This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
File: B6YH3KkzMh_3j-xozXpMFJVDel8.mft (raw, json)
Hash identifier: Ngt0/EqDirVKhsO5sfojedNso2LgwUGTdY0NHBK3KHk=
Subject key identifier: 3E:EC:4B:FE:E0:3B:AF:F9:2F:A0:A8:A3:BC:1E:EA:75:1D:EE:00:7D
Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F
Certificate issuer: /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
Certificate serial: 0A0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
Manifest number: 09FF
Signing time: Sat 06 Dec 2025 19:06:12 +0000
Manifest this update: Sat 06 Dec 2025 19:06:12 +0000
Manifest next update: Sat 13 Dec 2025 19:06:12 +0000
Files and hashes: 1: B6YH3KkzMh_3j-xozXpMFJVDel8.crl (hash: hOTYBu9diFmLGwcjRNwIzj7YB+hXqtwb2h2v8QjCD/Y=)
2: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (hash: 0uP0qBSRuS530AzJEmj9fiO+kW+9ViD0Nt8IGp0bhcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl
rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2574 (0xa0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129DCB, serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
Validity
Not Before: Dec 6 19:06:12 2025 GMT
Not After : Dec 13 19:06:12 2025 GMT
Subject: CN=69347ea4-bfd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:18:83:67:f0:a4:17:17:da:93:0b:55:e2:
66:9b:f0:9e:f9:db:29:b6:34:2a:0b:86:8b:8b:76:
24:db:fd:bf:4c:44:dd:03:76:f9:ac:46:83:b2:64:
f4:22:95:60:92:8d:51:2b:b9:50:85:6d:cd:4e:73:
b1:93:6e:37:f5:09:69:ce:14:06:f6:b7:99:e1:c7:
6f:c7:3c:4a:7e:3e:f2:83:bf:f7:e1:d0:a3:c3:3e:
8d:47:e6:d3:87:21:6e:b1:c5:9d:a5:f5:ea:eb:6e:
1a:71:36:48:74:76:d4:e5:39:12:7f:f2:78:44:e7:
2a:80:96:20:ec:06:50:83:e6:88:bd:f6:0f:3b:0e:
0f:20:f2:ac:be:8e:77:10:73:5c:2d:49:28:d5:91:
33:b2:46:55:27:47:a5:1a:74:c7:fe:1f:a8:72:ec:
14:cd:6e:95:84:51:b9:bb:32:77:4b:fc:ec:2d:b0:
3f:20:7a:36:00:a6:27:14:74:6b:2f:ae:62:c5:46:
4c:bd:de:0c:4e:03:32:53:b0:cc:fa:bb:d0:6d:72:
2f:82:a4:5e:7e:55:0d:e5:d3:9f:af:c6:3f:5e:f0:
7c:68:67:35:43:a4:9e:db:69:1b:87:ab:4e:77:da:
11:c0:23:20:a9:83:6b:63:8e:35:4c:4a:10:d5:57:
31:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EC:4B:FE:E0:3B:AF:F9:2F:A0:A8:A3:BC:1E:EA:75:1D:EE:00:7D
X509v3 Authority Key Identifier:
keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:21:0d:8b:26:13:7d:9f:01:bf:1f:2d:4a:18:79:1a:cf:61:
34:c0:9b:bb:58:4f:60:ce:e7:d2:96:32:8a:24:f6:92:e8:fe:
2f:27:2b:4b:5d:b3:4f:25:6d:e9:10:80:66:d6:f5:f0:3e:d4:
00:75:8d:f8:e9:b9:93:c2:15:3e:0f:9a:1c:97:e1:74:df:cf:
40:d2:ec:70:f6:dd:31:de:b9:14:e2:6e:14:7d:c5:2c:28:37:
ee:bd:7c:52:19:07:20:7e:fd:13:7c:af:6e:d7:80:a1:5c:e1:
0c:82:27:29:c5:97:13:05:60:9d:8a:d1:05:4e:f5:a8:bc:52:
af:2d:d1:08:5e:43:76:1a:bb:30:46:e3:7a:a5:e6:36:68:46:
03:58:0e:10:d7:e0:4c:2c:8d:04:73:92:e6:1a:fa:0d:39:76:
ad:f4:c3:0b:7c:5a:1a:00:4b:97:3d:73:59:08:f6:63:69:ea:
61:a5:2f:2f:c2:91:be:c1:6d:7e:0f:ba:7a:c3:db:cd:42:eb:
96:cb:92:40:3d:d0:af:3e:89:03:6b:fd:3c:87:13:d3:bd:85:
15:9e:c1:07:6f:2f:97:2c:85:e0:28:df:e2:d3:29:35:83:4b:
ca:bc:a7:2b:45:26:ad:a3:11:40:cb:17:16:a3:6b:c0:2e:2f:
74:7c:fa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:09:30 2025 by rpki-client