This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft File: b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft (raw, json) Hash identifier: gOgiFGQorMLd8wZzWAhvwd9AJHagRrotD1k8QrZ8Vsk= Subject key identifier: 7D:CD:7B:33:EC:4F:24:78:F5:CF:9D:16:F9:D0:AA:80:63:21:4F:58 Authority key identifier: 6F:A1:04:BE:66:5E:52:3C:B6:57:C9:BF:8C:30:8F:02:3E:A9:C0:DA Certificate issuer: /CN=A912876D/serialNumber=6FA104BE665E523CB657C9BF8C308F023EA9C0DA Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6EEvmZeUjy2V8m_jDCPAj6pwNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft Manifest number: 4D Signing time: Tue 23 Dec 2025 06:12:46 +0000 Manifest this update: Tue 23 Dec 2025 06:12:45 +0000 Manifest next update: Tue 30 Dec 2025 06:12:45 +0000 Files and hashes: 1: b6EEvmZeUjy2V8m_jDCPAj6pwNo.crl (hash: mf0VGf21Wk+dOuzLvnqfwe/mbMRrvAlX7dcFxA1ZmNs=) 2: B30F869670E511F08CE5B42CC4F9AE02.roa (hash: erO5HGBwapQrQxqX0w/vK8XPII0Rjyl1v5zKuwttKDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.crl rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6EEvmZeUjy2V8m_jDCPAj6pwNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912876D, serialNumber=6FA104BE665E523CB657C9BF8C308F023EA9C0DA Validity Not Before: Dec 23 06:12:45 2025 GMT Not After : Dec 30 06:12:45 2025 GMT Subject: CN=694a32de-b9be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ae:a3:43:41:53:f1:27:bf:40:ee:80:f1:62: 9f:bb:cf:1c:6f:9d:96:c3:4e:96:c8:e0:4a:91:44: d4:29:79:03:bf:6e:90:34:e3:7b:0a:f6:9c:8e:13: c7:c7:3f:ab:de:39:34:a4:f1:8a:54:7d:da:30:98: b7:d1:97:08:e9:3b:58:8b:7e:28:ab:b7:8d:a5:b2: ea:d2:61:6c:df:4a:d8:91:d7:37:1b:7a:ba:5b:2f: 0b:ea:ef:39:f0:d8:f9:e4:18:3e:63:d9:0d:7a:d0: 24:c1:d4:f9:dc:ed:b2:2a:5c:c5:a1:7a:5e:c9:58: f9:15:8b:c5:17:ee:7c:d9:0f:76:79:06:b4:52:e4: 67:0a:ad:5d:f1:30:1d:ab:28:51:d6:b4:37:e5:b8: 89:1f:af:da:e5:70:8f:36:e4:79:66:59:65:76:fd: a0:c7:22:3d:1b:51:63:a1:ba:a5:3c:a2:ae:4f:b2: d8:a3:a6:b7:95:3e:47:cb:f7:a6:f8:7b:63:d2:2d: 23:ec:d2:70:59:34:83:78:7e:2f:e6:51:a5:05:36: 7e:92:31:c9:e9:8a:4f:0d:58:ed:e9:c8:47:f3:dc: f1:af:6a:b6:0d:d2:5b:1d:6e:75:85:c3:8a:5a:cd: a7:ad:9d:62:36:5a:94:13:ee:a2:64:b0:f7:46:37: 5b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CD:7B:33:EC:4F:24:78:F5:CF:9D:16:F9:D0:AA:80:63:21:4F:58 X509v3 Authority Key Identifier: keyid:6F:A1:04:BE:66:5E:52:3C:B6:57:C9:BF:8C:30:8F:02:3E:A9:C0:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6EEvmZeUjy2V8m_jDCPAj6pwNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:a0:cd:77:27:ca:e5:80:54:8f:74:8c:7e:48:ea:93:05:0b: