This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft File: 6N3s7Bb-NIXVthplph7s11qYG0M.mft (raw, json) Hash identifier: N8ezuLFi1hpugA3jmtbMx/Bjm3Hshum7AAZROxEKCd8= Subject key identifier: B2:DF:83:9D:D6:1F:EE:BC:2D:70:08:98:71:43:BB:81:AD:1E:CD:50 Authority key identifier: E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43 Certificate issuer: /CN=A9172EF8/serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43 Certificate serial: 0878 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft Manifest number: 086E Signing time: Thu 18 Dec 2025 20:09:01 +0000 Manifest this update: Thu 18 Dec 2025 20:09:00 +0000 Manifest next update: Thu 25 Dec 2025 20:09:00 +0000 Files and hashes: 1: 6N3s7Bb-NIXVthplph7s11qYG0M.crl (hash: o9WhVhp4YKz5KICKP0abAZ7ScXiomiTf1/Jr2gkj3rc=) 2: 879AF91C9A8C11EF98A18D7FC4F9AE02.roa (hash: 6OWIgJkNxstxhvie89g5RYpzHfbz0XePQatIfAXwpWw=) 3: 82001182986511EFBFE02134C4F9AE02.roa (hash: TLQPV8U5lGZB70Fi67w4+2isfFUOL9hf77z3nqbL1o8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2168 (0x878) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172EF8, serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43 Validity Not Before: Dec 18 20:09:00 2025 GMT Not After : Dec 25 20:09:00 2025 GMT Subject: CN=69445f5d-2b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:d1:f6:db:6e:6b:27:d0:30:a1:02:79:98: 65:cc:57:d4:22:a7:6d:d4:ad:49:c7:80:a1:30:e3: 46:1d:58:be:29:02:95:f7:bd:67:51:28:1c:51:a6: 9b:b6:d2:9e:0d:1c:f6:73:39:48:8f:0e:a9:3d:15: 35:27:39:59:e8:df:6e:40:70:33:b0:fc:92:ce:9e: 7f:63:a0:ea:3b:51:87:6f:22:01:db:a4:f7:b1:3b: dc:a1:be:07:5b:ac:7d:50:6a:91:e0:f4:af:41:f8: 9a:87:89:dc:3c:45:8f:73:9d:90:61:38:52:17:bb: c3:6a:4f:c2:6d:8b:05:db:68:89:b9:38:c5:d0:b5: d8:46:d1:4d:01:0b:36:f4:22:0e:fb:dc:b5:00:64: 57:03:c1:a6:c6:81:8a:f0:d9:1d:82:49:d2:13:51: 13:9d:38:dc:35:28:92:21:f1:33:01:34:01:15:cc: f3:ba:01:0a:fc:ea:9d:2b:3e:96:1f:28:e4:46:c5: 50:53:80:e1:6c:66:93:ab:2d:1f:04:da:f6:d1:21: ec:49:02:bf:5b:1c:d8:51:b6:6c:c9:8b:17:56:30: de:b9:6d:f7:2d:10:91:9a:44:39:17:f9:91:8d:84: c7:71:83:6d:2e:df:ae:8f:1f:a2:3b:0a:6a:e2:6a: 57:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DF:83:9D:D6:1F:EE:BC:2D:70:08:98:71:43:BB:81:AD:1E:CD:50 X509v3 Authority Key Identifier: keyid:E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:66:a2:08:89:1a:09:6d:e3:34:76:9b:16:2b:56:ad:b3:33: