This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft File: 6f6DqUwBuxPVNX83DHZZc-mX9NA.mft (raw, json) Hash identifier: R+qrqhbl56UxBrTbDRuPDw0tfCJBDu09XpQn2WrjRv8= Subject key identifier: 1E:87:80:C8:5D:92:60:62:7F:45:B0:81:2C:17:45:81:F0:89:EB:4F Authority key identifier: E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0 Certificate issuer: /CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0 Certificate serial: 02E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft Manifest number: 02E3 Signing time: Tue 23 Dec 2025 00:17:47 +0000 Manifest this update: Tue 23 Dec 2025 00:17:47 +0000 Manifest next update: Tue 30 Dec 2025 00:17:47 +0000 Files and hashes: 1: 6f6DqUwBuxPVNX83DHZZc-mX9NA.crl (hash: mLROu7Co4UeavacB8dI70yfiv0tiGsk6u4sn7za1c/o=) 2: 23803F800C9C11ED82C8955BC4F9AE02.roa (hash: Ny3HF6QiqyIBzWklmUHinHzimYgWUBmeHFmleIQ1/IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 744 (0x2e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDAE, serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0 Validity Not Before: Dec 23 00:17:47 2025 GMT Not After : Dec 30 00:17:47 2025 GMT Subject: CN=6949dfab-9f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:54:77:e6:24:50:2c:06:a2:bc:c0:9d:03:df: 1a:fc:ea:f5:17:0a:fe:f4:c5:f2:46:8c:98:3a:58: 5b:19:0e:09:88:1e:02:00:a2:90:13:d0:66:61:1f: 62:59:d2:c9:10:37:3e:7e:1c:f9:2e:3b:17:af:14: 3b:28:01:c5:3b:34:ff:99:df:40:b0:d0:4a:6e:be: c3:8e:f5:8c:27:41:cd:f3:79:57:16:bf:0e:61:49: 87:5c:27:2a:1c:d3:17:d5:3b:a3:f8:48:74:b8:80: 1d:d0:b4:d9:27:38:a8:dc:13:55:d2:5f:81:22:f2: 1d:f7:fa:d1:59:8c:c3:16:38:60:37:01:76:2b:ef: 29:00:06:fa:d5:0f:04:0c:0c:0c:fe:08:15:e0:26: 4e:d9:4f:ab:f2:f0:de:47:62:eb:21:8d:6a:f4:47: 4f:f4:87:8e:c9:22:c6:df:a2:72:a4:30:50:3a:42: 7e:2e:c2:1a:ec:1d:06:50:8f:10:df:bd:0d:5e:53: 81:33:35:7f:a1:3b:13:41:ed:2c:5a:b6:f4:8a:e7: df:6e:45:1e:3f:ef:f0:20:ac:27:b8:b7:54:7e:60: 08:cd:8a:49:82:bc:64:d0:ea:53:3c:65:dd:0a:b8: 73:08:d1:71:97:f8:66:e8:e4:e2:04:b3:01:88:a3: a2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:87:80:C8:5D:92:60:62:7F:45:B0:81:2C:17:45:81:F0:89:EB:4F X509v3 Authority Key Identifier: keyid:E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:30:4d:98:e1:34:0d:cf:2e:11:1b:4d:c3:ac:6a:89:59:10: 2d:db:82:f2:23:b2:4e:b7:67:d4:7a:27:c2:58:58:be:dc:a8: ca:c1:3d:4f:9a:d7:7b:63:06:ad:11:ec:ec:23:54:f3:4b:14: aa:78:73:a5:ea:f2:80:5b:17:fb:cf:a0:52:9a:d5:a1:a1:36: 5c:4c:76:33:1b:d8:b5:36:9f:53:df:df:2a:2d:53:4a:cc:c3: d1:e6:ad:56:50:de:31:81:78:6d:86:51:9a:60:ff:e3:e7:98: 82:55:0e:61:a7:6f:d4:dd:34:09:dd:08:ff:b0:9d:95:3a:20: 40:30:6e:d0:48:9c:ce:be:75:3f:e1:8e:d3:39:01:7c:ce:50: 29:fd:0e:3b:f1:d5:12:34:2d:ed:4a:10:9a:9b:8b:ee:86:63: 4f:0c:f8:b3:09:07:d1:31:02:64:fd:70:72:53:a3:5c:c4:4f: 0c:96:cc:55:9d:e0:d8:6b:6c:02:20:fd:97:68:29:c0:51:4f: 99:54:29:13:5a:e9:4d:4b:bc:84:b6:63:ef:a2:f0:ff:a3:b7: eb:ff:2d:74:20:8e:2b:fc:d5:2e:a0:ae:ac:cf:b1:b4:72:3f: 7e:c1:3f:77:81:a4:bb:f2:32:dd:14:0a:e1:eb:0b:69:94:19: cd:57:4c:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQUUxMTAvBgNVBAUTKEU5RkU4M0E5NEMwMUJCMTNENTM1N0YzNzBDNzY1OTcz RTk5N0Y0RDAwHhcNMjUxMjIzMDAxNzQ3WhcNMjUxMjMwMDAxNzQ3WjAYMRYwFAYD VQQDDA02OTQ5ZGZhYi05ZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVR35iRQLAaivMCdA98a/Or1Fwr+9MXyRoyYOlhbGQ4JiB4CAKKQE9BmYR9i WdLJEDc+fhz5LjsXrxQ7KAHFOzT/md9AsNBKbr7DjvWMJ0HN83lXFr8OYUmHXCcq HNMX1Tuj+Eh0uIAd0LTZJzio3BNV0l+BIvId9/rRWYzDFjhgNwF2K+8pAAb61Q8E DAwM/ggV4CZO2U+r8vDeR2LrIY1q9EdP9IeOySLG36JypDBQOkJ+LsIa7B0GUI8Q 370NXlOBMzV/oTsTQe0sWrb0iuffbkUeP+/wIKwnuLdUfmAIzYpJgrxk0OpTPGXd CrhzCNFxl/hm6OTiBLMBiKOimQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6HgMhd kmBif0WwgSwXRYHwietPMB8GA1UdIwQYMBaAFOn+g6lMAbsT1TV/Nwx2WXPpl/TQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBRS9FOEYxMjk5ODBD OTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4UFZOWDgzREhaWmMtbVg5 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZmNkRxVXdCdXhQVk5YODNESFpaYy1tWDlOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBRS9FOEYxMjk5ODBDOTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4 UFZOWDgzREhaWmMtbVg5TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXME2Y4TQNzy4RG03DrGqJWRAt24LyI7JOt2fUeifCWFi+3KjKwT1P mtd7YwatEezsI1TzSxSqeHOl6vKAWxf7z6BSmtWhoTZcTHYzG9i1Np9T398qLVNK zMPR5q1WUN4xgXhthlGaYP/j55iCVQ5hp2/U3TQJ3Qj/sJ2VOiBAMG7QSJzOvnU/ 4Y7TOQF8zlAp/Q478dUSNC3tShCam4vuhmNPDPizCQfRMQJk/XByU6NcxE8MlsxV neDYa2wCIP2XaCnAUU+ZVCkTWulNS7yEtmPvovD/o7fr/y10II4r/NUuoK6sz7G0 cj9+wT93gaS78jLdFArh6wtplBnNV0w5 -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:11 2025 by rpki-client