This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft File: rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft (raw, json) Hash identifier: 7CPgoZ8QFXooc412KH5Kx+9vUujMo2tw3WzAcqFT7Y4= Subject key identifier: F2:C1:59:B4:4F:9D:79:7C:26:E5:81:B9:D7:4D:03:66:C9:D9:32:D6 Authority key identifier: AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 Certificate issuer: /CN=A91B97DB/serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Certificate serial: 0C81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft Manifest number: 0C78 Signing time: Fri 26 Dec 2025 18:07:01 +0000 Manifest this update: Fri 26 Dec 2025 18:07:00 +0000 Manifest next update: Fri 02 Jan 2026 18:07:00 +0000 Files and hashes: 1: rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl (hash: 1JfmenXPtAbkrqHFwtJEe5DvLbjmKWoV/TdVw9WXjLA=) 2: 5A0FAE220F7011EAB8E21167C4F9AE02.roa (hash: TQZLfyrNNm4rH/joKuV/c0LtGb3rqWKsaid6lV6en3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 18:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3201 (0xc81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B97DB, serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Validity Not Before: Dec 26 18:07:00 2025 GMT Not After : Jan 2 18:07:00 2026 GMT Subject: CN=694ecec4-9814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2e:1b:17:75:f7:f5:a7:e5:6d:fa:30:73:20: ac:64:67:a7:11:e3:7b:87:0b:80:5e:bb:cd:33:72: 83:a2:7e:53:c2:4f:95:37:52:db:e6:8b:a7:e9:dd: f9:30:96:a1:63:06:f0:17:0c:91:c2:a1:cb:09:62: b2:59:2c:c6:0f:be:c5:5e:63:24:5c:e0:17:3f:d5: 7d:4c:ff:17:90:19:f7:27:9d:89:62:27:a9:0c:72: 43:b7:95:f9:c1:2a:8e:c8:bc:71:6d:42:3e:8d:59: a8:46:f9:9c:82:75:0f:c5:9d:fd:be:56:30:b0:b4: 13:fa:19:0d:34:0a:08:c6:b0:31:c6:3c:d4:d3:12: 87:e4:93:29:5e:9f:51:96:00:7a:82:09:fc:cf:4e: 85:26:b5:b3:a5:ad:a0:bc:c9:d6:87:35:27:84:56: fe:6f:ca:a9:74:65:2e:5d:83:0e:f8:98:b9:a2:e7: df:98:d9:69:4e:2e:78:ea:44:c9:ac:ed:83:7e:cb: 96:3e:f3:80:ad:64:ef:e9:c8:d4:80:2c:0a:f1:38: 2a:2e:90:d6:35:b0:b3:37:69:5e:45:51:06:b2:0b: 13:80:a9:f0:75:3f:08:6c:aa:0b:50:46:87:d4:29: 6c:31:52:48:b1:97:a6:30:5f:7b:e3:6d:55:32:6a: 9a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C1:59:B4:4F:9D:79:7C:26:E5:81:B9:D7:4D:03:66:C9:D9:32:D6 X509v3 Authority Key Identifier: keyid:AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:d9:66:c7:21:24:9d:e9:81:0b:04:66:8f:53:85:2c:c9:8b: 84:ef:4b:bc:a9:0c:2e:f9:4b:36:4b:40:0a:03:16:73:3c:2d: 25:30:be:2f:b8:4d:12:7c:fb:b7:87:3e:7e:30:a0:2a:4a:d7: 4e:35:26:15:d6:af:43:dc:4b:03:62:c5:1e:b7:8a:d6:87:69: 1c:a0:cd:74:7b:00:00:8a:f0:d3:ff:07:32:bc:dd:ca:64:83: ad:5b:57:c4:c2:05:97:e5:27:02:a7:27:b0:ed:00:67:5d:c3: f8:cc:1a:91:50:03:59:87:84:79:9d:85:fc:ad:fa:65:3c:95: b1:5b:db:0f:82:67:74:9d:e2:20:58:44:78:4f:b8:c7:28:44: 97:b0:72:94:78:2c:7f:66:00:a6:99:07:e0:9c:e3:9f:34:27: 80:b3:27:1b:78:f2:18:9d:44:cc:30:78:dd:b7:ed:e0:2e:fc: 0d:75:35:a0:bb:a6:57:24:6c:be:96:a8:95:d7:a2:56:34:ce: 93:27:3e:ab:62:09:1f:83:ff:cd:4a:b6:34:d2:fd:12:df:9c: e4:ce:10:bc:ba:6d:d2:d9:5c:c7:17:90:bf:23:a6:0d:89:c9: c2:f1:f8:19:b2:a8:b8:98:a9:33:73:99:9b:5f:71:65:2d:dc: c9:34:37:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk3REIxMTAvBgNVBAUTKEFEM0Q4NzAzODUwQjEyNzFFOEYzMUFFMDNFM0NDOUFD NDY2MEQ5NDIwHhcNMjUxMjI2MTgwNzAwWhcNMjYwMTAyMTgwNzAwWjAYMRYwFAYD VQQDDA02OTRlY2VjNC05ODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAti4bF3X39aflbfowcyCsZGenEeN7hwuAXrvNM3KDon5Twk+VN1Lb5oun6d35 MJahYwbwFwyRwqHLCWKyWSzGD77FXmMkXOAXP9V9TP8XkBn3J52JYiepDHJDt5X5 wSqOyLxxbUI+jVmoRvmcgnUPxZ39vlYwsLQT+hkNNAoIxrAxxjzU0xKH5JMpXp9R lgB6ggn8z06FJrWzpa2gvMnWhzUnhFb+b8qpdGUuXYMO+Ji5ouffmNlpTi546kTJ rO2DfsuWPvOArWTv6cjUgCwK8TgqLpDWNbCzN2leRVEGsgsTgKnwdT8IbKoLUEaH 1ClsMVJIsZemMF97421VMmqaBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLBWbRP nXl8JuWBuddNA2bJ2TLWMB8GA1UdIwQYMBaAFK09hwOFCxJx6PMa4D48yaxGYNlC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTdEQi80RTQxMEFDRTBG NkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVuSG84eHJnUGp6SnJFWmcy VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUMkhBNFVMRW5Ibzh4cmdQanpKckVaZzJVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTdEQi80RTQxMEFDRTBGNkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVu SG84eHJnUGp6SnJFWmcyVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo2WbHISSd6YELBGaPU4UsyYuE70u8qQwu+Us2S0AKAxZzPC0lML4v uE0SfPu3hz5+MKAqStdONSYV1q9D3EsDYsUet4rWh2kcoM10ewAAivDT/wcyvN3K ZIOtW1fEwgWX5ScCpyew7QBnXcP4zBqRUANZh4R5nYX8rfplPJWxW9sPgmd0neIg WER4T7jHKESXsHKUeCx/ZgCmmQfgnOOfNCeAsycbePIYnUTMMHjdt+3gLvwNdTWg u6ZXJGy+lqiV16JWNM6TJz6rYgkfg//NSrY00v0S35zkzhC8um3S2VzHF5C/I6YN icnC8fgZsqi4mKkzc5mbX3FlLdzJNDcX -----END CERTIFICATE-----Generated at Sat Dec 27 04:05:27 2025 by rpki-client