This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft File: FH6XVkOdnbcVYTSsePkcIzuTkqc.mft (raw, json) Hash identifier: /2ClkOc7/WKskeE+DNm1OHKokCfFvNMaNqXe1Jzm+Qo= Subject key identifier: 47:41:0C:BA:A8:4A:59:BF:60:B8:EB:83:9A:17:20:8C:20:C0:82:AA Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 Certificate issuer: /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Certificate serial: 06EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft Manifest number: 06C7 Signing time: Sat 06 Dec 2025 21:15:57 +0000 Manifest this update: Sat 06 Dec 2025 21:15:56 +0000 Manifest next update: Sat 13 Dec 2025 21:15:56 +0000 Files and hashes: 1: FH6XVkOdnbcVYTSsePkcIzuTkqc.crl (hash: 1qtVbCRF9A343tCcuu0TkLRxh+yZ6HgoykB8gvemvLU=) 2: D4FD4D5237DE11EEA2885B71C4F9AE02.roa (hash: jm6qF0iG7lzG09wOX/EbjjAF73STR64Y7EPlh/2TSZY=) 3: 8A0E66D647FC11EE838F6160C4F9AE02.roa (hash: QybDkxZsIA9LhScKa+XNkLDfh3ltBF5Yhpro/oGoLB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1770 (0x6ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB2A, serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Validity Not Before: Dec 6 21:15:56 2025 GMT Not After : Dec 13 21:15:56 2025 GMT Subject: CN=69349d0d-5198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f1:ec:b3:9f:7f:e4:9b:71:25:97:c6:b2:0b: 8e:f6:2c:5c:74:f3:4c:93:55:d6:b7:54:ac:5e:bc: e0:48:b3:1b:e9:45:53:a1:f2:be:d3:83:4a:f2:7c: f4:66:6e:dc:60:3d:69:7a:76:22:db:e6:34:49:54: 0c:91:6e:d2:c9:d0:a4:dd:69:3b:3d:f7:c3:b0:8f: c7:c1:cf:1d:e6:e1:ec:2c:7c:f8:cd:c6:8e:d2:a5: 5d:f9:53:e3:80:0f:bd:13:f1:45:59:1f:94:27:18: 9a:ee:92:84:56:38:c5:4b:2f:84:22:13:6f:60:58: 42:fa:a2:41:e7:c9:98:10:6a:1e:64:bb:b8:6c:21: 5d:34:5e:bd:56:e4:d1:35:3a:eb:f9:b1:ce:80:12: 63:4d:18:cc:d2:fa:6d:6d:ae:93:84:7c:d4:da:60: ca:cd:0d:27:d2:ce:c7:b4:74:11:b9:97:f7:d0:df: b0:8e:7c:2f:ff:6c:ab:af:f2:81:71:00:cf:b2:c5: 42:a4:cd:64:0b:d1:b5:77:42:77:ed:05:9d:35:f7: 84:2a:8b:1b:1f:dd:48:b3:a5:86:fc:3d:07:d4:63: d5:92:b3:9d:e8:74:29:16:ef:23:13:64:45:ba:93: e3:0b:29:c2:a9:02:3e:ae:0f:ec:0d:30:56:67:af: ba:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:41:0C:BA:A8:4A:59:BF:60:B8:EB:83:9A:17:20:8C:20:C0:82:AA X509v3 Authority Key Identifier: keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:73:c8:cf:a2:03:1c:5e:1f:06:29:bf:e4:91:d7:c7:24:84: e1:fc:94:00:58:86:2b:fc:3b:e5:5e:4d:b5:55:37:ee:52:6d: 9d:6b:4e:45:0d:bf:cd:b4:ff:86:08:b8:ff:1b:a1:86:1d:96: 29:29:bc:9e:af:df:13:d2:f0:18:34:4e:2a:82:e0:47:ad:3f: 26:8c:49:26:d9:34:fd:17:96:49:71:48:ae:b9:91:50:79:c6: 65:ff:57:6e:c2:57:0c:22:5a:70:b3:61:6d:1c:15:30:eb:75: 34:74:7e:29:ef:58:1d:81:7c:a1:58:aa:d6:96:5b:dc:8d:94: 39:d3:28:a8:cc:43:d1:99:89:6f:cf:a7:68:a7:ef:76:30:a3: 74:2e:68:c3:80:a2:69:47:8e:13:a7:c6:2d:86:c5:78:ed:97: 7c:35:7a:20:fe:13:cf:c5:b2:03:4b:72:95:27:6c:81:38:01: 2e:6d:01:03:96:5b:9d:a0:5f:12:96:1d:74:2e:b4:1a:68:ba: b5:95:e8:9e:81:c1:0f:56:5f:23:b4:b8:a3:38:46:62:b1:eb: d3:d2:21:8e:cb:b0:fa:de:2e:dd:f3:ef:75:1c:58:18:13:ef: cd:60:c1:76:db:51:02:ca:f9:ce:41:0c:f0:d1:ea:18:28:71: 3d:e2:b6:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCMkExMTAvBgNVBAUTKDE0N0U5NzU2NDM5RDlEQjcxNTYxMzRBQzc4RjkxQzIz M0I5MzkyQTcwHhcNMjUxMjA2MjExNTU2WhcNMjUxMjEzMjExNTU2WjAYMRYwFAYD VQQDEw02OTM0OWQwZC01MTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vHss59/5JtxJZfGsguO9ixcdPNMk1XWt1SsXrzgSLMb6UVTofK+04NK8nz0 Zm7cYD1penYi2+Y0SVQMkW7SydCk3Wk7PffDsI/Hwc8d5uHsLHz4zcaO0qVd+VPj gA+9E/FFWR+UJxia7pKEVjjFSy+EIhNvYFhC+qJB58mYEGoeZLu4bCFdNF69VuTR NTrr+bHOgBJjTRjM0vptba6ThHzU2mDKzQ0n0s7HtHQRuZf30N+wjnwv/2yrr/KB cQDPssVCpM1kC9G1d0J37QWdNfeEKosbH91Is6WG/D0H1GPVkrOd6HQpFu8jE2RF upPjCynCqQI+rg/sDTBWZ6+6hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdBDLqo Slm/YLjrg5oXIIwgwIKqMB8GA1UdIwQYMBaAFBR+l1ZDnZ23FWE0rHj5HCM7k5Kn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0IyQS9FMDFDN0E4NDkw RTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5iY1ZZVFNzZVBrY0l6dVRr cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZINlhWa09kbmJjVllUU3NlUGtjSXp1VGtxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0IyQS9FMDFDN0E4NDkwRTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5i Y1ZZVFNzZVBrY0l6dVRrcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAc8jPogMcXh8GKb/kkdfHJITh/JQAWIYr/DvlXk21VTfuUm2da05F Db/NtP+GCLj/G6GGHZYpKbyer98T0vAYNE4qguBHrT8mjEkm2TT9F5ZJcUiuuZFQ ecZl/1duwlcMIlpws2FtHBUw63U0dH4p71gdgXyhWKrWllvcjZQ50yiozEPRmYlv z6dop+92MKN0LmjDgKJpR44Tp8YthsV47Zd8NXog/hPPxbIDS3KVJ2yBOAEubQED lludoF8Slh10LrQaaLq1leiegcEPVl8jtLijOEZisevT0iGOy7D63i7d8+91HFgY E+/NYMF221ECyvnOQQzw0eoYKHE94rYK -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:07 2025 by rpki-client