This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft File: 6XH_tEATQSECHGJem3DrGuWij2A.mft (raw, json) Hash identifier: IvOFByvoIlC20Q+VXSlPXvHFbvuKgKkNjaUsuHmXoPA= Subject key identifier: C0:93:49:A2:6C:BC:D9:55:4F:17:E3:09:B0:41:84:C0:C6:49:19:FA Authority key identifier: E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60 Certificate issuer: /CN=A911EDE5/serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60 Certificate serial: 0DAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft Manifest number: 0DA4 Signing time: Mon 22 Dec 2025 17:33:41 +0000 Manifest this update: Mon 22 Dec 2025 17:33:41 +0000 Manifest next update: Mon 29 Dec 2025 17:33:41 +0000 Files and hashes: 1: 6XH_tEATQSECHGJem3DrGuWij2A.crl (hash: kD5z6aEdN5nnL+67YbMIHBJeJrffWxkTH52aGHq8bVo=) 2: 89D124B6D51311E98A41293BC4F9AE02.roa (hash: s4ZYVNsJ/dDC5UQbemd3E28U99L1NBZ1Sp+DApyMoKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3502 (0xdae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EDE5, serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60 Validity Not Before: Dec 22 17:33:41 2025 GMT Not After : Dec 29 17:33:41 2025 GMT Subject: CN=694980f5-d0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:07:92:32:f5:ef:11:34:a0:81:11:1e:69: 25:4b:02:33:ee:39:70:f7:8f:2d:71:a9:f0:aa:a4: 03:0d:4c:7d:62:6a:ac:b0:88:21:d7:b9:cc:d8:f7: ef:5d:53:43:74:5e:52:2e:d4:bd:10:ca:54:3b:2b: 0b:31:48:e7:ed:30:28:c1:93:72:e7:83:b0:d6:d3: da:ce:3d:e9:54:90:a4:32:05:07:f0:c7:72:a3:c4: 15:f2:42:60:de:81:77:c6:02:24:b0:06:2b:62:ed: cc:18:34:96:9d:bb:de:d8:5f:39:16:e4:c4:25:e4: 8e:2d:1c:ef:f1:4b:48:b6:ab:c2:f7:a5:26:01:b8: 37:1c:b6:06:c8:e3:c3:b8:8d:39:99:a8:c1:6f:36: e6:bd:3f:f8:00:7d:8c:62:89:f3:fb:d0:59:1c:ee: 76:57:cf:bd:e1:b2:65:eb:9c:a9:92:48:08:35:ea: ea:22:3d:d5:70:bc:4d:81:bc:95:7d:3f:64:26:75: c0:ba:04:43:1e:ce:8e:a3:50:7e:ae:04:c3:50:7b: 49:41:cb:c0:92:3e:c2:c3:dc:f2:c8:12:6a:74:7d: ef:ea:5f:ad:cb:10:ae:77:14:59:6b:8a:af:62:59: 34:a8:eb:60:c8:12:04:20:66:26:59:54:b6:8d:64: f3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:93:49:A2:6C:BC:D9:55:4F:17:E3:09:B0:41:84:C0:C6:49:19:FA X509v3 Authority Key Identifier: keyid:E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:f9:b0:13:58:97:9d:58:3c:e5:be:32:2e:d3:2b:c0:4c:60: 9c:63:eb:fe:e4:39:93:32:3a:5e:66:22:43:44:26:d8:4b:b3: e5:44:86:4d:68:da:03:51:00:d6:79:80:92:e5:64:1f:e9:66: 48:00:c1:d0:69:ed:b6:87:1b:4c:03:b0:f2:22:8b:b7:ab:97: 17:d3:be:d6:c4:32:d8:1c:a3:de:12:b2:18:64:aa:a4:ec:66: 65:0a:bc:b3:62:08:18:63:bc:a4:60:c3:9e:4a:b1:a3:85:d0: bf:85:8f:6d:21:84:bf:05:db:63:43:4a:93:2c:a4:09:87:49: 78:ac:32:64:54:df:bc:e0:16:23:99:5b:43:99:9c:5a:fa:7c: 6b:6c:de:c8:c8:0c:cc:ea:1c:25:89:73:9c:bf:3b:73:62:89: 11:f8:a0:55:8d:53:35:7d:a9:7f:b1:b3:5d:ed:94:c8:48:30: e2:d9:d1:8e:c7:90:8a:5c:9d:3e:e5:5e:f9:f4:e7:81:f5:08: 79:a5:01:67:b3:5e:af:b7:83:0a:80:bc:0e:b4:c3:0e:95:0d: 93:8b:f2:68:e6:1d:57:72:70:f3:30:f1:63:bd:55:99:f1:f4: d0:0a:dd:44:9a:24:31:52:c5:55:e4:40:1d:e4:3b:b6:62:16: 6b:bb:b1:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVERTUxMTAvBgNVBAUTKEU5NzFGRkI0NDAxMzQxMjEwMjFDNjI1RTlCNzBFQjFB RTVBMjhGNjAwHhcNMjUxMjIyMTczMzQxWhcNMjUxMjI5MTczMzQxWjAYMRYwFAYD VQQDDA02OTQ5ODBmNS1kMGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymgHkjL17xE0oIERHmklSwIz7jlw948tcanwqqQDDUx9YmqssIgh17nM2Pfv XVNDdF5SLtS9EMpUOysLMUjn7TAowZNy54Ow1tPazj3pVJCkMgUH8Mdyo8QV8kJg 3oF3xgIksAYrYu3MGDSWnbve2F85FuTEJeSOLRzv8UtItqvC96UmAbg3HLYGyOPD uI05majBbzbmvT/4AH2MYonz+9BZHO52V8+94bJl65ypkkgINerqIj3VcLxNgbyV fT9kJnXAugRDHs6Oo1B+rgTDUHtJQcvAkj7Cw9zyyBJqdH3v6l+tyxCudxRZa4qv Ylk0qOtgyBIEIGYmWVS2jWTznQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCTSaJs vNlVTxfjCbBBhMDGSRn6MB8GA1UdIwQYMBaAFOlx/7RAE0EhAhxiXptw6xrloo9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRURFNS9CM0JGNzU4QUQ1 MTIxMUU5QjY0M0VEMzlDNEY5QUUwMi82WEhfdEVBVFFTRUNIR0plbTNEckd1V2lq MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZYSF90RUFUUVNFQ0hHSmVtM0RyR3VXaWoyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RURFNS9CM0JGNzU4QUQ1MTIxMUU5QjY0M0VEMzlDNEY5QUUwMi82WEhfdEVBVFFT RUNIR0plbTNEckd1V2lqMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo+bATWJedWDzlvjIu0yvATGCcY+v+5DmTMjpeZiJDRCbYS7PlRIZN aNoDUQDWeYCS5WQf6WZIAMHQae22hxtMA7DyIou3q5cX077WxDLYHKPeErIYZKqk 7GZlCryzYggYY7ykYMOeSrGjhdC/hY9tIYS/BdtjQ0qTLKQJh0l4rDJkVN+84BYj mVtDmZxa+nxrbN7IyAzM6hwliXOcvztzYokR+KBVjVM1fal/sbNd7ZTISDDi2dGO x5CKXJ0+5V759OeB9Qh5pQFns16vt4MKgLwOtMMOlQ2Ti/Jo5h1XcnDzMPFjvVWZ 8fTQCt1EmiQxUsVV5EAd5Du2YhZru7Fy -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:51 2025 by rpki-client