This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft File: 6WkLu582wJ1MLtT2bPVdw1J1-3I.mft (raw, json) Hash identifier: Gz2uOCbV2IE5L/H8YIGFF/FusK6lmxzua9KG0/cfa+k= Subject key identifier: F7:34:A2:10:D4:F2:D2:87:57:84:02:31:2B:9C:0F:78:84:8D:61:DA Authority key identifier: E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72 Certificate issuer: /CN=A91BA9CE/serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72 Certificate serial: 0CF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft Manifest number: 0CCD Signing time: Sat 20 Dec 2025 17:51:57 +0000 Manifest this update: Sat 20 Dec 2025 17:51:57 +0000 Manifest next update: Sat 27 Dec 2025 17:51:57 +0000 Files and hashes: 1: 6WkLu582wJ1MLtT2bPVdw1J1-3I.crl (hash: 7JM0/F5wIcQN5pPyKkkTDUdztV4RbWgY9FB+H2iIQDQ=) 2: DB63CF9A011411EAAB0EF153C4F9AE02.roa (hash: wGD4GgZYH8Wu637cB2mtopho5iC5QPWCCDSkj49GCdU=) 3: 843F754669EA11EE90D6585BC4F9AE02.roa (hash: JzYOC6lX/mEpxkty6VDIE3Zxqj0b88u+IzzJMZUEq3s=) 4: 703918CC69EA11EE83318C50C4F9AE02.roa (hash: sl3iOiIpHmamaoTiyabLQSY+b6gx0pCXz/Ji33uFHt4=) 5: DC79515C011411EAAB0EF153C4F9AE02.roa (hash: S09PILGMyTlUME8baJPdO5/QImyMfRyviwRhAxvfwcM=) 6: DBED3B7C011411EAAB0EF153C4F9AE02.roa (hash: Om0jdNklpNSJZKsNEHd4KcWViukVVvJhi2Cyd/8/qjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3316 (0xcf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA9CE, serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72 Validity Not Before: Dec 20 17:51:57 2025 GMT Not After : Dec 27 17:51:57 2025 GMT Subject: CN=6946e23d-6e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3e:62:37:1a:f6:69:8b:78:3e:2b:3c:fb:91: fd:8b:52:3a:69:b2:4c:7d:e2:f1:7e:44:37:46:cd: 3e:09:59:c0:86:fc:45:97:1a:70:c2:81:7a:a2:29: 18:87:88:db:91:9b:89:26:8a:12:75:1d:d5:0e:1a: 83:d3:e9:73:de:c2:4f:8b:c7:55:f7:cb:75:63:a9: af:09:75:22:ee:0d:69:cc:ba:dc:68:4b:eb:e8:90: 1c:36:e0:29:a2:25:74:23:33:cc:6a:4a:35:70:e2: 2e:7b:98:1a:8b:e6:c9:c9:3e:b9:2b:98:9d:86:9b: c7:83:7c:7e:a1:81:f5:4b:36:97:b1:c1:fe:64:aa: 17:f9:87:08:7e:2d:4f:ce:c7:d0:58:77:56:fe:81: e7:61:66:a2:3d:c0:d0:82:fb:a1:b6:d3:cf:ff:f5: d4:72:9c:d1:38:c7:fa:2d:1d:5c:fa:19:d9:f9:3e: e0:f5:50:53:cc:cc:3d:97:c9:89:c5:a3:fd:7c:38: 4c:93:90:03:25:53:c6:0f:36:ce:50:17:79:22:9c: 6a:db:68:18:79:0d:31:f5:84:9a:8d:71:cd:9c:72: 48:6c:56:9c:79:fc:67:d0:f2:52:6c:b3:bf:9c:8a: 96:c5:54:bd:7a:2c:dd:30:e1:52:e6:a4:c6:17:c8: 0b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:34:A2:10:D4:F2:D2:87:57:84:02:31:2B:9C:0F:78:84:8D:61:DA