This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft File: F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft (raw, json) Hash identifier: c2ajWUNy8a5iXTxPRux2ObDFqdToaPE5NAP9C0Ih5fw= Subject key identifier: 1C:B8:CB:F6:D2:BA:BD:23:BE:D6:18:9E:8D:DA:3A:A4:4C:66:A7:E9 Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 Certificate issuer: /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Certificate serial: 062C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft Manifest number: 0614 Signing time: Sat 20 Dec 2025 22:12:25 +0000 Manifest this update: Sat 20 Dec 2025 22:12:24 +0000 Manifest next update: Sat 27 Dec 2025 22:12:24 +0000 Files and hashes: 1: F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl (hash: eaPkOhjBoOc97v8nsuPj7mCauMvyyCOFneIbrfRzBuo=) 2: 2B7B2500A62E11EF8FF03040C4F9AE02.roa (hash: fHHCg4dsSrKRMh2IkfaJKWc+8HaWo2WGJnqPV8bsROg=) 3: 695C5050C27D11EEB0AE466DC4F9AE02.roa (hash: RdB+XhDvSvaJvXs7BGUe7hQ0J/yDuFEAfzGv0ijmNPc=) 4: 96B7F96CAB3611EFB500860EC4F9AE02.roa (hash: GlPYzm1g1p6UF6TrozrvebOfAek8o1pTtBkEeyLLQjQ=) 5: 6D24010C300311F0995E874EC4F9AE02.roa (hash: JH/oVs3Jqan8Flty+gkOdXRSGquUVwbS7q7MqJveDFs=) 6: 73381ABCAB3611EF809A470EC4F9AE02.roa (hash: NusIDt0f4j0NcRF078XLORWazAmsiuO0j1zyJghrWis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1580 (0x62c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Validity Not Before: Dec 20 22:12:24 2025 GMT Not After : Dec 27 22:12:24 2025 GMT Subject: CN=69471f49-4e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:a2:40:c4:68:68:78:ea:8e:92:9b:ca:a8: 40:0e:5b:76:5a:8a:d0:89:be:97:c9:27:74:59:2c: b1:31:f3:14:a1:46:d8:af:b6:dd:f1:1a:ff:a7:ea: 7a:28:a0:f2:9b:d5:1c:b9:03:83:13:b1:b4:d1:6a: 53:0f:c5:db:55:e2:e0:eb:94:bd:77:1a:2f:0e:70: 3d:3d:45:b4:7f:d0:84:2b:c9:ff:9f:f3:da:1d:63: f4:63:33:b2:7a:34:1b:8e:6d:d9:0d:79:6d:da:fa: 47:6b:9d:3d:40:b8:4c:b0:8f:38:b4:dc:44:75:59: bc:b6:05:12:14:70:4a:47:f0:12:86:90:57:50:c9: 47:54:c5:a0:fc:c9:ab:3d:45:17:a8:ea:a2:57:44: 6e:52:3e:e1:c0:d7:82:37:03:d7:05:d7:14:00:72: 33:e7:bb:77:7d:60:ab:f4:27:25:0a:db:5a:c0:a8: bf:c8:48:ee:85:8d:ff:23:97:51:fb:4d:3b:0f:00: 6a:e6:d8:38:1e:08:d0:90:76:f1:bf:b3:af:40:36: ae:7a:8a:de:f5:f2:7f:7a:8e:d7:c8:c6:0f:c9:ef: 99:a3:98:ca:61:ff:4a:a7:8e:62:51:9e:59:1d:43: 09:74:1b:f1:85:cb:2b:0e:43:5f:87:7c:05:37:a3: bc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B8:CB:F6:D2:BA:BD:23:BE:D6:18:9E:8D:DA:3A:A4:4C:66:A7:E9 X509v3 Authority Key Identifier: keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:62:d0:28:d1:43:37:ba:b3:34:fa:a8:00:32:5c:37:87:47: 46:c7:2a:73:29:07:67:9f:16:46:07:2f:c6:1e:12:b2:12:b1: a9:d5:7c:d3:16:29:9f:55:40:0b:ff:72:38:20:bd:a5:7e:17: f7:da:6b:b1:02:cb:c8:75:b4:41:61:e3:dd:a4:0d:13:7b:87: c5:89:70:46:ac:d3:2d:49:b2:6f:25:6e:55:87:ba:1f:04:1e: 80:4f:93:0b:12:4d:0b:fd:16:00:b5:1a:f8:66:e5:64:5f:a3: af:86:4c:e4:17:e5:b6:b0:7e:4a:f0:ec:3e:8e:9a:47:ff:53: 7e:97:14:89:33:06:22:cf:ce:12:f2:7b:9f:60:0e:14:fe:e8: 9a:e0:04:d4:32:e0:a7:17:b5:a1:b3:94:b5:79:10:e4:03:2c: 26:ae:c9:18:64:60:56:88:49:c2:43:01:2d:dd:cf:b4:21:b2: 57:86:96:f6:16:c6:33:7e:0a:f0:4c:c7:b2:b2:10:64:a2:91: 45:66:69:0b:7e:df:35:86:0c:a4:7f:fd:06:c3:1d:ac:71:04: 38:0e:68:cf:bf:27:6e:f6:6d:61:bb:e8:18:65:d0:ef:07:26: e4:ae:22:d9:a6:3c:0d:8e:de:92:5b:1d:bc:47:41:e8:38:c2: dd:a4:69:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3 OTlBRUY3NjcwHhcNMjUxMjIwMjIxMjI0WhcNMjUxMjI3MjIxMjI0WjAYMRYwFAYD VQQDDA02OTQ3MWY0OS00ZTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUqiQMRoaHjqjpKbyqhADlt2WorQib6XySd0WSyxMfMUoUbYr7bd8Rr/p+p6 KKDym9UcuQODE7G00WpTD8XbVeLg65S9dxovDnA9PUW0f9CEK8n/n/PaHWP0YzOy ejQbjm3ZDXlt2vpHa509QLhMsI84tNxEdVm8tgUSFHBKR/AShpBXUMlHVMWg/Mmr PUUXqOqiV0RuUj7hwNeCNwPXBdcUAHIz57t3fWCr9CclCttawKi/yEjuhY3/I5dR +007DwBq5tg4HgjQkHbxv7OvQDaueore9fJ/eo7XyMYPye+Zo5jKYf9Kp45iUZ5Z HUMJdBvxhcsrDkNfh3wFN6O8UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBy4y/bS ur0jvtYYno3aOqRMZqfpMB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA5RS80NzExOUQwMEQwMEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnot N251Tlp4RFdOZ1o1bXU5MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUYtAo0UM3urM0+qgAMlw3h0dGxypzKQdnnxZGBy/GHhKyErGp1XzT FimfVUAL/3I4IL2lfhf32muxAsvIdbRBYePdpA0Te4fFiXBGrNMtSbJvJW5Vh7of BB6AT5MLEk0L/RYAtRr4ZuVkX6OvhkzkF+W2sH5K8Ow+jppH/1N+lxSJMwYiz84S 8nufYA4U/uia4ATUMuCnF7Whs5S1eRDkAywmrskYZGBWiEnCQwEt3c+0IbJXhpb2 FsYzfgrwTMeyshBkopFFZmkLft81hgykf/0Gwx2scQQ4DmjPvydu9m1hu+gYZdDv BybkriLZpjwNjt6SWx28R0HoOMLdpGlG -----END CERTIFICATE-----Generated at Sun Dec 21 06:55:22 2025 by rpki-client