This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json) Hash identifier: uWBTg289Hvu+SA7HNtl/nVnXQDjVRUMDA0qxQwa8c/E= Subject key identifier: 31:16:D9:6A:1A:B0:3E:2C:2C:FD:4F:E4:F7:7E:F8:03:A3:1B:28:32 Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft Manifest number: 016E Signing time: Thu 25 Dec 2025 02:59:35 +0000 Manifest this update: Thu 25 Dec 2025 02:59:35 +0000 Manifest next update: Thu 01 Jan 2026 02:59:35 +0000 Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: +cm934qrSZ2o+jGSF51JKvOtjFOylwsPymqYTxb79q8=) 2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: AnEWPP8X1N6dt7l7V3XsTmB0MKThvDc5dt35NbkXnzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 02:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Validity Not Before: Dec 25 02:59:35 2025 GMT Not After : Jan 1 02:59:35 2026 GMT Subject: CN=694ca897-706b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d8:40:89:42:72:75:7d:fd:a1:6d:94:1d:c4: 74:55:2b:82:01:18:25:8c:bc:15:18:4f:df:6d:98: e9:6b:29:d9:bf:dd:c3:9c:9b:6e:e9:c1:22:db:97: d0:29:33:d9:03:83:53:3b:1c:86:44:cf:e3:a3:7d: 5a:b4:a3:cc:11:97:ba:ed:2a:1d:20:61:80:58:d0: 8f:9b:f7:cc:f0:86:f1:4b:f8:67:8b:25:9c:36:ac: e0:9a:c1:68:fa:bf:b2:f0:bb:f7:5b:e2:cf:6c:fa: 38:9b:9c:a4:c4:aa:a0:2d:36:22:ca:8e:cc:46:3f: c4:64:66:44:13:6c:76:73:ec:2a:2c:98:5d:02:14: 7f:0e:31:bf:9b:33:46:3c:60:18:75:f1:3a:6b:f8: 18:46:3f:4e:72:24:57:02:e0:d1:3c:22:3b:ae:9c: 5a:d3:71:79:fa:06:6d:47:12:03:ec:83:d4:37:11: 7d:e0:47:b9:fa:fc:69:29:d5:bf:85:b6:a0:b5:07: d4:02:91:63:66:19:46:f7:11:6b:7c:78:b7:6b:58: 2e:f1:22:f9:49:2c:be:e5:e4:fc:3d:78:05:d2:35: fe:e4:29:ee:0e:bb:c2:56:aa:10:3a:ba:8a:25:52: e9:4c:f8:05:bc:8b:96:8d:10:76:44:4b:7e:53:75: 2b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:16:D9:6A:1A:B0:3E:2C:2C:FD:4F:E4:F7:7E:F8:03:A3:1B:28:32 X509v3 Authority Key Identifier: keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:eb:cd:cf:36:7f:27:7d:76:d0:9d:52:b5:14:ef:b8:d7:9e: cd:2c:7f:3e:cf:59:c5:fc:ec:03:de:ce:ef:fe:38:34:2e:15: 89:5e:72:85:1e:a5:f4:f0:47:a3:c3:33:c9:8a:4a:7c:cf:72: 21:0b:5b:f2:5c:4b:3a:14:e0:bc:95:60:2c:a9:5d:86:d1:b7: 81:14:82:cb:d8:26:a1:5c:65:85:40:e4:5c:ec:9d:f3:22:68: 57:b1:d0:8c:92:ec:31:80:3a:c2:24:14:63:f6:08:dc:ca:bc: 97:ba:ff:31:f7:d1:35:3a:02:33:f6:2d:0b:30:19:2f:24:4e: b7:a4:16:bf:f0:e4:1c:d9:69:d5:51:d2:79:47:ab:8e:92:74: c0:2b:23:9d:26:c2:52:20:8e:b3:7d:c3:ed:17:c2:ab:6a:70: 18:f4:ee:35:ca:e6:73:b8:49:5e:68:27:2d:6c:b9:2d:e3:e0: 2a:7f:9b:49:0a:f8:14:c3:dd:78:cc:7e:d1:bb:56:ec:54:68: ee:6a:61:87:d0:d4:cd:17:5c:a0:2e:46:84:1a:b9:fa:61:33: 11:19:fd:67:24:30:1b:dd:7e:eb:c0:49:e7:ba:d7:84:bd:a9: 77:70:58:2b:5c:58:73:2b:11:48:67:c7:9f:ae:b5:35:97:52: 0f:e0:d5:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMDgxMTAvBgNVBAUTKDZDQkI2NzY3RjYzQTBDQjlCN0E3NDkxNEI0QTY1NzQx N0U0QzU3OEEwHhcNMjUxMjI1MDI1OTM1WhcNMjYwMTAxMDI1OTM1WjAYMRYwFAYD VQQDDA02OTRjYTg5Ny03MDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApthAiUJydX39oW2UHcR0VSuCARgljLwVGE/fbZjpaynZv93DnJtu6cEi25fQ KTPZA4NTOxyGRM/jo31atKPMEZe67SodIGGAWNCPm/fM8IbxS/hniyWcNqzgmsFo +r+y8Lv3W+LPbPo4m5ykxKqgLTYiyo7MRj/EZGZEE2x2c+wqLJhdAhR/DjG/mzNG PGAYdfE6a/gYRj9OciRXAuDRPCI7rpxa03F5+gZtRxID7IPUNxF94Ee5+vxpKdW/ hbagtQfUApFjZhlG9xFrfHi3a1gu8SL5SSy+5eT8PXgF0jX+5CnuDrvCVqoQOrqK JVLpTPgFvIuWjRB2REt+U3UrNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEW2Woa sD4sLP1P5Pd++AOjGygyMB8GA1UdIwQYMBaAFGy7Z2f2Ogy5t6dJFLSmV0F+TFeK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAwOC8wQThGQkIxQUI0 MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRMbTNwMGtVdEtaWFFYNU1W NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMdG5aX1k2RExtM3Awa1V0S1pYUVg1TVY0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAwOC8wQThGQkIxQUI0MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRM bTNwMGtVdEtaWFFYNU1WNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK683PNn8nfXbQnVK1FO+4157NLH8+z1nF/OwD3s7v/jg0LhWJXnKF HqX08EejwzPJikp8z3IhC1vyXEs6FOC8lWAsqV2G0beBFILL2CahXGWFQORc7J3z ImhXsdCMkuwxgDrCJBRj9gjcyryXuv8x99E1OgIz9i0LMBkvJE63pBa/8OQc2WnV UdJ5R6uOknTAKyOdJsJSII6zfcPtF8KranAY9O41yuZzuEleaCctbLkt4+Aqf5tJ CvgUw914zH7Ru1bsVGjuamGH0NTNF1ygLkaEGrn6YTMRGf1nJDAb3X7rwEnnuteE val3cFgrXFhzKxFIZ8efrrU1l1IP4NU/ -----END CERTIFICATE-----Generated at Thu Dec 25 11:16:38 2025 by rpki-client