X509v3 Authority Key Identifier: keyid:E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:f7:e4:f5:fd:31:4e:4c:67:3a:00:2a:99:a0:30:a2:db:24: c8:a5:08:72:5e:3b:c4:98:c1:f4:59:72:12:07:ae:6e:69:9e: cb:76:fc:02:d3:95:f8:5a:b6:3f:bb:a5:0d:e5:df:5f:dd:1c: 56:d1:06:79:99:e7:0f:27:f3:2e:cb:41:3e:51:63:d8:d9:f1: 7d:27:9d:e4:19:6f:f5:6c:9e:35:8b:40:2e:24:4f:2b:1b:64: 28:56:ce:88:09:ca:a7:c4:27:07:d2:02:7f:0b:c1:b5:6c:6e: 4a:97:21:48:de:15:09:2a:b1:73:6f:85:de:5b:65:8d:27:bc: a8:5f:2d:13:6d:66:e6:16:0c:6b:dd:e1:60:87:6e:d6:d2:fe: 4c:74:c0:31:8e:34:21:67:ff:7f:64:a8:83:5b:d5:1e:b6:40: 71:a5:d2:5e:1d:9c:5c:55:9c:f8:fa:70:18:78:54:a1:9b:e6: 36:d8:36:33:89:ca:3c:e1:83:fa:61:0a:36:6d:18:f1:9c:eb: e3:d0:4d:3b:3b:23:22:2c:24:e0:ba:24:df:45:c7:6b:cb:0e: 25:3d:09:51:22:25:eb:ad:53:bf:5d:d6:b6:78:f8:fd:a5:71: e3:98:2d:03:b5:59:cc:f8:e9:16:0e:8f:4b:88:03:f7:e7:cb: f4:6c:8a:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE5Q0UxMTAvBgNVBAUTKEU5NjkwQkJCOUYzNkMwOUQ0QzJFRDRGNjZDRjU1REMz NTI3NUZCNzIwHhcNMjUxMjIwMTc1MTU3WhcNMjUxMjI3MTc1MTU3WjAYMRYwFAYD VQQDDA02OTQ2ZTIzZC02ZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnz5iNxr2aYt4Pis8+5H9i1I6abJMfeLxfkQ3Rs0+CVnAhvxFlxpwwoF6oikY h4jbkZuJJooSdR3VDhqD0+lz3sJPi8dV98t1Y6mvCXUi7g1pzLrcaEvr6JAcNuAp oiV0IzPMako1cOIue5gai+bJyT65K5idhpvHg3x+oYH1SzaXscH+ZKoX+YcIfi1P zsfQWHdW/oHnYWaiPcDQgvuhttPP//XUcpzROMf6LR1c+hnZ+T7g9VBTzMw9l8mJ xaP9fDhMk5ADJVPGDzbOUBd5Ipxq22gYeQ0x9YSajXHNnHJIbFacefxn0PJSbLO/ nIqWxVS9eizdMOFS5qTGF8gL5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPc0ohDU 8tKHV4QCMSucD3iEjWHaMB8GA1UdIwQYMBaAFOlpC7ufNsCdTC7U9mz1XcNSdfty MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTlDRS81NEYxNURBNDAx MTExMUVBQkQ0RjBBNDlDNEY5QUUwMi82V2tMdTU4MndKMU1MdFQyYlBWZHcxSjEt M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZXa0x1NTgyd0oxTUx0VDJiUFZkdzFKMS0zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTlDRS81NEYxNURBNDAxMTExMUVBQkQ0RjBBNDlDNEY5QUUwMi82V2tMdTU4MndK MU1MdFQyYlBWZHcxSjEtM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ9+T1/TFOTGc6ACqZoDCi2yTIpQhyXjvEmMH0WXISB65uaZ7LdvwC 05X4WrY/u6UN5d9f3RxW0QZ5mecPJ/Muy0E+UWPY2fF9J53kGW/1bJ41i0AuJE8r G2QoVs6ICcqnxCcH0gJ/C8G1bG5KlyFI3hUJKrFzb4XeW2WNJ7yoXy0TbWbmFgxr 3eFgh27W0v5MdMAxjjQhZ/9/ZKiDW9UetkBxpdJeHZxcVZz4+nAYeFShm+Y22DYz ico84YP6YQo2bRjxnOvj0E07OyMiLCTguiTfRcdryw4lPQlRIiXrrVO/Xda2ePj9 pXHjmC0DtVnM+OkWDo9LiAP358v0bIqo -----END CERTIFICATE-----Generated at Sun Dec 21 13:29:18 2025 by rpki-client