This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft File: 2CWolzNYl8B-dpODimvyAnZYDwM.mft (raw, json) Hash identifier: IGwBL79lJfO10hYeGFs1Y/TjD1OaIZY8G9keowOJpds= Subject key identifier: 92:51:B2:07:19:33:91:79:34:50:3D:C8:F2:7C:DF:F7:B3:BB:11:79 Authority key identifier: D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03 Certificate issuer: /CN=A9199DE2/serialNumber=D825A897335897C07E7693838A6BF20276580F03 Certificate serial: 066F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft Manifest number: 0664 Signing time: Mon 22 Dec 2025 21:48:57 +0000 Manifest this update: Mon 22 Dec 2025 21:48:57 +0000 Manifest next update: Mon 29 Dec 2025 21:48:57 +0000 Files and hashes: 1: 2CWolzNYl8B-dpODimvyAnZYDwM.crl (hash: zj25CHh7ib62+3cuXGbSJFvQvmThEjyJ4Bw6ljMjDSo=) 2: E6ECE6E6104C11EC9074E586C4F9AE02.roa (hash: 77Yfn2zZf59rOT/IVF3xBzYxwVSoxkPTednWePSlyc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.crl rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1647 (0x66f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199DE2, serialNumber=D825A897335897C07E7693838A6BF20276580F03 Validity Not Before: Dec 22 21:48:57 2025 GMT Not After : Dec 29 21:48:57 2025 GMT Subject: CN=6949bcc9-7652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3c:72:1b:b8:2b:e5:b8:bf:86:68:2b:6e:95: e4:b6:a1:7e:2d:24:a4:0c:fb:15:61:fc:fe:e1:64: 70:f9:1e:70:d0:41:bb:78:72:1d:23:3f:3a:93:71: 4e:93:b6:91:a3:21:74:05:de:7f:27:66:6d:4f:66: 1a:2f:47:7d:7e:14:54:46:98:09:2e:93:46:ab:cf: 4f:7a:80:11:8e:6c:c0:3e:50:0d:fc:cf:ec:55:77: 77:5f:ec:13:2a:e8:1a:ff:5c:c4:8b:8d:56:7e:7a: 61:ee:65:a0:c3:39:d0:97:24:a1:b4:67:d0:2c:93: b4:29:26:63:20:fe:1e:67:c5:6b:b8:5d:e1:02:15: a4:7e:d1:a3:95:51:5a:f0:3e:ab:fc:bc:13:d9:ce: 54:af:58:b9:15:1d:ec:56:26:47:c6:05:69:03:32: db:eb:91:15:91:a3:df:19:f8:1b:87:f7:1a:65:98: 33:18:ec:bd:d6:27:4b:51:48:4f:b5:72:1a:b5:4d: bf:4b:95:3f:89:86:1f:82:43:a9:c2:90:8d:b8:05: ec:60:09:b8:a4:1a:dd:da:bb:78:cf:a2:19:78:21: 0d:b4:ee:37:46:3c:74:22:b3:67:ee:80:2b:3c:97: f4:75:63:a5:dc:fc:8f:00:d3:79:59:dc:40:7d:e9: 98:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:51:B2:07:19:33:91:79:34:50:3D:C8:F2:7C:DF:F7:B3:BB:11:79 X509v3 Authority Key Identifier: keyid:D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:ab:0d:4d:e9:46:db:11:51:e8:2d:ce:0c:b7:df:55:ca:ff: