This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.mft File: 2mDoAmZXA3k4Cm96PuI7nQ5UZHE.mft (raw, json) Hash identifier: OfhG2Mb9uCEFFk2u37uXxcV/7DG4lKUzOpCXwbLN2ys= Subject key identifier: 02:8D:98:CE:DD:53:CD:16:DA:02:F3:34:5D:D3:DA:A1:E0:DA:8D:8A Authority key identifier: DA:60:E8:02:66:57:03:79:38:0A:6F:7A:3E:E2:3B:9D:0E:54:64:71 Certificate issuer: /CN=A9150FA6/serialNumber=DA60E80266570379380A6F7A3EE23B9D0E546471 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.mft Manifest number: 20 Signing time: Tue 23 Dec 2025 06:37:34 +0000 Manifest this update: Tue 23 Dec 2025 06:37:34 +0000 Manifest next update: Tue 30 Dec 2025 06:37:34 +0000 Files and hashes: 1: 2mDoAmZXA3k4Cm96PuI7nQ5UZHE.crl (hash: qBHgPEt4MhQC/86tioiVNwfizKVjgPNpY5X87AKO+uI=) 2: 154E8BACB58F11F0B4ABC646C4F9AE02.roa (hash: K7ApF1q0nE+oNoll3XB7aSCUFGQ0tkcUujT1HA2Nsxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.crl rsync://rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150FA6, serialNumber=DA60E80266570379380A6F7A3EE23B9D0E546471 Validity Not Before: Dec 23 06:37:34 2025 GMT Not After : Dec 30 06:37:34 2025 GMT Subject: CN=694a38ae-4ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:4a:87:23:ac:53:3c:49:0e:de:6e:79:22: 2b:93:b0:b3:7e:a1:43:cb:c6:75:54:04:86:00:35: c2:6e:1b:69:6d:94:68:76:10:ee:86:36:c4:83:de: 6b:54:15:e7:df:f5:15:3e:8d:50:87:d4:15:d3:37: 42:18:aa:db:ea:61:4f:63:73:1a:73:84:10:70:d3: 44:77:36:b1:ea:98:d8:4c:e4:21:20:e9:12:73:7a: 29:c4:66:0a:59:39:53:9e:cc:b1:94:c8:9f:65:4e: ac:09:0a:d0:df:81:5b:96:8e:1d:11:c5:b6:d4:b9: dc:01:b5:ef:e1:3c:dc:2d:ca:2b:12:a9:8c:45:ff: 02:12:b6:e5:c5:d1:c5:36:b6:ab:cb:f3:7f:e4:c9: 24:2d:25:da:2f:c5:12:28:82:6f:36:7a:91:29:5a: 9b:9c:da:d5:82:00:82:e3:c1:3a:4a:73:ad:13:24: 08:a4:dd:a9:32:31:70:1b:4c:cd:f6:44:23:43:3d: cf:23:29:c6:0d:2e:8c:8f:26:e5:07:f7:45:85:d4: 41:0e:02:c9:21:48:05:fd:43:20:c6:bb:b8:5c:dd: a0:64:11:67:95:e9:ec:10:71:4e:22:55:23:17:8e: 89:f9:d4:f4:48:32:d3:00:28:e3:de:0d:16:4b:07: a6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8D:98:CE:DD:53:CD:16:DA:02:F3:34:5D:D3:DA:A1:E0:DA:8D:8A X509v3 Authority Key Identifier: keyid:DA:60:E8:02:66:57:03:79:38:0A:6F:7A:3E:E2:3B:9D:0E:54:64:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6f:17:48:7f:72:af:2e:d0:e5:2e:c6:20:9e:32:d3:df:29: 