This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft File: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json) Hash identifier: kv5lVnm0i/VLZjlDxBAhRl9bO3LYNkcO9AvJiNRqJME= Subject key identifier: 35:82:02:06:01:C6:A4:22:CE:1B:FA:85:FB:82:90:A6:0B:C2:F2:C1 Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E Certificate issuer: /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft Manifest number: 6B Signing time: Sun 07 Dec 2025 05:00:31 +0000 Manifest this update: Sun 07 Dec 2025 05:00:31 +0000 Manifest next update: Sun 14 Dec 2025 05:00:31 +0000 Files and hashes: 1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: jm0Ftr6fND1yYjOGHkuTv3lUunGyelCGA6kdb2nRlNs=) 2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: 5ze9WVBdkB3caAS6RW6n0SGf/tYNePtmefl2XUHO5EU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Validity Not Before: Dec 7 05:00:31 2025 GMT Not After : Dec 14 05:00:31 2025 GMT Subject: CN=693509ef-9249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:74:8b:77:1a:89:bf:cc:49:c6:6a:ac:bf:0d: 8b:b0:ff:e6:ff:67:19:3a:f5:bd:a2:b8:97:f8:73: 89:5e:d2:06:a6:eb:54:2c:91:1a:7d:98:51:36:d6: 94:17:af:f7:ca:0b:29:b9:03:36:c7:40:64:8b:e4: a4:e6:ff:d7:42:58:d6:8d:f6:4e:52:2e:45:51:6e: 06:da:3e:a2:2e:d9:17:db:c7:f7:c1:f2:fc:ab:ff: c9:2d:87:c0:62:f1:95:5d:f2:eb:f2:87:00:dd:ff: 84:0f:7a:95:72:0d:c8:ba:00:de:06:9c:75:db:aa: e7:19:9d:dd:4b:28:8a:c0:49:a7:a8:9b:66:9d:5f: b3:e3:de:93:cd:85:ff:eb:68:93:44:8a:55:af:a5: 44:2a:73:35:bc:cb:9b:70:57:34:f6:4d:4e:87:bc: cc:bb:f9:83:d7:4b:04:06:d0:66:bc:d9:63:d4:1d: 21:9b:fa:ff:c6:eb:4a:cd:19:db:83:af:dc:5f:1f: 3b:bd:9d:42:b2:c2:11:1d:bf:0e:b0:59:41:ea:ce: e4:32:18:57:91:05:e7:8c:bf:d7:6b:5e:e7:ff:08: 3d:63:06:67:27:07:f0:70:19:da:31:4a:e7:b3:66: 80:29:68:1d:c5:c3:30:0e:ca:0c:35:3e:cc:61:78: c1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:82:02:06:01:C6:A4:22:CE:1B:FA:85:FB:82:90:A6:0B:C2:F2:C1 X509v3 Authority Key Identifier: keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:31:14:ef:dc:51:95:41:29:35:8c:5f:41:a3:ca:7f:61:ab: 21:bd:06:63:32:12:d3:06:dd:f6:0d:31:97:b6:0b:ab:07:0b: e4:23:ea:7c:7b:54:01:24:c3:23:5c:dd:43:c8:00:d7:9b:77: f8:2e:27:20:47:c9:5e:bf:92:3a:8a:a1:71:26:6d:fa:c3:ec: 73:b3:05:76:84:01:95:ce:45:2e:0a:03:3e:95:5b:ec:83:0f: 43:b6:ab:d9:f9:bc:34:15:71:4d:de:dc:ff:56:d0:4b:88:2a: df:ec:f7:68:c4:10:98:61:50:d1:00:af:6c:b3:8b:ce:8f:03: 1b:60:eb:87:dd:cf:01:c3:cf:6a:ec:fc:ab:1c:6f:11:17:82: 34:5c:87:12:ca:8d:cb:23:db:cb:3d:b9:40:87:26:a6:8a:b0: dc:e0:1b:1e:99:58:66:ac:bf:76:b9:b6:be:bb:88:59:c3:85: ed:d7:0d:7e:0d:c8:18:a7:ce:99:e5:70:75:38:0d:25:b1:5a: 92:5a:6c:e2:5a:69:17:5d:de:a2:3a:40:2b:03:d2:88:48:0d: 7f:82:51:69:d4:33:c5:5f:72:a8:e5:4f:2e:71:6f:2d:e4:86: 4f:03:25:34:4e:4a:6c:b6:84:e5:67:42:38:cc:d3:d3:5d:8d: 56:2c:f2:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzA0OTExMC8GA1UEBRMoRDlEMUIwNTVGRUZDODlGNTgwM0E3RkE4RTJCOTAyNjE5 RjMzOEQ4RTAeFw0yNTEyMDcwNTAwMzFaFw0yNTEyMTQwNTAwMzFaMBgxFjAUBgNV BAMTDTY5MzUwOWVmLTkyNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBdIt3Gom/zEnGaqy/DYuw/+b/Zxk69b2iuJf4c4le0gam61QskRp9mFE21pQX r/fKCym5AzbHQGSL5KTm/9dCWNaN9k5SLkVRbgbaPqIu2Rfbx/fB8vyr/8kth8Bi 8ZVd8uvyhwDd/4QPepVyDci6AN4GnHXbqucZnd1LKIrASaeom2adX7Pj3pPNhf/r aJNEilWvpUQqczW8y5twVzT2TU6HvMy7+YPXSwQG0Ga82WPUHSGb+v/G60rNGduD r9xfHzu9nUKywhEdvw6wWUHqzuQyGFeRBeeMv9drXuf/CD1jBmcnB/BwGdoxSuez ZoApaB3FwzAOygw1PsxheMGtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNYICBgHG pCLOG/qF+4KQpgvC8sEwHwYDVR0jBBgwFoAU2dGwVf78ifWAOn+o4rkCYZ8zjY4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MDQ5L0IwOUNCRDY2MkM2 NjExRjA5REE1NkIwQkM0RjlBRTAyLzJkR3dWZjc4aWZXQU9uLW80cmtDWVo4empZ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmRHd1ZmNzhpZldBT24tbzRya0NZWjh6alk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MDQ5L0IwOUNCRDY2MkM2NjExRjA5REE1NkIwQkM0RjlBRTAyLzJkR3dWZjc4aWZX QU9uLW80cmtDWVo4empZNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEAxFO/cUZVBKTWMX0Gjyn9hqyG9BmMyEtMG3fYNMZe2C6sHC+Qj6nx7 VAEkwyNc3UPIANebd/guJyBHyV6/kjqKoXEmbfrD7HOzBXaEAZXORS4KAz6VW+yD D0O2q9n5vDQVcU3e3P9W0EuIKt/s92jEEJhhUNEAr2yzi86PAxtg64fdzwHDz2rs /KscbxEXgjRchxLKjcsj28s9uUCHJqaKsNzgGx6ZWGasv3a5tr67iFnDhe3XDX4N yBinzpnlcHU4DSWxWpJabOJaaRdd3qI6QCsD0ohIDX+CUWnUM8VfcqjlTy5xby3k hk8DJTROSmy2hOVnQjjM09NdjVYs8l0= -----END CERTIFICATE-----Generated at Mon Dec 8 06:02:10 2025 by rpki-client