This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
File: 2CWolzNYl8B-dpODimvyAnZYDwM.mft (raw, json)
Hash identifier: xBoM0a7VjrC4pLd+ha/6IYk2vk4yT70XZ3fwRjbA9SQ=
Subject key identifier: 1F:6A:42:77:C0:08:D6:37:19:7B:D8:29:77:E5:FF:BF:03:7B:FF:23
Authority key identifier: D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03
Certificate issuer: /CN=A9199DE2/serialNumber=D825A897335897C07E7693838A6BF20276580F03
Certificate serial: 0667
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
Manifest number: 065C
Signing time: Sat 06 Dec 2025 21:31:14 +0000
Manifest this update: Sat 06 Dec 2025 21:31:14 +0000
Manifest next update: Sat 13 Dec 2025 21:31:14 +0000
Files and hashes: 1: 2CWolzNYl8B-dpODimvyAnZYDwM.crl (hash: 3C2iGGLTbBy+9Jyie/9sc/X3HjXvn2phPlPUed4OAIQ=)
2: E6ECE6E6104C11EC9074E586C4F9AE02.roa (hash: 77Yfn2zZf59rOT/IVF3xBzYxwVSoxkPTednWePSlyc0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.crl
rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1639 (0x667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199DE2, serialNumber=D825A897335897C07E7693838A6BF20276580F03
Validity
Not Before: Dec 6 21:31:14 2025 GMT
Not After : Dec 13 21:31:14 2025 GMT
Subject: CN=6934a0a2-226d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:9a:c8:de:9d:ae:ee:26:b4:01:6f:fd:f0:
35:d4:69:9d:31:ea:10:b4:1b:3f:fc:11:95:ca:1e:
16:33:d3:6c:67:cc:7f:c5:6e:38:cd:6e:1a:75:2f:
67:f1:4a:25:89:e4:76:e2:92:31:0c:be:6e:75:33:
a1:e0:5e:fe:cf:d5:7d:ab:32:f1:8e:3b:52:90:af:
55:54:d3:31:7c:e3:97:97:93:03:65:7a:f2:42:82:
5d:79:a5:ee:28:53:fa:84:37:29:b0:47:6f:67:14:
ce:a9:33:9d:89:d9:3d:94:39:2c:e5:fa:49:09:f9:
7a:79:15:12:73:28:dc:aa:b4:d0:a3:1e:ee:b1:20:
cd:d3:c6:31:77:18:65:0f:64:4b:2c:58:e2:27:79:
06:11:b0:1f:53:0b:f0:be:dc:8f:41:0a:9a:7b:ee:
f1:d7:9d:42:4a:20:10:f5:85:99:f5:20:c0:71:55:
21:02:c5:d0:70:4c:4d:c5:de:fb:9e:4c:21:ee:a2:
e2:b9:ce:11:83:6a:2c:50:ca:e8:fb:55:b5:33:99:
83:bb:79:38:25:c5:db:97:35:7b:f5:ec:69:56:63:
01:e7:bb:22:8e:01:67:59:62:e3:9a:9e:de:69:b9:
a5:27:ca:25:fe:65:19:e0:49:22:2a:bf:06:d5:a8:
3a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6A:42:77:C0:08:D6:37:19:7B:D8:29:77:E5:FF:BF:03:7B:FF:23
X509v3 Authority Key Identifier:
keyid:D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a8:1c:c0:5a:08:b0:5f:e2:15:22:9b:c9:97:51:82:3f:95:
