This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft File: 2m6UHNv-AaruCRs_lVldbUAYMW0.mft (raw, json) Hash identifier: 9+TlZPXBwqGLwOp34ET/pr/yXMzbsfUr+HhN7OxlUjk= Subject key identifier: 5B:3F:B7:FC:45:F6:FF:68:FD:C6:EC:67:0C:3E:18:0F:DD:65:1A:49 Authority key identifier: DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D Certificate issuer: /CN=A9122EBD/serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D Certificate serial: 063F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft Manifest number: 0639 Signing time: Mon 22 Dec 2025 21:53:51 +0000 Manifest this update: Mon 22 Dec 2025 21:53:51 +0000 Manifest next update: Mon 29 Dec 2025 21:53:51 +0000 Files and hashes: 1: 2m6UHNv-AaruCRs_lVldbUAYMW0.crl (hash: /6o6krISxkvfGYmdiCfcQ3heaqh+GjnE7KV7XuVZf98=) 2: 1576F19ABC5C11EB831EC25AC4F9AE02.roa (hash: JTt1lcwJJ/VlJRR1mPyJ+td5e5c2alDgtGmRBoxCA5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1599 (0x63f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122EBD, serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D Validity Not Before: Dec 22 21:53:51 2025 GMT Not After : Dec 29 21:53:51 2025 GMT Subject: CN=6949bdef-a422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f1:79:8e:5d:0c:b5:1a:2a:59:29:7a:0d:d9: b3:bc:19:46:7e:97:64:55:ac:3d:6d:ae:eb:86:83: 34:77:19:e6:95:72:50:45:07:9e:1e:11:1a:65:4f: ea:96:58:cf:69:76:10:11:c4:08:ef:4c:00:2c:6d: 3f:1f:78:6e:83:52:bb:59:c7:db:59:e3:5d:a3:1a: 7d:b2:3f:d3:af:34:a4:e8:83:f5:d9:0c:c8:6c:69: 62:58:b2:6f:d2:14:6a:dc:58:3f:dd:57:5e:45:ab: 8f:0c:d9:fd:0e:95:40:1f:f6:c4:7c:1f:ae:0d:7f: a7:45:5b:7d:02:be:ff:fb:27:10:41:6f:a5:aa:98: f1:73:ff:0e:ad:58:f1:e5:6b:54:06:54:30:a9:4b: 96:98:69:d3:23:23:77:64:4e:7d:89:dc:a8:90:da: 98:6d:aa:52:d0:79:cb:43:66:17:ab:be:29:f5:d0: a1:44:96:7a:5d:ac:43:25:d0:d3:be:37:da:46:1c: 40:d5:cf:34:d9:f6:75:6c:d3:4a:d7:e3:28:55:e9: e6:15:f7:49:4e:28:78:86:51:9b:2a:22:34:06:18: 15:32:1a:27:c9:09:23:0a:fc:70:c3:48:f0:39:b9: 94:bf:b4:a9:93:a7:a1:ca:7c:a3:02:8d:a8:5e:10: 59:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3F:B7:FC:45:F6:FF:68:FD:C6:EC:67:0C:3E:18:0F:DD:65:1A:49 X509v3 Authority Key Identifier: keyid:DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:5a:e5:9e:1b:14:1a:e4:6a:bf:31:14:20:7e:c8:78:bb:46: e2:9b:43:a0:cd:c1:69:cc:68:30:c7:25:57:76:85:9b:4c:f9: 76:df:09:34:4b:9f:27:89:22:8d:2f:2d:f7:2e:49:df:ca:9c: 2f:0a:d4:d2:e9:46:e2:80:e9:56:93:21:31:4d:10:04:d3:a2: a6:d9:35:b6:09:6c:5a:3d:71:45:e4:4d:13:4b:b7:30:1b:83: 3c:da:d9:bb:38:ab:78:05:d0:03:6c:41:79:90:e2:6d:2e:38: 1b:3d:9b:69:94:73:e2:1f:84:cb:71:47:bb:df:5f:56:3b:3d: 84:0e:4a:7a:96:80:2c:4f:b3:73:32:d9:e9:87:1a:a1:b3:77: 8c:ca:f1:c0:f4:d5:34:8f:d1:f4:f2:5e:43:de:43:76:ac:da: 6f:67:47:ed:af:0c:0e:3e:2a:a8:be:9d:b2:ba:dc:8f:68:30: 41:04:1d:3e:bb:71:de:4f:84:72:c9:61:ad:3e:49:d3:8b:dd: 32:de:3a:09:68:18:af:f8:12:9f:12:e3:a5:00:6a:94:dc:f1: f2:a5:56:70:d0:1c:de:26:0e:0f:db:b7:5a:0a:05:2b:9e:97: 16:27:64:34:e5:77:b0:01:2d:a3:ed:20:e7:59:6a:b0:02:8b: 7d:ad:79:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFQkQxMTAvBgNVBAUTKERBNkU5NDFDREJGRTAxQUFFRTA5MUIzRjk1NTk1RDZE NDAxODMxNkQwHhcNMjUxMjIyMjE1MzUxWhcNMjUxMjI5MjE1MzUxWjAYMRYwFAYD VQQDDA02OTQ5YmRlZi1hNDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvF5jl0MtRoqWSl6DdmzvBlGfpdkVaw9ba7rhoM0dxnmlXJQRQeeHhEaZU/q lljPaXYQEcQI70wALG0/H3hug1K7WcfbWeNdoxp9sj/TrzSk6IP12QzIbGliWLJv 0hRq3Fg/3VdeRauPDNn9DpVAH/bEfB+uDX+nRVt9Ar7/+ycQQW+lqpjxc/8OrVjx 5WtUBlQwqUuWmGnTIyN3ZE59idyokNqYbapS0HnLQ2YXq74p9dChRJZ6XaxDJdDT vjfaRhxA1c802fZ1bNNK1+MoVenmFfdJTih4hlGbKiI0BhgVMhonyQkjCvxww0jw ObmUv7Spk6ehynyjAo2oXhBZ8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFs/t/xF 9v9o/cbsZww+GA/dZRpJMB8GA1UdIwQYMBaAFNpulBzb/gGq7gkbP5VZXW1AGDFt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVCRC8zMTIwMDY1RUJD NUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFhcnVDUnNfbFZsZGJVQVlN VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtNlVITnYtQWFydUNSc19sVmxkYlVBWU1XMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkVCRC8zMTIwMDY1RUJDNUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFh cnVDUnNfbFZsZGJVQVlNVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWWuWeGxQa5Gq/MRQgfsh4u0bim0OgzcFpzGgwxyVXdoWbTPl23wk0 S58niSKNLy33LknfypwvCtTS6UbigOlWkyExTRAE06Km2TW2CWxaPXFF5E0TS7cw G4M82tm7OKt4BdADbEF5kOJtLjgbPZtplHPiH4TLcUe7319WOz2EDkp6loAsT7Nz Mtnphxqhs3eMyvHA9NU0j9H08l5D3kN2rNpvZ0ftrwwOPiqovp2yutyPaDBBBB0+ u3HeT4RyyWGtPknTi90y3joJaBiv+BKfEuOlAGqU3PHypVZw0BzeJg4P27daCgUr npcWJ2Q05XewAS2j7SDnWWqwAot9rXkj -----END CERTIFICATE-----Generated at Tue Dec 23 20:56:55 2025 by rpki-client