This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft File: 2S2tTXbh9aAmwn8tuRxE-62OSHw.mft (raw, json) Hash identifier: 0+Ff13TMLwjuWmJ5iblrfBdXycyvvj0zxDX1sqlCiBw= Subject key identifier: F7:7C:FF:3D:DD:B5:73:62:DE:AC:5A:36:17:ED:58:0E:C4:55:B4:F8 Authority key identifier: D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C Certificate issuer: /CN=A91F5143/serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Certificate serial: 0E8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft Manifest number: 0E84 Signing time: Thu 18 Dec 2025 17:31:48 +0000 Manifest this update: Thu 18 Dec 2025 17:31:48 +0000 Manifest next update: Thu 25 Dec 2025 17:31:48 +0000 Files and hashes: 1: 2S2tTXbh9aAmwn8tuRxE-62OSHw.crl (hash: JS1Pj3b9f4A8uOtlW0wSQ5Q+6JtsG/prTtGZrYvnjbA=) 2: FBBFC6D8A86B11E9A1385758C4F9AE02.roa (hash: XTPvOUtwwqNSor3+lvQAUp+XHkA+OuKa7+XgiPm/si4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3725 (0xe8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5143, serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Validity Not Before: Dec 18 17:31:48 2025 GMT Not After : Dec 25 17:31:48 2025 GMT Subject: CN=69443a84-7fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4b:7a:87:88:44:1b:23:8e:36:af:7c:17:9a: 45:96:1e:65:93:59:96:4a:0b:af:54:e8:ff:16:af: be:5f:d5:1e:17:90:10:8f:66:d8:88:cf:e3:53:04: c8:ec:41:91:ca:01:01:3d:a0:6c:58:7e:1a:03:d8: 8a:bf:1b:4c:b7:4c:d1:7c:29:6e:4b:5d:fc:ee:17: ea:a6:dc:e5:dd:33:f6:77:86:a8:09:8f:5e:b3:91: e6:b0:b8:aa:8d:3d:20:b9:45:8c:f0:b8:b8:43:87: 2f:ca:e6:9e:53:89:81:14:40:a0:61:c3:11:75:cb: 1e:74:db:28:bc:c4:e6:8e:61:f1:01:f5:6a:97:01: d8:9c:19:c1:3b:08:3b:58:b4:9d:4a:4d:99:e2:10: ab:be:db:27:bf:0a:89:f8:ed:8c:db:56:f2:53:5b: 22:20:c9:23:39:4a:a0:d3:11:63:9f:e1:fd:82:2a: 9c:94:59:f0:e9:6e:1b:60:c1:f5:86:03:b9:dc:e3: 88:f1:18:ef:eb:7d:9e:a2:64:f7:6d:dd:fc:8c:c0: ac:1a:96:b2:c4:e5:1b:4e:bf:83:c5:dd:df:73:53: 0f:a2:14:60:74:19:9d:57:0b:b0:f6:d5:cc:4e:c1: bf:2e:62:f6:5a:a8:82:c8:5e:71:c8:73:6f:78:a3: 0f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7C:FF:3D:DD:B5:73:62:DE:AC:5A:36:17:ED:58:0E:C4:55:B4:F8 X509v3 Authority Key Identifier: keyid:D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:53:4a:c7:67:37:e8:72:7b:d2:ed:fe:31:97:b8:67:51:7e: c1:d1:6b:f4:2c:29:f5:67:6a:1d:b8:2f:a7:73:21:e6:85:35: c8:0b:b8:89:1a:85:0b:9e:c3:92:f0:89:62:f9:58:96:24:7f: 91:db:6f:0b:4d:9c:ca:6e:ea:86:57:88:d0:04:77:cd:6f:67: a0:d7:28:01:b2:f0:ab:29:db:5b:d1:2b:f1:1c:0c:8c:cf:a4: 82:76:89:73:22:9b:b3:b3:fe:ac:4b:65:d1:8c:69:e3:ec:54: 43:f6:00:e8:d6:92:ec:3e:e2:81:61:17:c6:47:60:36:f7:91: d3:80:a3:a2:89:c8:3e:64:d9:f6:7b:c7:5c:bb:af:1a:ef:40: 7c:a3:03:80:ac:14:05:e0:35:1b:e7:54:59:81:36:f7:a6:63: 09:fe:e1:a4:7b:8e:21:c9:69:5e:2c:6a:60:14:dd:26:f0:17: 17:90:73:ec:d6:bc:b5:67:33:a2:c3:cc:41:0d:ea:cb:87:27: 59:b7:70:ff:ba:e9:da:f0:57:77:e7:52:bb:fd:b8:ad:6f:e2: de:48:53:c0:5c:4e:b7:19:e3:97:5b:65:de:27:35:19:89:a4: 49:33:b4:3b:ad:5b:56:9d:39:c7:af:ac:8b:0d:07:e4:13:46: 81:38:6f:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUxNDMxMTAvBgNVBAUTKEQ5MkRBRDRENzZFMUY1QTAyNkMyN0YyREI5MUM0NEZC QUQ4RTQ4N0MwHhcNMjUxMjE4MTczMTQ4WhcNMjUxMjI1MTczMTQ4WjAYMRYwFAYD VQQDDA02OTQ0M2E4NC03ZmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUt6h4hEGyOONq98F5pFlh5lk1mWSguvVOj/Fq++X9UeF5AQj2bYiM/jUwTI 7EGRygEBPaBsWH4aA9iKvxtMt0zRfCluS1387hfqptzl3TP2d4aoCY9es5HmsLiq jT0guUWM8Li4Q4cvyuaeU4mBFECgYcMRdcsedNsovMTmjmHxAfVqlwHYnBnBOwg7 WLSdSk2Z4hCrvtsnvwqJ+O2M21byU1siIMkjOUqg0xFjn+H9giqclFnw6W4bYMH1 hgO53OOI8Rjv632eomT3bd38jMCsGpayxOUbTr+Dxd3fc1MPohRgdBmdVwuw9tXM TsG/LmL2WqiCyF5xyHNveKMPvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPd8/z3d tXNi3qxaNhftWA7EVbT4MB8GA1UdIwQYMBaAFNktrU124fWgJsJ/LbkcRPutjkh8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTE0My8wREU5Rjc3NkE4 NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlhQW13bjh0dVJ4RS02Mk9T SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJTMnRUWGJoOWFBbXduOHR1UnhFLTYyT1NIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTE0My8wREU5Rjc3NkE4NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlh QW13bjh0dVJ4RS02Mk9TSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDU0rHZzfocnvS7f4xl7hnUX7B0Wv0LCn1Z2oduC+ncyHmhTXIC7iJ GoULnsOS8Ili+ViWJH+R228LTZzKbuqGV4jQBHfNb2eg1ygBsvCrKdtb0SvxHAyM z6SCdolzIpuzs/6sS2XRjGnj7FRD9gDo1pLsPuKBYRfGR2A295HTgKOiicg+ZNn2 e8dcu68a70B8owOArBQF4DUb51RZgTb3pmMJ/uGke44hyWleLGpgFN0m8BcXkHPs 1ry1ZzOiw8xBDerLhydZt3D/uuna8Fd351K7/bitb+LeSFPAXE63GeOXW2XeJzUZ iaRJM7Q7rVtWnTnHr6yLDQfkE0aBOG8h -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:30 2025 by rpki-client