This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft File: 6bez7TFz3kD-TB_m2P5CucvpyDM.mft (raw, json) Hash identifier: JOB8BFayntNhIzqcmvOqM2erpYRfbg35EMI193B6SEg= Subject key identifier: C5:39:18:C0:7E:23:71:7E:31:D7:0E:12:ED:7D:7D:37:2F:98:8C:09 Authority key identifier: E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33 Certificate issuer: /CN=A9137E12/serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft Manifest number: FA Signing time: Sun 21 Dec 2025 04:20:56 +0000 Manifest this update: Sun 21 Dec 2025 04:20:56 +0000 Manifest next update: Sun 28 Dec 2025 04:20:56 +0000 Files and hashes: 1: 6bez7TFz3kD-TB_m2P5CucvpyDM.crl (hash: D7D8+GHgebGpykz31kv874sbmwi4v66ub5vBLkqMDys=) 2: 367EF0645F9B11EFB904A774C4F9AE02.roa (hash: 3W86JdspaifMIg33JDT0CjRhdsWrcUOOO2qpo/ordp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137E12, serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833 Validity Not Before: Dec 21 04:20:56 2025 GMT Not After : Dec 28 04:20:56 2025 GMT Subject: CN=694775a8-9244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6c:01:06:ff:48:46:a6:06:50:14:82:dd:dc: 59:71:95:67:b0:19:a9:58:68:17:62:56:11:3e:25: ab:3a:e4:ea:00:3b:52:77:db:45:1d:7a:69:b1:e8: f1:6b:ab:70:1b:54:55:b1:95:b3:e5:12:ff:1e:04: 37:e9:49:43:ed:fe:d1:2a:7b:cc:27:f8:6a:b2:3e: 2a:ba:b6:20:ca:7f:9f:f4:f1:6d:85:55:03:42:de: 8b:c2:d6:c6:88:0f:f2:0c:9e:16:bd:22:d3:e4:4b: d9:1e:f1:6b:7d:81:2f:ab:3f:93:cd:c5:8d:00:65: 8a:a4:81:4e:bd:2b:5e:fd:a9:8d:b7:c2:c2:af:8c: 0f:25:ac:d5:81:68:48:75:ff:7c:ca:d3:78:7c:4b: e8:e7:62:de:f7:0f:d2:46:1d:5f:5d:13:4e:32:51: 0b:68:4d:7a:c0:7d:24:d5:57:55:97:68:d3:3a:53: 84:bc:de:0c:ab:ff:6e:d8:b2:ed:f9:c7:8e:27:55: aa:6e:c9:45:07:ad:a8:60:80:c3:49:dd:02:cc:ad: 43:5e:6d:a0:e8:ff:ca:ce:32:76:b9:6c:eb:1a:f1: d2:1b:57:36:8d:81:a7:e4:8c:45:b5:dd:ad:ed:c0: d1:8e:e8:f9:dc:03:e9:48:6b:a5:a0:7f:d3:06:44: ea:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:39:18:C0:7E:23:71:7E:31:D7:0E:12:ED:7D:7D:37:2F:98:8C:09 X509v3 Authority Key Identifier: keyid:E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:e9:65:5e:ea:b5:2b:1e:6b:18:a5:8c:66:84:3a:62:7f:25: 8d:4f:b2:7b:a6:b5:ff:dd:e0:8e:fb:4d:84:44:76:87:d7:53: 15:0d:f4:37:83:23:fb:66:4d:60:e3:86:7a:27:05:bd:a9:3e: b0:1a:21:c7:4c:59:14:69:3f:5c:6c:47:85:88:3a:ae:cb:d0: 6a:00:bd:57:a3:3c:f3:17:55:cf:d6:78:11:0c:bf:ec:35:ca: e4:08:f4:10:89:e5:ef:40:a6:72:7e:90:e4:a5:20:ef:4f:55: 43:50:d0:0a:1b:29:9c:b9:2f:27:73:26:5a:e9:7a:02:70:9a: c4:3c:a4:10:f5:95:c3:42:c0:5b:1f:91:49:31:f3:b0:13:2f: 06:99:5d:7b:e2:74:4d:5a:43:8f:7c:7f:d2:13:64:3f:66:cb: 3e:d7:c5:6b:8f:75:b8:4e:ff:46:24:cf:c2:dd:c1:a1:b3:37: 77:ff:75:2f:da:98:8d:4c:c6:e2:fa:6b:95:34:e1:01:29:0d: 64:cc:de:fc:a8:d0:d5:42:91:e4:49:e0:a6:04:17:db:83:2f: a4:74:99:3a:d9:72:d1:14:49:da:d9:05:fb:6a:e8:0f:19:9c: 7d:97:7b:88:c5:dd:be:7d:e4:5f:ea:40:64:15:62:e2:e6:e8: ed:84:9a:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdFMTIxMTAvBgNVBAUTKEU5QjdCM0VEMzE3M0RFNDBGRTRDMUZFNkQ4RkU0MkI5 Q0JFOUM4MzMwHhcNMjUxMjIxMDQyMDU2WhcNMjUxMjI4MDQyMDU2WjAYMRYwFAYD VQQDDA02OTQ3NzVhOC05MjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWwBBv9IRqYGUBSC3dxZcZVnsBmpWGgXYlYRPiWrOuTqADtSd9tFHXppsejx a6twG1RVsZWz5RL/HgQ36UlD7f7RKnvMJ/hqsj4qurYgyn+f9PFthVUDQt6LwtbG iA/yDJ4WvSLT5EvZHvFrfYEvqz+TzcWNAGWKpIFOvSte/amNt8LCr4wPJazVgWhI df98ytN4fEvo52Le9w/SRh1fXRNOMlELaE16wH0k1VdVl2jTOlOEvN4Mq/9u2LLt +ceOJ1WqbslFB62oYIDDSd0CzK1DXm2g6P/KzjJ2uWzrGvHSG1c2jYGn5IxFtd2t 7cDRjuj53APpSGuloH/TBkTqIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMU5GMB+ I3F+MdcOEu19fTcvmIwJMB8GA1UdIwQYMBaAFOm3s+0xc95A/kwf5tj+QrnL6cgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0UxMi9DNzI4MEYzNDVG OUExMUVGQjQ0MkJGNzNDNEY5QUUwMi82YmV6N1RGejNrRC1UQl9tMlA1Q3VjdnB5 RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZiZXo3VEZ6M2tELVRCX20yUDVDdWN2cHlETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0UxMi9DNzI4MEYzNDVGOUExMUVGQjQ0MkJGNzNDNEY5QUUwMi82YmV6N1RGejNr RC1UQl9tMlA1Q3VjdnB5RE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT6WVe6rUrHmsYpYxmhDpifyWNT7J7prX/3eCO+02ERHaH11MVDfQ3 gyP7Zk1g44Z6JwW9qT6wGiHHTFkUaT9cbEeFiDquy9BqAL1XozzzF1XP1ngRDL/s NcrkCPQQieXvQKZyfpDkpSDvT1VDUNAKGymcuS8ncyZa6XoCcJrEPKQQ9ZXDQsBb H5FJMfOwEy8GmV174nRNWkOPfH/SE2Q/Zss+18Vrj3W4Tv9GJM/C3cGhszd3/3Uv 2piNTMbi+muVNOEBKQ1kzN78qNDVQpHkSeCmBBfbgy+kdJk62XLRFEna2QX7augP GZx9l3uIxd2+feRf6kBkFWLi5ujthJrV -----END CERTIFICATE-----Generated at Mon Dec 22 02:05:15 2025 by rpki-client