a8:c2:b2:9a:fc:2c:b6:53:b6:6d:81:36:7e:9e:7e:77:a5:e8: a8:4f:82:71:b3:c6:72:3a:c0:70:1a:f6:9f:93:97:3d:59:c0: bc:bc:08:f2:dd:b3:fe:5b:e9:76:e1:3f:03:39:be:77:1f:28: fc:40:a7:c0:36:ce:1a:a9:eb:79:58:47:ce:0f:d4:6b:0c:81: 6a:2e:92:64:f3:9b:f0:86:20:29:1f:b0:e1:05:6e:e3:ab:80: f5:b2:30:c2:e7:d9:a6:80:36:7c:6c:b8:b5:fa:2e:71:75:46: fd:76:5b:6a:27:bf:51:6b:35:c6:78:3c:55:83:57:5c:19:f5: bd:4e:d3:75:cb:47:83:0f:86:cb:d5:80:f9:09:ba:95:40:71: 18:a2:40:c0:40:76:86:69:e6:bc:1f:d2:3b:a4:51:f3:63:fb: dd:e8:49:ec:5e:99:c8:41:0e:43:a0:8f:9b:05:22:9b:3a:82: 8c:4f:b0:76:d0:eb:ab:a2:43:c2:14:bb:17:7e:c0:99:81:d3: e9:5a:50:b0:40:01:f9:c6:32:d2:da:8c:42:89:31:f0:8d:0f: 1e:1e:f1:c8:fa:ac:81:1a:10:0c:e4:15:5b:80:bb:b9:2f:12: 81:4e:cd:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlERTIxMTAvBgNVBAUTKEQ4MjVBODk3MzM1ODk3QzA3RTc2OTM4MzhBNkJGMjAy NzY1ODBGMDMwHhcNMjUxMjIyMjE0ODU3WhcNMjUxMjI5MjE0ODU3WjAYMRYwFAYD VQQDDA02OTQ5YmNjOS03NjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlDxyG7gr5bi/hmgrbpXktqF+LSSkDPsVYfz+4WRw+R5w0EG7eHIdIz86k3FO k7aRoyF0Bd5/J2ZtT2YaL0d9fhRURpgJLpNGq89PeoARjmzAPlAN/M/sVXd3X+wT Kuga/1zEi41Wfnph7mWgwznQlyShtGfQLJO0KSZjIP4eZ8VruF3hAhWkftGjlVFa 8D6r/LwT2c5Ur1i5FR3sViZHxgVpAzLb65EVkaPfGfgbh/caZZgzGOy91idLUUhP tXIatU2/S5U/iYYfgkOpwpCNuAXsYAm4pBrd2rt4z6IZeCENtO43Rjx0IrNn7oAr PJf0dWOl3PyPANN5WdxAfemY+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJRsgcZ M5F5NFA9yPJ83/ezuxF5MB8GA1UdIwQYMBaAFNglqJczWJfAfnaTg4pr8gJ2WA8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OURFMi9BM0E1MjEwNkFF RDAxMUVCQkYzRkQ3NjNDNEY5QUUwMi8yQ1dvbHpOWWw4Qi1kcE9EaW12eUFuWllE d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDV29sek5ZbDhCLWRwT0RpbXZ5QW5aWUR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OURFMi9BM0E1MjEwNkFFRDAxMUVCQkYzRkQ3NjNDNEY5QUUwMi8yQ1dvbHpOWWw4 Qi1kcE9EaW12eUFuWllEd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCqw1N6UbbEVHoLc4Mt99Vyv+owrKa/Cy2U7ZtgTZ+nn53peioT4Jx s8ZyOsBwGvafk5c9WcC8vAjy3bP+W+l24T8DOb53Hyj8QKfANs4aqet5WEfOD9Rr DIFqLpJk85vwhiApH7DhBW7jq4D1sjDC59mmgDZ8bLi1+i5xdUb9dltqJ79RazXG eDxVg1dcGfW9TtN1y0eDD4bL1YD5CbqVQHEYokDAQHaGaea8H9I7pFHzY/vd6Ens XpnIQQ5DoI+bBSKbOoKMT7B20OurokPCFLsXfsCZgdPpWlCwQAH5xjLS2oxCiTHw jQ8eHvHI+qyBGhAM5BVbgLu5LxKBTs1y -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:33 2025 by rpki-client