This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft File: 2gNU-zgfRSHBCxY-y9IqCD-3omw.mft (raw, json) Hash identifier: acx1dmlaJTHfVHIifJKf/nG1CYQTa9+DnUAvDb6DMNA= Subject key identifier: CB:A6:05:B8:18:51:98:96:87:A4:F3:09:DB:19:2E:01:D4:A8:F5:16 Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C Certificate issuer: /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Certificate serial: 1657 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft Manifest number: 1646 Signing time: Wed 31 Dec 2025 16:31:57 +0000 Manifest this update: Wed 31 Dec 2025 16:31:57 +0000 Manifest next update: Wed 07 Jan 2026 16:31:57 +0000 Files and hashes: 1: 2gNU-zgfRSHBCxY-y9IqCD-3omw.crl (hash: WcmveUU9kmE0GVDLNdonVwsZA8EdPGc2C42QHnyzaUc=) 2: 7F3ED5DE9C4411ECBD85CE4FC4F9AE02.roa (hash: IzneJg8uANhMNifeTA7mpjTNJJeW/3cdEs9nqqZnnZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 16:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5719 (0x1657) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2CDA, serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Validity Not Before: Dec 31 16:31:57 2025 GMT Not After : Jan 7 16:31:57 2026 GMT Subject: CN=69554ffd-90b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ea:21:7a:e2:c3:0e:1a:84:c5:9d:69:b6:3e: 4b:de:82:eb:ce:4a:55:d2:f6:85:60:3f:92:cc:8d: 09:b6:03:71:b3:76:cf:6f:d3:e0:02:b8:c6:a5:42: bd:a3:d3:22:8e:88:c2:95:d3:c3:c6:08:cc:0b:f5: ac:ec:e3:90:80:73:67:c3:c5:93:68:56:7c:dd:1a: 2d:1d:57:bf:73:ab:86:e9:10:8e:91:56:d2:a2:02: 0d:9e:d4:77:6e:0b:cd:8c:0b:80:bb:32:6a:ef:68: 6c:bb:5f:59:12:15:f1:02:2e:f2:98:12:8d:c0:86: d5:19:8f:c2:3e:5d:83:e4:7e:92:53:03:e5:21:ae: 92:a8:10:f4:3c:4e:9e:d4:94:18:81:d8:38:db:03: f2:ef:4c:68:f1:a2:5e:f2:48:07:49:4d:72:52:cf: c1:de:b4:9a:f0:e9:c3:d1:6a:01:7d:b5:26:3e:46: e5:c0:6c:aa:75:34:f3:ba:3b:98:d4:5b:93:06:6c: a9:5f:be:9a:62:af:9b:50:07:87:3a:79:17:ab:59: ec:17:f5:f4:0e:88:47:23:96:3d:62:51:5b:4c:94: 50:81:a3:a1:3d:5f:30:aa:23:a8:b6:7d:3f:f5:75: 05:5e:58:30:fe:51:a7:48:e4:2e:8b:9f:75:23:fb: 7a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A6:05:B8:18:51:98:96:87:A4:F3:09:DB:19:2E:01:D4:A8:F5:16 X509v3 Authority Key Identifier: keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:da:06:c0:2b:a7:98:a1:91:8b:7b:88:2c:0f:25:57:3c:92: 26:4b:6d:06:fd:5e:ae:55:71:2d:7b:66:2b:2d:ce:0a:a4:e2: a3:9e:88:e4:d9:67:ae:4f:e6:01:3d:9c:32:67:0a:e6:f7:4d: 32:a5:77:7a:d9:c0:5e:47:0b:77:6c:2f:6a:a5:aa:ea:d7:4f: e8:d5:8e:7a:a6:63:f5:cf:3a:bc:bd:02:ca:86:51:cb:8d:10: 56:b9:50:9a:c4:70:08:e2:f2:de:bc:29:a3:77:89:87:42:d8: 01:3c:1f:18:0c:82:05:41:77:8e:8f:4c:a1:44:53:9d:69:3d: 0d:f0:cd:5e:8d:8f:7d:c2:57:52:4a:81:4d:c5:d8:67:b8:3c: e1:ee:05:9e:73:0b:cc:2a:f6:15:6e:c5:c8:d7:f5:49:19:d1: 7e:34:ba:37:4d:7e:38:60:89:cb:d1:41:bf:13:45:75:fb:b7: 6f:ab:01:72:34:4a:d8:5c:62:83:65:f2:4f:47:8a:aa:6f:e5: a8:2e:d9:f5:eb:98:0a:ab:1f:40:ca:62:81:d9:85:0a:3b:84: 48:2d:ce:0e:c9:96:ac:6b:40:85:d7:35:49:4e:98:72:99:03: 3b:a1:77:75:c3:da:bd:6d:c7:74:57:8f:da:64:a1:7b:e0:6f: 46:3c:0b:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDREExMTAvBgNVBAUTKERBMDM1NEZCMzgxRjQ1MjFDMTBCMTYzRUNCRDIyQTA4 M0ZCN0EyNkMwHhcNMjUxMjMxMTYzMTU3WhcNMjYwMTA3MTYzMTU3WjAYMRYwFAYD VQQDDA02OTU1NGZmZC05MGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5OoheuLDDhqExZ1ptj5L3oLrzkpV0vaFYD+SzI0JtgNxs3bPb9PgArjGpUK9 o9MijojCldPDxgjMC/Ws7OOQgHNnw8WTaFZ83RotHVe/c6uG6RCOkVbSogINntR3 bgvNjAuAuzJq72hsu19ZEhXxAi7ymBKNwIbVGY/CPl2D5H6SUwPlIa6SqBD0PE6e 1JQYgdg42wPy70xo8aJe8kgHSU1yUs/B3rSa8OnD0WoBfbUmPkblwGyqdTTzujuY 1FuTBmypX76aYq+bUAeHOnkXq1nsF/X0DohHI5Y9YlFbTJRQgaOhPV8wqiOotn0/ 9XUFXlgw/lGnSOQui591I/t6owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMumBbgY UZiWh6TzCdsZLgHUqPUWMB8GA1UdIwQYMBaAFNoDVPs4H0UhwQsWPsvSKgg/t6Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkNEQS9GNEUyQkFCODI1 QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJTSEJDeFkteTlJcUNELTNv bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnTlUtemdmUlNIQkN4WS15OUlxQ0QtM29tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkNEQS9GNEUyQkFCODI1QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJT SEJDeFkteTlJcUNELTNvbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu2gbAK6eYoZGLe4gsDyVXPJImS20G/V6uVXEte2YrLc4KpOKjnojk 2WeuT+YBPZwyZwrm900ypXd62cBeRwt3bC9qparq10/o1Y56pmP1zzq8vQLKhlHL jRBWuVCaxHAI4vLevCmjd4mHQtgBPB8YDIIFQXeOj0yhRFOdaT0N8M1ejY99wldS SoFNxdhnuDzh7gWecwvMKvYVbsXI1/VJGdF+NLo3TX44YInL0UG/E0V1+7dvqwFy NErYXGKDZfJPR4qqb+WoLtn165gKqx9AymKB2YUKO4RILc4OyZasa0CF1zVJTphy mQM7oXd1w9q9bcd0V4/aZKF74G9GPAtP -----END CERTIFICATE-----Generated at Thu Jan 1 12:32:09 2026 by rpki-client