This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft File: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json) Hash identifier: fvCplR+KeXCNwATTTlwVZqMq3t5FBCuSFFl0qLNGrPY= Subject key identifier: 9C:56:9A:2B:B5:67:EA:37:D0:A7:9B:7D:F1:95:86:83:B6:7E:C8:89 Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Certificate serial: 0AF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft Manifest number: 0AD5 Signing time: Sat 20 Dec 2025 18:58:14 +0000 Manifest this update: Sat 20 Dec 2025 18:58:14 +0000 Manifest next update: Sat 27 Dec 2025 18:58:14 +0000 Files and hashes: 1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: uCHEwve371VdnNK8v0PoDJz1v0SdnOZW1L+OUAA7x/g=) 2: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: iGUFOWK6oRwPeEo+C87zciurGuoBwNOi2mVgrnihqBQ=) 3: BE633CD283A611EE804BB319C4F9AE02.roa (hash: NPIjvL++urku6C6DzlbI7Tjblbx8i4fhbfChdZsNErw=) 4: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: ynLMF5PjpFkvP/pk/9zlgeaTF7AgzyDNzOj/EUi7rZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2804 (0xaf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Validity Not Before: Dec 20 18:58:14 2025 GMT Not After : Dec 27 18:58:14 2025 GMT Subject: CN=6946f1c6-5004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8f:f6:c0:bb:46:41:e1:8c:74:15:ae:58:41: 29:11:64:51:c1:de:34:ad:ba:22:81:e0:bf:59:51: bf:3e:75:4d:13:e8:06:a0:86:83:71:4a:22:60:d1: 65:b5:be:92:c5:d7:84:47:74:4e:ce:44:45:92:48: 8d:eb:d4:02:45:3a:d3:45:d9:ae:ac:c1:1b:d8:ed: f8:11:2d:f8:cf:e2:0c:11:93:54:be:36:c2:2d:c5: d4:de:1e:9d:25:18:d4:a7:1b:d9:cc:2d:e6:9f:49: 08:c3:f6:2a:c3:85:e7:3f:93:db:e1:67:bf:f6:d8: f7:d7:87:78:81:5e:9d:0c:b1:54:ea:fd:e2:b8:3e: e9:25:e4:f4:7f:44:42:29:4f:96:0c:2d:e8:0b:e9: 91:a2:5a:56:6e:ad:31:aa:d4:78:3e:d5:ee:10:24: 09:18:b4:1c:b5:b3:4a:b3:59:c7:fd:db:30:1b:81: 91:93:dc:fc:96:3f:30:41:f5:ac:bd:5a:16:35:75: ff:d7:97:3c:43:60:77:23:8c:4e:98:09:15:98:50: 4d:b0:d3:dc:1b:ce:e3:95:07:fd:f7:1f:c8:aa:8e: 2b:93:e5:43:71:16:7c:e7:f0:16:bf:60:64:ae:61: a6:f7:ea:fc:f3:1e:f7:f9:b3:a9:90:78:da:c4:33: 87:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:56:9A:2B:B5:67:EA:37:D0:A7:9B:7D:F1:95:86:83:B6:7E:C8:89 X509v3 Authority Key Identifier: keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:b6:b6:6e:80:34:d4:56:d8:cc:e0:b7:61:45:e9:ef:e4:2e: a4:9e:82:0a:ab:0a:c1:ec:5f:a9:15:4c:ab:dd:b1:e6:0b:f6: 85:2e:ae:a0:3d:d3:cf:a7:23:3c:cf:72:b0:01:1b:04:5a:23: 48:7a:56:80:53:9c:82:5d:f3:39:c4:9f:26:43:72:ee:64:de: b2:89:85:b1:fe:87:71:69:6f:42:b4:c6:41:09:81:91:d2:b1: ce:4a:e1:aa:f8:54:33:e3:11:25:60:86:94:0b:fb:2b:89:bf: 2d:79:ab:d0:51:24:76:b1:e9:e7:32:8c:7b:83:e0:ec:ed:81: 83:51:ef:d1:b2:9e:96:ec:f6:16:14:08:d7:ae:2d:f7:70:84: bd:7e:9d:a1:ef:22:87:b0:f6:c6:ce:b6:2f:b9:b1:a4:72:1f: 2e:1b:29:ef:43:be:a2:41:73:a3:81:70:b9:23:bf:a0:40:0a: 41:eb:9c:9d:3d:41:33:70:2b:92:eb:82:d5:2d:51:28:87:a4: 29:a7:f6:81:57:75:39:59:82:09:2c:1a:b2:be:64:3e:1e:f9: 0f:bf:d8:20:45:3b:50:a5:8a:84:58:08:bf:e6:95:88:e8:89: 9b:7e:24:ba:27:52:b7:68:91:75:83:d3:6c:85:09:e4:0b:fa: bf:18:5b:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NCRDcxMTAvBgNVBAUTKEU5OTIzQkFDMEY1QzU4Q0FCRUI5MzI4NkNBMjAyNjZG MUY2RUZCMTQwHhcNMjUxMjIwMTg1ODE0WhcNMjUxMjI3MTg1ODE0WjAYMRYwFAYD VQQDDA02OTQ2ZjFjNi01MDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuI/2wLtGQeGMdBWuWEEpEWRRwd40rboigeC/WVG/PnVNE+gGoIaDcUoiYNFl tb6SxdeER3ROzkRFkkiN69QCRTrTRdmurMEb2O34ES34z+IMEZNUvjbCLcXU3h6d JRjUpxvZzC3mn0kIw/Yqw4XnP5Pb4We/9tj314d4gV6dDLFU6v3iuD7pJeT0f0RC KU+WDC3oC+mRolpWbq0xqtR4PtXuECQJGLQctbNKs1nH/dswG4GRk9z8lj8wQfWs vVoWNXX/15c8Q2B3I4xOmAkVmFBNsNPcG87jlQf99x/Iqo4rk+VDcRZ85/AWv2Bk rmGm9+r88x73+bOpkHjaxDOHpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxWmiu1 Z+o30KebffGVhoO2fsiJMB8GA1UdIwQYMBaAFOmSO6wPXFjKvrkyhsogJm8fbvsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0JENy8xOTIzQkY2ODY0 MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dNcS11VEtHeWlBbWJ4OXUt eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaSTdyQTljV01xLXVUS0d5aUFtYng5dS14US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0JENy8xOTIzQkY2ODY0MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dN cS11VEtHeWlBbWJ4OXUteFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATtrZugDTUVtjM4LdhRenv5C6knoIKqwrB7F+pFUyr3bHmC/aFLq6g PdPPpyM8z3KwARsEWiNIelaAU5yCXfM5xJ8mQ3LuZN6yiYWx/odxaW9CtMZBCYGR 0rHOSuGq+FQz4xElYIaUC/srib8teavQUSR2sennMox7g+Ds7YGDUe/Rsp6W7PYW FAjXri33cIS9fp2h7yKHsPbGzrYvubGkch8uGynvQ76iQXOjgXC5I7+gQApB65yd PUEzcCuS64LVLVEoh6Qpp/aBV3U5WYIJLBqyvmQ+HvkPv9ggRTtQpYqEWAi/5pWI 6ImbfiS6J1K3aJF1g9NshQnkC/q/GFu9 -----END CERTIFICATE-----Generated at Sun Dec 21 06:09:24 2025 by rpki-client