This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft File: 2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json) Hash identifier: VZntUfbXIJ8Z5hxuzTh+4jJqcEW//whsFBbHKFgJG6Q= Subject key identifier: 46:80:C1:FC:6F:3E:46:29:CF:CF:79:5E:07:F9:91:B2:CC:FE:6B:92 Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft Manifest number: 020B Signing time: Fri 19 Dec 2025 01:52:26 +0000 Manifest this update: Fri 19 Dec 2025 01:52:26 +0000 Manifest next update: Fri 26 Dec 2025 01:52:26 +0000 Files and hashes: 1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: IHxM3n8/4XKmOdqThQY7iCayNeHuNJfO+CDm/wBZrxs=) 2: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: FLWPyCCdfmecVu0JHu1esGWqwLx8eepgbZ0pVH/wRzU=) 3: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: +KpPTrvUJ0fhW59fFGMaGeaxnMDX3lJjTA7XrEuSgaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Validity Not Before: Dec 19 01:52:26 2025 GMT Not After : Dec 26 01:52:26 2025 GMT Subject: CN=6944afda-2be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:41:ac:13:74:62:19:ea:56:f8:4f:07:5d:61: 24:0a:d2:cf:f8:ab:27:a8:72:72:e9:27:ce:18:54: bd:4e:c2:f1:90:6c:47:50:0a:cc:3d:c1:1c:60:04: 25:3a:38:bc:22:63:1d:a0:e3:67:68:39:53:d3:45: 81:9d:34:ca:9c:08:a0:56:67:6c:6a:3a:55:f7:02: b7:1c:ca:43:fa:5b:07:37:c6:48:17:29:50:77:4a: 2c:ad:93:9b:46:b6:cb:c0:32:5b:39:fc:e4:96:08: e1:94:13:88:69:a6:69:61:6b:c2:f9:d0:81:84:2d: 26:3a:6b:88:2d:d7:22:da:4e:7e:ee:f6:cf:3a:ed: f0:c0:61:fa:90:76:eb:fd:6c:b2:3a:29:10:b6:26: b6:07:52:6c:51:69:7c:37:8b:1c:27:73:ed:83:1d: 1b:71:0b:75:52:aa:c9:4a:e1:35:96:67:4c:b0:85: 6b:bc:8e:18:bb:8d:d2:d3:bf:50:45:48:6f:38:88: 56:ae:dc:b6:ec:5e:a8:20:6a:22:51:d1:e5:19:7b: 81:1c:46:1f:fb:93:a5:f7:48:01:3d:34:c4:90:3e: 69:d8:90:ad:69:bb:7a:b0:85:77:5f:d1:63:db:31: 17:8e:8f:41:76:6b:0d:db:40:55:af:39:3b:66:d2: 65:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:80:C1:FC:6F:3E:46:29:CF:CF:79:5E:07:F9:91:B2:CC:FE:6B:92 X509v3 Authority Key Identifier: keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:dc:8e:d2:f8:e7:c6:87:4e:80:5a:89:26:f9:ad:14:69:98: 59:22:1a:35:5d:f4:80:8d:27:37:83:16:8e:ce:1a:88:00:20: 48:66:1f:97:dd:81:36:2e:62:ad:53:4d:6a:09:00:27:79:32: 4a:9f:fc:da:4f:56:85:e9:d0:4d:dd:97:ba:08:7f:29:70:0f: 90:85:5d:7b:31:c6:e9:d5:a3:9f:9b:06:e1:32:58:07:ce:ad: 56:85:f2:28:5b:cf:0c:ff:52:f6:45:a2:67:fc:3d:a0:51:07: ea:7f:e3:0e:33:e2:31:91:cf:7b:47:16:09:6d:ac:c7:e8:b0: bd:22:1c:71:26:69:17:97:a2:04:28:70:5a:bf:97:55:b4:22: 9a:86:82:96:53:3e:53:56:fb:c5:0a:51:fc:65:58:b2:18:ef: 52:ed:42:9f:59:55:75:9c:97:36:34:cd:2d:ad:3e:39:27:85: d1:8f:10:93:66:c6:72:76:9d:eb:5f:d4:9a:dd:d2:72:69:fa: ea:cd:c1:ff:c7:8b:65:84:ec:7b:ad:a3:64:04:43:3c:d2:04: c4:6b:46:b4:67:2b:a9:08:31:76:3a:72:63:fb:9d:60:ab:aa: b4:c4:42:d1:2e:0d:e8:c2:3c:4b:cb:ac:1b:4c:8a:58:a4:31: 3f:f8:a8:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEUxMTAvBgNVBAUTKEQ4ODBFRjI2NUI5NDBFMzFERkVEMUM0MkFFRjUxNDRC NjQ0MTM3MTcwHhcNMjUxMjE5MDE1MjI2WhcNMjUxMjI2MDE1MjI2WjAYMRYwFAYD VQQDDA02OTQ0YWZkYS0yYmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEGsE3RiGepW+E8HXWEkCtLP+KsnqHJy6SfOGFS9TsLxkGxHUArMPcEcYAQl Oji8ImMdoONnaDlT00WBnTTKnAigVmdsajpV9wK3HMpD+lsHN8ZIFylQd0osrZOb RrbLwDJbOfzklgjhlBOIaaZpYWvC+dCBhC0mOmuILdci2k5+7vbPOu3wwGH6kHbr /WyyOikQtia2B1JsUWl8N4scJ3Ptgx0bcQt1UqrJSuE1lmdMsIVrvI4Yu43S079Q RUhvOIhWrty27F6oIGoiUdHlGXuBHEYf+5Ol90gBPTTEkD5p2JCtabt6sIV3X9Fj 2zEXjo9BdmsN20BVrzk7ZtJl8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaAwfxv PkYpz895Xgf5kbLM/muSMB8GA1UdIwQYMBaAFNiA7yZblA4x3+0cQq71FEtkQTcX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82MUJBRDhFMEY4 N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURqSGY3UnhDcnZVVVMyUkJO eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJJRHZKbHVVRGpIZjdSeENydlVVUzJSQk54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RS82MUJBRDhFMEY4N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURq SGY3UnhDcnZVVVMyUkJOeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd3I7S+OfGh06AWokm+a0UaZhZIho1XfSAjSc3gxaOzhqIACBIZh+X 3YE2LmKtU01qCQAneTJKn/zaT1aF6dBN3Ze6CH8pcA+QhV17Mcbp1aOfmwbhMlgH zq1WhfIoW88M/1L2RaJn/D2gUQfqf+MOM+Ixkc97RxYJbazH6LC9IhxxJmkXl6IE KHBav5dVtCKahoKWUz5TVvvFClH8ZViyGO9S7UKfWVV1nJc2NM0trT45J4XRjxCT ZsZydp3rX9Sa3dJyafrqzcH/x4tlhOx7raNkBEM80gTEa0a0ZyupCDF2OnJj+51g q6q0xELRLg3owjxLy6wbTIpYpDE/+KhU -----END CERTIFICATE-----Generated at Sat Dec 20 21:42:27 2025 by rpki-client