This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft File: a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft (raw, json) Hash identifier: y6olNpthRabFvJriiv1HIn0EjsZ3tuQ02D7KMFtku3o= Subject key identifier: D5:EC:76:A3:C0:95:A7:50:7E:9F:F6:B2:91:09:5A:A8:28:C3:FC:3C Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57 Certificate issuer: /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57 Certificate serial: 0D49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft Manifest number: 0D13 Signing time: Thu 18 Dec 2025 17:53:31 +0000 Manifest this update: Thu 18 Dec 2025 17:53:31 +0000 Manifest next update: Thu 25 Dec 2025 17:53:31 +0000 Files and hashes: 1: a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl (hash: IQ0W39t9eFaT5LYg/XoC3qrH4qvxtO7uv/scZMhdXxg=) 2: 7545D7688D6C11F0AB7BFE70C4F9AE02.roa (hash: Gso7riR6mhTBetdxhvBcEVx4lP0fazKGiY4D6n5IxPQ=) 3: 7617F5408D6C11F0AB7BFE70C4F9AE02.roa (hash: c7Vsr0eRAEmxWhobNGyEno1B5Pvs5ja8tO1BeT/ckVk=) 4: 584733B48D6C11F09980DA5EC4F9AE02.roa (hash: h29koSbtR2J5ejxH0g/g8JKXTU/n2VhgMI8p7KUTTRI=) 5: F8C3F402870A11F0A015612EC4F9AE02.roa (hash: XvrYP38xvdCgdawfCh7HadAKH1aRcApDaLO6IdzBa/w=) 6: 0D036EB680BC11EBAF2A1C0EC4F9AE02.roa (hash: 1TLr5oM7v/qdbXCuWglO9MT2WfClZILhcDQljm7O2lk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3401 (0xd49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57 Validity Not Before: Dec 18 17:53:31 2025 GMT Not After : Dec 25 17:53:31 2025 GMT Subject: CN=69443f9b-d041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:38:ad:5c:91:14:6e:3d:6d:b4:cb:75:16:ff: 33:db:6f:43:47:17:b6:92:17:9c:b0:64:cd:8d:3a: 3d:75:14:b8:84:a8:f2:8d:d0:ae:ef:2a:ff:fa:ab: f2:82:a5:0c:97:f1:ce:e2:ba:67:4f:fc:2c:70:99: ae:d3:48:59:a0:84:3a:a2:99:e0:cc:17:16:08:9a: 43:28:1f:17:b0:89:72:56:81:e0:5b:fa:2e:56:a0: bf:51:6f:79:6e:74:17:05:4c:41:24:07:c9:be:c2: 1d:bf:d7:83:5a:37:28:66:c7:8d:14:14:9a:a7:a2: 47:eb:5f:06:f9:f5:39:13:f0:58:18:0a:04:5e:dd: fb:9c:0e:20:ce:c0:ff:d4:56:7b:f4:30:8b:2a:08: 43:56:76:ee:35:bb:0c:e4:c8:ca:b1:fb:a1:a1:96: 51:ec:32:4a:05:bb:ca:e5:21:94:ea:b2:c8:79:33: d1:d6:fc:30:ff:d5:b4:a7:e1:6b:63:4a:5c:d6:92: d0:42:a5:f6:c1:04:ad:46:48:8a:3d:c9:2a:c3:9c: 78:d0:9e:d4:ee:b4:03:89:bb:f8:5e:56:ab:3c:7b: 6c:cf:ca:ea:1d:ae:b1:b9:03:b7:ea:6f:99:04:fa: 9b:83:22:6f:02:a4:37:f7:0b:93:33:c3:14:6b:db: 20:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:EC:76:A3:C0:95:A7:50:7E:9F:F6:B2:91:09:5A:A8:28:C3:FC:3C X509v3 