This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft File: 6q7GCbncI1xGucXxvKPNvsf_7ig.mft (raw, json) Hash identifier: +7f42it1V2mk7b6QhZlgcaAxA6ukO6HPXpu5V4CkoXA= Subject key identifier: 15:A3:0C:0D:88:37:33:86:51:F1:30:0D:E3:2B:85:0D:C4:5D:EE:A2 Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 Certificate issuer: /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Certificate serial: 0CA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft Manifest number: 0C86 Signing time: Mon 22 Dec 2025 18:08:16 +0000 Manifest this update: Mon 22 Dec 2025 18:08:15 +0000 Manifest next update: Mon 29 Dec 2025 18:08:15 +0000 Files and hashes: 1: 6q7GCbncI1xGucXxvKPNvsf_7ig.crl (hash: vAljRYvhi4lO7BlcVm8MbbktSpBm9+q32J8cbdzCtV0=) 2: 403FDDD0DF3511ED8FBA823DC4F9AE02.roa (hash: n02qcDfoz5xfgtE3pmF9DuTrufYGzGxNykq63R1mDas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3236 (0xca4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A82D, serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Validity Not Before: Dec 22 18:08:15 2025 GMT Not After : Dec 29 18:08:15 2025 GMT Subject: CN=6949890f-4a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c5:fc:24:f8:23:3f:ed:42:6f:89:8a:4b:ee: 83:c0:9c:41:6f:72:f3:b1:b2:94:76:3a:20:bd:2f: f4:31:58:e6:9b:d5:c1:8b:c8:b5:d8:f9:44:0c:ff: 0f:3d:b0:df:73:dd:5b:66:8f:f7:1d:92:56:db:27: 04:f6:14:71:3f:05:c5:f8:19:b3:67:86:a0:ac:43: 24:fd:d2:40:05:d8:f1:54:6a:45:82:19:f5:63:0b: d3:4b:15:89:90:70:42:b6:61:24:57:b2:ff:f5:84: 9d:fc:2d:18:f8:0b:d7:89:8e:46:2e:db:7b:8f:80: 65:92:fc:e0:e1:b6:92:26:31:e3:79:b6:f7:29:e9: 0a:c1:e3:1e:5d:64:c7:08:d3:a7:0c:e7:28:c8:75: d5:85:2c:97:ec:63:94:09:d3:0f:5d:20:9f:43:df: 52:3d:35:a7:8a:54:78:f0:29:6f:ff:f3:74:16:9e: b0:f4:97:16:1b:d1:20:81:91:5e:e0:8d:24:21:f3: 19:b6:db:3b:1a:fb:0f:a2:62:82:32:07:64:29:a7: f9:73:18:04:ef:6a:e5:29:b3:b1:39:21:78:44:ec: 0e:5d:e1:98:7f:ca:73:fa:d8:76:e2:a5:d7:dc:9e: a4:8c:ea:f7:7f:a7:bd:38:9f:34:e1:c0:0c:57:90: d5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A3:0C:0D:88:37:33:86:51:F1:30:0D:E3:2B:85:0D:C4:5D:EE:A2 X509v3 Authority Key Identifier: keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:d5:ca:f9:09:ac:37:9d:b8:14:5b:4b:6b:45:44:50:db:6d: ed:2c:3d:fe:ba:b1:a1:ed:89:f0:9b:bd:cd:16:e5:79:ba:0c: 5b:a3:2e:a1:96:dd:e7:49:fd:8b:51:fc:e1:72:48:6e:02:43: fe:86:10:35:ec:54:93:15:16:6e:d3:3d:9f:a6:77:38:f2:68: ed:75:a4:8b:6a:62:c8:7f:1d:32:dc:87:1c:38:1b:ce:1f:67: e6:20:d0:30:a2:32:04:ae:b5:8e:65:f5:8e:b7:99:62:49:a0: 91:2e:f3:aa:da:b6:79:f5:5d:b2:0c:3a:ba:f1:90:94:7b:4a: b0:06:68:3f:02:6d:a8:94:12:a2:fb:8b:66:b6:f0:7a:90:3f: 5e:60:76:42:dc:f0:de:69:f5:81:a6:cb:c7:f2:d9:99:0d:70: 9c:a4:b8:d8:fa:03:67:ea:bf:64:d6:ca:2d:4e:f6:90:ca:73: f8:66:e5:0f:90:aa:43:54:04:c3:ba:bb:8a:4f:b5:7f:75:2f: 11:df:05:04:66:18:b2:00:6b:b1:f7:89:d2:43:a0:01:43:ea: 75:3d:42:c3:37:ae:11:59:26:17:d5:4f:21:b7:ec:01:15:84: d3:63:cd:23:c2:b3:e8:b6:34:2b:a1:42:c0:98:be:31:0c:ea: 5f:b6:c0:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4MkQxMTAvBgNVBAUTKEVBQUVDNjA5QjlEQzIzNUM0NkI5QzVGMUJDQTNDREJF QzdGRkVFMjgwHhcNMjUxMjIyMTgwODE1WhcNMjUxMjI5MTgwODE1WjAYMRYwFAYD VQQDDA02OTQ5ODkwZi00YThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sX8JPgjP+1Cb4mKS+6DwJxBb3LzsbKUdjogvS/0MVjmm9XBi8i12PlEDP8P PbDfc91bZo/3HZJW2ycE9hRxPwXF+BmzZ4agrEMk/dJABdjxVGpFghn1YwvTSxWJ kHBCtmEkV7L/9YSd/C0Y+AvXiY5GLtt7j4Blkvzg4baSJjHjebb3KekKweMeXWTH CNOnDOcoyHXVhSyX7GOUCdMPXSCfQ99SPTWnilR48Clv//N0Fp6w9JcWG9EggZFe 4I0kIfMZtts7GvsPomKCMgdkKaf5cxgE72rlKbOxOSF4ROwOXeGYf8pz+th24qXX 3J6kjOr3f6e9OJ804cAMV5DVpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWjDA2I NzOGUfEwDeMrhQ3EXe6iMB8GA1UdIwQYMBaAFOquxgm53CNcRrnF8byjzb7H/+4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTgyRC9BREY2NjVDMDEy NzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kxeEd1Y1h4dktQTnZzZl83 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxN0dDYm5jSTF4R3VjWHh2S1BOdnNmXzdpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTgyRC9BREY2NjVDMDEyNzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kx eEd1Y1h4dktQTnZzZl83aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI1cr5Caw3nbgUW0trRURQ223tLD3+urGh7Ynwm73NFuV5ugxboy6h lt3nSf2LUfzhckhuAkP+hhA17FSTFRZu0z2fpnc48mjtdaSLamLIfx0y3IccOBvO H2fmINAwojIErrWOZfWOt5liSaCRLvOq2rZ59V2yDDq68ZCUe0qwBmg/Am2olBKi +4tmtvB6kD9eYHZC3PDeafWBpsvH8tmZDXCcpLjY+gNn6r9k1sotTvaQynP4ZuUP kKpDVATDuruKT7V/dS8R3wUEZhiyAGux94nSQ6ABQ+p1PULDN64RWSYX1U8ht+wB FYTTY80jwrPotjQroULAmL4xDOpftsCq -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:56 2025 by rpki-client