This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft File: 6tNqfTCwZhVrgDAlqqpf-SetdcI.mft (raw, json) Hash identifier: f7FfAs6Ed+lffIJEEIDg8XOeP4KUEzlnElxEucYwbtk= Subject key identifier: 4A:D4:F1:E5:44:72:8E:D3:80:47:AB:0C:37:83:6F:C5:02:9C:3D:4B Authority key identifier: EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2 Certificate issuer: /CN=A91722C3/serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2 Certificate serial: 16E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft Manifest number: 16D8 Signing time: Fri 26 Dec 2025 16:24:22 +0000 Manifest this update: Fri 26 Dec 2025 16:24:21 +0000 Manifest next update: Fri 02 Jan 2026 16:24:21 +0000 Files and hashes: 1: 6tNqfTCwZhVrgDAlqqpf-SetdcI.crl (hash: 0MkWCg0MNX4tySBLQ+kapjBarKIKV/Tqfimqrm5v32o=) 2: 3B7EBA5C7D7411EBAEFB906AC4F9AE02.roa (hash: mV+/VnB1dymZjoP35PFaMEUl6rHyBnmoFDTjGl58OCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.crl rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 16:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5856 (0x16e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91722C3, serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2 Validity Not Before: Dec 26 16:24:21 2025 GMT Not After : Jan 2 16:24:21 2026 GMT Subject: CN=694eb6b6-b0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b7:3b:66:39:95:73:8d:9c:c9:85:12:be:68: 8a:f6:82:d2:a3:ff:7e:49:b2:26:af:ee:21:e4:00: 6f:ac:0c:73:bf:5f:e1:11:b6:27:0b:d8:df:30:58: 63:25:92:6f:c1:3c:dc:a3:c9:52:10:22:8f:b1:cf: f9:8d:15:bf:d9:07:c0:17:11:27:55:e1:16:73:ec: 03:3c:df:b8:45:56:67:21:ee:e4:06:c1:18:aa:ca: d1:ae:c8:58:4c:5b:ba:ad:97:51:f2:4d:a1:24:de: f1:46:a3:4d:82:d9:89:26:2e:a5:98:09:71:40:14: c2:cb:6e:00:45:ec:ed:f9:87:8e:a3:96:da:fb:9b: a7:a9:f1:65:05:dd:4c:f4:76:7a:25:6b:21:17:d9: b2:5e:39:2d:8c:26:e5:24:17:84:42:8c:b7:92:01: 6b:ae:d0:c7:9c:52:29:48:5b:3b:25:b7:0b:e7:20: fc:07:d7:81:40:69:10:ff:1a:61:ec:19:f2:e0:d8: f6:ab:20:cb:84:52:53:41:56:fb:4c:99:00:c0:39: 37:bb:05:60:fd:39:1d:3a:fc:25:17:77:08:77:8e: f9:66:a2:97:f2:c1:bc:48:57:52:5c:ac:18:50:2e: 09:a5:06:49:fe:7d:92:d3:95:db:ce:76:8e:e6:4a: 0d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D4:F1:E5:44:72:8E:D3:80:47:AB:0C:37:83:6F:C5:02:9C:3D:4B X509v3 Authority Key Identifier: keyid:EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:7f:78:ee:4e:45:ad:c9:47:d6:e8:c7:b0:ae:6f:6f:57:e1: 0e:ac:e8:09:67:75:94:5f:cd:df:bc:a2:17:b0:01:df:92:1c: b0:01:7e:2f:f6:1b:21:d3:21:03:7e:c3:99:95:66:45:03:60: 14:89:e5:4f:68:b5:54:13:4c:b9:39:11:e2:54:c4:2b:37:82: 3c:bc:4a:64:a5:59:16:a4:2d:23:89:e4:68:24:84:90:a3:77: d7:87:de:42:4a:cd:1f:05:53:39:1f:96:81:87:36:c9:38:42: 7a:50:a3:3e:10:02:0c:39:c4:68:07:a3:18:97:85:42:eb:dc: fb:bc:e6:d7:8f:79:b3:08:d3:09:5d:d5:cf:ce:c5:1f:7b:b5: 1b:c6:c1:14:31:87:94:94:e1:ef:2c:2a:79:30:8e:51:d4:ef: 8c:7f:8b:67:9c:58:62:d1:cd:f3:56:76:17:3c:78:44:5c:08: 9c:5b:dd:a2:69:8d:fe:5a:2f:35:b8:cc:d8:42:72:f3:e8:83: ef:25:f2:54:f8:d5:27:1e:45:b4:65:d2:0b:88:9c:8b:0b:18: fa:db:2b:b2:93:2d:42:d4:3e:56:14:57:a9:3a:2c:17:1d:78: b8:ae:b8:e6:f9:f6:81:2d:92:d8:d1:dd:d4:3a:13:3e:2d:0f: e8:dd:55:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIyQzMxMTAvBgNVBAUTKEVBRDM2QTdEMzBCMDY2MTU2QjgwMzAyNUFBQUE1RkY5 MjdBRDc1QzIwHhcNMjUxMjI2MTYyNDIxWhcNMjYwMTAyMTYyNDIxWjAYMRYwFAYD VQQDDA02OTRlYjZiNi1iMGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bc7ZjmVc42cyYUSvmiK9oLSo/9+SbImr+4h5ABvrAxzv1/hEbYnC9jfMFhj JZJvwTzco8lSECKPsc/5jRW/2QfAFxEnVeEWc+wDPN+4RVZnIe7kBsEYqsrRrshY TFu6rZdR8k2hJN7xRqNNgtmJJi6lmAlxQBTCy24ARezt+YeOo5ba+5unqfFlBd1M 9HZ6JWshF9myXjktjCblJBeEQoy3kgFrrtDHnFIpSFs7JbcL5yD8B9eBQGkQ/xph 7Bny4Nj2qyDLhFJTQVb7TJkAwDk3uwVg/TkdOvwlF3cId475ZqKX8sG8SFdSXKwY UC4JpQZJ/n2S05XbznaO5koNNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErU8eVE co7TgEerDDeDb8UCnD1LMB8GA1UdIwQYMBaAFOrTan0wsGYVa4AwJaqqX/knrXXC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjJDMy8xNTIzRDJFNDA3 QUIxMUU4QUU1REZFNjRDNEY5QUUwMi82dE5xZlRDd1poVnJnREFscXFwZi1TZXRk Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ0TnFmVEN3WmhWcmdEQWxxcXBmLVNldGRjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjJDMy8xNTIzRDJFNDA3QUIxMUU4QUU1REZFNjRDNEY5QUUwMi82dE5xZlRDd1po VnJnREFscXFwZi1TZXRkY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUf3juTkWtyUfW6Mewrm9vV+EOrOgJZ3WUX83fvKIXsAHfkhywAX4v 9hsh0yEDfsOZlWZFA2AUieVPaLVUE0y5ORHiVMQrN4I8vEpkpVkWpC0jieRoJISQ o3fXh95CSs0fBVM5H5aBhzbJOEJ6UKM+EAIMOcRoB6MYl4VC69z7vObXj3mzCNMJ XdXPzsUfe7UbxsEUMYeUlOHvLCp5MI5R1O+Mf4tnnFhi0c3zVnYXPHhEXAicW92i aY3+Wi81uMzYQnLz6IPvJfJU+NUnHkW0ZdILiJyLCxj62yuyky1C1D5WFFepOiwX HXi4rrjm+faBLZLY0d3UOhM+LQ/o3VXl -----END CERTIFICATE-----Generated at Sun Dec 28 03:16:56 2025 by rpki-client