5c:17:d4:59:55:32:d5:50:38:35:3f:67:de:07:dc:65:0e:05: 38:08:fd:00:7d:25:ce:aa:b3:e8:fd:01:0f:9c:0d:d3:29:12: 28:2e:a7:35:cf:17:61:3b:bf:1b:dd:d5:c9:f2:bf:7b:1d:95: a7:e3:71:b5:e6:71:c2:59:bc:1c:e7:35:45:bc:de:af:66:e2: b1:54:7d:b2:8e:92:42:73:4d:03:df:10:a6:80:3c:43:71:96: ab:8d:46:d8:e8:dc:45:ef:01:50:36:0a:33:2e:35:39:b8:5c: bf:7e:0a:71:40:03:35:be:0e:c1:63:d9:5c:fe:aa:35:6a:1a: c4:97:03:d8:10:6c:6f:69:8b:92:10:ef:59:c9:f9:c3:a1:33: 69:08:f1:fd:f4:5e:e5:01:d8:bb:dd:a9:b4:36:6d:5f:f4:da: 90:07:2f:70:14:87:9f:9f:c9:db:2e:18:3e:3d:ca:49:6a:1f: c8:be:f8:54:bd:62:86:b7:ad:02:01:c9:d7:81:53:22:9a:dd: 70:91:6b:72:fd:f9:9d:44:8a:5f:70:22:13:54:cc:69:18:25: e9:ce:f6:f9:9e:90:68:01:99:b1:df:01:11:cd:0d:54:94:54: 22:0c:62:b5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MEZBNjExMC8GA1UEBRMoREE2MEU4MDI2NjU3MDM3OTM4MEE2RjdBM0VFMjNCOUQw RTU0NjQ3MTAeFw0yNTEyMjMwNjM3MzRaFw0yNTEyMzAwNjM3MzRaMBgxFjAUBgNV BAMMDTY5NGEzOGFlLTRhZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFw0qHI6xTPEkO3m55IiuTsLN+oUPLxnVUBIYANcJuG2ltlGh2EO6GNsSD3mtU Feff9RU+jVCH1BXTN0IYqtvqYU9jcxpzhBBw00R3NrHqmNhM5CEg6RJzeinEZgpZ OVOezLGUyJ9lTqwJCtDfgVuWjh0RxbbUudwBte/hPNwtyisSqYxF/wIStuXF0cU2 tqvL83/kySQtJdovxRIogm82epEpWpuc2tWCAILjwTpKc60TJAik3akyMXAbTM32 RCNDPc8jKcYNLoyPJuUH90WF1EEOAskhSAX9QyDGu7hc3aBkEWeV6ewQcU4iVSMX jon51PRIMtMAKOPeDRZLB6YdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAo2Yzt1T zRbaAvM0XdPaoeDajYowHwYDVR0jBBgwFoAU2mDoAmZXA3k4Cm96PuI7nQ5UZHEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUwRkE2L0FCRjNEMDFDQjNG QTExRjBBMEFDNDQ3QUM0RjlBRTAyLzJtRG9BbVpYQTNrNENtOTZQdUk3blE1VVpI RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMm1Eb0FtWlhBM2s0Q205NlB1STduUTVVWkhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUw RkE2L0FCRjNEMDFDQjNGQTExRjBBMEFDNDQ3QUM0RjlBRTAyLzJtRG9BbVpYQTNr NENtOTZQdUk3blE1VVpIRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHxvF0h/cq8u0OUuxiCeMtPfKVwX1FlVMtVQODU/Z94H3GUOBTgI/QB9 Jc6qs+j9AQ+cDdMpEigupzXPF2E7vxvd1cnyv3sdlafjcbXmccJZvBznNUW83q9m 4rFUfbKOkkJzTQPfEKaAPENxlquNRtjo3EXvAVA2CjMuNTm4XL9+CnFAAzW+DsFj 2Vz+qjVqGsSXA9gQbG9pi5IQ71nJ+cOhM2kI8f30XuUB2LvdqbQ2bV/02pAHL3AU h5+fydsuGD49yklqH8i++FS9Yoa3rQIBydeBUyKa3XCRa3L9+Z1Eil9wIhNUzGkY JenO9vmekGgBmbHfARHNDVSUVCIMYrU= -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:48 2025 by rpki-client