This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft File: _2p8LLPdLXe95os2uoNseVip1No.mft (raw, json) Hash identifier: 3a62DJX0RPzyzbdGf1B5DHF6tBayRWXhikShd3RpkBM= Subject key identifier: BF:B3:6B:5F:94:E7:FC:00:23:31:9B:E7:29:63:CC:9B:87:33:10:3A Authority key identifier: FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA Certificate issuer: /CN=A91F7506/serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft Manifest number: 020F Signing time: Tue 23 Dec 2025 01:17:43 +0000 Manifest this update: Tue 23 Dec 2025 01:17:42 +0000 Manifest next update: Tue 30 Dec 2025 01:17:42 +0000 Files and hashes: 1: _2p8LLPdLXe95os2uoNseVip1No.crl (hash: 1Ff2IJARgphh0a7oqzDiflAEk5767+0aJ7iplyHcz2o=) 2: 6903848C20A911EEBEC77485C4F9AE02.roa (hash: oeA5QwLSLGhzBCJJCLR/tH3NWML3OhbjDPXjELI4Bqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7506, serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA Validity Not Before: Dec 23 01:17:42 2025 GMT Not After : Dec 30 01:17:42 2025 GMT Subject: CN=6949edb7-d8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7f:4d:b1:2e:a4:79:28:87:a3:a5:dc:01:1f: 25:8c:6b:98:d9:f6:1b:5b:8e:21:7d:4e:cf:03:1e: 93:9f:d3:57:76:d4:22:56:2e:8a:3e:d9:65:ba:5e: d0:9c:7a:6e:d2:40:30:ba:92:b3:f2:8b:89:8a:07: 30:49:3a:94:cc:62:8d:cc:32:b3:ad:26:a8:bf:e7: f6:d6:78:1c:87:89:57:64:4e:0f:db:6b:45:ff:a9: 46:98:9f:a9:98:0c:5a:05:bd:56:d7:c8:c8:86:12: 5b:84:dc:99:ba:6c:a4:4e:d6:dc:8b:6b:2d:8d:13: 72:93:e6:76:02:cb:92:c4:a6:56:86:ab:c3:6e:c2: cd:99:1b:fc:ae:3c:ce:1c:9a:32:91:3f:65:3c:50: 42:55:db:8e:9e:04:97:67:4d:9c:65:85:1c:fc:b0: 30:c8:a4:99:74:72:15:53:8f:f5:e8:5c:cc:f3:fc: 7c:c0:47:f8:c2:51:92:97:85:a3:49:a2:c7:90:2c: 11:7f:7a:00:86:c4:42:07:79:56:f6:cb:ff:a6:8a: 33:ab:79:1b:c0:83:87:9f:b8:a3:f4:99:8c:10:fb: 6b:b1:d6:bf:dd:7a:99:f8:28:7c:3e:25:4c:ac:12: f3:61:8d:68:23:b8:d6:9d:4d:eb:57:a6:05:35:ac: ff:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B3:6B:5F:94:E7:FC:00:23:31:9B:E7:29:63:CC:9B:87:33:10:3A X509v3 Authority Key Identifier: keyid:FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:34:f0:f9:33:60:aa:20:ea:7e:c4:5b:47:24:92:7d:cb:19: bd:a2:c8:65:6c:02:01:20:e5:44:8f:8f:25:11:75:a0:ee:6a: 83:df:f6:69:16:4e:95:e1:75:35:b0:73:6f:a8:06:9a:a9:f6: b5:3c:f5:48:f8:af:c7:42:38:7c:be:60:a7:56:88:34:b0:ee: d1:6d:c0:e2:35:68:bd:2b:62:0c:50:b1:7b:bf:f1:9a:27:9a: b2:b5:39:9a:28:94:e1:3d:76:1b:58:81:bc:15:00:00:04:af: ce:fc:a6:73:f2:ca:38:13:29:91:c7:b0:ea:1d:a8:4e:55:88: 93:07:b5:58:8c:ef:8e:72:66:eb:88:26:d7:65:aa:78:1d:11: 7b:6d:de:fb:3b:cb:91:89:07:a9:7b:0f:f6:9a:89:71:e0:51: 14:a2:39:5d:a1:fa:6d:ba:8a:5c:9a:46:2e:62:b8:8c:bc:da: 14:f9:fb:33:4f:db:20:ea:67:19:0c:68:1d:e9:b3:7e:c6:44: 65:31:01:ad:9b:f9:71:2f:cb:55:7f:11:a4:87:02:47:4b:cf: 10:48:b8:d9:99:e9:45:cd:7a:b7:6d:67:e5:fe:41:61:e4:9a: 23:88:52:31:73:0f:0e:ba:cb:13:21:4c:42:41:75:f3:89:b4: 4c:25:b9:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MDYxMTAvBgNVBAUTKEZGNkE3QzJDQjNERDJENzdCREU2OEIzNkJBODM2Qzc5 NThBOUQ0REEwHhcNMjUxMjIzMDExNzQyWhcNMjUxMjMwMDExNzQyWjAYMRYwFAYD VQQDDA02OTQ5ZWRiNy1kOGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu39NsS6keSiHo6XcAR8ljGuY2fYbW44hfU7PAx6Tn9NXdtQiVi6KPtllul7Q nHpu0kAwupKz8ouJigcwSTqUzGKNzDKzrSaov+f21ngch4lXZE4P22tF/6lGmJ+p mAxaBb1W18jIhhJbhNyZumykTtbci2stjRNyk+Z2AsuSxKZWhqvDbsLNmRv8rjzO HJoykT9lPFBCVduOngSXZ02cZYUc/LAwyKSZdHIVU4/16FzM8/x8wEf4wlGSl4Wj SaLHkCwRf3oAhsRCB3lW9sv/poozq3kbwIOHn7ij9JmMEPtrsda/3XqZ+Ch8PiVM rBLzYY1oI7jWnU3rV6YFNaz/bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+za1+U 5/wAIzGb5yljzJuHMxA6MB8GA1UdIwQYMBaAFP9qfCyz3S13veaLNrqDbHlYqdTa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUwNi85NTU0MjY2MkI2 ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExYZTk1b3MydW9Oc2VWaXAx Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18ycDhMTFBkTFhlOTVvczJ1b05zZVZpcDFOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUwNi85NTU0MjY2MkI2ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExY ZTk1b3MydW9Oc2VWaXAxTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABNPD5M2CqIOp+xFtHJJJ9yxm9oshlbAIBIOVEj48lEXWg7mqD3/Zp Fk6V4XU1sHNvqAaaqfa1PPVI+K/HQjh8vmCnVog0sO7RbcDiNWi9K2IMULF7v/Ga J5qytTmaKJThPXYbWIG8FQAABK/O/KZz8so4EymRx7DqHahOVYiTB7VYjO+Ocmbr iCbXZap4HRF7bd77O8uRiQepew/2molx4FEUojldofptuopcmkYuYriMvNoU+fsz T9sg6mcZDGgd6bN+xkRlMQGtm/lxL8tVfxGkhwJHS88QSLjZmelFzXq3bWfl/kFh 5JojiFIxcw8OussTIUxCQXXzibRMJbmw -----END CERTIFICATE-----Generated at Tue Dec 23 18:34:44 2025 by rpki-client