This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft File: 2wYwePe5d1L7gdAPqb18UjsclwM.mft (raw, json) Hash identifier: anpJEwhXBAkihUw64b+mhz+NsY2TCyAYGMo9CoQ6qnU= Subject key identifier: 85:78:32:D2:02:9A:C6:3C:2C:58:38:90:F9:BA:9E:0D:76:DB:85:3A Authority key identifier: DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03 Certificate issuer: /CN=A9192698/serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft Manifest number: 0120 Signing time: Fri 05 Dec 2025 02:50:28 +0000 Manifest this update: Fri 05 Dec 2025 02:50:27 +0000 Manifest next update: Fri 12 Dec 2025 02:50:27 +0000 Files and hashes: 1: 2wYwePe5d1L7gdAPqb18UjsclwM.crl (hash: wOS3vLCAYTzGXEXL1PA98lDL8UiT+ekxje/dZaIKQog=) 2: CE042A841E5611EFBEDD1F39C4F9AE02.roa (hash: wBvwqSnNeZ2azP6/kY4estB/Jc4t3M7IdMIc2FaLoNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192698, serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703 Validity Not Before: Dec 5 02:50:27 2025 GMT Not After : Dec 12 02:50:27 2025 GMT Subject: CN=69324874-ac36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:46:62:9c:64:d2:06:b3:4c:56:6c:7d:0e:51: 4e:fb:14:3e:c6:61:0d:d5:20:3b:ef:07:40:49:fd: 22:45:b6:a1:20:8a:60:f8:20:a0:d5:95:cd:e5:a5: 03:0c:93:36:6c:5c:83:e6:87:c2:51:4e:b3:e4:e3: 68:f6:29:cb:77:8c:7e:fb:32:d5:26:ce:d1:85:75: 47:d5:37:ec:24:69:eb:ef:4c:60:1e:c9:b7:61:0d: 1c:0e:78:32:db:65:cd:8b:28:66:41:66:05:64:9c: c5:f5:b2:b5:7e:93:3a:c5:9d:b8:8b:d3:bb:4a:c4: b0:f5:1c:d0:d7:0d:c3:7d:29:2c:3b:a2:a2:f2:6b: ab:78:00:dc:12:22:93:ee:2f:b6:5c:06:d5:44:5e: c7:bb:74:c2:b0:f5:94:d5:e9:70:b1:cb:97:6b:02: 2d:0e:f0:e3:a7:2f:d0:35:ab:8f:db:38:23:6a:fb: 59:8e:c8:59:19:69:79:be:8e:a6:b8:97:5a:64:7f: 09:86:b8:29:5c:2b:0c:cd:54:a4:cf:c1:41:99:1f: a1:a7:35:92:40:ac:19:8c:2a:0b:f9:d3:64:2d:9d: 01:57:16:9f:76:21:5b:9d:ea:7b:e6:d6:3e:0a:d9: f0:e5:25:9c:f5:f8:50:7e:c7:a6:7a:f8:5a:71:1a: 30:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:78:32:D2:02:9A:C6:3C:2C:58:38:90:F9:BA:9E:0D:76:DB:85:3A X509v3 Authority Key Identifier: keyid:DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e7:1f:53:db:30:f9:2a:e0:1e:47:e6:fd:f2:e1:70:a6:6f: 5b:82:07:3b:6b:d5:9e:a9:dd:44:76:27:39:5a:98:2b:cf:27: b6:16:ac:c2:c5:b6:a1:a0:ce:43:77:2b:29:ba:de:6a:ad:1f: 13:72:58:b7:ab:6d:91:5c:af:6d:7e:60:0e:9b:0e:b2:af:3f: fb:f6:58:4b:c0:40:e8:c6:16:a3:90:24:2d:c1:43:7d:ad:d6: f8:b0:8f:fc:af:41:79:fd:17:31:7d:04:d9:38:7e:00:0f:38: ca:a2:0b:65:26:d8:cc:df:8a:b2:d0:0f:c8:22:36:40:fb:e7: d0:7d:20:99:4f:93:60:18:37:19:d5:f8:7c:00:9b:1a:58:41: 7c:fe:e3:0b:b5:ec:e3:4b:31:78:a3:79:d9:e0:ca:dc:5b:d8: e0:e2:95:7c:08:ea:3e:fc:68:36:74:c7:9e:06:e5:af:9e:41: b4:6d:54:cb:aa:e9:5e:f5:d7:df:c9:29:91:d9:7d:9f:cc:72: 23:ee:c3:76:15:d4:55:2e:81:20:16:e4:c6:b7:0a:fb:e5:52: bf:17:b9:b4:ea:16:a0:fc:d1:be:c9:14:f9:12:33:0a:bb:c9: 67:c7:71:81:bf:f7:45:f1:43:e8:73:e5:00:0c:07:56:f3:cf: c4:4a:27:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI2OTgxMTAvBgNVBAUTKERCMDYzMDc4RjdCOTc3NTJGQjgxRDAwRkE5QkQ3QzUy M0IxQzk3MDMwHhcNMjUxMjA1MDI1MDI3WhcNMjUxMjEyMDI1MDI3WjAYMRYwFAYD VQQDEw02OTMyNDg3NC1hYzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEZinGTSBrNMVmx9DlFO+xQ+xmEN1SA77wdASf0iRbahIIpg+CCg1ZXN5aUD DJM2bFyD5ofCUU6z5ONo9inLd4x++zLVJs7RhXVH1TfsJGnr70xgHsm3YQ0cDngy 22XNiyhmQWYFZJzF9bK1fpM6xZ24i9O7SsSw9RzQ1w3DfSksO6Ki8mureADcEiKT 7i+2XAbVRF7Hu3TCsPWU1elwscuXawItDvDjpy/QNauP2zgjavtZjshZGWl5vo6m uJdaZH8JhrgpXCsMzVSkz8FBmR+hpzWSQKwZjCoL+dNkLZ0BVxafdiFbnep75tY+ Ctnw5SWc9fhQfsemevhacRowRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIV4MtIC msY8LFg4kPm6ng1224U6MB8GA1UdIwQYMBaAFNsGMHj3uXdS+4HQD6m9fFI7HJcD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjY5OC9EM0MwRUNFMjFF NTUxMUVGQUM5NTlGMTlDNEY5QUUwMi8yd1l3ZVBlNWQxTDdnZEFQcWIxOFVqc2Ns d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ3WXdlUGU1ZDFMN2dkQVBxYjE4VWpzY2x3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjY5OC9EM0MwRUNFMjFFNTUxMUVGQUM5NTlGMTlDNEY5QUUwMi8yd1l3ZVBlNWQx TDdnZEFQcWIxOFVqc2Nsd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe5x9T2zD5KuAeR+b98uFwpm9bggc7a9Weqd1Edic5Wpgrzye2FqzC xbahoM5Ddysput5qrR8Tcli3q22RXK9tfmAOmw6yrz/79lhLwEDoxhajkCQtwUN9 rdb4sI/8r0F5/RcxfQTZOH4ADzjKogtlJtjM34qy0A/IIjZA++fQfSCZT5NgGDcZ 1fh8AJsaWEF8/uMLtezjSzF4o3nZ4MrcW9jg4pV8COo+/Gg2dMeeBuWvnkG0bVTL qule9dffySmR2X2fzHIj7sN2FdRVLoEgFuTGtwr75VK/F7m06hag/NG+yRT5EjMK u8lnx3GBv/dF8UPoc+UADAdW88/ESieA -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:36 2025 by rpki-client