This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft File: paap6sGs925VLHi914unT-3dP_k.mft (raw, json) Hash identifier: ReH8mrJG6MTEo9ADxTFnLJu2rdU6DM/vCBtTLiv825Q= Subject key identifier: 9B:A2:09:F5:10:74:75:A0:15:F5:FB:4D:4F:E0:30:1D:56:4E:40:E3 Authority key identifier: A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9 Certificate issuer: /CN=A9129AD6/serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9 Certificate serial: 2C20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft Manifest number: 2C0F Signing time: Mon 22 Dec 2025 15:23:54 +0000 Manifest this update: Mon 22 Dec 2025 15:23:54 +0000 Manifest next update: Mon 29 Dec 2025 15:23:54 +0000 Files and hashes: 1: paap6sGs925VLHi914unT-3dP_k.crl (hash: GkO0P+5V9twFLgl5Ff76O75Tu9VicKr88hNM1pr3zhc=) 2: 9AD04EAAD58A11EE9992494AC4F9AE02.roa (hash: R++b1RX/a7NEbUz016JCFWbEE+Lh/qyAEqbc/YB/qKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11296 (0x2c20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129AD6, serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9 Validity Not Before: Dec 22 15:23:54 2025 GMT Not After : Dec 29 15:23:54 2025 GMT Subject: CN=6949628a-5359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:37:61:61:ad:a4:f7:b5:48:4f:6f:a5:de:38: ec:30:80:b2:3f:2f:4f:2c:1f:4c:99:e9:de:50:72: 8d:34:b9:69:c5:f3:dc:75:f3:ae:45:7e:4d:ab:22: 7f:fb:65:a4:05:cc:70:ed:a5:ba:af:7f:40:fb:d3: 08:05:f1:10:9e:62:4a:d7:e8:e1:55:61:07:bb:a2: 6b:f0:69:15:e1:16:84:c1:4c:2e:97:f6:a7:e5:38: 76:a5:df:df:a3:f4:b2:66:9d:eb:8a:74:77:76:81: e4:07:62:77:f7:e4:52:3c:40:2a:9c:c2:85:69:bf: c6:13:cf:e0:cd:17:f4:41:67:bb:4d:f4:7a:a2:a3: 0c:94:db:e8:39:4b:d6:b5:cc:c1:78:e9:12:ee:16: 28:de:72:5c:9d:77:60:8d:0a:51:dc:c6:9a:e1:c9: ce:8d:e9:79:21:ab:40:34:ed:97:3c:f0:c9:34:54: 33:61:a4:32:e0:1e:d8:9b:15:15:5f:f4:d8:1b:22: 77:19:97:7c:17:66:cb:6f:a8:68:fc:54:6b:12:4d: 57:a4:17:3a:b1:29:28:cc:4a:3b:bf:3d:4f:f7:79: 57:16:25:39:02:4b:d3:cd:51:73:4c:8d:be:a6:e0: f0:77:df:f0:ec:18:e1:e7:41:4b:cc:b0:da:04:37: 87:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A2:09:F5:10:74:75:A0:15:F5:FB:4D:4F:E0:30:1D:56:4E:40:E3 X509v3 Authority Key Identifier: keyid:A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:1f:a6:17:b6:41:04:dd:df:79:68:72:61:c6:6b:ce:84:99: b1:e0:44:30:dd:7f:1c:63:3e:45:c9:69:e8:40:0e:e2:26:c2: 5f:89:6b:80:57:51:e9:f6:7d:19:83:44:ba:85:97:73:cc:e8: d4:d9:3d:0e:98:17:b2:6b:2c:b0:15:f9:9c:2f:f0:2a:3c:36: d7:36:66:c2:78:69:f3:9c:44:4a:95:80:98:99:49:71:8e:c3: 02:4c:f5:cd:96:72:64:26:c9:9d:1e:fe:cc:21:ea:2f:a4:38: fb:7b:e1:7a:98:c8:d6:a7:b3:56:c3:56:3d:ed:e0:ad:4d:af: 4b:5f:e1:07:17:0a:0e:ab:31:f9:4f:03:4d:6b:15:a8:10:b9: e8:21:96:dd:43:4c:be:56:76:1f:ef:4a:d6:4c:53:8e:14:61: bb:85:e6:39:6a:2f:e1:d8:06:67:79:21:fe:5e:44:9c:e5:16: 2c:e6:db:b7:03:bb:9e:f1:d3:68:85:22:7a:42:db:22:5a:e7: 3f:8a:9b:9a:5f:1b:5a:1c:15:59:06:e2:a8:49:b5:15:39:40: b3:4e:37:cf:b8:2d:a2:41:20:c3:fa:6a:8f:69:56:9b:cf:b7: 58:42:5c:72:d9:dd:b0:47:2a:34:83:c7:89:4a:50:b0:82:9c: bf:fe:fb:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlBRDYxMTAvBgNVBAUTKEE1QTZBOUVBQzFBQ0Y3NkU1NTJDNzhCREQ3OEJBNzRG RURERDNGRjkwHhcNMjUxMjIyMTUyMzU0WhcNMjUxMjI5MTUyMzU0WjAYMRYwFAYD VQQDDA02OTQ5NjI4YS01MzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlDdhYa2k97VIT2+l3jjsMICyPy9PLB9MmeneUHKNNLlpxfPcdfOuRX5NqyJ/ +2WkBcxw7aW6r39A+9MIBfEQnmJK1+jhVWEHu6Jr8GkV4RaEwUwul/an5Th2pd/f o/SyZp3rinR3doHkB2J39+RSPEAqnMKFab/GE8/gzRf0QWe7TfR6oqMMlNvoOUvW tczBeOkS7hYo3nJcnXdgjQpR3Maa4cnOjel5IatANO2XPPDJNFQzYaQy4B7YmxUV X/TYGyJ3GZd8F2bLb6ho/FRrEk1XpBc6sSkozEo7vz1P93lXFiU5AkvTzVFzTI2+ puDwd9/w7Bjh50FLzLDaBDeH2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuiCfUQ dHWgFfX7TU/gMB1WTkDjMB8GA1UdIwQYMBaAFKWmqerBrPduVSx4vdeLp0/t3T/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUFENi9ENjc3REM5NERG RDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczkyNVZMSGk5MTR1blQtM2RQ X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BhYXA2c0dzOTI1VkxIaTkxNHVuVC0zZFBfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUFENi9ENjc3REM5NERGRDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczky NVZMSGk5MTR1blQtM2RQX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhH6YXtkEE3d95aHJhxmvOhJmx4EQw3X8cYz5FyWnoQA7iJsJfiWuA V1Hp9n0Zg0S6hZdzzOjU2T0OmBeyayywFfmcL/AqPDbXNmbCeGnznERKlYCYmUlx jsMCTPXNlnJkJsmdHv7MIeovpDj7e+F6mMjWp7NWw1Y97eCtTa9LX+EHFwoOqzH5 TwNNaxWoELnoIZbdQ0y+VnYf70rWTFOOFGG7heY5ai/h2AZneSH+XkSc5RYs5tu3 A7ue8dNohSJ6QtsiWuc/ipuaXxtaHBVZBuKoSbUVOUCzTjfPuC2iQSDD+mqPaVab z7dYQlxy2d2wRyo0g8eJSlCwgpy//vsa -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:42 2025 by rpki-client