This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
File: B6YH3KkzMh_3j-xozXpMFJVDel8.mft (raw, json)
Hash identifier: vo9NJwCg6I9mbndrKVR4JXJPuGQtZlpbBQ0t9/zKr+s=
Subject key identifier: C4:A1:AF:AD:D4:15:F3:D1:B4:9B:A4:02:33:E4:43:CA:22:8D:93:97
Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F
Certificate issuer: /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
Certificate serial: 0A14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
Manifest number: 0A05
Signing time: Thu 18 Dec 2025 19:26:44 +0000
Manifest this update: Thu 18 Dec 2025 19:26:44 +0000
Manifest next update: Thu 25 Dec 2025 19:26:44 +0000
Files and hashes: 1: B6YH3KkzMh_3j-xozXpMFJVDel8.crl (hash: XhycmLBBz0G6RkKBNKQphoHK+h7h8L95q7R/zQLejds=)
2: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (hash: 0uP0qBSRuS530AzJEmj9fiO+kW+9ViD0Nt8IGp0bhcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl
rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2580 (0xa14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129DCB, serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
Validity
Not Before: Dec 18 19:26:44 2025 GMT
Not After : Dec 25 19:26:44 2025 GMT
Subject: CN=69445574-9919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:c3:ec:ff:e6:b8:99:a2:08:ff:b5:f8:3c:
8f:81:6a:19:01:82:62:a9:5e:1c:b2:41:60:08:88:
38:42:41:f1:94:e0:7d:99:f6:de:84:a7:2d:ba:0a:
37:28:9c:66:63:4b:8d:45:50:c7:46:cc:9b:d2:0f:
be:39:a9:e7:86:64:ef:37:91:ed:0f:5b:c9:0d:c8:
bc:24:6a:a8:13:2b:ec:37:a3:31:31:0c:65:0d:89:
3e:61:1f:48:e8:db:eb:69:f0:51:66:96:0b:b0:a1:
3e:2e:6f:8e:79:c4:02:b4:9c:a1:61:46:4c:1a:10:
c3:d5:3a:78:88:04:98:fe:ea:b8:5e:3b:ad:36:68:
8c:bc:fb:1d:9c:4e:30:db:8b:67:d2:e0:6f:c6:36:
d6:62:0a:9e:ee:f0:80:7c:f5:0b:e6:c8:bc:4d:12:
88:35:d5:b6:d6:b7:7f:b0:13:ad:56:1b:b5:a3:96:
4f:5f:cd:d7:0b:10:17:8b:af:5b:9a:74:0c:04:f3:
b0:3f:47:87:00:a6:f7:e0:96:6f:b2:fd:78:91:a6:
e7:67:c1:0e:1a:88:99:b8:75:3b:15:a4:63:ac:4d:
d1:67:2a:47:28:23:62:50:db:8a:64:af:73:bd:4e:
6e:00:a4:e8:5a:92:76:cd:e9:65:d7:93:da:4c:24:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A1:AF:AD:D4:15:F3:D1:B4:9B:A4:02:33:E4:43:CA:22:8D:93:97
X509v3 Authority Key Identifier:
keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:5b:13:39:73:68:f4:8b:1b:ff:34:74:40:9a:8e:30:5e:e7:
37:71:6d:25:ca:eb:a5:88:5e:dd:f6:f1:55:f2:e0:b2:85:ec:
22:92:d8:6b:e0:2a:5e:7a:f6:fd:7a:e5:5e:3d:e1:55:b9:62:
16:76:53:92:67:32:59:b7:e7:04:78:03:4e:58:6a:45:20:aa:
18:f0:1b:77:df:27:03:fb:3d:d2:51:af:c1:2c:7e:36:89:ce:
11:8d:4f:e6:72:0c:2b:f3:f1:4b:1c:e0:91:b8:58:95:3d:59:
44:af:ed:91:f4:66:e8:2e:5f:3d:bd:31:b8:9d:4e:28:55:a7:
ed:55:55:f9:74:fc:db:94:b4:28:15:8b:ad:04:eb:15:14:ec:
ca:d4:21:31:c2:84:4a:c9:b7:49:25:bd:3b:f4:cd:ce:92:7e:
43:03:4c:ae:22:d1:1d:d3:ae:23:04:27:58:58:f7:67:cc:7d:
6a:12:18:02:1b:27:94:1f:0a:1e:71:bc:ab:79:1f:5c:49:df:
43:87:b3:eb:f8:fe:ac:10:1a:66:37:2d:2b:fb:6f:c4:45:20:
09:d0:b6:f9:ed:2d:fa:83:b4:99:cc:f3:03:a6:08:4e:45:63:
5b:28:a7:00:df:d7:0a:4b:4c:f9:db:9c:28:5f:80:01:fe:9e:
1b:65:02:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:29 2025 by rpki-client