This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft File: 6VE3HeTcsQAlSE0vFP3NosZFW5E.mft (raw, json) Hash identifier: azIfx/kabVhgN7V3HDPInBWMsCR9P3WoVOP13zvkTbE= Subject key identifier: 70:E2:9F:5E:A1:36:8E:CF:94:F3:2D:DA:16:E3:F1:33:6F:0E:21:74 Authority key identifier: E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91 Certificate issuer: /CN=A9195FCB/serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91 Certificate serial: 07CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft Manifest number: 07C1 Signing time: Sat 20 Dec 2025 20:42:20 +0000 Manifest this update: Sat 20 Dec 2025 20:42:20 +0000 Manifest next update: Sat 27 Dec 2025 20:42:20 +0000 Files and hashes: 1: 6VE3HeTcsQAlSE0vFP3NosZFW5E.crl (hash: /uXmGAD8YczBCv136JUE7RhkJKyEXqXFyhYQqv3AcYY=) 2: A3E98D0E22A911EB96014E82C4F9AE02.roa (hash: U4wBCZUawWY0aygfRe0tLOK9t09mOsA+sFaJMAhACbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1995 (0x7cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195FCB, serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91 Validity Not Before: Dec 20 20:42:20 2025 GMT Not After : Dec 27 20:42:20 2025 GMT Subject: CN=69470a2c-6948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:24:3e:60:80:20:71:4b:74:e0:a1:e7:cb:77: a7:4a:5b:8a:89:ac:92:ca:07:5c:4a:64:34:73:57: b7:c0:50:86:5b:f1:40:1b:c9:ba:dc:d7:c9:4c:1b: ed:49:70:91:ac:ea:a9:43:8e:80:4c:74:c2:81:0a: 77:8a:54:79:6c:45:38:22:6a:9e:81:eb:e3:76:18: af:57:1a:71:7c:a9:61:4d:a7:66:ed:10:f9:ba:10: e4:5b:57:9b:f2:da:81:38:74:33:cc:02:3d:76:62: 3a:64:47:41:a0:b3:8f:d7:db:5f:cf:de:b3:6b:c0: fc:18:6f:bb:52:e0:99:2e:9c:b5:d4:f2:8b:2d:6b: c4:dd:ea:b6:25:64:8f:75:5e:33:93:8b:0c:7b:c4: a8:3e:68:41:fc:13:49:8f:25:a3:81:e5:77:44:b9: 42:ea:74:5f:72:b3:f7:d8:19:43:d9:a6:08:cd:b9: ad:ab:5a:a0:7e:b3:b0:f4:22:26:f6:07:0b:86:7c: e6:39:d6:92:d2:bd:7f:d2:52:e8:ab:d9:ac:fe:4e: bb:95:ce:1f:bb:8c:4c:d1:a7:d5:d0:3d:ea:34:4a: 19:4d:1e:d7:cc:51:5c:e9:40:f1:bf:97:f4:91:1b: ce:15:82:11:d8:82:9d:6e:d0:a2:39:8b:55:72:8c: 92:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E2:9F:5E:A1:36:8E:CF:94:F3:2D:DA:16:E3:F1:33:6F:0E:21:74 X509v3 Authority Key Identifier: keyid:E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:73:d8:4a:50:6d:2f:5c:a1:6f:ed:d3:b3:d6:3b:fa:ef:97: 09:b2:a1:59:ca:f7:a5:99:15:5d:35:12:0c:0c:d6:38:6d:9b: 2d:94:61:21:69:37:63:5a:9b:9f:f7:c1:4b:4a:c3:83:2c:de: b5:de:f3:e7:14:50:6c:5e:f0:cc:8d:06:a1:fd:83:ef:49:0a: 2b:f3:68:2f:f8:7a:71:a5:16:bd:db:c1:8d:22:69:c9:01:51: b6:a7:85:26:45:f6:bd:41:ff:56:74:bf:2c:cc:ce:17:9f:ce: 54:c0:4d:47:a1:46:d8:65:f2:a4:22:6f:50:8b:5b:84:fb:56: 27:54:bd:b2:83:b3:bd:e8:05:13:f0:0c:5d:0a:4b:a2:94:a4: 6d:d6:32:66:a2:9f:f7:8e:d4:d0:24:7c:68:b0:43:98:32:81: 46:a3:a9:cf:87:40:7b:a8:22:82:76:ad:23:0e:07:2a:bb:7e: 86:c2:23:73:ae:6c:d3:ec:c7:16:67:35:ea:b2:12:14:96:5c: 0c:9a:ff:e6:54:b0:ac:5a:d6:58:7b:cd:a7:6d:69:30:68:20: cb:bd:ae:f8:e8:63:57:3b:9b:79:8b:c7:4c:2f:a6:e9:08:86: 5b:00:7c:f5:cf:99:3a:25:ca:d2:96:7e:2d:3d:b8:b8:0b:44: 21:89:33:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGQ0IxMTAvBgNVBAUTKEU5NTEzNzFERTREQ0IxMDAyNTQ4NEQyRjE0RkRDREEy QzY0NTVCOTEwHhcNMjUxMjIwMjA0MjIwWhcNMjUxMjI3MjA0MjIwWjAYMRYwFAYD VQQDDA02OTQ3MGEyYy02OTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CQ+YIAgcUt04KHny3enSluKiaySygdcSmQ0c1e3wFCGW/FAG8m63NfJTBvt SXCRrOqpQ46ATHTCgQp3ilR5bEU4ImqegevjdhivVxpxfKlhTadm7RD5uhDkW1eb 8tqBOHQzzAI9dmI6ZEdBoLOP19tfz96za8D8GG+7UuCZLpy11PKLLWvE3eq2JWSP dV4zk4sMe8SoPmhB/BNJjyWjgeV3RLlC6nRfcrP32BlD2aYIzbmtq1qgfrOw9CIm 9gcLhnzmOdaS0r1/0lLoq9ms/k67lc4fu4xM0afV0D3qNEoZTR7XzFFc6UDxv5f0 kRvOFYIR2IKdbtCiOYtVcoySUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDin16h No7PlPMt2hbj8TNvDiF0MB8GA1UdIwQYMBaAFOlRNx3k3LEAJUhNLxT9zaLGRVuR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUZDQi84ODBFNjM0MDIy QTcxMUVCQjQwNkNFN0NDNEY5QUUwMi82VkUzSGVUY3NRQWxTRTB2RlAzTm9zWkZX NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZWRTNIZVRjc1FBbFNFMHZGUDNOb3NaRlc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUZDQi84ODBFNjM0MDIyQTcxMUVCQjQwNkNFN0NDNEY5QUUwMi82VkUzSGVUY3NR QWxTRTB2RlAzTm9zWkZXNUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpc9hKUG0vXKFv7dOz1jv675cJsqFZyvelmRVdNRIMDNY4bZstlGEh aTdjWpuf98FLSsODLN613vPnFFBsXvDMjQah/YPvSQor82gv+HpxpRa928GNImnJ AVG2p4UmRfa9Qf9WdL8szM4Xn85UwE1HoUbYZfKkIm9Qi1uE+1YnVL2yg7O96AUT 8AxdCkuilKRt1jJmop/3jtTQJHxosEOYMoFGo6nPh0B7qCKCdq0jDgcqu36GwiNz rmzT7McWZzXqshIUllwMmv/mVLCsWtZYe82nbWkwaCDLva746GNXO5t5i8dML6bp CIZbAHz1z5k6JcrSln4tPbi4C0QhiTP9 -----END CERTIFICATE-----Generated at Mon Dec 22 06:49:42 2025 by rpki-client