This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.mft File: 2mDoAmZXA3k4Cm96PuI7nQ5UZHE.mft (raw, json) Hash identifier: /Q90HanbvupM3SYHJh9lIgnqTPl9rJYNQ40uUaLyAcM= Subject key identifier: 71:89:8C:C2:81:B5:3F:F0:94:92:58:24:1C:4A:A6:65:18:5E:0E:4F Authority key identifier: DA:60:E8:02:66:57:03:79:38:0A:6F:7A:3E:E2:3B:9D:0E:54:64:71 Certificate issuer: /CN=A9150FA6/serialNumber=DA60E80266570379380A6F7A3EE23B9D0E546471 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.mft Manifest number: 17 Signing time: Fri 05 Dec 2025 05:42:38 +0000 Manifest this update: Fri 05 Dec 2025 05:42:37 +0000 Manifest next update: Fri 12 Dec 2025 05:42:37 +0000 Files and hashes: 1: 2mDoAmZXA3k4Cm96PuI7nQ5UZHE.crl (hash: Ml2HvUV0SKaU/Hz9pN2RKwFLbI8xDN/xOhKrNzLdhyI=) 2: 154E8BACB58F11F0B4ABC646C4F9AE02.roa (hash: K7ApF1q0nE+oNoll3XB7aSCUFGQ0tkcUujT1HA2Nsxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.crl rsync://rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150FA6, serialNumber=DA60E80266570379380A6F7A3EE23B9D0E546471 Validity Not Before: Dec 5 05:42:37 2025 GMT Not After : Dec 12 05:42:37 2025 GMT Subject: CN=693270ce-7842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:ca:62:ba:b5:f8:c5:4d:33:91:44:68:7d: a1:49:99:26:12:75:84:db:f9:16:a5:28:b7:7d:52: 32:50:62:e9:ad:2e:cc:cd:19:9c:c4:71:14:89:80: 9c:84:92:66:0a:c9:65:e5:a5:5d:f3:ff:c3:c3:ca: f3:be:ac:39:38:5d:72:36:7c:68:bf:80:d4:eb:d9: 64:78:ac:39:7a:d9:48:bc:e2:2b:22:9c:42:2f:1f: 08:ec:d5:a6:dd:91:9f:6b:ee:2b:6a:fa:b5:37:a6: 44:db:e5:ef:fe:3e:47:60:d7:6e:6a:3f:da:30:d8: a8:75:7e:81:a3:9c:9b:4a:9e:55:6b:8b:88:5a:3c: ee:fd:67:8b:16:1f:7f:6e:43:83:e0:3c:8f:0c:ce: c7:50:27:ac:f4:ec:3f:75:c2:49:0b:42:18:9b:1e: 5e:47:31:5d:9e:81:52:67:4b:a4:ea:f1:b9:06:ed: f0:7b:cb:20:12:28:c2:23:04:68:ae:6f:4c:b8:c6: c4:72:be:56:78:b8:25:2e:e5:a9:f6:9f:68:2c:fa: 00:ce:4b:1b:bb:b8:dc:47:7a:ed:f9:65:72:70:75: 80:56:39:95:03:82:26:ec:ed:18:72:18:63:06:71: 67:d2:23:46:00:45:15:02:20:e6:82:55:05:59:45: 4c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:89:8C:C2:81:B5:3F:F0:94:92:58:24:1C:4A:A6:65:18:5E:0E:4F X509v3 Authority Key Identifier: keyid:DA:60:E8:02:66:57:03:79:38:0A:6F:7A:3E:E2:3B:9D:0E:54:64:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:08:8c:d3:cd:e0:b8:6f:c3:17:ae:99:18:c2:4c:a7:7c:49: