This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft File: B6YH3KkzMh_3j-xozXpMFJVDel8.mft (raw, json) Hash identifier: HC7GQZ/z/9cpamU/1+r3Bvx56fAUvTQpFCfK3Z+gYpo= Subject key identifier: 80:65:A4:92:85:B5:EC:99:F2:CA:EE:11:58:74:A9:93:5F:71:8C:C0 Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F Certificate issuer: /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F Certificate serial: 0A16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft Manifest number: 0A07 Signing time: Mon 22 Dec 2025 19:16:44 +0000 Manifest this update: Mon 22 Dec 2025 19:16:44 +0000 Manifest next update: Mon 29 Dec 2025 19:16:44 +0000 Files and hashes: 1: B6YH3KkzMh_3j-xozXpMFJVDel8.crl (hash: x2HQ8oNVGdTqavTwNXgIVvG7QpJMgTHnFqU/PbVHW/k=) 2: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (hash: 0uP0qBSRuS530AzJEmj9fiO+kW+9ViD0Nt8IGp0bhcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2582 (0xa16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129DCB, serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F Validity Not Before: Dec 22 19:16:44 2025 GMT Not After : Dec 29 19:16:44 2025 GMT Subject: CN=6949991c-1c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:92:e6:9f:ef:1e:41:b8:8f:76:04:36:73:68: f3:d7:5d:4f:b5:5a:05:95:ac:32:4e:06:ee:ac:26: ba:7f:1d:5f:5d:32:a0:ac:3e:8f:c2:16:e7:0c:97: 8d:84:35:4f:fc:0d:dd:88:49:8b:18:11:a8:69:73: d1:2a:92:9d:d6:31:0f:20:d6:b7:b7:5e:a9:5e:e2: ef:58:d6:28:58:57:9c:d9:e5:12:9a:b3:0a:76:91: 95:4f:05:43:8d:a1:2d:cb:41:0a:21:b5:ea:96:73: 67:ef:c7:f5:1b:9b:7d:b3:03:34:89:37:0e:0c:0a: bd:1c:8b:8c:7d:e7:f3:81:0f:68:fb:68:94:a9:3b: 8c:66:ca:8e:47:20:e2:04:5d:ca:df:70:93:01:3e: 6c:27:d9:03:0e:b5:3b:35:cf:f2:10:ab:c1:8d:d5: ce:0d:e7:8e:4c:8a:61:94:22:14:2a:30:2c:20:7d: 9d:62:ea:03:b6:8f:fd:c4:c3:52:b6:eb:fb:95:1b: 53:10:bf:a6:fc:7c:4f:ff:0d:81:7f:a9:ed:3e:6c: fe:4b:e5:b1:0d:81:bb:03:bf:87:b5:03:38:3d:08: 6b:30:56:a5:1b:53:c8:b0:74:74:75:93:cb:6d:98: 12:9b:b1:a7:87:1e:49:0f:a6:a8:66:d8:f0:4b:41: 76:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:65:A4:92:85:B5:EC:99:F2:CA:EE:11:58:74:A9:93:5F:71:8C:C0 X509v3 Authority Key Identifier: keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:11:4e:df:48:e7:10:e3:28:61:e6:70:ac:67:25:ee:65:61: b3:e5:66:42:d7:73:4d:34:b8:33:95:74:fa:8e:65:3e:7b:56: f8:9a:fd:64:4f:c4:42:d3:55:ce:b9:8a:1b:03:c1:8b:e4:01: c3:06:6b:f0:14:63:9d:3f:22:17:cb:0c:4c:a1:3e:fc:de:94: 9e:46:4f:28:5c:da:6a:12:5d:9c:58:74:0d:f3:6c:75:6b:0b: f9:58:94:25:8c:2b:64:74:33:92:71:a6:39:17:1c:e6:ee:af: fd:24:47:88:0e:12:c9:61:d9:19:7e:ad:0a:03:a0:dd:0f:1b: c1:61:98:8d:c5:c1:1e:af:32:bf:e0:15:99:43:27:b0:10:73: f3:c2:6f:18:ca:21:6c:29:2a:7c:44:84:c8:9b:92:9b:fa:32: 67:2d:56:a2:4e:ce:2c:9d:71:5c:4d:f0:87:6a:79:36:13:7f: 2d:ef:21:4d:b6:6f:ff:58:c9:66:59:89:a4:52:aa:44:e9:ea: b6:ef:ce:ca:92:35:ec:c6:50:95:82:ed:f7:f1:0e:9c:3a:0c: 9a:de:70:02:41:de:e1:10:68:98:4f:d4:99:a4:69:d7:fe:b7: ad:34:12:83:65:ed:b0:a2:2e:22:f9:18:20:54:80:1e:c2:b6: 54:e6:a6:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlEQ0IxMTAvBgNVBAUTKDA3QTYwN0RDQTkzMzMyMUZGNzhGRUM2OENEN0E0QzE0 OTU0MzdBNUYwHhcNMjUxMjIyMTkxNjQ0WhcNMjUxMjI5MTkxNjQ0WjAYMRYwFAYD VQQDDA02OTQ5OTkxYy0xYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJLmn+8eQbiPdgQ2c2jz111PtVoFlawyTgburCa6fx1fXTKgrD6PwhbnDJeN hDVP/A3diEmLGBGoaXPRKpKd1jEPINa3t16pXuLvWNYoWFec2eUSmrMKdpGVTwVD jaEty0EKIbXqlnNn78f1G5t9swM0iTcODAq9HIuMfefzgQ9o+2iUqTuMZsqORyDi BF3K33CTAT5sJ9kDDrU7Nc/yEKvBjdXODeeOTIphlCIUKjAsIH2dYuoDto/9xMNS tuv7lRtTEL+m/HxP/w2Bf6ntPmz+S+WxDYG7A7+HtQM4PQhrMFalG1PIsHR0dZPL bZgSm7Gnhx5JD6aoZtjwS0F2NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBlpJKF teyZ8sruEVh0qZNfcYzAMB8GA1UdIwQYMBaAFAemB9ypMzIf94/saM16TBSVQ3pf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOURDQi83QzlFQzlCQThD NEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1oXzNqLXhvelhwTUZKVkRl bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2WUgzS2t6TWhfM2oteG96WHBNRkpWRGVsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OURDQi83QzlFQzlCQThDNEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1o XzNqLXhvelhwTUZKVkRlbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTEU7fSOcQ4yhh5nCsZyXuZWGz5WZC13NNNLgzlXT6jmU+e1b4mv1k T8RC01XOuYobA8GL5AHDBmvwFGOdPyIXywxMoT783pSeRk8oXNpqEl2cWHQN82x1 awv5WJQljCtkdDOScaY5Fxzm7q/9JEeIDhLJYdkZfq0KA6DdDxvBYZiNxcEerzK/ 4BWZQyewEHPzwm8YyiFsKSp8RITIm5Kb+jJnLVaiTs4snXFcTfCHank2E38t7yFN tm//WMlmWYmkUqpE6eq2787KkjXsxlCVgu338Q6cOgya3nACQd7hEGiYT9SZpGnX /retNBKDZe2woi4i+RggVIAewrZU5qbo -----END CERTIFICATE-----Generated at Wed Dec 24 03:58:35 2025 by rpki-client