Authority Key Identifier: keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:63:ad:4d:e0:f0:d4:3b:9b:ee:17:eb:75:ef:2c:bc:dd:78: b2:50:d7:f7:60:2e:33:93:aa:a9:49:75:02:31:4c:d1:37:4b: b4:53:87:29:4c:58:02:58:7e:de:1b:66:49:95:82:53:33:1a: 8d:1e:2d:0c:03:a5:d3:74:f4:bb:7e:60:9c:f7:c2:ff:0b:b1: ba:19:19:40:31:a0:00:f1:f8:23:b7:86:67:01:58:ed:a0:4b: 5f:76:90:16:91:71:a7:8c:52:30:f6:8f:05:b1:26:07:79:64: 69:2d:e8:76:98:ec:e6:27:a5:73:1c:97:43:b6:43:a0:e5:85: e3:ce:80:23:4d:ad:e9:21:ec:6e:27:e6:3c:f8:15:c4:a8:30: 8c:b2:99:dd:b7:08:29:27:81:5b:b3:4b:10:b0:24:ba:26:cf: b0:26:63:00:3b:2f:19:0c:ed:5e:88:fc:1b:65:97:ef:80:48: 75:dc:4f:db:06:85:f8:50:97:6d:01:21:7a:c4:98:41:c9:80: a4:18:a1:c0:c7:8c:e7:8f:1a:91:46:65:a3:90:15:2e:0d:4f: 63:00:8e:c4:c4:d9:71:45:96:21:3e:b7:1b:9d:fb:39:6a:4e: 7c:d3:7c:44:d0:05:73:62:2e:aa:e2:d5:5b:41:50:02:e7:91: 72:67:85:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0MTgxMTAvBgNVBAUTKDZCNUVCRkU5OEEzNzg3NjRDMUIxMkRDQjY5MDRFNDYx MEI1MEFDNTcwHhcNMjUxMjE4MTc1MzMxWhcNMjUxMjI1MTc1MzMxWjAYMRYwFAYD VQQDDA02OTQ0M2Y5Yi1kMDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTitXJEUbj1ttMt1Fv8z229DRxe2khecsGTNjTo9dRS4hKjyjdCu7yr/+qvy gqUMl/HO4rpnT/wscJmu00hZoIQ6opngzBcWCJpDKB8XsIlyVoHgW/ouVqC/UW95 bnQXBUxBJAfJvsIdv9eDWjcoZseNFBSap6JH618G+fU5E/BYGAoEXt37nA4gzsD/ 1FZ79DCLKghDVnbuNbsM5MjKsfuhoZZR7DJKBbvK5SGU6rLIeTPR1vww/9W0p+Fr Y0pc1pLQQqX2wQStRkiKPckqw5x40J7U7rQDibv4XlarPHtsz8rqHa6xuQO36m+Z BPqbgyJvAqQ39wuTM8MUa9sgNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXsdqPA ladQfp/2spEJWqgow/w8MB8GA1UdIwQYMBaAFGtev+mKN4dkwbEty2kE5GELUKxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQxOC8wQzBCODAwRUY2 ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gyVEJzUzNMYVFUa1lRdFFy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExNl82WW8zaDJUQnNTM0xhUVRrWVF0UXJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQxOC8wQzBCODAwRUY2ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gy VEJzUzNMYVFUa1lRdFFyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOY61N4PDUO5vuF+t17yy83XiyUNf3YC4zk6qpSXUCMUzRN0u0U4cp TFgCWH7eG2ZJlYJTMxqNHi0MA6XTdPS7fmCc98L/C7G6GRlAMaAA8fgjt4ZnAVjt oEtfdpAWkXGnjFIw9o8FsSYHeWRpLeh2mOzmJ6VzHJdDtkOg5YXjzoAjTa3pIexu J+Y8+BXEqDCMspndtwgpJ4Fbs0sQsCS6Js+wJmMAOy8ZDO1eiPwbZZfvgEh13E/b BoX4UJdtASF6xJhByYCkGKHAx4znjxqRRmWjkBUuDU9jAI7ExNlxRZYhPrcbnfs5 ak5803xE0AVzYi6q4tVbQVAC55FyZ4Xx -----END CERTIFICATE-----Generated at Sat Dec 20 10:06:28 2025 by rpki-client