ee:70:07:27:8b:01:17:d7:89:5a:44:ae:33:ff:34:ac:58:6c: 3d:15:8b:d5:47:aa:77:ad:07:10:6a:2c:c7:9d:6d:0e:d1:c8: fe:21:41:9b:fd:04:85:ca:ef:1f:6a:c9:30:c7:4c:42:ed:23: 96:b4:b9:0e:62:dc:ae:96:d2:7e:12:a9:c9:03:15:c8:55:7d: 41:5a:4a:10:44:dd:b1:45:00:5a:28:51:40:c5:f0:b2:4f:31: c6:86:23:f0:29:50:79:e5:aa:a8:0c:ed:02:c8:f9:9e:59:a2: 63:05:8f:86:de:e5:96:94:80:c0:3c:c7:8f:ee:29:9f:62:99: c4:9a:39:89:28:84:ad:49:68:50:c6:9f:05:f2:b6:54:1d:48: c5:cc:27:d5:c0:64:5a:b0:ca:01:a2:1b:e8:21:aa:3a:f5:19: 3a:03:d1:5b:81:a4:c7:50:a8:88:aa:08:dc:95:f2:cb:bb:c3: 05:60:4f:70:c0:65:b5:4e:7c:79:4a:89:35:b0:1e:46:96:24: 85:05:5a:51:dd:e1:e3:f7:c1:fc:07:b2:d1:32:e4:18:a4:ac: 1e:a6:01:f4:6f:e2:69:09:c1:85:a1:df:dd:71:17:38:05:94: 8e:15:0a:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MEZBNjExMC8GA1UEBRMoREE2MEU4MDI2NjU3MDM3OTM4MEE2RjdBM0VFMjNCOUQw RTU0NjQ3MTAeFw0yNTEyMDUwNTQyMzdaFw0yNTEyMTIwNTQyMzdaMBgxFjAUBgNV BAMTDTY5MzI3MGNlLTc4NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC218piurX4xU0zkURofaFJmSYSdYTb+RalKLd9UjJQYumtLszNGZzEcRSJgJyE kmYKyWXlpV3z/8PDyvO+rDk4XXI2fGi/gNTr2WR4rDl62Ui84isinEIvHwjs1abd kZ9r7itq+rU3pkTb5e/+Pkdg125qP9ow2Kh1foGjnJtKnlVri4haPO79Z4sWH39u Q4PgPI8MzsdQJ6z07D91wkkLQhibHl5HMV2egVJnS6Tq8bkG7fB7yyASKMIjBGiu b0y4xsRyvlZ4uCUu5an2n2gs+gDOSxu7uNxHeu35ZXJwdYBWOZUDgibs7RhyGGMG cWfSI0YARRUCIOaCVQVZRUz/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcYmMwoG1 P/CUklgkHEqmZRheDk8wHwYDVR0jBBgwFoAU2mDoAmZXA3k4Cm96PuI7nQ5UZHEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUwRkE2L0FCRjNEMDFDQjNG QTExRjBBMEFDNDQ3QUM0RjlBRTAyLzJtRG9BbVpYQTNrNENtOTZQdUk3blE1VVpI RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMm1Eb0FtWlhBM2s0Q205NlB1STduUTVVWkhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUw RkE2L0FCRjNEMDFDQjNGQTExRjBBMEFDNDQ3QUM0RjlBRTAyLzJtRG9BbVpYQTNr NENtOTZQdUk3blE1VVpIRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAQIjNPN4LhvwxeumRjCTKd8Se5wByeLARfXiVpErjP/NKxYbD0Vi9VH qnetBxBqLMedbQ7RyP4hQZv9BIXK7x9qyTDHTELtI5a0uQ5i3K6W0n4SqckDFchV fUFaShBE3bFFAFooUUDF8LJPMcaGI/ApUHnlqqgM7QLI+Z5ZomMFj4be5ZaUgMA8 x4/uKZ9imcSaOYkohK1JaFDGnwXytlQdSMXMJ9XAZFqwygGiG+ghqjr1GToD0VuB pMdQqIiqCNyV8su7wwVgT3DAZbVOfHlKiTWwHkaWJIUFWlHd4eP3wfwHstEy5Bik rB6mAfRv4mkJwYWh391xFzgFlI4VCi8= -----END CERTIFICATE-----Generated at Sun Dec 7 02:05:59 2025 by rpki-client