This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft File: B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft (raw, json) Hash identifier: PF0hSXJmrEL78BFkRdmPASv2dvCvToc3wdTUJ6DnXoc= Subject key identifier: BB:F5:EA:26:A0:A2:40:FC:42:DA:3A:EC:2E:B9:DC:0D:87:50:3B:BB Authority key identifier: 07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3 Certificate issuer: /CN=A9152E70/serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft Manifest number: 37 Signing time: Tue 02 Dec 2025 22:24:20 +0000 Manifest this update: Tue 02 Dec 2025 22:24:19 +0000 Manifest next update: Tue 09 Dec 2025 22:24:19 +0000 Files and hashes: 1: B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl (hash: LHnQFfO2qIEvKfmfzOoHxfzyKh6pYaPjZysf13U83VU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 22:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70, serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3 Validity Not Before: Dec 2 22:24:19 2025 GMT Not After : Dec 9 22:24:19 2025 GMT Subject: CN=692f6713-d2a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:af:4c:21:db:b8:ff:71:ed:d8:60:22:a9:3b: c5:28:b3:bc:c0:91:b1:01:75:f8:ce:d2:43:23:7f: b2:1a:37:69:50:52:a0:67:3b:e8:7d:01:3f:fc:b8: a9:4e:62:ca:86:31:4c:65:ac:fa:c3:e4:53:48:03: c0:ab:58:3f:77:a3:41:f9:aa:ca:c5:17:c2:01:c4: 85:4b:56:fd:7e:dc:1b:07:12:eb:f0:de:98:48:c1: 66:05:fd:bd:5d:0e:41:c6:99:06:f0:28:48:03:5a: b3:06:84:d2:2c:f1:50:1f:b9:f8:89:b1:13:ba:ed: 8b:0e:12:0a:13:5c:40:d7:a0:39:66:fd:36:f2:09: 94:88:0f:43:6b:d4:cd:d6:17:1b:88:c2:0b:61:3a: b4:6b:63:ba:e3:1f:7e:e9:60:01:0a:2f:35:9b:27: 43:65:76:45:7d:87:db:75:42:b0:39:3b:7a:de:fd: 1e:29:99:05:ac:47:d6:c3:c3:58:47:54:eb:e8:39: b3:31:2f:75:bc:8f:99:3d:27:c7:bf:21:5a:76:9e: 86:bc:6a:44:56:39:97:42:e2:ba:a9:c0:aa:f9:8c: cf:06:51:b6:be:17:6d:1c:1f:68:a3:2d:1b:bc:cd: 8c:39:2e:ff:39:82:75:cb:19:0b:a2:86:c4:1b:e6: 6a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F5:EA:26:A0:A2:40:FC:42:DA:3A:EC:2E:B9:DC:0D:87:50:3B:BB X509v3 Authority Key Identifier: keyid:07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ad:c9:59:60:57:f0:af:f8:66:ba:3c:96:c3:81:f4:aa:5e: af:8a:18:2f:ef:15:ce:0f:d7:93:18:55:8e:09:ac:9e:f4:e6: 7c:05:22:3e:33:29:8d:83:55:60:99:10:f6:23:31:03:01:d4: a9:26:b9:46:f0:a6:00:a2:d0:3c:fa:e4:8b:48:67:d1:99:51: ee:ea:93:97:43:a6:33:bb:05:c7:78:fb:eb:c9:56:66:63:a0: 3e:18:bc:bd:bf:5a:7c:07:fe:d0:d8:25:4a:f0:af:77:e6:dd: fa:f1:94:d3:34:ff:ef:b1:76:b0:73:0a:c4:fd:eb:f1:05:48: 72:e1:55:e1:e1:0f:18:e4:ba:4e:ca:76:06:29:9d:05:63:85: e7:5d:73:f4:61:2b:ee:38:b3:57:53:27:d6:b4:c4:58:c9:a8: b1:94:9b:7b:6f:19:88:69:00:77:34:88:3e:5f:34:ae:d9:09: 12:3c:27:81:3b:da:d2:5e:f5:01:2a:30:25:b7:72:4e:35:75: dc:38:41:f2:1c:15:05:a2:80:d7:12:12:7a:51:83:93:7e:83: 5b:03:74:28:18:ed:53:55:f7:77:42:6d:97:12:73:c2:be:a9: 7f:de:a1:99:4b:af:85:ca:2a:48:3a:6f:1c:21:b5:c8:24:ab: 13:9d:e2:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MkU3MDExMC8GA1UEBRMoMDdGRTg5NjMwMjAxREVGMzdGNEQ2OEEyMEVEMTMzQTlD M0I2QTJBMzAeFw0yNTEyMDIyMjI0MTlaFw0yNTEyMDkyMjI0MTlaMBgxFjAUBgNV BAMTDTY5MmY2NzEzLWQyYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwr0wh27j/ce3YYCKpO8Uos7zAkbEBdfjO0kMjf7IaN2lQUqBnO+h9AT/8uKlO YsqGMUxlrPrD5FNIA8CrWD93o0H5qsrFF8IBxIVLVv1+3BsHEuvw3phIwWYF/b1d DkHGmQbwKEgDWrMGhNIs8VAfufiJsRO67YsOEgoTXEDXoDlm/TbyCZSID0Nr1M3W FxuIwgthOrRrY7rjH37pYAEKLzWbJ0NldkV9h9t1QrA5O3re/R4pmQWsR9bDw1hH VOvoObMxL3W8j5k9J8e/IVp2noa8akRWOZdC4rqpwKr5jM8GUba+F20cH2ijLRu8 zYw5Lv85gnXLGQuihsQb5mqDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu/XqJqCi QPxC2jrsLrncDYdQO7swHwYDVR0jBBgwFoAUB/6JYwIB3vN/TWiiDtEzqcO2oqMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyRTcwL0U2MEU5MzdDN0Q4 NjExRjA4RkIwRTg3OUM0RjlBRTAyL0JfNkpZd0lCM3ZOX1RXaWlEdEV6cWNPMm9x TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQl82Sll3SUIzdk5fVFdpaUR0RXpxY08yb3FNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy RTcwL0U2MEU5MzdDN0Q4NjExRjA4RkIwRTg3OUM0RjlBRTAyL0JfNkpZd0lCM3ZO X1RXaWlEdEV6cWNPMm9xTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ+tyVlgV/Cv+Ga6PJbDgfSqXq+KGC/vFc4P15MYVY4JrJ705nwFIj4z KY2DVWCZEPYjMQMB1KkmuUbwpgCi0Dz65ItIZ9GZUe7qk5dDpjO7Bcd4++vJVmZj oD4YvL2/WnwH/tDYJUrwr3fm3frxlNM0/++xdrBzCsT96/EFSHLhVeHhDxjkuk7K dgYpnQVjheddc/RhK+44s1dTJ9a0xFjJqLGUm3tvGYhpAHc0iD5fNK7ZCRI8J4E7 2tJe9QEqMCW3ck41ddw4QfIcFQWigNcSEnpRg5N+g1sDdCgY7VNV93dCbZcSc8K+ qX/eoZlLr4XKKkg6bxwhtcgkqxOd4gk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:53 2025 by rpki-client