This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft File: 2cZrDkILkTQXPVU9FqoLFGt3R3M.mft (raw, json) Hash identifier: V2OfFXeb8348fdEURXTqLGnAsuFEpW+gQhusk1OYdkc= Subject key identifier: 13:90:28:E0:E2:B6:AB:F6:24:D5:87:C6:37:84:BA:EC:AD:11:09:B0 Authority key identifier: D9:C6:6B:0E:42:0B:91:34:17:3D:55:3D:16:AA:0B:14:6B:77:47:73 Certificate issuer: /CN=A91B9B0D/serialNumber=D9C66B0E420B9134173D553D16AA0B146B774773 Certificate serial: 06C2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cZrDkILkTQXPVU9FqoLFGt3R3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft Manifest number: 06BB Signing time: Sun 28 Dec 2025 21:30:05 +0000 Manifest this update: Sun 28 Dec 2025 21:30:04 +0000 Manifest next update: Sun 04 Jan 2026 21:30:04 +0000 Files and hashes: 1: 2cZrDkILkTQXPVU9FqoLFGt3R3M.crl (hash: 64CJh9reDV1GwSIrVBwtQjX7e6Nt/DxbUK74G8rRqlE=) 2: E0147FC48AB811EB92252D18C4F9AE02.roa (hash: 7XRpzi2cKsozsds402vZG1Qa9TevGqVQRP3rG1+mDlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.crl rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cZrDkILkTQXPVU9FqoLFGt3R3M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 21:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1730 (0x6c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9B0D, serialNumber=D9C66B0E420B9134173D553D16AA0B146B774773 Validity Not Before: Dec 28 21:30:04 2025 GMT Not After : Jan 4 21:30:04 2026 GMT Subject: CN=6951a15c-8803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c9:ef:25:58:dc:bf:a1:5f:ff:0c:49:0b:83: fa:00:ca:cd:35:79:f2:83:13:8b:8e:bc:d6:af:93: ad:78:b5:fc:3f:47:74:fd:5d:03:e6:63:9d:80:cb: 01:13:fe:0c:9c:20:52:04:07:33:e9:e2:22:ff:5e: 7b:c7:51:7b:a7:c8:fa:52:fa:04:a5:04:f7:85:ad: 1e:1b:df:25:a6:36:b5:34:4e:1b:41:43:2f:71:41: e4:40:54:3b:bd:fc:1a:f3:14:1e:20:c0:61:01:46: 21:09:1e:38:70:0d:e5:50:d2:f7:7c:83:37:58:0c: 1a:8d:99:19:c5:42:b3:ee:f7:a7:00:6d:71:30:4a: 55:1b:dc:55:5e:e9:bb:4a:b9:75:2e:66:90:6f:c1: e3:dd:7e:0b:33:07:e4:18:d2:e6:03:02:46:31:0e: fa:0a:19:61:7a:d0:72:6f:4f:92:23:de:24:ca:15: b5:c9:9a:60:b9:92:e1:41:f5:4f:d6:5e:d2:69:6d: 3b:e2:ef:3a:aa:20:ba:82:0b:69:bd:2a:dc:0d:20: 84:bc:e4:f1:a2:0d:e9:a1:8c:80:73:56:f2:9f:b3: cf:5c:8f:eb:cd:7e:47:64:89:03:a6:2c:3b:ca:a4: 11:90:8e:2f:76:c3:61:21:67:f9:47:37:4a:b6:eb: 2c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:90:28:E0:E2:B6:AB:F6:24:D5:87:C6:37:84:BA:EC:AD:11:09:B0 X509v3 Authority Key Identifier: