This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft File: C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft (raw, json) Hash identifier: cpSO2dzWNHYy+e7DwT2YQRKicIt842uwr0A9ReQC9bM= Subject key identifier: 78:03:91:2E:AB:22:05:32:DE:C2:89:08:23:BC:1B:B2:5F:63:91:60 Authority key identifier: 0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72 Certificate issuer: /CN=A91868EC/serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft Manifest number: 0171 Signing time: Sat 27 Dec 2025 02:50:22 +0000 Manifest this update: Sat 27 Dec 2025 02:50:21 +0000 Manifest next update: Sat 03 Jan 2026 02:50:21 +0000 Files and hashes: 1: C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl (hash: 8QBsI48pMSr2BIgSP7XYpP3yFeLFV0DGt6ozE4Q2z9o=) 2: 8BDE35DAADB511EEA223FA64C4F9AE02.roa (hash: 5Euxmdyfg42rk8kh2tCEWEITcp7TGJlbx40uBqp19vc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91868EC, serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772 Validity Not Before: Dec 27 02:50:21 2025 GMT Not After : Jan 3 02:50:21 2026 GMT Subject: CN=694f496d-f766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:60:0a:38:1e:f4:d8:8c:17:db:0a:09:9b: 7b:13:db:dc:03:64:f5:bb:96:c9:8f:a6:81:ab:a0: 9e:58:a1:68:5f:3c:f6:2b:68:15:d5:3f:5e:05:b6: 7a:b5:7b:33:20:bf:35:fa:95:a8:0c:d3:0d:74:ea: bc:f6:2b:4f:a7:80:8b:e7:ef:73:e3:0f:0e:39:50: 0e:88:72:c2:dc:ee:95:95:ca:6b:c1:2b:79:06:ec: 3c:4c:ee:e6:62:2d:5a:ef:bc:1e:1e:bf:09:71:71: 43:8a:52:52:7a:9a:5b:03:f6:1a:76:24:e3:fc:e2: 6e:39:01:47:53:f0:37:67:11:8b:0b:5f:a1:dc:d5: 3c:f9:ae:df:3a:c8:91:33:67:ad:67:d8:af:04:ec: a9:9c:a3:b2:a9:a2:61:55:22:74:74:9e:12:c0:b0: f4:3a:74:2d:5d:e2:10:89:91:af:3d:4e:90:87:d1: 6a:6c:be:bb:0e:31:b2:d6:fa:88:07:3b:ff:8d:c3: 29:49:b2:d1:df:c3:1b:17:f9:e3:6a:ed:b4:8b:32: b5:9f:82:3b:36:bd:5b:49:79:f5:6c:1c:2e:6e:e6: 30:d5:10:c4:de:1e:e4:29:7d:d3:24:84:a8:9f:a5: 7c:28:a4:b2:be:b4:3a:ed:a5:9f:cd:4e:2c:97:dd: 10:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:03:91:2E:AB:22:05:32:DE:C2:89:08:23:BC:1B:B2:5F:63:91:60 X509v3 Authority Key Identifier: keyid:0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:a5:5f:6d:56:46:d4:0d:ab:8f:27:88:c4:ca:68:d0:6c:30: da:2e:87:f5:88:f0:12:b8:77:ce:f5:45:9e:fb:a5:4e:14:6d: 60:8f:1b:44:1e:2d:97:44:37:54:70:a9:33:d3:e5:3c:b3:83: d5:f5:6b:42:d0:f0:e6:3d:0a:30:ee:bd:36:f6:4f:91:7b:d3: 6e:cd:15:b5:42:c1:6d:e8:93:91:00:62:0b:59:cb:b1:3b:53: 06:1b:d0:f7:11:fe:78:3c:a5:a5:f1:d1:60:e3:1e:64:02:83: ee:9c:6d:a0:17:46:cc:85:f0:52:23:5c:a0:95:1d:71:52:74: 16:50:3c:0c:54:7e:04:e5:f6:dd:81:7f:51:11:cb:ea:d3:3b: 61:46:f3:fc:48:ab:4e:fa:3b:2b:92:12:f3:07:9e:91:c5:14: d1:2b:b7:84:df:6f:38:d3:f9:5a:1e:3e:bb:24:1f:05:af:50: 1b:45:dd:1c:76:95:c7:db:1e:c9:79:c3:33:5e:af:61:b8:f6: 49:da:5d:b8:b7:9c:e6:7a:57:c0:56:e5:ad:4d:01:bc:68:8a: a0:21:e8:cb:40:0e:f7:b5:ed:ad:e2:1a:d6:03:45:47:0a:4e: bc:18:88:51:bf:d5:25:80:a2:01:73:96:43:a2:ad:fc:70:c1: 32:e9:4a:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4RUMxMTAvBgNVBAUTKDBCQThCQTQwRjg5NzM0Q0MzRjNBRTNFRDY3NzRDQkQ4 NDNFMkU3NzIwHhcNMjUxMjI3MDI1MDIxWhcNMjYwMTAzMDI1MDIxWjAYMRYwFAYD VQQDDA02OTRmNDk2ZC1mNzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoBgCjge9NiMF9sKCZt7E9vcA2T1u5bJj6aBq6CeWKFoXzz2K2gV1T9eBbZ6 tXszIL81+pWoDNMNdOq89itPp4CL5+9z4w8OOVAOiHLC3O6VlcprwSt5Buw8TO7m Yi1a77weHr8JcXFDilJSeppbA/YadiTj/OJuOQFHU/A3ZxGLC1+h3NU8+a7fOsiR M2etZ9ivBOypnKOyqaJhVSJ0dJ4SwLD0OnQtXeIQiZGvPU6Qh9FqbL67DjGy1vqI Bzv/jcMpSbLR38MbF/njau20izK1n4I7Nr1bSXn1bBwubuYw1RDE3h7kKX3TJISo n6V8KKSyvrQ67aWfzU4sl90QLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgDkS6r IgUy3sKJCCO8G7JfY5FgMB8GA1UdIwQYMBaAFAuoukD4lzTMPzrj7Wd0y9hD4udy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjhFQy9FMDU3RTJCMEFE QjQxMUVFQkVBN0U1NjNDNEY5QUUwMi9DNmk2UVBpWE5Nd19PdVB0WjNUTDJFUGk1 M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2aTZRUGlYTk13X091UHRaM1RMMkVQaTUzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjhFQy9FMDU3RTJCMEFEQjQxMUVFQkVBN0U1NjNDNEY5QUUwMi9DNmk2UVBpWE5N d19PdVB0WjNUTDJFUGk1M0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTpV9tVkbUDauPJ4jEymjQbDDaLof1iPASuHfO9UWe+6VOFG1gjxtE Hi2XRDdUcKkz0+U8s4PV9WtC0PDmPQow7r029k+Re9NuzRW1QsFt6JORAGILWcux O1MGG9D3Ef54PKWl8dFg4x5kAoPunG2gF0bMhfBSI1yglR1xUnQWUDwMVH4E5fbd gX9REcvq0zthRvP8SKtO+jsrkhLzB56RxRTRK7eE32840/laHj67JB8Fr1AbRd0c dpXH2x7JecMzXq9huPZJ2l24t5zmelfAVuWtTQG8aIqgIejLQA73te2t4hrWA0VH Ck68GIhRv9UlgKIBc5ZDoq38cMEy6Up0 -----END CERTIFICATE-----Generated at Sun Dec 28 03:11:33 2025 by rpki-client