03:C6:31:38:D7:23:D2:50:91:57:9F:9F:8C:DB:F9:08:DC:65:4C Authority key identifier: DA:01:3E:17:83:58:CB:35:A8:B7:65:C9:BC:09:0A:E9:CF:1C:4F:BE Certificate issuer: /CN=A91B2C88/serialNumber=DA013E178358CB35A8B765C9BC090AE9CF1C4FBE Certificate serial: 06A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft Manifest number: 069B Signing time: Sat 20 Dec 2025 21:44:56 +0000 Manifest this update: Sat 20 Dec 2025 21:44:55 +0000 Manifest next update: Sat 27 Dec 2025 21:44:55 +0000 Files and hashes: 1: 2gE-F4NYyzWot2XJvAkK6c8cT74.crl (hash: JlPCWA+zMKmBl61JJEc51h8/RDLY4TF/sOCYB+JXIv4=) 2: 3C5E55F041A411ECA73C8C0EC4F9AE02.roa (hash: X9cvrVuJPpabRIeX9DHncrs9qYYqY20P3gqoMKcfrPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.crl rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1700 (0x6a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C88, serialNumber=DA013E178358CB35A8B765C9BC090AE9CF1C4FBE Validity Not Before: Dec 20 21:44:55 2025 GMT Not After : Dec 27 21:44:55 2025 GMT Subject: CN=694718d7-3db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9d:52:c2:9a:ba:4b:35:7a:36:c8:09:4d:03: e9:33:e7:3b:09:24:dd:aa:44:7f:4a:56:70:6e:eb: 98:b7:bc:d7:b4:97:12:85:09:58:e2:06:76:c3:f2: 1a:08:25:e4:f3:36:68:06:bb:a4:6a:44:47:ac:f6: 14:27:50:2d:34:d1:df:53:59:e4:24:8e:e8:72:23: 59:34:66:75:b0:bc:6d:31:5b:fd:e9:00:0a:77:c4: f1:eb:8f:1d:20:b3:a7:79:d3:0b:af:d4:ab:7c:30: 8f:1d:b5:83:d5:22:e8:8d:da:c5:df:dd:db:4e:7b: 43:68:8e:c6:24:2f:1e:96:04:c1:0a:85:ae:f9:50: ec:c1:6f:fc:60:72:a3:4d:ad:42:cc:1f:fb:7c:74: 7d:2a:ca:ef:53:ec:24:09:9a:5f:49:8a:6c:82:e4: 5e:63:47:5e:1e:14:09:5b:33:1f:0d:14:fa:82:a8: 13:8d:53:a9:09:0b:7a:41:92:60:5e:7c:f8:d4:fa: 25:4e:05:1a:36:21:f8:cd:a6:9b:98:a7:da:ff:55: c6:7c:27:eb:84:ed:45:9d:7c:5a:cf:af:ed:55:63: 93:de:94:8c:94:7e:38:e9:b1:d0:09:1a:01:75:9f: 49:1d:73:4b:03:9c:73:ff:59:42:81:16:ce:f4:c8: 38:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:03:C6:31:38:D7:23:D2:50:91:57:9F:9F:8C:DB:F9:08:DC:65:4C X509v3 Authority Key Identifier: keyid:DA:01:3E:17:83:58:CB:35:A8:B7:65:C9:BC:09:0A:E9:CF:1C:4F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:4e:1d:27:30:a6:28:0f:7f:5d:3d:06:9d:8f:59:13:61:f8: ab:42:c8:2a:ce:6e:02:c5:28:0d:53:27:70:5c:83:8e:6a:1d: 