This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft File: 6HkDAXqx8GqctGqwIb0Lkhya-og.mft (raw, json) Hash identifier: jVJj+hkCxOJae0a+GEwCjBLLPJMErouBXCRzG/zzmVc= Subject key identifier: 89:C1:FC:F8:00:01:0C:33:5A:1F:CB:21:AA:6D:4E:FC:10:BB:73:FB Authority key identifier: E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88 Certificate issuer: /CN=A91C49BA/serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft Manifest number: 15 Signing time: Fri 19 Dec 2025 06:47:51 +0000 Manifest this update: Fri 19 Dec 2025 06:47:51 +0000 Manifest next update: Fri 26 Dec 2025 06:47:51 +0000 Files and hashes: 1: 6HkDAXqx8GqctGqwIb0Lkhya-og.crl (hash: AnQaEMRLVYMU86s7nWLjuIsjTO34QPb1e7xYzkBV1r4=) 2: 72F530E2BEF611F08C939B16C4F9AE02.roa (hash: OVDXYXiPK6DUjh7GuuPjYLe4oNz6kILt+KBikGM4NtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C49BA, serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88 Validity Not Before: Dec 19 06:47:51 2025 GMT Not After : Dec 26 06:47:51 2025 GMT Subject: CN=6944f517-7c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:35:dd:80:05:2a:54:14:4c:fc:af:31:c8:ab: f3:5a:f6:14:dd:30:2a:e3:a6:88:01:93:b7:b2:c7: fb:23:3d:3c:ee:2a:8d:94:e5:a7:1b:11:c3:88:26: 84:e3:ee:b1:e9:ed:52:12:e2:12:c3:79:73:49:b2: aa:bb:5d:a0:c7:f9:42:63:3b:8f:76:77:7c:db:c2: 9c:c8:49:d0:c4:ad:3d:ce:85:fb:04:36:8d:3e:4f: d3:68:45:c5:9a:ac:7e:a6:46:99:e4:d7:29:d4:8a: 8d:82:41:da:61:aa:5f:25:2c:35:c1:aa:36:6d:3b: 08:ca:15:60:c6:af:71:6a:07:ea:da:7f:f7:66:68: b7:da:a5:32:60:40:5d:fe:79:db:55:10:9c:94:d5: 84:36:28:77:c1:94:48:38:26:30:49:d3:42:e4:63: c4:af:50:14:83:0a:f0:81:68:bd:09:f7:57:2e:53: e7:e3:04:d1:e3:6a:8f:96:50:75:64:4d:8e:52:a8: b5:98:b7:fb:86:aa:8f:51:ab:16:82:e0:22:c4:c1: 50:8f:93:79:2b:45:16:8b:c7:30:1a:17:6d:db:83: b3:16:19:ce:0d:a5:6a:a2:95:b0:21:94:6b:00:11: 90:6b:70:c5:9d:bd:e8:d5:2c:01:1d:30:0d:4f:56: 1d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C1:FC:F8:00:01:0C:33:5A:1F:CB:21:AA:6D:4E:FC:10:BB:73:FB X509v3 Authority Key Identifier: keyid:E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:2e:3a:d8:d3:4a:d4:62:67:82:f7:c1:3b:93:64:7e:2d:d9: 8e:ef:68:dd:8b:49:f0:7d:b8:c5:ba:63:f4:24:a7:bb:d5:ad: 82:90:5f:b9:f5:d1:f2:71:9d:37:26:72:78:11:ec:80:53:b9: 11:2e:09:1f:99:9c:26:5f:dc:27:f8:e6:4c:21:08:98:8e:0b: ba:5a:9d:42:0c:bc:86:d5:a9:31:2b:2c:75:61:38:40:34:e4: 91:6e:ba:ab:62:ba:f3:65:9d:a7:cc:b4:d2:63:da:a4:67:55: 64:0d:b6:c3:ec:1b:1c:33:98:ee:92:86:04:14:97:0a:4d:4d: 8e:cd:aa:6b:6c:94:8b:41:c6:bc:e4:5c:3c:6c:cd:53:7e:4a: 29:ba:f8:9c:24:14:78:34:f8:ef:f4:51:14:9f:67:b7:16:bb: cb:3c:15:a7:b9:5e:e3:a2:c6:9e:97:3b:0f:63:c9:38:5d:25: ea:57:85:5e:63:a7:a6:4a:a9:9f:d2:4e:1d:0e:0e:51:ae:2a: dd:e5:04:23:ac:d2:c8:38:37:3d:e9:e8:ae:bb:7d:0e:e0:3b: dd:2d:8c:3c:c7:b2:e8:15:99:b7:1a:c2:80:63:db:74:f0:30: 68:a0:0c:ee:ff:52:36:d1:ed:9f:8f:e4:7e:5b:30:37:cd:d8: 24:f8:76:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDlCQTExMC8GA1UEBRMoRTg3OTAzMDE3QUIxRjA2QTlDQjQ2QUIwMjFCRDBCOTIx QzlBRkE4ODAeFw0yNTEyMTkwNjQ3NTFaFw0yNTEyMjYwNjQ3NTFaMBgxFjAUBgNV BAMMDTY5NDRmNTE3LTdjOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqNd2ABSpUFEz8rzHIq/Na9hTdMCrjpogBk7eyx/sjPTzuKo2U5acbEcOIJoTj 7rHp7VIS4hLDeXNJsqq7XaDH+UJjO492d3zbwpzISdDErT3OhfsENo0+T9NoRcWa rH6mRpnk1ynUio2CQdphql8lLDXBqjZtOwjKFWDGr3FqB+raf/dmaLfapTJgQF3+ edtVEJyU1YQ2KHfBlEg4JjBJ00LkY8SvUBSDCvCBaL0J91cuU+fjBNHjao+WUHVk TY5SqLWYt/uGqo9RqxaC4CLEwVCPk3krRRaLxzAaF23bg7MWGc4NpWqilbAhlGsA EZBrcMWdvejVLAEdMA1PVh3HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUicH8+AAB DDNaH8shqm1O/BC7c/swHwYDVR0jBBgwFoAU6HkDAXqx8GqctGqwIb0Lkhya+ogw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0OUJBL0UzNjdGNkM2QkVG NTExRjA5QjdFNzIwOUM0RjlBRTAyLzZIa0RBWHF4OEdxY3RHcXdJYjBMa2h5YS1v Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNkhrREFYcXg4R3FjdEdxd0liMExraHlhLW9nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 OUJBL0UzNjdGNkM2QkVGNTExRjA5QjdFNzIwOUM0RjlBRTAyLzZIa0RBWHF4OEdx Y3RHcXdJYjBMa2h5YS1vZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA8uOtjTStRiZ4L3wTuTZH4t2Y7vaN2LSfB9uMW6Y/Qkp7vVrYKQX7n1 0fJxnTcmcngR7IBTuREuCR+ZnCZf3Cf45kwhCJiOC7panUIMvIbVqTErLHVhOEA0 5JFuuqtiuvNlnafMtNJj2qRnVWQNtsPsGxwzmO6ShgQUlwpNTY7NqmtslItBxrzk XDxszVN+Sim6+JwkFHg0+O/0URSfZ7cWu8s8Fae5XuOixp6XOw9jyThdJepXhV5j p6ZKqZ/STh0ODlGuKt3lBCOs0sg4Nz3p6K67fQ7gO90tjDzHsugVmbcawoBj23Tw MGigDO7/UjbR7Z+P5H5bMDfN2CT4dqE= -----END CERTIFICATE-----Generated at Sat Dec 20 00:28:04 2025 by rpki-client