This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft File: MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json) Hash identifier: MtWzKD6FVTS1hVrrB4M3eKvT42Wpp1MKwIM+dxfRK38= Subject key identifier: C0:6C:3E:EA:0A:C1:E3:42:94:45:48:FD:81:81:82:74:FA:3C:B8:C2 Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB Certificate serial: 071D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft Manifest number: 06FA Signing time: Mon 22 Dec 2025 21:16:51 +0000 Manifest this update: Mon 22 Dec 2025 21:16:51 +0000 Manifest next update: Mon 29 Dec 2025 21:16:51 +0000 Files and hashes: 1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: sMuF6ZFt45DSBvEmTu5W1XueUzFFQzH25GIa+tzKBhY=) 2: D9D6FFE098E311F08722B635C4F9AE02.roa (hash: 4B3XONtyer/LI/a650TjjRxsYwxE3yzyQKK0hCYJdog=) 3: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: FFJCcbR2xaawUKSL+usbkIr74Y7s8fy0PX5AM1LQSnQ=) 4: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: Ng5tUT5XtWth/UeVCj9UP+U8A5SqwEGWBOOoygGvFMc=) 5: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: ecb64YVTHrU3z12q4OTbq4blJYoHWP6/Sh6BnZVtvcQ=) 6: E99C5D78999011F09D326581C4F9AE02.roa (hash: KRc5l8wxQAY0kmCFWdslvfP8E+810yOkcCnLCwPkREQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1821 (0x71d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB Validity Not Before: Dec 22 21:16:51 2025 GMT Not After : Dec 29 21:16:51 2025 GMT Subject: CN=6949b543-de7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4d:b6:8a:90:fe:2a:fb:77:f0:61:8d:31:23: 0e:43:ee:2f:61:7d:83:49:30:ca:8d:25:43:86:90: 5a:59:1b:47:e9:6c:06:4b:0c:6d:43:ee:c9:03:f8: c8:a5:d5:26:00:60:68:f0:23:0d:e1:72:6b:a6:99: 7e:7f:47:b0:c3:ba:54:62:b3:cb:c9:33:01:de:15: 3d:bc:93:a8:94:2e:91:d5:a0:e1:7d:18:cd:fa:27: f5:15:1c:e1:39:ea:a4:a8:52:e4:3a:97:27:f1:c8: 55:86:05:90:36:e2:b8:fd:e9:41:a9:66:6c:67:e8: b0:3e:2b:6b:d6:60:45:d4:85:98:4d:b7:00:11:48: 4e:f2:b6:7b:c5:18:b2:86:a7:57:99:67:ab:86:99: 79:64:e1:33:f8:66:c9:97:f4:77:75:c2:60:40:58: 36:40:b0:00:ea:7e:23:16:df:6b:e9:d7:15:57:f1: 0e:5b:dc:e7:ea:ff:f6:0b:c5:d2:9d:22:01:c7:1c: 3b:19:58:ec:47:89:d0:fb:5a:34:02:2e:e0:bb:04: 32:cf:81:ee:5d:1a:87:db:2c:3d:b2:fb:85:81:5f: 45:a9:46:67:d0:59:dd:26:a9:a3:e6:56:b1:d6:80: 2f:42:a8:77:a1:cb:e9:83:3a:a7:1a:7f:83:05:07: b0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6C:3E:EA:0A:C1:E3:42:94:45:48:FD:81:81:82:74:FA:3C:B8:C2 X509v3 Authority Key Identifier: keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:d1:11:46:78:e4:6f:28:28:7e:ef:6d:eb:eb:a9:b4:4b:a2: c0:64:53:71:3e:e0:fd:fa:54:66:9d:20:7c:c4:a2:7f:4a:ef: 59:62:e1:b2:53:8d:4e:35:9c:35:e7:17:33:ea:60:b9:95:ea: dd:85:df:a5:07:32:95:d6:f4:0f:13:21:23:c4:23:a2:a7:55: 36:17:ab:f2:f3:81:e3:bf:4b:01:eb:3b:cb:7c:eb:a3:e5:3a: db:2a:99:69:f6:c8:d0:f5:e1:03:c8:a7:79:6f:6a:4d:56:b4: ad:61:92:fa:5e:25:bb:7c:d7:4b:27:9f:6b:1a:e0:c0:df:b5: 7e:d9:75:18:10:b6:7c:50:67:b8:08:70:00:1b:c0:ce:a0:4d: fb:6e:d8:7e:8a:b6:14:18:95:41:41:a5:0c:03:76:28:71:ac: eb:ee:2d:d0:70:fa:82:21:c8:c8:48:37:91:d0:e2:6a:59:8a: c5:25:30:e1:25:27:6c:1e:78:13:23:ef:74:b5:0d:82:bc:de: 5e:6f:c7:fd:60:13:f8:d3:c0:2f:c9:e5:ec:d0:a1:c0:a8:95: 38:93:58:02:5f:ce:fb:ed:66:b5:93:19:04:66:d4:8f:f8:a2: 9a:a5:eb:af:ec:0d:67:7c:6f:38:7a:15:ac:17:cf:30:19:76: 85:6c:02:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRTYxMTAvBgNVBAUTKDMzMTk1Rjk2QzQ2RDREMjg1RDVCREU0QjBCMDMwRTM4 MzE0RThGQ0IwHhcNMjUxMjIyMjExNjUxWhcNMjUxMjI5MjExNjUxWjAYMRYwFAYD VQQDDA02OTQ5YjU0My1kZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2022ipD+Kvt38GGNMSMOQ+4vYX2DSTDKjSVDhpBaWRtH6WwGSwxtQ+7JA/jI pdUmAGBo8CMN4XJrppl+f0eww7pUYrPLyTMB3hU9vJOolC6R1aDhfRjN+if1FRzh OeqkqFLkOpcn8chVhgWQNuK4/elBqWZsZ+iwPitr1mBF1IWYTbcAEUhO8rZ7xRiy hqdXmWerhpl5ZOEz+GbJl/R3dcJgQFg2QLAA6n4jFt9r6dcVV/EOW9zn6v/2C8XS nSIBxxw7GVjsR4nQ+1o0Ai7guwQyz4HuXRqH2yw9svuFgV9FqUZn0FndJqmj5lax 1oAvQqh3ocvpgzqnGn+DBQewJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBsPuoK weNClEVI/YGBgnT6PLjCMB8GA1UdIwQYMBaAFDMZX5bEbU0oXVveSwsDDjgxTo/L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wRThFMjc4MDdC RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRTaGRXOTVMQ3dNT09ERk9q OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014bGZsc1J0VFNoZFc5NUxDd01PT0RGT2o4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NFNi8wRThFMjc4MDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRT aGRXOTVMQ3dNT09ERk9qOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw0RFGeORvKCh+723r66m0S6LAZFNxPuD9+lRmnSB8xKJ/Su9ZYuGy U41ONZw15xcz6mC5lerdhd+lBzKV1vQPEyEjxCOip1U2F6vy84Hjv0sB6zvLfOuj 5TrbKplp9sjQ9eEDyKd5b2pNVrStYZL6XiW7fNdLJ59rGuDA37V+2XUYELZ8UGe4 CHAAG8DOoE37bth+irYUGJVBQaUMA3Yocazr7i3QcPqCIcjISDeR0OJqWYrFJTDh JSdsHngTI+90tQ2CvN5eb8f9YBP408AvyeXs0KHAqJU4k1gCX8777Wa1kxkEZtSP +KKapeuv7A1nfG84ehWsF88wGXaFbAIQ -----END CERTIFICATE-----Generated at Wed Dec 24 10:59:39 2025 by rpki-client