This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft File: t6pTc4MhTWSOYzvMQg071oYWeP0.mft (raw, json) Hash identifier: OTdBnmHddKIkJasLplP1yoRXT+BrUr6Z/6FAaTJqf68= Subject key identifier: 2F:90:F5:9F:20:DB:D5:7D:F0:CB:A9:4F:1C:0A:4A:11:1C:ED:3C:A8 Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD Certificate issuer: /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD Certificate serial: 1B8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft Manifest number: 1B44 Signing time: Mon 22 Dec 2025 16:04:17 +0000 Manifest this update: Mon 22 Dec 2025 16:04:17 +0000 Manifest next update: Mon 29 Dec 2025 16:04:17 +0000 Files and hashes: 1: t6pTc4MhTWSOYzvMQg071oYWeP0.crl (hash: JMnL3qM5Re/4/3JummdlnLkE7gXiHw9VoBYxM9fw7EQ=) 2: BF6CF7EE1D1811E89AF8344EC4F9AE02.roa (hash: 2FdeFk6BkACA2x84QQhSx1d4f7hfVmpEG3T9lZ0KKs8=) 3: 2504266C1D1A11E8BDAD4F54C4F9AE02.roa (hash: Y4AICBsuBLbr1eccCbbUOeleXrW+auIswSTrvYqJTo0=) 4: B35788BC2E6111E7B9FA6971C4F9AE02.roa (hash: hXTTzP3kFcpIZ/DM7zay0NC5KhlwF/RDBBTbxArfKKA=) 5: AF7700B2B52A11EAB9426C7DC4F9AE02.roa (hash: EBfpSajs+p8kmDGMcsROIkdAjLRuCAc9bxp8aA0ImwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7054 (0x1b8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD Validity Not Before: Dec 22 16:04:17 2025 GMT Not After : Dec 29 16:04:17 2025 GMT Subject: CN=69496c01-2de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:68:a9:4f:86:c1:f0:d0:7b:37:9d:66:1b:85: be:2e:98:b5:3e:4f:73:ed:f7:ce:83:c2:e2:b1:35: 28:1e:8e:f2:bf:0f:f1:41:b5:0a:a1:60:c5:30:4e: 8c:f0:29:76:c9:01:7f:89:56:37:32:8f:c2:2d:f7: 5f:e1:05:35:37:7d:b9:27:f9:e1:15:50:34:5a:f9: 33:97:d9:25:e0:04:33:91:74:a0:43:09:c3:4d:de: f2:7b:ac:f0:0f:67:d0:56:26:ba:c6:5c:4f:c8:ab: 31:44:3b:00:8c:60:42:ac:08:e6:7a:50:ac:ec:d9: c2:6b:26:2c:0c:48:4d:99:a8:06:7c:96:88:06:9b: 09:23:0f:19:c1:17:ac:f5:d0:30:71:b8:a3:fa:9a: 59:33:67:bb:8f:18:48:4c:44:0d:e8:b7:6f:f5:08: 8b:b4:dc:c3:1c:bc:6e:5b:2f:d6:a4:2c:3e:96:74: 11:83:f4:35:31:92:42:cb:73:6a:23:17:50:53:5d: 8e:ac:bf:12:95:34:20:30:3b:b5:8d:11:fd:6a:16: c0:c4:00:63:4b:0e:ee:5a:11:3f:89:1b:4b:80:04: 86:89:5c:2d:6f:0d:42:1f:6f:a8:1d:91:16:12:f2: 7b:41:49:b9:a7:ad:c0:29:8c:89:3d:f4:d8:2f:67: c7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:90:F5:9F:20:DB:D5:7D:F0:CB:A9:4F:1C:0A:4A:11:1C:ED:3C:A8 X509v3 Authority Key Identifier: keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ae:6b:98:ed:df:87:d0:ff:7e:6a:1e:aa:7a:43:65:5c:81: c4:79:4b:fd:ed:c1:d8:c1:dc:6d:18:b0:c6:81:f6:eb:d1:ac: 23:86:21:0a:cf:16:84:bc:04:e6:e5:a0:7e:44:1d:c2:0d:71: a0:fa:f6:bb:85:92:bb:64:84:c0:a4:65:e0:06:d2:09:88:3d: 1c:68:2c:05:da:52:ab:d0:f9:c2:9e:e4:47:78:56:df:98:71: f1:73:84:59:36:d5:7b:33:69:26:37:2b:7b:c0:db:82:87:40: 00:36:60:7d:82:ad:69:30:19:7b:d2:cf:ef:a8:59:a7:a1:50: 78:e0:6c:a1:ff:b8:73:5d:0d:c3:4d:07:83:76:a1:91:d9:fe: 7c:1e:5c:d4:4c:66:57:da:03:62:cf:27:ff:43:f2:96:9d:c6: 33:0a:9c:39:6a:25:e0:d3:42:26:33:07:ab:70:ed:c7:3e:5b: e3:7c:5e:3b:10:f8:f1:c0:c4:70:66:cc:ee:88:2f:77:81:f3: d2:d4:c3:49:b1:19:0e:8c:a6:04:9c:66:3f:79:9c:3a:60:5c: b0:08:e9:84:c3:fe:ee:37:66:93:96:b4:da:bb:80:50:a8:e0: d7:a6:ca:f5:73:07:36:46:25:c0:65:a1:cc:68:51:5c:54:c9: e6:a4:46:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMwODMxMTAvBgNVBAUTKEI3QUE1MzczODMyMTRENjQ4RTYzM0JDQzQyMEQzQkQ2 ODYxNjc4RkQwHhcNMjUxMjIyMTYwNDE3WhcNMjUxMjI5MTYwNDE3WjAYMRYwFAYD VQQDDA02OTQ5NmMwMS0yZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnmipT4bB8NB7N51mG4W+Lpi1Pk9z7ffOg8LisTUoHo7yvw/xQbUKoWDFME6M 8Cl2yQF/iVY3Mo/CLfdf4QU1N325J/nhFVA0Wvkzl9kl4AQzkXSgQwnDTd7ye6zw D2fQVia6xlxPyKsxRDsAjGBCrAjmelCs7NnCayYsDEhNmagGfJaIBpsJIw8ZwRes 9dAwcbij+ppZM2e7jxhITEQN6Ldv9QiLtNzDHLxuWy/WpCw+lnQRg/Q1MZJCy3Nq IxdQU12OrL8SlTQgMDu1jRH9ahbAxABjSw7uWhE/iRtLgASGiVwtbw1CH2+oHZEW EvJ7QUm5p63AKYyJPfTYL2fH2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+Q9Z8g 29V98MupTxwKShEc7TyoMB8GA1UdIwQYMBaAFLeqU3ODIU1kjmM7zEINO9aGFnj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzA4My9BMENGMDU5QTJF NjAxMUU3Qjc0NzNFNzBDNEY5QUUwMi90NnBUYzRNaFRXU09ZenZNUWcwNzFvWVdl UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q2cFRjNE1oVFdTT1l6dk1RZzA3MW9ZV2VQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzA4My9BMENGMDU5QTJFNjAxMUU3Qjc0NzNFNzBDNEY5QUUwMi90NnBUYzRNaFRX U09ZenZNUWcwNzFvWVdlUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfrmuY7d+H0P9+ah6qekNlXIHEeUv97cHYwdxtGLDGgfbr0awjhiEK zxaEvATm5aB+RB3CDXGg+va7hZK7ZITApGXgBtIJiD0caCwF2lKr0PnCnuRHeFbf mHHxc4RZNtV7M2kmNyt7wNuCh0AANmB9gq1pMBl70s/vqFmnoVB44Gyh/7hzXQ3D TQeDdqGR2f58HlzUTGZX2gNizyf/Q/KWncYzCpw5aiXg00ImMwercO3HPlvjfF47 EPjxwMRwZszuiC93gfPS1MNJsRkOjKYEnGY/eZw6YFywCOmEw/7uN2aTlrTau4BQ qODXpsr1cwc2RiXAZaHMaFFcVMnmpEa4 -----END CERTIFICATE-----Generated at Wed Dec 24 12:27:07 2025 by rpki-client