This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft File: x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft (raw, json) Hash identifier: 9sL9W/5LFNWVtmsXe7B4Yx8IWek2sW3MFRAgYgg8Xfc= Subject key identifier: C0:A7:AD:6B:4D:8B:38:12:B0:CC:61:07:63:3C:9B:20:EA:DC:C1:7B Authority key identifier: C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD Certificate issuer: /CN=A91D8BB1/serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft Manifest number: 6A Signing time: Fri 19 Dec 2025 05:58:47 +0000 Manifest this update: Fri 19 Dec 2025 05:58:47 +0000 Manifest next update: Fri 26 Dec 2025 05:58:47 +0000 Files and hashes: 1: x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl (hash: moFGIkIxvwf+9Y0XZmitKdHJEthmllhlFaz4Ja+f6Y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8BB1, serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD Validity Not Before: Dec 19 05:58:47 2025 GMT Not After : Dec 26 05:58:47 2025 GMT Subject: CN=6944e997-7455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c1:58:77:df:e7:e6:19:75:13:fb:e4:65:1a: 54:2a:2c:3e:33:85:99:1f:59:80:65:24:9b:42:f6: 53:28:ae:d4:48:18:f1:63:17:d2:f9:7b:5f:c2:13: 07:0e:68:f9:1f:14:2a:49:23:1d:b0:f3:16:8a:dd: 58:25:5a:24:e4:a1:d4:37:6b:ee:47:ae:4b:6f:72: a3:76:2d:55:aa:46:c1:a5:30:da:e7:93:71:d3:c6: 79:75:1a:c1:b8:f6:05:89:65:b2:68:0d:59:bd:4b: dd:24:b3:5d:5f:6b:0c:10:d0:cd:e1:65:c2:40:1c: 60:17:23:53:d3:67:ff:88:35:eb:6d:84:b7:63:83: b8:fc:80:82:47:9e:a2:ec:95:bc:7c:26:6d:65:bb: c4:81:dd:43:c7:6f:7e:8c:7b:59:31:ea:5d:db:11: 46:6b:04:6a:fb:e2:11:cd:91:1d:c7:61:12:2b:dc: 1b:ed:16:78:39:62:70:64:20:00:2b:b5:46:a4:fb: 35:ea:9b:d5:64:b6:75:9b:32:23:a7:9d:7e:c5:26: 75:70:e6:48:02:b6:8d:37:39:72:91:cb:08:33:be: 66:18:76:c1:3b:43:0f:31:3f:d3:77:7b:6b:8e:65: f2:d9:66:f3:23:ae:0c:a5:5e:1c:90:2f:8c:69:45: 23:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A7:AD:6B:4D:8B:38:12:B0:CC:61:07:63:3C:9B:20:EA:DC:C1:7B X509v3 Authority Key Identifier: keyid:C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:b8:80:63:43:9c:61:a0:51:de:df:b4:bc:c2:12:86:8d:34: a8:fb:db:98:12:36:10:38:96:1b:39:ed:54:30:95:17:5b:28: ef:cb:c0:cc:35:94:21:26:74:85:5f:62:ab:33:7c:c7:ea:14: 7b:76:be:04:76:f2:7f:6a:0b:ca:73:84:9d:fe:92:ba:ed:cb: f7:4f:60:d6:07:6f:7c:8d:c8:59:d3:24:ba:75:49:40:55:05: 05:39:7a:23:3d:ec:2e:5d:da:2b:44:dd:9a:28:76:3f:4e:52: d4:69:91:9f:66:db:dc:0e:2a:ba:70:76:bf:41:d9:f2:fb:6a: 27:b2:d0:19:af:82:39:28:ef:59:10:6f:09:6d:1a:3c:3e:f4: 30:eb:68:c3:75:aa:d9:b9:4f:3c:16:8d:45:e6:09:86:aa:06: a2:09:ab:92:d5:d9:6b:70:77:f6:2b:53:d3:dc:e7:0d:7d:82: 24:b7:f4:e2:85:ef:77:63:ef:87:22:01:1b:37:c9:16:64:58: 2d:9e:82:56:c4:76:f1:4c:58:80:2b:25:a0:7b:9f:00:07:e0: 23:46:21:4f:9d:f0:49:49:f2:28:e2:38:5e:5d:d3:c3:6e:0a: af:6f:39:b1:01:1e:00:a8:6f:62:7e:79:d0:3b:48:a3:24:96: a7:cc:b6:59 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEJCMTExMC8GA1UEBRMoQzdGMDI4MzdEMjQ1Q0I4RkFCQ0Q0NzQxQ0ZBMkI0QTVB MkY3M0VBRDAeFw0yNTEyMTkwNTU4NDdaFw0yNTEyMjYwNTU4NDdaMBgxFjAUBgNV BAMMDTY5NDRlOTk3LTc0NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkwVh33+fmGXUT++RlGlQqLD4zhZkfWYBlJJtC9lMortRIGPFjF9L5e1/CEwcO aPkfFCpJIx2w8xaK3VglWiTkodQ3a+5HrktvcqN2LVWqRsGlMNrnk3HTxnl1GsG4 9gWJZbJoDVm9S90ks11fawwQ0M3hZcJAHGAXI1PTZ/+INetthLdjg7j8gIJHnqLs lbx8Jm1lu8SB3UPHb36Me1kx6l3bEUZrBGr74hHNkR3HYRIr3BvtFng5YnBkIAAr tUak+zXqm9VktnWbMiOnnX7FJnVw5kgCto03OXKRywgzvmYYdsE7Qw8xP9N3e2uO ZfLZZvMjrgylXhyQL4xpRSNbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwKeta02L OBKwzGEHYzybIOrcwXswHwYDVR0jBBgwFoAUx/AoN9JFy4+rzUdBz6K0paL3Pq0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QkIxLzVBRDc2OUIwM0Qy NTExRjA4MEM0ODk1NUM0RjlBRTAyL3hfQW9OOUpGeTQtcnpVZEJ6NkswcGFMM1Bx MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveF9Bb045SkZ5NC1yelVkQno2SzBwYUwzUHEwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QkIxLzVBRDc2OUIwM0QyNTExRjA4MEM0ODk1NUM0RjlBRTAyL3hfQW9OOUpGeTQt cnpVZEJ6NkswcGFMM1BxMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGe4gGNDnGGgUd7ftLzCEoaNNKj725gSNhA4lhs57VQwlRdbKO/LwMw1 lCEmdIVfYqszfMfqFHt2vgR28n9qC8pzhJ3+krrty/dPYNYHb3yNyFnTJLp1SUBV BQU5eiM97C5d2itE3Zoodj9OUtRpkZ9m29wOKrpwdr9B2fL7aiey0Bmvgjko71kQ bwltGjw+9DDraMN1qtm5TzwWjUXmCYaqBqIJq5LV2Wtwd/YrU9Pc5w19giS39OKF 73dj74ciARs3yRZkWC2eglbEdvFMWIArJaB7nwAH4CNGIU+d8ElJ8ijiOF5d08Nu Cq9vObEBHgCob2J+edA7SKMklqfMtlk= -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:04 2025 by rpki-client