This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json) Hash identifier: EvNQH682V1/p+2zmkts0vyk4o8koExEMmJV1GuM03QY= Subject key identifier: F6:11:A9:C3:87:B2:92:9E:FA:81:78:BF:DD:B7:5A:23:2A:F4:D3:85 Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft Manifest number: 0214 Signing time: Sun 21 Dec 2025 01:27:33 +0000 Manifest this update: Sun 21 Dec 2025 01:27:33 +0000 Manifest next update: Sun 28 Dec 2025 01:27:33 +0000 Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: 35v4/YCfgSuaGuHMm0pEL+rhsR99q5RkxX7F060YsDE=) 2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: 1lAKMWWiDhArZBXjlm4IA+8JjIhSP0kfTCYDjl8+xiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Validity Not Before: Dec 21 01:27:33 2025 GMT Not After : Dec 28 01:27:33 2025 GMT Subject: CN=69474d05-4063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:16:58:5e:0e:2a:3c:ab:b3:b2:37:df:d8:12: ca:b2:ab:fe:0e:d1:06:ac:69:56:fb:b1:42:28:6b: 57:03:13:75:cc:cd:1b:58:29:fa:05:bf:b6:e7:28: 35:ef:6a:09:07:96:14:52:c0:eb:b0:9d:8a:5a:d6: c4:d0:bf:0f:33:83:2b:11:53:d3:91:2e:bc:1a:11: a3:0a:dd:70:d1:a4:52:ba:a9:7b:2b:46:ba:05:03: 4b:0a:0e:b5:54:87:cc:36:17:1d:7f:42:19:c4:f0: 4b:18:90:be:b4:43:71:91:56:6c:93:f6:6c:c2:ff: 81:2a:6c:62:b1:87:82:76:95:58:74:e2:e5:1a:e2: 94:92:a4:42:ab:c7:fd:71:62:0c:97:98:95:9e:78: 68:d2:58:17:fc:85:76:67:0e:26:f3:f0:fc:04:97: f2:58:ea:56:9c:32:b2:2f:cf:27:93:9d:7f:b1:6a: e0:4f:d2:f0:01:cb:10:9e:ab:18:c6:88:59:a1:f1: 05:a8:df:b1:de:da:ae:45:32:b1:df:ee:a3:a7:43: 11:7d:f6:5d:d2:ae:ec:15:b0:65:0b:9b:78:56:36: cb:7b:0e:b8:d0:fc:bc:98:2f:c2:01:d2:f3:ab:b3: 51:bd:11:3c:15:bf:e3:d3:f4:be:47:db:46:7d:d3: 7e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:11:A9:C3:87:B2:92:9E:FA:81:78:BF:DD:B7:5A:23:2A:F4:D3:85 X509v3 Authority Key Identifier: keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:b7:1a:dc:e1:dd:38:41:dc:c9:e4:5e:3a:b2:db:25:bb:e2: 22:2b:32:a2:97:59:b1:13:d9:9f:b1:ac:5e:3e:f0:87:d3:91: 67:d5:14:4d:29:4d:71:4c:4e:39:fe:68:9f:6f:9a:a4:be:c0: 9b:da:bf:3f:2b:c9:75:0a:37:e7:a7:fa:28:2c:6f:bb:36:cc: 60:d4:98:94:bc:07:3f:66:eb:db:65:1d:bf:ac:8d:f9:3f:4f: 6f:b6:bd:16:f6:fe:c4:33:f8:97:b9:f3:4e:c5:bf:52:cf:38: e7:56:a7:ae:f9:bf:eb:59:76:07:79:5a:76:2b:54:88:e3:c7: c1:34:e9:15:90:b9:22:49:ce:37:a1:0a:09:07:fc:47:6a:89: 73:64:bc:4d:fd:d6:7e:82:70:93:49:33:a0:6a:f2:eb:5c:3e: be:cd:e6:d2:65:1c:9f:50:40:aa:7e:ab:ef:ff:bc:32:cf:22: 9c:b3:01:f0:25:ec:07:ce:90:e0:f2:da:e4:2d:c6:7b:09:5d: 1e:b7:59:b2:7c:69:b0:6f:6c:08:09:eb:09:fd:35:b1:d0:a9: f3:6a:f4:9f:0c:9e:08:07:3a:61:2f:e2:e8:4b:d3:68:e6:08: 2b:93:ec:14:ea:d3:d9:54:96:58:b4:ff:e2:bc:b0:94:ad:28: 84:5c:fd:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUzNzQxMTAvBgNVBAUTKEQ4NEJDRDZDNTgwOTI3OUJDQkNDMEE1NkFENEExNjgz MjMwRjQzM0UwHhcNMjUxMjIxMDEyNzMzWhcNMjUxMjI4MDEyNzMzWjAYMRYwFAYD VQQDDA02OTQ3NGQwNS00MDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRZYXg4qPKuzsjff2BLKsqv+DtEGrGlW+7FCKGtXAxN1zM0bWCn6Bb+25yg1 72oJB5YUUsDrsJ2KWtbE0L8PM4MrEVPTkS68GhGjCt1w0aRSuql7K0a6BQNLCg61 VIfMNhcdf0IZxPBLGJC+tENxkVZsk/Zswv+BKmxisYeCdpVYdOLlGuKUkqRCq8f9 cWIMl5iVnnho0lgX/IV2Zw4m8/D8BJfyWOpWnDKyL88nk51/sWrgT9LwAcsQnqsY xohZofEFqN+x3tquRTKx3+6jp0MRffZd0q7sFbBlC5t4VjbLew640Py8mC/CAdLz q7NRvRE8Fb/j0/S+R9tGfdN+mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYRqcOH spKe+oF4v923WiMq9NOFMB8GA1UdIwQYMBaAFNhLzWxYCSeby8wKVq1KFoMjD0M+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTM3NC80MDYwMzU2MkFD MzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1dkx6QXBXclVvV2d5TVBR ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJFdk5iRmdKSjV2THpBcFdyVW9XZ3lNUFF6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTM3NC80MDYwMzU2MkFDMzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1 dkx6QXBXclVvV2d5TVBRejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATtxrc4d04QdzJ5F46stslu+IiKzKil1mxE9mfsaxePvCH05Fn1RRN KU1xTE45/mifb5qkvsCb2r8/K8l1Cjfnp/ooLG+7Nsxg1JiUvAc/ZuvbZR2/rI35 P09vtr0W9v7EM/iXufNOxb9SzzjnVqeu+b/rWXYHeVp2K1SI48fBNOkVkLkiSc43 oQoJB/xHaolzZLxN/dZ+gnCTSTOgavLrXD6+zebSZRyfUECqfqvv/7wyzyKcswHw JewHzpDg8trkLcZ7CV0et1myfGmwb2wICesJ/TWx0KnzavSfDJ4IBzphL+LoS9No 5ggrk+wU6tPZVJZYtP/ivLCUrSiEXP3D -----END CERTIFICATE-----Generated at Sun Dec 21 13:12:47 2025 by rpki-client