This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft File: _6CVovSifKRjG8I55X56QFtFa_8.mft (raw, json) Hash identifier: 8AHNcQyElv1wTAjjnCtd49m2jBbcJStbLpG87tdUrkM= Subject key identifier: 79:21:F5:6A:96:D8:D4:2B:EF:6F:63:1C:66:9A:02:9C:A4:4F:1B:81 Authority key identifier: FF:A0:95:A2:F4:A2:7C:A4:63:1B:C2:39:E5:7E:7A:40:5B:45:6B:FF Certificate issuer: /CN=A91B346D/serialNumber=FFA095A2F4A27CA4631BC239E57E7A405B456BFF Certificate serial: 0615 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft Manifest number: 060A Signing time: Sat 20 Dec 2025 22:11:19 +0000 Manifest this update: Sat 20 Dec 2025 22:11:19 +0000 Manifest next update: Sat 27 Dec 2025 22:11:19 +0000 Files and hashes: 1: _6CVovSifKRjG8I55X56QFtFa_8.crl (hash: 0ZIDUtSX1wqM9NkjtfKEydyFLhZokmxL4ebWVEmKgR0=) 2: C708809CD06E11EBBBC4C43DC4F9AE02.roa (hash: yOgljvPhlJfq06U7oKLYib7/GJzDf+ZYOoVC0PAr/6Y=) 3: C05B301CB1DF11F082E88220C4F9AE02.roa (hash: iL1mAVACdSGOCRtNJJuiM/SyULhNM9mQShseHyNcZPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.crl rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1557 (0x615) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B346D, serialNumber=FFA095A2F4A27CA4631BC239E57E7A405B456BFF Validity Not Before: Dec 20 22:11:19 2025 GMT Not After : Dec 27 22:11:19 2025 GMT Subject: CN=69471f07-585e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:61:e9:9e:88:f6:e0:e4:89:37:c5:e2:a6:a2: 90:2e:2d:dc:81:8d:fc:10:ab:86:eb:81:a9:14:e4: d2:e7:95:b6:34:27:96:b7:1a:2a:42:e8:f1:f4:6b: 12:e2:46:50:88:15:b4:a8:df:94:68:41:6a:46:3c: ee:ad:ac:0e:f4:13:ff:bd:6a:be:5c:9d:f7:54:47: 58:73:d7:b9:68:bb:dc:4f:2f:57:ed:20:05:5e:d7: 57:05:c0:29:22:22:1b:1c:60:8f:fe:c3:36:0d:e0: 7d:47:67:c7:f1:66:d4:8b:5a:a3:aa:69:e7:d4:4f: dc:d8:67:7e:85:0b:2a:92:43:90:42:b6:34:26:13: 60:06:14:f0:7b:8c:5b:5c:0a:a6:27:e8:b8:92:06: 5c:52:08:05:b5:b5:5f:75:fe:eb:a7:d2:bb:52:64: d3:84:74:0c:50:bf:a0:7c:df:5a:ff:fb:c0:3f:51: 1e:24:3d:5a:7a:4a:cb:12:e8:84:b6:ca:92:61:f0: 26:8f:64:dc:a4:2a:70:dd:7a:25:61:94:c3:83:6a: bd:ee:c3:8b:38:b5:da:1d:68:bc:f9:a6:b2:27:a0: 3c:2a:51:c0:09:e7:e6:b8:8e:6c:83:71:b8:49:2f: 92:32:83:df:71:1c:0f:fc:4c:f8:f4:c9:0e:b4:dd: 49:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:21:F5:6A:96:D8:D4:2B:EF:6F:63:1C:66:9A:02:9C:A4:4F:1B:81 X509v3 Authority Key Identifier: keyid:FF:A0:95:A2:F4:A2:7C:A4:63:1B:C2:39:E5:7E:7A:40:5B:45:6B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:bc:74:97:12:76:99:83:08:09:24:17:9c:24:4e:f1:85:2d: 4e:f9:c7:9f:56:bd:c6:3a:98:7f:ed:dd:79:20:78:f0:c3:14: 52:ec:24:a4:8e:0b:19:ae:1c:63:54:c3:6d:3c:d9:07:5a:d8: 77:e7:59:38:5b:9c:43:90:33:80:f9:05:8f:d2:ae:76:c1:7e: c5:27:51:12:ed:84:95:7c:a5:c1:31:7a:73:03:fc:07:c1:50: e4:89:4e:a2:d6:8f:25:c5:6d:3e:af:57:71:36:56:82:03:67: 0c:94:6e:12:4f:28:a3:38:4e:1d:0b:c3:41:bb:14:0a:d7:de: dd:c6:8d:51:8f:34:8a:32:87:e3:01:fa:58:d5:b0:8b:b4:b9: 00:d4:28:a3:f5:27:61:73:7b:f3:28:0f:0e:d1:d5:b2:ab:73: 4d:f1:cb:4b:9e:c7:1c:bf:9d:89:92:74:d1:da:1f:fe:62:7c: 81:d2:ff:99:b2:95:82:0a:1a:f4:95:de:07:86:32:fa:9d:91: 32:45:38:e2:95:08:cd:57:74:3a:a1:06:70:a1:c0:8c:00:fc: 2e:ed:c5:e1:c4:23:00:d8:c5:33:dd:4a:f5:39:43:7f:98:92: dd:46:cc:d1:1c:ac:5b:50:95:30:61:d9:69:f3:92:0d:3f:c5: 4c:ac:72:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM0NkQxMTAvBgNVBAUTKEZGQTA5NUEyRjRBMjdDQTQ2MzFCQzIzOUU1N0U3QTQw NUI0NTZCRkYwHhcNMjUxMjIwMjIxMTE5WhcNMjUxMjI3MjIxMTE5WjAYMRYwFAYD VQQDDA02OTQ3MWYwNy01ODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlWHpnoj24OSJN8XipqKQLi3cgY38EKuG64GpFOTS55W2NCeWtxoqQujx9GsS 4kZQiBW0qN+UaEFqRjzurawO9BP/vWq+XJ33VEdYc9e5aLvcTy9X7SAFXtdXBcAp IiIbHGCP/sM2DeB9R2fH8WbUi1qjqmnn1E/c2Gd+hQsqkkOQQrY0JhNgBhTwe4xb XAqmJ+i4kgZcUggFtbVfdf7rp9K7UmTThHQMUL+gfN9a//vAP1EeJD1aekrLEuiE tsqSYfAmj2TcpCpw3XolYZTDg2q97sOLOLXaHWi8+aayJ6A8KlHACefmuI5sg3G4 SS+SMoPfcRwP/Ez49MkOtN1JMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkh9WqW 2NQr729jHGaaApykTxuBMB8GA1UdIwQYMBaAFP+glaL0onykYxvCOeV+ekBbRWv/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzQ2RC83MEUyNkVBNENF NkExMUVCQjA3NzRFODBDNEY5QUUwMi9fNkNWb3ZTaWZLUmpHOEk1NVg1NlFGdEZh XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL182Q1ZvdlNpZktSakc4STU1WDU2UUZ0RmFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzQ2RC83MEUyNkVBNENFNkExMUVCQjA3NzRFODBDNEY5QUUwMi9fNkNWb3ZTaWZL UmpHOEk1NVg1NlFGdEZhXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAvHSXEnaZgwgJJBecJE7xhS1O+cefVr3GOph/7d15IHjwwxRS7CSk jgsZrhxjVMNtPNkHWth351k4W5xDkDOA+QWP0q52wX7FJ1ES7YSVfKXBMXpzA/wH wVDkiU6i1o8lxW0+r1dxNlaCA2cMlG4STyijOE4dC8NBuxQK197dxo1RjzSKMofj AfpY1bCLtLkA1Cij9Sdhc3vzKA8O0dWyq3NN8ctLnsccv52JknTR2h/+YnyB0v+Z spWCChr0ld4HhjL6nZEyRTjilQjNV3Q6oQZwocCMAPwu7cXhxCMA2MUz3Ur1OUN/ mJLdRszRHKxbUJUwYdlp85INP8VMrHI2 -----END CERTIFICATE-----Generated at Mon Dec 22 17:42:26 2025 by rpki-client