This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
File: i2WlKUN31oY3jEaz6drXzbW2Z5E.mft (raw, json)
Hash identifier: EQOjW7i64sSoz109T7Y4zp4bPetWTWd6vI9XeF+3VMs=
Subject key identifier: CB:A7:42:99:4C:38:06:80:D9:0B:2A:86:22:93:B5:89:C5:67:47:87
Authority key identifier: 8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91
Certificate issuer: /CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
Certificate serial: 0185
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
Manifest number: 017F
Signing time: Sun 07 Dec 2025 02:08:00 +0000
Manifest this update: Sun 07 Dec 2025 02:07:59 +0000
Manifest next update: Sun 14 Dec 2025 02:07:59 +0000
Files and hashes: 1: i2WlKUN31oY3jEaz6drXzbW2Z5E.crl (hash: zWNFuHWrULw+OIDwk5Vgx8ECHODvQOlWHAdaxca4d6Q=)
2: A2F568A08CDC11EEA05B6E55C4F9AE02.roa (hash: 1BbW+GzFmicFxrJi47abULi9jqJhPlJkmCnwzd461wM=)
3: 83298B188CDD11EE9C0A8258C4F9AE02.roa (hash: uYX2IlbgkFVHpSI6ncTYHrhhVumZeL9bEclaECevCas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl
rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127C2D, serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
Validity
Not Before: Dec 7 02:07:59 2025 GMT
Not After : Dec 14 02:07:59 2025 GMT
Subject: CN=6934e180-111b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:67:8d:51:ad:0e:cb:59:f9:1f:6a:fc:a9:41:
96:96:62:a5:0f:28:4f:00:4b:7c:a5:26:6f:b9:16:
64:eb:1a:06:a1:10:54:2b:ec:14:eb:28:22:77:be:
3e:28:06:05:23:c3:76:56:63:3b:a6:b6:f7:bb:93:
49:39:89:b9:87:bc:29:0a:43:28:b7:78:55:7e:f9:
4e:f8:32:51:34:a0:6f:23:ab:cc:ac:ad:68:a9:52:
37:10:5e:1a:8e:7f:b6:e7:8c:d8:c9:8b:b7:ba:13:
c9:22:87:e8:fa:82:64:80:54:af:d8:5d:89:40:67:
ff:14:53:52:5e:ef:d6:9a:97:7e:a0:3d:79:c1:3c:
f6:b1:ba:9f:a3:9c:e5:00:61:46:9e:97:8b:78:60:
5f:2b:f3:4b:5e:e3:57:7f:cb:ef:3e:b3:7a:a8:db:
bd:0c:16:56:e4:b1:31:bb:05:81:09:b9:20:b3:4a:
3c:fc:62:52:97:0b:a4:d3:9a:91:c9:dd:dc:ca:90:
58:b4:2c:34:59:dc:f8:43:d4:15:f3:e5:9c:55:b5:
fe:07:cf:f3:c1:3d:48:8a:96:e1:27:1c:56:ba:f7:
84:69:86:bb:bb:fc:8e:e0:95:21:a1:f1:33:8d:e1:
af:d9:77:e2:cc:d1:07:33:94:5f:b5:bc:ff:59:e9:
31:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A7:42:99:4C:38:06:80:D9:0B:2A:86:22:93:B5:89:C5:67:47:87
X509v3 Authority Key Identifier:
keyid:8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:e7:95:2e:64:d0:5a:ae:9d:1d:ed:6e:af:53:3d:b6:98:75:
