This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft File: af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json) Hash identifier: 3PSk8nNS3rjcmJn6lNA756QlJQrwH/7rQkyoR3Bk68c= Subject key identifier: 95:28:36:EA:6E:AD:C7:E8:3F:B3:49:56:8F:B1:23:13:77:90:3F:AC Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B Certificate issuer: /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft Manifest number: 7D Signing time: Fri 19 Dec 2025 05:45:12 +0000 Manifest this update: Fri 19 Dec 2025 05:45:12 +0000 Manifest next update: Fri 26 Dec 2025 05:45:12 +0000 Files and hashes: 1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: v3E6FjAsqJD2Rc2GJ1HbOx8MKM5OWDtAK4DBQQ4medY=) 2: B51F229E1BC611F08FE24C2CC4F9AE02.roa (hash: +A23Vf7UDZZ1gLqCLzyRAUce3j4brOUg3a6CYPzeOps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Validity Not Before: Dec 19 05:45:12 2025 GMT Not After : Dec 26 05:45:12 2025 GMT Subject: CN=6944e668-1eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:aa:12:91:0b:38:9b:58:58:5e:e4:cf:25:32: 22:70:60:2c:99:48:04:cb:a1:28:65:f0:e4:b0:88: 66:b4:fe:be:45:f8:ee:0a:b5:d3:41:83:4d:88:de: 20:51:ce:5a:f2:13:8a:30:68:fd:b9:84:20:df:82: a1:7a:54:c3:be:62:ab:0f:16:2f:78:14:f5:a8:29: c8:ad:4a:58:6e:5e:be:66:a1:04:2c:15:1e:8f:4e: a2:af:e1:f3:97:76:a5:b9:d8:2b:25:fc:59:df:ef: 0a:c8:98:72:c6:c0:7e:4d:d6:14:17:a2:d4:c5:93: 67:fe:b7:7c:c6:89:86:36:a0:e8:c9:e0:0b:8b:73: 5e:0e:34:5b:1c:2d:c2:82:05:76:5a:c6:78:ba:8b: 14:02:79:2c:31:c7:ec:84:68:47:8f:40:ee:bb:08: cd:9f:e9:ca:47:37:f3:35:4d:0d:3f:50:d9:2d:04: c9:62:7b:b3:4a:ea:f9:fa:ac:1a:19:f4:61:37:11: 6d:17:c2:e2:cd:c3:de:19:eb:b1:6d:01:da:a0:a2: 25:5b:6e:55:de:5e:7a:5d:47:9d:b8:89:67:9a:82: 2e:ed:1a:6d:3a:1d:5a:dd:df:83:25:af:d7:94:2b: d0:b8:05:84:52:16:9d:e9:1f:5f:f8:a4:67:96:0a: b1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:28:36:EA:6E:AD:C7:E8:3F:B3:49:56:8F:B1:23:13:77:90:3F:AC X509v3 Authority Key Identifier: keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:33:75:aa:59:05:00:9f:fc:80:92:e4:64:ac:e5:7f:c4:00: cd:9e:ed:55:08:18:10:d6:12:48:ea:36:98:13:01:c5:27:26: e6:4d:2a:d6:b8:bf:70:27:e7:80:20:7f:e0:2b:1a:6d:2b:63: 43:22:a8:00:d5:5f:61:b7:28:19:37:14:ea:9a:c9:7a:5c:9d: d6:e5:f6:ef:0f:1f:1b:30:ea:32:a8:0c:94:df:3a:20:98:ec: 29:fe:20:81:9c:90:7b:4a:6c:34:7f:b9:fb:1d:63:55:9d:88: 66:44:9b:80:4c:7f:e7:77:79:33:01:30:a9:02:a6:cf:61:e0: d1:cd:f4:a2:86:5a:ca:a4:32:c6:8f:9c:e3:f7:50:0b:95:0d: 0f:86:bd:ed:e4:e2:1a:fe:57:b3:3c:1c:c5:93:ec:7a:a9:ea: ac:0f:59:ea:92:b9:a4:99:9e:07:d0:b4:be:2e:df:30:99:28: 35:5f:9f:8a:c5:52:ca:cb:f6:d4:dc:89:19:5a:f3:58:fd:31: 42:8d:e8:47:3b:84:7e:01:cb:20:ea:d0:61:ae:d7:1e:46:50: c5:2e:d9:30:a9:5e:49:a8:dc:91:15:c1:2f:f7:5f:5d:0e:c9: 1b:17:a1:d2:03:24:93:40:15:8e:6a:94:ff:e9:2a:f1:d1:d2: 4c:ec:1f:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NENEMzExMC8GA1UEBRMoNjlGRTk3M0I3RUVCRUIwRkY4OUIyOUI5Q0I1QkVCQUJE MEUzMUQ2QjAeFw0yNTEyMTkwNTQ1MTJaFw0yNTEyMjYwNTQ1MTJaMBgxFjAUBgNV BAMMDTY5NDRlNjY4LTFlYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGqhKRCzibWFhe5M8lMiJwYCyZSATLoShl8OSwiGa0/r5F+O4KtdNBg02I3iBR zlryE4owaP25hCDfgqF6VMO+YqsPFi94FPWoKcitSlhuXr5moQQsFR6PTqKv4fOX dqW52Csl/Fnf7wrImHLGwH5N1hQXotTFk2f+t3zGiYY2oOjJ4AuLc14ONFscLcKC BXZaxni6ixQCeSwxx+yEaEePQO67CM2f6cpHN/M1TQ0/UNktBMlie7NK6vn6rBoZ 9GE3EW0XwuLNw94Z67FtAdqgoiVbblXeXnpdR524iWeagi7tGm06HVrd34Mlr9eU K9C4BYRSFp3pH1/4pGeWCrGfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlSg26m6t x+g/s0lWj7EjE3eQP6wwHwYDVR0jBBgwFoAUaf6XO37r6w/4mym5y1vrq9DjHWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0Q0QzL0YwQTY1QzNFMUI2 NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndfNG15bTV5MXZycTlEakhX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWY2WE8zN3I2d180bXltNXkxdnJxOURqSFdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 Q0QzL0YwQTY1QzNFMUI2NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndf NG15bTV5MXZycTlEakhXcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABczdapZBQCf/ICS5GSs5X/EAM2e7VUIGBDWEkjqNpgTAcUnJuZNKta4 v3An54Agf+ArGm0rY0MiqADVX2G3KBk3FOqayXpcndbl9u8PHxsw6jKoDJTfOiCY 7Cn+IIGckHtKbDR/ufsdY1WdiGZEm4BMf+d3eTMBMKkCps9h4NHN9KKGWsqkMsaP nOP3UAuVDQ+Gve3k4hr+V7M8HMWT7Hqp6qwPWeqSuaSZngfQtL4u3zCZKDVfn4rF UsrL9tTciRla81j9MUKN6Ec7hH4ByyDq0GGu1x5GUMUu2TCpXkmo3JEVwS/3X10O yRsXodIDJJNAFY5qlP/pKvHR0kzsH6c= -----END CERTIFICATE-----Generated at Fri Dec 19 23:57:19 2025 by rpki-client