This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft File: a51l6unGl9ohy0vuv030zgpBkyE.mft (raw, json) Hash identifier: YaMqSia4KRK4YI6b1AXdkR3LzzIWZOZj/u0OQLIiwco= Subject key identifier: 9F:21:20:77:50:12:2A:E5:21:99:D2:FD:B8:C2:66:C9:8C:E4:FA:CC Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 Certificate issuer: /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Certificate serial: 352D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft Manifest number: 3512 Signing time: Tue 30 Dec 2025 14:42:03 +0000 Manifest this update: Tue 30 Dec 2025 14:42:03 +0000 Manifest next update: Tue 06 Jan 2026 14:42:03 +0000 Files and hashes: 1: a51l6unGl9ohy0vuv030zgpBkyE.crl (hash: IzH7O95rnKsdRcL5GVh0UokoHuYJven92PeU3wvzMgU=) 2: 6215E9C089CF11ECA1DA1810C4F9AE02.roa (hash: o3Ceb2MSjRakfXXsxsrz1v3BRN+sMCeTig6Z0QGV2lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 14:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13613 (0x352d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141FD6, serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Validity Not Before: Dec 30 14:42:03 2025 GMT Not After : Jan 6 14:42:03 2026 GMT Subject: CN=6953e4bb-1bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1e:3b:c0:ca:e4:4f:ab:30:67:c4:36:4a:bf: 38:13:25:21:22:6e:58:1b:46:8a:69:cc:4a:31:61: 18:9e:32:36:1b:42:f1:50:32:a1:5d:c8:34:c7:b0: a0:c3:b4:12:66:11:e6:57:d6:38:a6:f9:6d:0d:2d: 33:ce:b0:70:8f:dd:e6:fa:b0:de:d7:25:83:e5:ac: c5:28:7a:f0:05:80:f4:7a:2e:9f:a9:7c:cc:ae:ce: 4c:7b:71:62:59:90:76:5e:92:ac:7f:bb:fa:29:25: 7a:ef:b2:2a:ff:6f:d2:51:44:a8:28:bb:ae:ad:98: dc:50:e9:a0:7d:7e:35:75:2b:a2:2a:36:cc:02:99: f2:2f:9b:d3:f1:c9:17:dd:af:87:39:6e:77:68:43: 56:c4:a1:c1:3e:54:7a:d3:c3:8e:67:58:ac:85:e5: f1:a5:e5:3d:cc:64:9d:6c:24:a3:7c:4f:7f:4a:55: e9:d2:3f:e9:62:65:c3:95:cb:1e:b6:8e:f6:80:34: d8:b4:72:d6:01:2a:de:b1:8f:79:af:cd:04:32:a8: 4f:ad:3a:08:cc:6b:dd:2f:83:ce:46:bf:2f:b4:5a: a6:9e:42:58:e4:a9:14:a5:0d:cb:b3:58:f2:5a:8e: e7:7d:0a:18:05:40:e5:f3:24:07:44:25:91:70:27: 25:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:21:20:77:50:12:2A:E5:21:99:D2:FD:B8:C2:66:C9:8C:E4:FA:CC X509v3 Authority Key Identifier: keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8d:62:1e:6a:91:ea:99:26:80:81:03:8e:55:22:77:fc:b9: 9c:f9:2f:1c:32:1d:56:02:7d:4f:b7:a8:81:9e:60:8e:4b:d5: 9a:85:8d:c9:7f:22:d9:48:0b:c0:77:54:30:db:9e:35:0d:4a: b7:1d:10:a4:26:cc:96:7e:b3:66:29:2c:a8:3a:b5:3d:98:12: cb:27:6f:70:f1:84:0e:8d:a8:c1:d6:87:c1:93:0d:00:c1:6c: 55:b1:28:40:cd:26:b5:ed:7b:39:2e:dc:0d:6b:52:16:85:b8: 4c:3b:99:15:91:7a:6f:1e:a9:c1:3a:0d:82:4c:31:80:25:b8: 01:17:49:a6:70:f7:30:20:c7:b5:cc:e7:da:d9:93:70:7e:ac: 16:7d:fb:d7:0b:48:d5:cd:2a:24:38:be:24:33:91:5e:c4:39: cd:84:79:81:f1:fa:99:47:c7:ce:b2:63:b1:f1:71:af:18:39: 2c:78:65:10:52:f7:d3:11:33:8b:be:b2:21:49:86:b6:bd:ae: 6d:c3:d3:0a:84:0a:52:23:15:64:73:11:33:4b:67:b8:23:0f: e1:b9:bd:c2:df:5c:b3:00:26:28:6c:80:e9:a8:94:bd:54:d3: 4c:df:ba:e2:9a:32:5d:12:47:c3:d5:c4:62:3f:4f:85:1a:46: a0:94:e3:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFGRDYxMTAvBgNVBAUTKDZCOUQ2NUVBRTlDNjk3REEyMUNCNEJFRUJGNERGNENF MEE0MTkzMjEwHhcNMjUxMjMwMTQ0MjAzWhcNMjYwMTA2MTQ0MjAzWjAYMRYwFAYD VQQDDA02OTUzZTRiYi0xYmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvx47wMrkT6swZ8Q2Sr84EyUhIm5YG0aKacxKMWEYnjI2G0LxUDKhXcg0x7Cg w7QSZhHmV9Y4pvltDS0zzrBwj93m+rDe1yWD5azFKHrwBYD0ei6fqXzMrs5Me3Fi WZB2XpKsf7v6KSV677Iq/2/SUUSoKLuurZjcUOmgfX41dSuiKjbMApnyL5vT8ckX 3a+HOW53aENWxKHBPlR608OOZ1isheXxpeU9zGSdbCSjfE9/SlXp0j/pYmXDlcse to72gDTYtHLWASresY95r80EMqhPrToIzGvdL4PORr8vtFqmnkJY5KkUpQ3Ls1jy Wo7nfQoYBUDl8yQHRCWRcCclSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8hIHdQ EirlIZnS/bjCZsmM5PrMMB8GA1UdIwQYMBaAFGudZerpxpfaIctL7r9N9M4KQZMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUZENi82RUVDNjQzMDFE OTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5b2h5MHZ1djAzMHpncEJr eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1MWw2dW5HbDlvaHkwdnV2MDMwemdwQmt5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUZENi82RUVDNjQzMDFEOTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5 b2h5MHZ1djAzMHpncEJreUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOjWIeapHqmSaAgQOOVSJ3/Lmc+S8cMh1WAn1Pt6iBnmCOS9WahY3J fyLZSAvAd1Qw2541DUq3HRCkJsyWfrNmKSyoOrU9mBLLJ29w8YQOjajB1ofBkw0A wWxVsShAzSa17Xs5LtwNa1IWhbhMO5kVkXpvHqnBOg2CTDGAJbgBF0mmcPcwIMe1 zOfa2ZNwfqwWffvXC0jVzSokOL4kM5FexDnNhHmB8fqZR8fOsmOx8XGvGDkseGUQ UvfTETOLvrIhSYa2va5tw9MKhApSIxVkcxEzS2e4Iw/hub3C31yzACYobIDpqJS9 VNNM37rimjJdEkfD1cRiP0+FGkaglONw -----END CERTIFICATE-----Generated at Wed Dec 31 05:05:35 2025 by rpki-client