0c:62:71:df:87:cc:d2:15:ba:16:4d:09:7c:e1:df:e1:5b:be:
bf:b3:0f:fe:d5:f2:ff:7e:ae:d0:18:3c:ad:41:b2:be:9a:2c:
6d:b9:1f:7a:48:a3:30:a5:a8:d2:21:8c:0d:81:af:0b:49:71:
e1:03:90:49:ed:5c:8f:81:c0:5f:1e:2b:3c:28:8e:fb:83:6e:
9f:3a:1c:7d:99:e4:29:94:1b:dc:06:02:06:85:70:96:4f:fe:
94:fb:04:0f:5d:5e:50:38:50:78:3f:a4:18:a0:42:4a:2b:10:
38:d6:44:5f:1a:13:99:0b:0a:07:a1:a2:ab:55:00:fd:6c:b5:
ea:0f:06:cc:a4:f2:25:e4:f5:d9:12:c7:86:bb:f3:64:fa:d1:
9b:17:7a:3c:f7:cf:ad:d7:84:0e:10:f4:e1:4b:a1:39:96:10:
a7:6d:32:73:a6:0a:4d:bb:79:c2:b2:aa:47:87:41:65:d1:7e:
1c:e5:d8:80:ed:2c:2b:48:1a:bf:ec:f8:e9:ec:f7:46:0c:6d:
28:67:24:96:1c:b4:5c:71:89:b3:4f:ef:30:ad:c6:6a:a0:a9:
a0:35:34:a9:e7:d6:8f:72:61:39:b0:a6:d0:ef:c2:da:bc:51:
5f:b1:4e:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdDMkQxMTAvBgNVBAUTKDhCNjVBNTI5NDM3N0Q2ODYzNzhDNDZCM0U5REFEN0NE
QjVCNjY3OTEwHhcNMjUxMjA3MDIwNzU5WhcNMjUxMjE0MDIwNzU5WjAYMRYwFAYD
VQQDEw02OTM0ZTE4MC0xMTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5GeNUa0Oy1n5H2r8qUGWlmKlDyhPAEt8pSZvuRZk6xoGoRBUK+wU6ygid74+
KAYFI8N2VmM7prb3u5NJOYm5h7wpCkMot3hVfvlO+DJRNKBvI6vMrK1oqVI3EF4a
jn+254zYyYu3uhPJIofo+oJkgFSv2F2JQGf/FFNSXu/Wmpd+oD15wTz2sbqfo5zl
AGFGnpeLeGBfK/NLXuNXf8vvPrN6qNu9DBZW5LExuwWBCbkgs0o8/GJSlwuk05qR
yd3cypBYtCw0Wdz4Q9QV8+WcVbX+B8/zwT1IipbhJxxWuveEaYa7u/yO4JUhofEz
jeGv2XfizNEHM5Rftbz/WekxDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMunQplM
OAaA2QsqhiKTtYnFZ0eHMB8GA1UdIwQYMBaAFItlpSlDd9aGN4xGs+na1821tmeR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0MyRC85RTM5RjkzNjhD
OUUxMUVFODdDOEVFNzhDNEY5QUUwMi9pMldsS1VOMzFvWTNqRWF6NmRyWHpiVzJa
NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2kyV2xLVU4zMW9ZM2pFYXo2ZHJYemJXMlo1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0MyRC85RTM5RjkzNjhDOUUxMUVFODdDOEVFNzhDNEY5QUUwMi9pMldsS1VOMzFv
WTNqRWF6NmRyWHpiVzJaNUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAU55UuZNBarp0d7W6vUz22mHUMYnHfh8zSFboWTQl84d/hW76/sw/+
1fL/fq7QGDytQbK+mixtuR96SKMwpajSIYwNga8LSXHhA5BJ7VyPgcBfHis8KI77
g26fOhx9meQplBvcBgIGhXCWT/6U+wQPXV5QOFB4P6QYoEJKKxA41kRfGhOZCwoH
oaKrVQD9bLXqDwbMpPIl5PXZEseGu/Nk+tGbF3o898+t14QOEPThS6E5lhCnbTJz
pgpNu3nCsqpHh0Fl0X4c5diA7SwrSBq/7Pjp7PdGDG0oZySWHLRccYmzT+8wrcZq
oKmgNTSp59aPcmE5sKbQ78LavFFfsU5H
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:57:58 2025 by rpki-client