This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft File: 6zLfknQ0rG06hoR937o9LoEAETE.mft (raw, json) Hash identifier: IinC3g/cPu4taLmNzsh09BGYRPGZitagIbTG6LedCi8= Subject key identifier: D3:57:24:0C:B3:F1:51:42:AF:C9:92:16:67:25:18:65:E0:9A:2F:26 Authority key identifier: EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31 Certificate issuer: /CN=A911945B/serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft Manifest number: 012B Signing time: Fri 19 Dec 2025 04:23:15 +0000 Manifest this update: Fri 19 Dec 2025 04:23:14 +0000 Manifest next update: Fri 26 Dec 2025 04:23:14 +0000 Files and hashes: 1: 6zLfknQ0rG06hoR937o9LoEAETE.crl (hash: 5TeW7UzgrkiFdlxV32yMsOOUgz1Lm7u8vN8x0HX5Epk=) 2: C562775017FD11EF9A320864C4F9AE02.roa (hash: /WtVfmIGzSnn9ROVLgs6+dWRzHCaOdfjNH1x53TWZKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.crl rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911945B, serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131 Validity Not Before: Dec 19 04:23:14 2025 GMT Not After : Dec 26 04:23:14 2025 GMT Subject: CN=6944d332-7934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d0:df:49:1a:14:6e:01:cf:b1:c9:be:93:3e: 78:13:d5:13:6c:d7:4b:e2:7a:b0:ae:21:f8:26:01: 8e:c5:7f:a0:ab:fe:6e:8a:67:9a:63:4b:10:04:37: a0:04:c5:23:87:ff:dc:a0:a5:d2:3c:e6:81:be:bd: 7b:8f:77:82:53:89:ff:5c:54:f7:a2:d1:b9:2c:bd: 28:e9:b5:f7:1f:10:df:a6:67:64:7f:6a:74:47:b8: bc:de:c4:ae:c4:21:ff:ad:10:4b:ef:53:d6:d1:fd: 03:9c:d0:a3:32:3f:2b:d3:14:82:2c:6d:71:08:12: f7:88:a3:96:36:10:cc:fc:10:a2:c2:bf:f5:cc:15: 51:f9:b1:13:8e:f9:7a:2f:28:de:19:80:86:3a:8b: e4:ae:27:98:84:2b:9f:f3:2e:a1:c9:df:7a:9a:2f: 4e:81:d1:d0:f4:9b:02:5b:bb:a2:70:36:1b:10:d0: 1d:a1:7f:d1:50:bc:6b:5e:fa:0e:47:89:0f:89:ad: b8:df:c3:ea:95:a8:0a:32:33:6a:53:ad:4d:d5:84: dc:5b:72:fb:84:5f:17:12:54:67:4b:b6:78:89:d8: a6:20:c5:e5:27:2d:66:86:8e:f0:3a:fe:06:c5:b2: e6:a0:82:85:bd:37:05:a4:f7:11:05:15:0a:68:82: c2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:57:24:0C:B3:F1:51:42:AF:C9:92:16:67:25:18:65:E0:9A:2F:26 X509v3 Authority Key Identifier: keyid:EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:b3:21:6d:28:f3:3f:41:3d:2d:d4:4a:70:75:97:3f:7e:24: be:78:81:68:aa:82:d1:71:75:e7:94:92:e7:a2:ca:f3:2b:aa: 3f:fc:d2:a1:f8:88:5a:8f:36:27:d3:82:ed:19:50:0d:55:3d: 56:71:e1:64:35:0e:ef:37:7f:e6:23:f2:25:42:d5:74:1b:ef: 59:41:2a:93:35:6e:ab:c7:1c:29:53:92:e2:2f:77:c3:f7:8b: e0:75:2b:53:b1:a9:88:fc:56:1c:30:95:de:ba:47:95:ec:06: d1:e3:b4:c0:2e:5a:db:f3:d2:12:f3:7d:44:51:47:5b:6c:99: 8b:87:50:fd:d5:65:4c:a0:84:a1:0e:fb:5d:30:b3:b1:27:8c: ef:93:93:1d:21:e5:3c:90:e9:01:1f:a3:de:d5:b6:80:f6:49: 27:a5:d0:54:38:47:0a:3d:da:31:c3:cd:76:dd:5e:d3:9f:b6: 4b:31:8d:70:a9:93:2c:ba:6d:49:76:28:4a:60:b1:d1:e3:91: 25:c4:4c:73:46:54:5d:20:fb:7b:ed:07:3d:19:ed:48:e1:df: 35:c7:a3:70:46:08:07:e7:51:2a:ee:ad:5a:2a:a2:18:ab:31: 6b:1d:9c:31:63:6d:27:4c:28:7c:04:d9:c0:ac:45:66:fb:fe: 8c:cb:8b:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MTk0NUIxMTAvBgNVBAUTKEVCMzJERjkyNzQzNEFDNkQzQTg2ODQ3RERGQkEzRDJF ODEwMDExMzEwHhcNMjUxMjE5MDQyMzE0WhcNMjUxMjI2MDQyMzE0WjAYMRYwFAYD VQQDDA02OTQ0ZDMzMi03OTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhdDfSRoUbgHPscm+kz54E9UTbNdL4nqwriH4JgGOxX+gq/5uimeaY0sQBDeg BMUjh//coKXSPOaBvr17j3eCU4n/XFT3otG5LL0o6bX3HxDfpmdkf2p0R7i83sSu xCH/rRBL71PW0f0DnNCjMj8r0xSCLG1xCBL3iKOWNhDM/BCiwr/1zBVR+bETjvl6 LyjeGYCGOovkrieYhCuf8y6hyd96mi9OgdHQ9JsCW7uicDYbENAdoX/RULxrXvoO R4kPia2438PqlagKMjNqU61N1YTcW3L7hF8XElRnS7Z4idimIMXlJy1mho7wOv4G xbLmoIKFvTcFpPcRBRUKaILCawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNXJAyz 8VFCr8mSFmclGGXgmi8mMB8GA1UdIwQYMBaAFOsy35J0NKxtOoaEfd+6PS6BABEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTQ1Qi8zQUNGNzBDMDE3 RkQxMUVGOEMwODMwNjNDNEY5QUUwMi82ekxma25RMHJHMDZob1I5MzdvOUxvRUFF VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6TGZrblEwckcwNmhvUjkzN285TG9FQUVURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTQ1Qi8zQUNGNzBDMDE3RkQxMUVGOEMwODMwNjNDNEY5QUUwMi82ekxma25RMHJH MDZob1I5MzdvOUxvRUFFVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHsyFtKPM/QT0t1EpwdZc/fiS+eIFoqoLRcXXnlJLnosrzK6o//NKh +IhajzYn04LtGVANVT1WceFkNQ7vN3/mI/IlQtV0G+9ZQSqTNW6rxxwpU5LiL3fD 94vgdStTsamI/FYcMJXeukeV7AbR47TALlrb89IS831EUUdbbJmLh1D91WVMoISh DvtdMLOxJ4zvk5MdIeU8kOkBH6Pe1baA9kknpdBUOEcKPdoxw8123V7Tn7ZLMY1w qZMsum1JdihKYLHR45ElxExzRlRdIPt77Qc9Ge1I4d81x6NwRggH51Eq7q1aKqIY qzFrHZwxY20nTCh8BNnArEVm+/6My4ss -----END CERTIFICATE-----Generated at Fri Dec 19 19:02:59 2025 by rpki-client