This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft File: 2wYwePe5d1L7gdAPqb18UjsclwM.mft (raw, json) Hash identifier: tqUdDPzpvqlxhO1uBTHuZ88DUbCXfg8APkgO8xr2uJU= Subject key identifier: 65:0E:E0:D3:42:93:8F:32:31:AE:3E:A1:C9:12:42:24:1F:2C:D8:54 Authority key identifier: DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03 Certificate issuer: /CN=A9192698/serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft Manifest number: 0128 Signing time: Sun 21 Dec 2025 03:50:46 +0000 Manifest this update: Sun 21 Dec 2025 03:50:46 +0000 Manifest next update: Sun 28 Dec 2025 03:50:46 +0000 Files and hashes: 1: 2wYwePe5d1L7gdAPqb18UjsclwM.crl (hash: XkaicL4K09THnAyi1XCgHnNclj9MhwBz+L3jCqiJpjU=) 2: CE042A841E5611EFBEDD1F39C4F9AE02.roa (hash: wBvwqSnNeZ2azP6/kY4estB/Jc4t3M7IdMIc2FaLoNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192698, serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703 Validity Not Before: Dec 21 03:50:46 2025 GMT Not After : Dec 28 03:50:46 2025 GMT Subject: CN=69476e96-b648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4b:9e:83:b6:0c:f5:a3:18:a1:49:87:83:86: eb:13:e7:ce:49:a8:91:f4:8e:46:88:89:56:4e:3c: 4e:70:8f:3b:9b:99:d2:24:c7:cc:e1:8b:01:3f:0c: 3e:e4:0d:c5:2a:1d:e9:28:ee:19:4a:10:d2:f9:f4: 58:bd:2f:dd:0c:f7:70:4d:a4:be:5b:41:43:9b:df: 4d:86:27:51:a1:ca:d5:da:7f:ef:1c:1e:6a:95:d7: 62:cb:d8:30:8d:b6:00:3e:61:91:f9:a0:d5:87:af: ea:58:c1:e3:13:53:4e:32:fb:87:40:bb:b6:5c:b1: 54:1c:e3:f9:15:23:42:f7:22:e6:2f:fa:33:c6:9b: 49:31:d3:ca:3c:2a:6d:4f:15:13:26:ed:8c:07:73: 85:35:a2:8c:b4:ff:a2:f1:89:66:0d:7d:c1:46:6a: 30:8a:19:a7:52:ad:21:40:cb:d6:9d:d7:51:31:1f: 16:66:10:cf:15:07:b0:06:22:26:14:d5:e3:57:28: 01:6c:83:92:96:9f:28:02:1b:fe:44:ac:b5:1e:d9: 3d:98:2a:19:4a:3c:b5:7c:3c:22:3d:c7:ac:ef:9d: ac:ae:37:d2:5b:22:cc:da:13:39:13:d8:31:ea:c7: 3e:83:63:4d:df:20:6a:28:dc:34:48:94:72:23:e6: ff:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0E:E0:D3:42:93:8F:32:31:AE:3E:A1:C9:12:42:24:1F:2C:D8:54 X509v3 Authority Key Identifier: keyid:DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:f8:cc:9a:ec:c4:31:ae:4e:c0:f5:85:c0:c0:72:96:0e:5a: cf:fc:1b:9b:a9:d7:e2:25:87:17:f8:03:ef:5f:db:77:13:36: 84:43:da:2d:90:96:4f:ff:0f:c5:21:69:f9:bc:ec:c6:89:d8: 14:39:a4:9f:dc:eb:3b:8f:ab:97:94:4e:03:3e:e1:c1:25:9d: 2f:59:66:ad:25:f1:8a:4e:09:50:11:a0:55:ba:08:4b:36:5b: 77:53:26:eb:4e:73:25:be:80:97:04:2b:e4:64:64:ea:39:75: 17:05:66:07:cb:9e:0a:f7:02:ef:fe:09:5b:d2:8f:96:ab:8f: 56:78:86:37:e6:98:5c:f9:e8:6b:cf:cb:f8:de:7a:3e:da:4b: d7:8f:30:48:00:8b:0d:3e:18:5a:99:16:94:44:a5:6e:92:57: 79:74:e8:e3:74:3d:58:4b:10:48:7f:6b:d0:71:3f:92:c2:4b: e1:b6:81:4d:cf:28:a3:24:48:b9:b3:9b:be:49:76:55:fe:3c: 9a:e1:76:c4:a2:82:45:64:1e:e5:f9:d9:32:04:98:2e:b9:9c: 02:90:fa:f2:30:49:df:43:c1:ad:ac:2c:f8:58:d4:e7:5c:ff: ef:af:9e:51:06:7f:e6:bd:7c:a2:51:de:77:68:06:63:76:fe: dc:54:0c:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI2OTgxMTAvBgNVBAUTKERCMDYzMDc4RjdCOTc3NTJGQjgxRDAwRkE5QkQ3QzUy M0IxQzk3MDMwHhcNMjUxMjIxMDM1MDQ2WhcNMjUxMjI4MDM1MDQ2WjAYMRYwFAYD VQQDDA02OTQ3NmU5Ni1iNjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA50ueg7YM9aMYoUmHg4brE+fOSaiR9I5GiIlWTjxOcI87m5nSJMfM4YsBPww+ 5A3FKh3pKO4ZShDS+fRYvS/dDPdwTaS+W0FDm99NhidRocrV2n/vHB5qlddiy9gw jbYAPmGR+aDVh6/qWMHjE1NOMvuHQLu2XLFUHOP5FSNC9yLmL/ozxptJMdPKPCpt TxUTJu2MB3OFNaKMtP+i8YlmDX3BRmowihmnUq0hQMvWnddRMR8WZhDPFQewBiIm FNXjVygBbIOSlp8oAhv+RKy1Htk9mCoZSjy1fDwiPces752srjfSWyLM2hM5E9gx 6sc+g2NN3yBqKNw0SJRyI+b/uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUO4NNC k48yMa4+ockSQiQfLNhUMB8GA1UdIwQYMBaAFNsGMHj3uXdS+4HQD6m9fFI7HJcD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjY5OC9EM0MwRUNFMjFF NTUxMUVGQUM5NTlGMTlDNEY5QUUwMi8yd1l3ZVBlNWQxTDdnZEFQcWIxOFVqc2Ns d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ3WXdlUGU1ZDFMN2dkQVBxYjE4VWpzY2x3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjY5OC9EM0MwRUNFMjFFNTUxMUVGQUM5NTlGMTlDNEY5QUUwMi8yd1l3ZVBlNWQx TDdnZEFQcWIxOFVqc2Nsd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn+Mya7MQxrk7A9YXAwHKWDlrP/BubqdfiJYcX+APvX9t3EzaEQ9ot kJZP/w/FIWn5vOzGidgUOaSf3Os7j6uXlE4DPuHBJZ0vWWatJfGKTglQEaBVughL Nlt3UybrTnMlvoCXBCvkZGTqOXUXBWYHy54K9wLv/glb0o+Wq49WeIY35phc+ehr z8v43no+2kvXjzBIAIsNPhhamRaURKVukld5dOjjdD1YSxBIf2vQcT+SwkvhtoFN zyijJEi5s5u+SXZV/jya4XbEooJFZB7l+dkyBJguuZwCkPryMEnfQ8GtrCz4WNTn XP/vr55RBn/mvXyiUd53aAZjdv7cVAwI -----END CERTIFICATE-----Generated at Sun Dec 21 10:35:54 2025 by rpki-client