df:c5:a9:ed:41:92:78:94:e7:5b:22:d3:45:a1:78:e1:3b:89: c5:ad:8e:87:ed:c6:33:ed:1c:de:c1:38:a0:05:f5:1b:fa:1e: f6:28:57:eb:c2:47:d0:30:80:01:6e:8d:2a:c5:15:b0:0e:01: ba:e4:88:f1:f0:db:88:6e:ca:01:cf:4b:d1:dd:39:b5:7a:96: ca:f4:3d:cc:83:91:0b:24:c5:f0:d7:40:45:9f:85:e3:d6:05: 20:83:a9:8b:7d:97:8e:f9:d6:aa:92:fb:f8:1a:bc:97:6b:bb: 1c:fb:06:13:6b:8c:47:68:54:af:35:23:80:95:eb:fb:10:d0: f9:b0:28:d5:d6:24:51:8a:be:a7:24:52:4b:27:50:af:a5:11: 99:80:45:2c:b3:f1:6e:6e:5b:dc:38:8f:4c:88:95:a8:fc:6d: df:57:aa:cf:f1:8d:e3:52:42:51:37:4b:90:c3:af:e8:44:d2: 6e:b8:df:a5:3d:e7:f2:7c:92:2f:86:7c:16:50:00:d4:07:98: 45:ee:c6:9e:8c:8a:98:15:a0:55:88:4d:27:af:f0:14:dc:72: e5:70:bf:56:ed:54:20:bd:2c:aa:4f:5d:38:bb:16:d9:dc:c7: 10:14:f6:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODc2RDExMC8GA1UEBRMoNkZBMTA0QkU2NjVFNTIzQ0I2NTdDOUJGOEMzMDhGMDIz RUE5QzBEQTAeFw0yNTEyMjMwNjEyNDVaFw0yNTEyMzAwNjEyNDVaMBgxFjAUBgNV BAMMDTY5NGEzMmRlLWI5YmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsrqNDQVPxJ79A7oDxYp+7zxxvnZbDTpbI4EqRRNQpeQO/bpA043sK9pyOE8fH P6veOTSk8YpUfdowmLfRlwjpO1iLfiirt42lsurSYWzfStiR1zcberpbLwvq7znw 2PnkGD5j2Q160CTB1Pnc7bIqXMWhel7JWPkVi8UX7nzZD3Z5BrRS5GcKrV3xMB2r KFHWtDfluIkfr9rlcI825HlmWWV2/aDHIj0bUWOhuqU8oq5PstijpreVPkfL96b4 e2PSLSPs0nBZNIN4fi/mUaUFNn6SMcnpik8NWO3pyEfz3PGvarYN0lsdbnWFw4pa zaetnWI2WpQT7qJksPdGN1vlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfc17M+xP JHj1z50W+dCqgGMhT1gwHwYDVR0jBBgwFoAUb6EEvmZeUjy2V8m/jDCPAj6pwNow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4NzZELzU3QTJFQUZBNzBF NTExRjBBOTM4MEEyQ0M0RjlBRTAyL2I2RUV2bVplVWp5MlY4bV9qRENQQWo2cHdO by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjZFRXZtWmVVankyVjhtX2pEQ1BBajZwd05vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 NzZELzU3QTJFQUZBNzBFNTExRjBBOTM4MEEyQ0M0RjlBRTAyL2I2RUV2bVplVWp5 MlY4bV9qRENQQWo2cHdOby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGegzXcnyuWAVI90jH5I6pMFC9/Fqe1BkniU51si00WheOE7icWtjoft xjPtHN7BOKAF9Rv6HvYoV+vCR9AwgAFujSrFFbAOAbrkiPHw24huygHPS9HdObV6 lsr0PcyDkQskxfDXQEWfhePWBSCDqYt9l4751qqS+/gavJdruxz7BhNrjEdoVK81 I4CV6/sQ0PmwKNXWJFGKvqckUksnUK+lEZmARSyz8W5uW9w4j0yIlaj8bd9Xqs/x jeNSQlE3S5DDr+hE0m6436U95/J8ki+GfBZQANQHmEXuxp6MipgVoFWITSev8BTc cuVwv1btVCC9LKpPXTi7FtncxxAU9vM= -----END CERTIFICATE-----Generated at Tue Dec 23 21:12:51 2025 by rpki-client