5d:7c:71:73:e9:f7:be:0f:d8:28:09:5f:45:31:35:f7:a7:5c:
87:77:9b:78:45:3c:a1:b2:3d:03:48:f8:3e:33:1d:c4:0f:55:
44:30:90:83:d8:78:91:7f:6e:73:c0:d1:4c:d6:86:e8:30:2d:
41:72:3b:68:aa:b7:f6:00:8b:23:a2:d5:72:8c:d1:e6:86:e7:
40:f8:05:64:93:c6:8f:82:1a:a1:75:23:c7:e0:04:ab:3e:7a:
45:b9:3c:ad:9a:32:ef:be:74:7b:b2:b1:bf:71:93:f2:f1:c8:
23:f5:31:9a:81:fa:1a:cd:62:a7:0f:f2:f5:4c:72:5b:0b:14:
0b:07:5f:b1:54:b3:49:bc:f9:22:73:03:c4:fa:68:4a:e7:04:
8b:e3:37:36:79:d0:53:06:ec:a3:dc:1c:23:5f:76:7c:83:40:
98:fe:eb:ea:ca:b4:6d:32:0b:1e:d9:47:e5:b6:e7:8e:de:eb:
e8:95:ea:35:58:8d:62:c8:69:12:b5:e9:4d:08:24:35:90:a5:
36:62:6a:06:97:b1:c7:a3:6c:02:e6:55:bf:0f:2c:d9:65:0d:
0f:e7:8b:b6:08:66:8b:0c:68:54:12:36:4b:e1:8b:9b:e9:ad:
c5:b3:4f:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlERTIxMTAvBgNVBAUTKEQ4MjVBODk3MzM1ODk3QzA3RTc2OTM4MzhBNkJGMjAy
NzY1ODBGMDMwHhcNMjUxMjA2MjEzMTE0WhcNMjUxMjEzMjEzMTE0WjAYMRYwFAYD
VQQDEw02OTM0YTBhMi0yMjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr9+ayN6dru4mtAFv/fA11GmdMeoQtBs//BGVyh4WM9NsZ8x/xW44zW4adS9n
8UolieR24pIxDL5udTOh4F7+z9V9qzLxjjtSkK9VVNMxfOOXl5MDZXryQoJdeaXu
KFP6hDcpsEdvZxTOqTOdidk9lDks5fpJCfl6eRUScyjcqrTQox7usSDN08Yxdxhl
D2RLLFjiJ3kGEbAfUwvwvtyPQQqae+7x151CSiAQ9YWZ9SDAcVUhAsXQcExNxd77
nkwh7qLiuc4Rg2osUMro+1W1M5mDu3k4JcXblzV79expVmMB57sijgFnWWLjmp7e
abmlJ8ol/mUZ4EkiKr8G1ag6awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9qQnfA
CNY3GXvYKXfl/78De/8jMB8GA1UdIwQYMBaAFNglqJczWJfAfnaTg4pr8gJ2WA8D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OURFMi9BM0E1MjEwNkFF
RDAxMUVCQkYzRkQ3NjNDNEY5QUUwMi8yQ1dvbHpOWWw4Qi1kcE9EaW12eUFuWllE
d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJDV29sek5ZbDhCLWRwT0RpbXZ5QW5aWUR3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OURFMi9BM0E1MjEwNkFFRDAxMUVCQkYzRkQ3NjNDNEY5QUUwMi8yQ1dvbHpOWWw4
Qi1kcE9EaW12eUFuWllEd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqqBzAWgiwX+IVIpvJl1GCP5VdfHFz6fe+D9goCV9FMTX3p1yHd5t4
RTyhsj0DSPg+Mx3ED1VEMJCD2HiRf25zwNFM1oboMC1Bcjtoqrf2AIsjotVyjNHm
hudA+AVkk8aPghqhdSPH4ASrPnpFuTytmjLvvnR7srG/cZPy8cgj9TGagfoazWKn
D/L1THJbCxQLB1+xVLNJvPkicwPE+mhK5wSL4zc2edBTBuyj3BwjX3Z8g0CY/uvq
yrRtMgse2UfltueO3uvoleo1WI1iyGkStelNCCQ1kKU2YmoGl7HHo2wC5lW/DyzZ
ZQ0P54u2CGaLDGhUEjZL4Yub6a3Fs0+Q
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:40:02 2025 by rpki-client