keyid:D9:C6:6B:0E:42:0B:91:34:17:3D:55:3D:16:AA:0B:14:6B:77:47:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cZrDkILkTQXPVU9FqoLFGt3R3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:b7:46:f9:23:78:6e:4a:b1:37:25:3e:5e:d5:d4:20:a9:22: d7:1e:45:26:e7:fa:d2:cb:b8:68:e4:00:13:89:64:a4:47:7c: ca:e2:69:dc:ea:66:47:5b:5e:1f:e5:d9:a3:b1:8f:b6:9c:05: 90:66:39:92:fa:68:28:56:4c:09:04:17:67:1e:bf:9b:73:82: ff:7b:c8:cb:5a:a3:92:90:c7:ba:5c:5b:9d:24:54:fb:68:7f: d0:61:f7:6e:ea:0e:48:e1:40:51:2a:d0:cc:8b:98:0c:99:b9: 3b:a6:09:1f:2e:e1:c9:a4:21:1b:80:f0:83:6b:42:bf:5d:5e: 56:fd:f2:2d:1e:57:cf:57:d3:e9:ee:bd:51:0f:c8:14:65:2b: a2:1d:f0:13:0a:6e:1e:39:03:4a:cb:e1:dd:68:61:19:1d:2b: ff:d2:57:de:cd:f8:c3:79:28:ff:a0:5b:e6:2c:ea:4c:e9:ae: 88:d6:1c:e8:c2:cb:86:46:c8:72:e6:a8:3c:63:f9:b8:fd:b0: cb:40:27:c3:8c:d0:4a:95:6d:52:b6:c9:1d:a3:79:52:9d:b2: 59:a5:e8:5d:ed:78:21:1a:9b:8f:11:8c:50:27:b0:94:46:0d: 4e:6d:9b:ff:9b:df:c2:1b:4b:bf:da:83:cf:c4:4e:f4:b7:f0: a5:fb:7b:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlCMEQxMTAvBgNVBAUTKEQ5QzY2QjBFNDIwQjkxMzQxNzNENTUzRDE2QUEwQjE0 NkI3NzQ3NzMwHhcNMjUxMjI4MjEzMDA0WhcNMjYwMTA0MjEzMDA0WjAYMRYwFAYD VQQDDA02OTUxYTE1Yy04ODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38nvJVjcv6Ff/wxJC4P6AMrNNXnygxOLjrzWr5OteLX8P0d0/V0D5mOdgMsB E/4MnCBSBAcz6eIi/157x1F7p8j6UvoEpQT3ha0eG98lpja1NE4bQUMvcUHkQFQ7 vfwa8xQeIMBhAUYhCR44cA3lUNL3fIM3WAwajZkZxUKz7venAG1xMEpVG9xVXum7 Srl1LmaQb8Hj3X4LMwfkGNLmAwJGMQ76ChlhetByb0+SI94kyhW1yZpguZLhQfVP 1l7SaW074u86qiC6ggtpvSrcDSCEvOTxog3poYyAc1byn7PPXI/rzX5HZIkDpiw7 yqQRkI4vdsNhIWf5RzdKtussXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOQKODi tqv2JNWHxjeEuuytEQmwMB8GA1UdIwQYMBaAFNnGaw5CC5E0Fz1VPRaqCxRrd0dz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIwRC85OEI3MjgwRThB QjYxMUVCODIzN0Q0MTRDNEY5QUUwMi8yY1pyRGtJTGtUUVhQVlU5RnFvTEZHdDNS M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJjWnJEa0lMa1RRWFBWVTlGcW9MRkd0M1IzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUIwRC85OEI3MjgwRThBQjYxMUVCODIzN0Q0MTRDNEY5QUUwMi8yY1pyRGtJTGtU UVhQVlU5RnFvTEZHdDNSM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1t0b5I3huSrE3JT5e1dQgqSLXHkUm5/rSy7ho5AATiWSkR3zK4mnc 6mZHW14f5dmjsY+2nAWQZjmS+mgoVkwJBBdnHr+bc4L/e8jLWqOSkMe6XFudJFT7 aH/QYfdu6g5I4UBRKtDMi5gMmbk7pgkfLuHJpCEbgPCDa0K/XV5W/fItHlfPV9Pp 7r1RD8gUZSuiHfATCm4eOQNKy+HdaGEZHSv/0lfezfjDeSj/oFvmLOpM6a6I1hzo wsuGRshy5qg8Y/m4/bDLQCfDjNBKlW1Stskdo3lSnbJZpehd7XghGpuPEYxQJ7CU Rg1ObZv/m9/CG0u/2oPPxE70t/Cl+3vJ -----END CERTIFICATE-----Generated at Tue Dec 30 14:56:05 2025 by rpki-client