This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft File: 2QaTkaPngEpuvd-dQfLeTZG9UbM.mft (raw, json) Hash identifier: oaHT/d6dX22PULd+K9Qmjtmaom/vLMJarb9hn7lpMAM= Subject key identifier: 22:34:E9:74:11:A4:D0:47:29:25:29:C5:8B:63:4A:BD:04:94:7E:28 Authority key identifier: D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3 Certificate issuer: /CN=A9125C22/serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3 Certificate serial: 06E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft Manifest number: 06D7 Signing time: Mon 22 Dec 2025 21:20:16 +0000 Manifest this update: Mon 22 Dec 2025 21:20:15 +0000 Manifest next update: Mon 29 Dec 2025 21:20:15 +0000 Files and hashes: 1: 2QaTkaPngEpuvd-dQfLeTZG9UbM.crl (hash: CkOlGLIQLozU0XFud8zE+C+FzvZpnoaJTWAuMiNYn68=) 2: 202A51EA52D611EFA0333E23C4F9AE02.roa (hash: Sxl9Vw9Z+DTDShpFQB0WpYJiHDd/mA9uIojiho1C+jo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1762 (0x6e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C22, serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3 Validity Not Before: Dec 22 21:20:15 2025 GMT Not After : Dec 29 21:20:15 2025 GMT Subject: CN=6949b610-072b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9a:f2:f2:3d:bd:c6:73:b4:61:2e:4e:ad:dd: 4e:89:7e:19:9a:92:9c:86:a2:2b:eb:99:07:6b:03: d9:e4:31:22:22:02:d1:88:fa:66:76:e2:df:8f:36: cf:94:0c:36:95:67:23:40:c3:36:47:0d:af:d0:0e: 54:a5:ae:0f:ca:a8:cf:02:81:f8:15:67:1d:34:45: f5:39:75:20:9c:af:87:2d:0a:5c:2e:27:8a:ce:d9: fe:33:38:7b:90:b6:4e:a8:8f:c2:06:16:48:19:60: a5:44:bd:84:9a:ed:57:2c:f0:4f:db:d9:96:3b:f3: 49:0f:4c:2d:d2:43:d2:22:cd:78:eb:fc:ee:50:ac: 76:56:45:00:13:af:45:75:58:96:bf:f0:7f:13:8f: 44:46:d2:b9:31:28:d6:cb:a9:ca:82:7c:e3:63:d8: fc:2e:16:65:15:e9:bb:77:27:34:1b:d0:41:9a:f5: 6a:80:27:a6:dd:74:ce:b6:5b:d3:c4:03:f3:e5:6b: 85:0d:23:d2:27:7a:42:48:01:5a:04:2d:f7:50:24: da:5e:ad:d8:79:c1:a7:bc:f2:fd:be:1c:26:95:53: c9:ac:97:2e:19:c5:cf:46:5f:f5:d7:9d:50:3c:83: 17:0d:a3:0c:b6:33:ca:04:4f:f6:3d:1d:53:b6:29: 8f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:34:E9:74:11:A4:D0:47:29:25:29:C5:8B:63:4A:BD:04:94:7E:28 X509v3 Authority Key Identifier: keyid:D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:49:b5:e4:a8:4b:9c:3e:e5:77:ba:bb:2b:3d:39:c0:0d:e2: 90:b8:eb:3f:f9:11:ec:f4:8b:6b:8f:55:19:1c:0c:d1:e8:9a: 30:45:09:b1:97:7b:37:74:79:0f:ee:c8:4d:b3:25:60:7e:a2: 1a:e4:8c:99:bf:8b:3f:ef:37:d5:5b:82:48:4e:4d:ce:6e:65: 6e:1f:7d:c6:c1:7b:b3:e8:82:54:2a:a6:c4:b7:08:12:93:20: 8d:5b:0e:6a:9b:17:5f:8b:95:2f:20:6e:e9:9d:b1:a5:65:0c: 59:d5:51:57:09:d1:86:30:14:b2:cc:19:c2:e9:fc:fa:6c:f5: e1:73:db:2e:3b:55:80:12:0c:31:27:80:98:0d:9e:37:fb:f4: af:95:0f:4c:39:9d:eb:67:f3:fa:1f:c1:60:a2:ac:2b:ae:4d: 98:21:a1:42:92:46:69:58:ce:20:32:11:b0:2e:b2:2c:be:c9: a4:3e:76:ba:b4:6d:f9:a8:8c:bc:d1:1e:68:e6:4f:af:87:ed: 45:98:6a:b8:c2:68:4e:ea:9f:cf:f6:fe:5b:2d:a6:ca:0b:56: 9d:47:d0:04:2a:6a:4f:c9:67:29:2b:14:79:42:ab:5c:bc:4f: 66:5b:16:3a:63:19:d4:3d:09:2c:36:29:54:71:4d:60:74:9a: 6b:00:33:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDMjIxMTAvBgNVBAUTKEQ5MDY5MzkxQTNFNzgwNEE2RUJEREY5RDQxRjJERTRE OTFCRDUxQjMwHhcNMjUxMjIyMjEyMDE1WhcNMjUxMjI5MjEyMDE1WjAYMRYwFAYD VQQDDA02OTQ5YjYxMC0wNzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pry8j29xnO0YS5Ord1OiX4ZmpKchqIr65kHawPZ5DEiIgLRiPpmduLfjzbP lAw2lWcjQMM2Rw2v0A5Upa4PyqjPAoH4FWcdNEX1OXUgnK+HLQpcLieKztn+Mzh7 kLZOqI/CBhZIGWClRL2Emu1XLPBP29mWO/NJD0wt0kPSIs146/zuUKx2VkUAE69F dViWv/B/E49ERtK5MSjWy6nKgnzjY9j8LhZlFem7dyc0G9BBmvVqgCem3XTOtlvT xAPz5WuFDSPSJ3pCSAFaBC33UCTaXq3YecGnvPL9vhwmlVPJrJcuGcXPRl/1151Q PIMXDaMMtjPKBE/2PR1TtimPMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCI06XQR pNBHKSUpxYtjSr0ElH4oMB8GA1UdIwQYMBaAFNkGk5Gj54BKbr3fnUHy3k2RvVGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMyMi8wNDU2OTVCODdG QUUxMUVCOTc3QjUzMzVDNEY5QUUwMi8yUWFUa2FQbmdFcHV2ZC1kUWZMZVRaRzlV Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRYVRrYVBuZ0VwdXZkLWRRZkxlVFpHOVViTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMyMi8wNDU2OTVCODdGQUUxMUVCOTc3QjUzMzVDNEY5QUUwMi8yUWFUa2FQbmdF cHV2ZC1kUWZMZVRaRzlVYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuSbXkqEucPuV3ursrPTnADeKQuOs/+RHs9Itrj1UZHAzR6JowRQmx l3s3dHkP7shNsyVgfqIa5IyZv4s/7zfVW4JITk3ObmVuH33GwXuz6IJUKqbEtwgS kyCNWw5qmxdfi5UvIG7pnbGlZQxZ1VFXCdGGMBSyzBnC6fz6bPXhc9suO1WAEgwx J4CYDZ43+/SvlQ9MOZ3rZ/P6H8Fgoqwrrk2YIaFCkkZpWM4gMhGwLrIsvsmkPna6 tG35qIy80R5o5k+vh+1FmGq4wmhO6p/P9v5bLabKC1adR9AEKmpPyWcpKxR5Qqtc vE9mWxY6YxnUPQksNilUcU1gdJprADNL -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:31 2025 by rpki-client