9d:f7:fe:90:62:2e:be:59:83:a1:03:ce:67:cb:e5:f4:cf:e2: b2:18:b7:b2:19:28:21:51:06:05:a6:e8:5e:a2:87:c2:5e:74: ea:78:08:96:f2:a8:c8:cb:5e:b5:60:12:d9:83:73:5c:76:7e: f4:8c:92:b2:a3:ea:bd:a4:72:45:36:37:52:ed:dc:4e:06:be: 88:b8:de:a6:0c:01:64:d0:6a:cc:d7:32:45:ea:06:57:73:c0: 1a:67:ea:24:a4:eb:4f:38:f0:fc:7c:16:5f:74:b2:98:3c:fc: bb:bf:44:85:a6:e6:74:1f:99:73:c4:2b:60:e8:a2:a3:1e:6c: 39:73:fe:82:d7:9b:ea:f4:64:d8:35:48:02:bf:c5:84:88:2e: 74:4f:57:a0:d3:68:ce:c1:43:bb:02:39:ad:b8:3b:13:68:d7: a1:ec:7d:a4:35:f8:6b:99:8b:f4:ac:1e:b3:c6:b8:2c:9e:50: 14:22:3a:ea:fd:e1:81:4d:f4:ac:06:e4:11:7a:14:a9:a9:49: 49:9b:08:a5:a4:6c:46:f2:69:19:fb:5e:b7:1c:a0:94:a3:a8: 30:dc:fb:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDODgxMTAvBgNVBAUTKERBMDEzRTE3ODM1OENCMzVBOEI3NjVDOUJDMDkwQUU5 Q0YxQzRGQkUwHhcNMjUxMjIwMjE0NDU1WhcNMjUxMjI3MjE0NDU1WjAYMRYwFAYD VQQDDA02OTQ3MThkNy0zZGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJ1Swpq6SzV6NsgJTQPpM+c7CSTdqkR/SlZwbuuYt7zXtJcShQlY4gZ2w/Ia CCXk8zZoBrukakRHrPYUJ1AtNNHfU1nkJI7ociNZNGZ1sLxtMVv96QAKd8Tx648d ILOnedMLr9SrfDCPHbWD1SLojdrF393bTntDaI7GJC8elgTBCoWu+VDswW/8YHKj Ta1CzB/7fHR9KsrvU+wkCZpfSYpsguReY0deHhQJWzMfDRT6gqgTjVOpCQt6QZJg Xnz41PolTgUaNiH4zaabmKfa/1XGfCfrhO1FnXxaz6/tVWOT3pSMlH446bHQCRoB dZ9JHXNLA5xz/1lCgRbO9Mg4KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgDxjE4 1yPSUJFXn5+M2/kI3GVMMB8GA1UdIwQYMBaAFNoBPheDWMs1qLdlybwJCunPHE++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM4OC8yNDI5OURDQTk3 OEUxMUVCQkQ4MUIwNTVDNEY5QUUwMi8yZ0UtRjROWXl6V290MlhKdkFrSzZjOGNU NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnRS1GNE5ZeXpXb3QyWEp2QWtLNmM4Y1Q3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkM4OC8yNDI5OURDQTk3OEUxMUVCQkQ4MUIwNTVDNEY5QUUwMi8yZ0UtRjROWXl6 V290MlhKdkFrSzZjOGNUNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKTh0nMKYoD39dPQadj1kTYfirQsgqzm4CxSgNUydwXIOOah2d9/6Q Yi6+WYOhA85ny+X0z+KyGLeyGSghUQYFpuheoofCXnTqeAiW8qjIy161YBLZg3Nc dn70jJKyo+q9pHJFNjdS7dxOBr6IuN6mDAFk0GrM1zJF6gZXc8AaZ+okpOtPOPD8 fBZfdLKYPPy7v0SFpuZ0H5lzxCtg6KKjHmw5c/6C15vq9GTYNUgCv8WEiC50T1eg 02jOwUO7AjmtuDsTaNeh7H2kNfhrmYv0rB6zxrgsnlAUIjrq/eGBTfSsBuQRehSp qUlJmwilpGxG8mkZ+163HKCUo6gw3PuQ -----END CERTIFICATE-----Generated at Sun Dec 21 13:06:51 2025 by rpki-client