This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft File: Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft (raw, json) Hash identifier: TW8GwDJv2JLuzheAuQkdFOccagyBS3zPd55GtGeJ1Nk= Subject key identifier: AF:61:E0:D6:86:FE:D9:BC:99:BC:0C:D9:80:ED:CB:39:29:30:20:39 Authority key identifier: 56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9 Certificate issuer: /CN=A91BB246/serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft Manifest number: 6A Signing time: Fri 19 Dec 2025 05:58:05 +0000 Manifest this update: Fri 19 Dec 2025 05:58:05 +0000 Manifest next update: Fri 26 Dec 2025 05:58:05 +0000 Files and hashes: 1: Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl (hash: x0R7u6Py7+sxsdNwcC8Hc0CKo+3hhVLi73F2TH/hUTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB246, serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9 Validity Not Before: Dec 19 05:58:05 2025 GMT Not After : Dec 26 05:58:05 2025 GMT Subject: CN=6944e96d-0110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a9:bb:2b:42:9a:ee:49:29:5d:41:b5:48:ee: 05:08:f7:31:df:75:7e:de:1b:cb:10:d5:08:5a:a4: f9:6d:cb:62:e4:66:f4:0b:2e:7b:fa:cf:9a:77:48: 19:23:c6:58:2d:2b:58:e8:bb:6f:c2:89:36:aa:df: 32:16:86:2d:5e:de:a1:4a:83:b5:8c:9e:39:44:c5: b0:8c:9c:11:8c:0b:fb:d2:23:46:a1:82:dd:f8:31: 52:0b:f6:73:7f:c1:8f:f2:91:c0:06:57:e7:1b:30: 3a:28:b4:3f:ef:a1:97:7e:c3:46:8a:47:d8:ac:88: 83:6c:8d:cd:23:30:83:cb:13:a6:d7:da:1f:be:f8: 8b:a1:d5:a5:ea:06:63:66:9e:a1:c5:8a:0f:6b:c3: e2:2c:fe:19:38:e1:ef:2e:6c:72:f6:ea:1e:46:ce: 40:95:a9:a0:66:0e:0a:b0:42:04:c7:71:ae:b2:06: 2f:4e:6e:fb:61:ad:c4:a8:c4:8a:16:58:33:c5:d1: 64:15:9c:cd:42:c6:f0:9e:b8:d2:15:83:06:e5:a1: 7c:05:c4:49:c3:43:03:fb:ce:9b:a6:27:6d:bb:fd: 71:8f:90:cf:17:8d:d8:c7:e0:2e:a9:b8:e9:5f:c8: bb:2d:d1:f3:a0:71:66:36:d1:00:af:09:cb:7f:a0: b4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:61:E0:D6:86:FE:D9:BC:99:BC:0C:D9:80:ED:CB:39:29:30:20:39 X509v3 Authority Key Identifier: keyid:56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:dd:7c:3e:fd:39:25:2b:72:f8:ac:98:5c:0a:b6:04:4f:80: e9:e0:0f:a8:2e:3c:1a:ba:90:3d:57:f9:17:fc:cf:25:a1:98: 64:a6:34:88:84:84:54:a6:ac:44:77:58:58:b6:11:e4:88:5e: 58:b0:04:5f:43:be:f5:4c:b2:12:4b:1f:23:bb:53:53:bd:7f: 6c:c0:4b:72:45:4e:12:de:15:d7:ee:78:e9:28:a4:3c:d4:cd: 15:dc:8e:26:21:c3:6e:b6:7d:97:56:29:c0:7a:a6:a9:4a:c3: b4:33:42:01:d1:ec:13:31:1a:1a:87:16:86:e5:47:e3:fb:c3: 25:69:89:55:bd:67:48:90:cb:20:72:57:cc:8a:5a:f5:14:81: 48:9f:28:7a:2c:49:58:07:23:79:b3:46:53:69:92:46:76:40: b6:0e:17:2b:c7:9a:e3:29:68:6a:1a:1d:81:6a:25:3c:44:97: 41:95:58:58:a1:61:1b:eb:0d:78:bb:5b:a2:a6:72:75:ad:6f: 45:d8:78:76:cf:8b:dd:74:b6:db:ff:3a:57:b5:1c:90:68:fc: 67:bb:87:f5:37:d6:6e:b0:d6:1c:c3:df:8f:ab:84:39:f7:5f: 18:4f:82:87:4c:b7:c2:e1:38:3d:3d:e8:55:43:93:44:13:01: 38:17:8e:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjI0NjExMC8GA1UEBRMoNTY3RTMyMURBRjRBRjc0NDNCMEQ3OUUzMkFDMDMwNzk3 NTI3RjFEOTAeFw0yNTEyMTkwNTU4MDVaFw0yNTEyMjYwNTU4MDVaMBgxFjAUBgNV BAMMDTY5NDRlOTZkLTAxMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoqbsrQpruSSldQbVI7gUI9zHfdX7eG8sQ1QhapPlty2LkZvQLLnv6z5p3SBkj xlgtK1jou2/CiTaq3zIWhi1e3qFKg7WMnjlExbCMnBGMC/vSI0ahgt34MVIL9nN/ wY/ykcAGV+cbMDootD/voZd+w0aKR9isiINsjc0jMIPLE6bX2h+++Iuh1aXqBmNm nqHFig9rw+Is/hk44e8ubHL26h5GzkCVqaBmDgqwQgTHca6yBi9ObvthrcSoxIoW WDPF0WQVnM1CxvCeuNIVgwbloXwFxEnDQwP7zpumJ227/XGPkM8XjdjH4C6puOlf yLst0fOgcWY20QCvCct/oLSzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUr2Hg1ob+ 2byZvAzZgO3LOSkwIDkwHwYDVR0jBBgwFoAUVn4yHa9K90Q7DXnjKsAweXUn8dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjQ2L0YxQzVDOTUyM0Mw RDExRjA5NkNDREI1RkM0RjlBRTAyL1ZuNHlIYTlLOTBRN0RYbmpLc0F3ZVhVbjhk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVm40eUhhOUs5MFE3RFhuaktzQXdlWFVuOGRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MjQ2L0YxQzVDOTUyM0MwRDExRjA5NkNDREI1RkM0RjlBRTAyL1ZuNHlIYTlLOTBR N0RYbmpLc0F3ZVhVbjhkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEPdfD79OSUrcvismFwKtgRPgOngD6guPBq6kD1X+Rf8zyWhmGSmNIiE hFSmrER3WFi2EeSIXliwBF9DvvVMshJLHyO7U1O9f2zAS3JFThLeFdfueOkopDzU zRXcjiYhw262fZdWKcB6pqlKw7QzQgHR7BMxGhqHFoblR+P7wyVpiVW9Z0iQyyBy V8yKWvUUgUifKHosSVgHI3mzRlNpkkZ2QLYOFyvHmuMpaGoaHYFqJTxEl0GVWFih YRvrDXi7W6KmcnWtb0XYeHbPi910ttv/Ole1HJBo/Ge7h/U31m6w1hzD34+rhDn3 XxhPgodMt8LhOD096FVDk0QTATgXjnw= -----END CERTIFICATE-----Generated at Sat Dec 20 00:53:54 2025 by rpki-client