This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft File: MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json) Hash identifier: sRxrH/Q5mTLuE+/0rDYuxSGOe0/EOfJttGF/xp9w7Hs= Subject key identifier: 6D:08:A7:41:19:A4:E5:2C:D4:B5:27:3B:11:C9:71:36:EF:82:99:6E Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB Certificate serial: 0715 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft Manifest number: 06F2 Signing time: Sat 06 Dec 2025 21:00:23 +0000 Manifest this update: Sat 06 Dec 2025 21:00:23 +0000 Manifest next update: Sat 13 Dec 2025 21:00:23 +0000 Files and hashes: 1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: XpPf07SNAdPUdjCSGO33dvCudsn1mdrm/Z9p64CGOkQ=) 2: E99C5D78999011F09D326581C4F9AE02.roa (hash: KRc5l8wxQAY0kmCFWdslvfP8E+810yOkcCnLCwPkREQ=) 3: D9D6FFE098E311F08722B635C4F9AE02.roa (hash: 4B3XONtyer/LI/a650TjjRxsYwxE3yzyQKK0hCYJdog=) 4: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: Ng5tUT5XtWth/UeVCj9UP+U8A5SqwEGWBOOoygGvFMc=) 5: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: ecb64YVTHrU3z12q4OTbq4blJYoHWP6/Sh6BnZVtvcQ=) 6: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: FFJCcbR2xaawUKSL+usbkIr74Y7s8fy0PX5AM1LQSnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1813 (0x715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB Validity Not Before: Dec 6 21:00:23 2025 GMT Not After : Dec 13 21:00:23 2025 GMT Subject: CN=69349967-389c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ce:d6:91:2d:67:8f:c7:07:3f:60:ed:1c:c1: 39:da:ac:10:47:c1:ee:7e:b0:ee:16:09:e6:fb:16: 47:a9:06:bc:01:3d:5e:4f:e5:45:ff:67:a1:b7:9e: 18:35:26:fd:67:ac:a7:63:e2:c0:cd:09:e1:d4:6d: 46:49:7c:09:c2:b2:a9:22:c6:d9:c2:07:4c:6c:db: 68:5f:c7:2f:a7:a4:aa:ee:22:8d:07:c7:b5:1f:eb: 2d:7c:36:cd:b5:16:dc:d9:cc:1b:61:ba:df:77:50: ea:95:82:4d:e7:db:aa:ab:9c:82:fd:7e:c4:9a:44: 6d:d8:39:bb:62:69:03:61:aa:46:38:c8:4f:7e:27: 6f:20:7e:34:c7:82:83:29:c7:01:56:91:fc:a3:09: 69:3f:c4:8f:5f:d9:e7:39:2f:72:f5:33:ec:2a:5b: 3d:b3:93:3e:ea:11:41:4f:19:97:af:75:23:d7:7b: 6c:e4:6b:72:a8:37:d9:a6:40:9d:54:52:16:31:b4: cc:30:f1:e5:4f:17:03:e9:6d:54:df:b2:6d:a7:49: 49:f4:b9:ef:d4:c9:be:2d:fd:cc:af:79:ba:9b:f4: c7:a3:cd:ae:fe:0b:a5:81:95:71:a8:28:5c:54:75: f1:00:13:b7:76:54:69:54:a4:9d:84:c3:d7:e3:61: a3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:08:A7:41:19:A4:E5:2C:D4:B5:27:3B:11:C9:71:36:EF:82:99:6E X509v3 Authority Key Identifier: keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:72:18:e9:5f:f1:8e:0a:92:ef:36:73:34:c2:e1:4b:13:42: 93:8e:49:58:cc:83:67:89:02:3c:c1:b3:21:56:9c:89:f6:b8: 7b:4b:35:49:86:13:89:3e:36:49:f2:48:5e:ae:7f:c1:25:f9: 69:6a:4d:b7:84:e3:00:b5:df:c5:ee:6d:c1:95:b0:c5:b5:81: 4e:77:fb:62:38:85:e7:6b:27:d3:4f:12:8f:6a:b5:f7:b5:fd: fe:c4:bb:cb:27:d3:81:71:b0:81:bf:45:60:6d:06:50:0f:97: 4c:71:c0:ec:5a:e5:f4:d5:48:ef:a7:98:d8:3f:fc:39:5e:58: 4b:ec:41:51:79:2e:89:dd:dc:b4:2d:c3:45:7d:19:e8:a1:1b: 80:f2:bc:e8:c9:77:3b:a5:a6:03:a9:bc:f8:c3:65:a3:44:be: 9a:c9:c1:93:0d:b9:78:65:7d:dc:fa:67:e2:b8:e1:76:34:22: 22:eb:c6:6c:d3:89:d4:07:7d:26:6c:c8:ce:e0:43:cb:47:51: 1e:9d:99:4c:3a:bc:04:c6:ba:54:80:a3:9f:56:45:87:33:31: 7f:04:8d:bd:87:8f:2a:da:fc:06:43:2d:a5:0e:37:8b:0e:34: 7a:f8:ac:71:7a:49:9f:1f:c9:fa:cc:c1:66:05:d0:e3:54:3d: a6:91:b3:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRTYxMTAvBgNVBAUTKDMzMTk1Rjk2QzQ2RDREMjg1RDVCREU0QjBCMDMwRTM4 MzE0RThGQ0IwHhcNMjUxMjA2MjEwMDIzWhcNMjUxMjEzMjEwMDIzWjAYMRYwFAYD VQQDEw02OTM0OTk2Ny0zODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzc7WkS1nj8cHP2DtHME52qwQR8HufrDuFgnm+xZHqQa8AT1eT+VF/2eht54Y NSb9Z6ynY+LAzQnh1G1GSXwJwrKpIsbZwgdMbNtoX8cvp6Sq7iKNB8e1H+stfDbN tRbc2cwbYbrfd1DqlYJN59uqq5yC/X7EmkRt2Dm7YmkDYapGOMhPfidvIH40x4KD KccBVpH8owlpP8SPX9nnOS9y9TPsKls9s5M+6hFBTxmXr3Uj13ts5GtyqDfZpkCd VFIWMbTMMPHlTxcD6W1U37Jtp0lJ9Lnv1Mm+Lf3Mr3m6m/THo82u/gulgZVxqChc VHXxABO3dlRpVKSdhMPX42GjBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0Ip0EZ pOUs1LUnOxHJcTbvgpluMB8GA1UdIwQYMBaAFDMZX5bEbU0oXVveSwsDDjgxTo/L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wRThFMjc4MDdC RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRTaGRXOTVMQ3dNT09ERk9q OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014bGZsc1J0VFNoZFc5NUxDd01PT0RGT2o4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NFNi8wRThFMjc4MDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRT aGRXOTVMQ3dNT09ERk9qOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEchjpX/GOCpLvNnM0wuFLE0KTjklYzINniQI8wbMhVpyJ9rh7SzVJ hhOJPjZJ8khern/BJflpak23hOMAtd/F7m3BlbDFtYFOd/tiOIXnayfTTxKParX3 tf3+xLvLJ9OBcbCBv0VgbQZQD5dMccDsWuX01Ujvp5jYP/w5XlhL7EFReS6J3dy0 LcNFfRnooRuA8rzoyXc7paYDqbz4w2WjRL6aycGTDbl4ZX3c+mfiuOF2NCIi68Zs 04nUB30mbMjO4EPLR1EenZlMOrwExrpUgKOfVkWHMzF/BI29h48q2vwGQy2lDjeL DjR6+KxxekmfH8n6zMFmBdDjVD2mkbPZ -----END CERTIFICATE-----Generated at Sun Dec 7 02:59:30 2025 by rpki-client