d3:7f:41:14:1e:27:ab:2e:c4:b3:07:cd:7f:62:a2:9d:4a:ec: 41:6c:d8:66:ab:e0:65:30:f6:81:c6:b0:9e:df:c9:a1:92:8e: 28:e4:75:f3:9b:f4:8f:d3:94:c4:24:b1:19:87:6f:2f:11:11: 4a:48:ec:b8:51:e6:4c:f0:2d:da:91:f7:d7:be:e8:dc:e4:3d: 33:45:7e:0d:08:9d:d6:68:57:11:9d:0a:9d:1e:a0:48:48:c8: ce:2c:25:c3:eb:ea:ee:75:ef:da:47:f0:9d:47:8b:79:87:19: 44:a1:d8:f6:65:44:ab:ca:07:37:bc:36:1f:9c:f3:5a:a9:32: 0d:ef:b2:34:f6:f6:6e:23:16:ef:44:56:10:3a:27:b1:54:8f: d8:71:3b:07:e9:6e:30:ee:80:92:39:a6:be:91:2f:6e:5c:4a: 81:d2:19:6f:f4:b1:62:17:d6:fe:c5:fe:8f:ad:71:06:5b:5b: 08:45:90:56:58:14:e8:fa:48:f6:40:b0:a4:b1:76:44:ac:b9: 98:e4:6c:04:0a:6e:c7:4b:58:a4:7f:aa:4c:21:98:ad:39:b4: 2a:c4:ef:7e:1a:36:03:66:c2:51:dd:de:8c:81:aa:8c:f8:8d: c0:7c:f6:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJFRjgxMTAvBgNVBAUTKEU4RERFQ0VDMTZGRTM0ODVENUI2MUE2NUE2MUVFQ0Q3 NUE5ODFCNDMwHhcNMjUxMjE4MjAwOTAwWhcNMjUxMjI1MjAwOTAwWjAYMRYwFAYD VQQDDA02OTQ0NWY1ZC0yYjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsy3R9ttuayfQMKECeZhlzFfUIqdt1K1Jx4ChMONGHVi+KQKV971nUSgcUaab ttKeDRz2czlIjw6pPRU1JzlZ6N9uQHAzsPySzp5/Y6DqO1GHbyIB26T3sTvcob4H W6x9UGqR4PSvQfiah4ncPEWPc52QYThSF7vDak/CbYsF22iJuTjF0LXYRtFNAQs2 9CIO+9y1AGRXA8GmxoGK8NkdgknSE1ETnTjcNSiSIfEzATQBFczzugEK/OqdKz6W HyjkRsVQU4DhbGaTqy0fBNr20SHsSQK/WxzYUbZsyYsXVjDeuW33LRCRmkQ5F/mR jYTHcYNtLt+ujx+iOwpq4mpXbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLfg53W H+68LXAImHFDu4GtHs1QMB8GA1UdIwQYMBaAFOjd7OwW/jSF1bYaZaYe7NdamBtD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkVGOC83N0Y5OEMzOERE OEMxMUVBQkRGMEU2ODJDNEY5QUUwMi82TjNzN0JiLU5JWFZ0aHBscGg3czExcVlH ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOM3M3QmItTklYVnRocGxwaDdzMTFxWUcwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkVGOC83N0Y5OEMzOEREOEMxMUVBQkRGMEU2ODJDNEY5QUUwMi82TjNzN0JiLU5J WFZ0aHBscGg3czExcVlHME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARZqIIiRoJbeM0dpsWK1atszPTf0EUHierLsSzB81/YqKdSuxBbNhm q+BlMPaBxrCe38mhko4o5HXzm/SP05TEJLEZh28vERFKSOy4UeZM8C3akffXvujc 5D0zRX4NCJ3WaFcRnQqdHqBISMjOLCXD6+rude/aR/CdR4t5hxlEodj2ZUSrygc3 vDYfnPNaqTIN77I09vZuIxbvRFYQOiexVI/YcTsH6W4w7oCSOaa+kS9uXEqB0hlv 9LFiF9b+xf6PrXEGW1sIRZBWWBTo+kj2QLCksXZErLmY5GwECm7HS1ikf6pMIZit ObQqxO9+GjYDZsJR3d6MgaqM+I3AfPZJ -----END CERTIFICATE-----Generated at Sat Dec 20 11:43:53 2025 by rpki-client