This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft File: 77_xazqfbkTaHnWOk5XRxbcUR1o.mft (raw, json) Hash identifier: eFI5gR0ICzbJydgY7wjNbAWRGvTRHoDy5QSWK+QA0Ek= Subject key identifier: 32:6A:4B:16:CD:90:51:E3:75:00:C6:38:B0:7E:24:F0:2D:4C:0F:3A Authority key identifier: EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A Certificate issuer: /CN=A9136B8D/serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A Certificate serial: 06D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft Manifest number: 06C9 Signing time: Mon 22 Dec 2025 21:24:09 +0000 Manifest this update: Mon 22 Dec 2025 21:24:09 +0000 Manifest next update: Mon 29 Dec 2025 21:24:09 +0000 Files and hashes: 1: 77_xazqfbkTaHnWOk5XRxbcUR1o.crl (hash: Q4Z3tbwx4JUwi5cL7QDr+hmPQTNKLS/NYhEo9/hGPv8=) 2: 3ADF4748836D11EBAD2CDC13C4F9AE02.roa (hash: /FJLHrb+Y+v6CrfuPekX8L5QT/sE2Qa/rLDAkhyiJro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1746 (0x6d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136B8D, serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A Validity Not Before: Dec 22 21:24:09 2025 GMT Not After : Dec 29 21:24:09 2025 GMT Subject: CN=6949b6f9-e20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:56:01:74:4d:23:da:92:a3:c1:2d:74:8e:02: 46:d8:fd:f4:60:b8:ab:53:d5:05:58:fd:b8:af:97: 1c:9a:47:5d:e2:3c:68:8d:83:10:fe:42:85:a6:25: da:f7:ed:69:14:37:a6:e5:fd:9f:5f:62:95:0f:b3: 08:b6:72:f3:b7:39:1c:c4:20:90:f9:ef:50:6e:19: 39:32:44:86:10:24:22:c2:e3:1f:47:a6:b1:c9:25: 6d:07:a5:26:d9:f9:ac:50:5f:5d:11:72:7e:ad:0c: 35:6f:70:f6:2a:72:6e:4c:d8:6b:a3:69:03:f3:64: fb:6a:e5:8a:41:dd:fe:47:91:35:a9:e7:da:d8:56: 9c:6b:06:b3:a7:10:55:3f:92:36:74:da:00:1e:ff: 0b:e1:5e:27:5f:95:aa:ac:cb:d7:bc:f5:71:3a:89: 29:cb:68:7d:90:20:4d:21:c0:3f:53:a0:3e:b9:5d: 05:b9:79:33:a8:65:77:97:80:88:f7:93:72:22:e6: 1d:ba:56:30:13:94:35:fb:5c:a1:e5:de:74:4f:ac: b6:96:1b:12:6b:70:e5:f8:dc:9c:69:c9:e6:5f:d3: c0:fd:37:85:cd:0f:6e:72:62:6e:eb:d1:1e:1e:5b: 1e:65:86:e2:a4:62:fc:ff:1c:59:bb:ab:59:c6:f0: 87:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6A:4B:16:CD:90:51:E3:75:00:C6:38:B0:7E:24:F0:2D:4C:0F:3A X509v3 Authority Key Identifier: keyid:EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:71:46:dd:cb:9e:4d:28:e6:a5:f5:a4:21:04:46:73:ff:3f: f1:ca:d2:8b:32:5a:57:7e:b0:d6:c2:c1:9b:79:48:42:ce:bc: 7e:a6:ba:34:76:f8:2f:cf:58:b2:d7:3e:30:15:88:9c:65:5c: a9:4b:ca:40:50:5c:05:b5:73:3f:ad:56:de:88:2f:a7:98:2e: a0:60:a5:42:6e:be:bf:42:9b:ee:69:29:eb:d5:73:12:f9:6a: 03:95:25:28:20:f9:e9:61:e1:6a:57:37:95:8b:8d:72:b6:10: 7b:75:06:d0:df:9c:f3:49:e6:f5:a1:e5:6d:aa:48:9b:f4:3d: e1:63:e7:58:2f:c4:42:47:fa:56:a7:67:2b:67:a2:29:ad:81: b1:14:e7:76:f7:23:6f:ba:b3:59:e0:dd:53:36:42:6c:f1:14: b6:02:66:de:f5:64:b1:73:b2:0a:bc:f2:94:c1:1f:bb:9d:eb: de:28:0b:9a:21:3c:bd:69:f3:ac:fb:51:05:f6:c0:c6:1d:8c: 46:b7:70:0e:1f:86:f1:c1:d8:6c:7f:e2:82:a4:2d:6c:51:c4: 48:95:af:b6:ff:94:48:54:41:91:b0:ab:46:a4:94:e2:9c:ba: af:fb:bd:ca:2d:47:30:15:0a:e5:1e:4c:97:0f:c5:52:93:5e: 67:e5:82:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCOEQxMTAvBgNVBAUTKEVGQkZGMTZCM0E5RjZFNDREQTFFNzU4RTkzOTVEMUM1 QjcxNDQ3NUEwHhcNMjUxMjIyMjEyNDA5WhcNMjUxMjI5MjEyNDA5WjAYMRYwFAYD VQQDDA02OTQ5YjZmOS1lMjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVYBdE0j2pKjwS10jgJG2P30YLirU9UFWP24r5ccmkdd4jxojYMQ/kKFpiXa 9+1pFDem5f2fX2KVD7MItnLztzkcxCCQ+e9Qbhk5MkSGECQiwuMfR6axySVtB6Um 2fmsUF9dEXJ+rQw1b3D2KnJuTNhro2kD82T7auWKQd3+R5E1qefa2FacawazpxBV P5I2dNoAHv8L4V4nX5WqrMvXvPVxOokpy2h9kCBNIcA/U6A+uV0FuXkzqGV3l4CI 95NyIuYdulYwE5Q1+1yh5d50T6y2lhsSa3Dl+NycacnmX9PA/TeFzQ9ucmJu69Ee HlseZYbipGL8/xxZu6tZxvCHYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJqSxbN kFHjdQDGOLB+JPAtTA86MB8GA1UdIwQYMBaAFO+/8Ws6n25E2h51jpOV0cW3FEda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkI4RC8wREI4OTNFQzgz NkMxMUVCOEMxQTk4MTNDNEY5QUUwMi83N194YXpxZmJrVGFIbldPazVYUnhiY1VS MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc3X3hhenFmYmtUYUhuV09rNVhSeGJjVVIxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkI4RC8wREI4OTNFQzgzNkMxMUVCOEMxQTk4MTNDNEY5QUUwMi83N194YXpxZmJr VGFIbldPazVYUnhiY1VSMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLcUbdy55NKOal9aQhBEZz/z/xytKLMlpXfrDWwsGbeUhCzrx+pro0 dvgvz1iy1z4wFYicZVypS8pAUFwFtXM/rVbeiC+nmC6gYKVCbr6/QpvuaSnr1XMS +WoDlSUoIPnpYeFqVzeVi41ythB7dQbQ35zzSeb1oeVtqkib9D3hY+dYL8RCR/pW p2crZ6IprYGxFOd29yNvurNZ4N1TNkJs8RS2Ambe9WSxc7IKvPKUwR+7neveKAua ITy9afOs+1EF9sDGHYxGt3AOH4bxwdhsf+KCpC1sUcRIla+2/5RIVEGRsKtGpJTi nLqv+73KLUcwFQrlHkyXD8VSk15n5YIT -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:01 2025 by rpki-client