This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft File: 6beh3yCMdbnrMDz4g8oSjqBPxQo.mft (raw, json) Hash identifier: y5mRPKu/6TFjZdO3GAkDve27XZMh93dVeoBeSwci6p4= Subject key identifier: 29:92:98:2A:B0:92:72:1D:56:C3:84:F7:57:16:2F:6E:45:A6:62:47 Authority key identifier: E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A Certificate issuer: /CN=A91D8DCB/serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Certificate serial: 160E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft Manifest number: 1605 Signing time: Sat 20 Dec 2025 16:30:54 +0000 Manifest this update: Sat 20 Dec 2025 16:30:53 +0000 Manifest next update: Sat 27 Dec 2025 16:30:53 +0000 Files and hashes: 1: 6beh3yCMdbnrMDz4g8oSjqBPxQo.crl (hash: xwmD+IEv1EEAN+z44NovlpjTxp1z5YvZ17tn1GcxuiI=) 2: F1D384D031D311E88735EA0AC4F9AE02.roa (hash: pa9Id+uvbnd/ZSHl6ghGn+/xg+nPKZEuerp9xTujE0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5646 (0x160e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DCB, serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Validity Not Before: Dec 20 16:30:53 2025 GMT Not After : Dec 27 16:30:53 2025 GMT Subject: CN=6946cf3d-39dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:18:6c:76:98:62:ce:fe:83:5c:ce:75:6d:6b: 77:85:57:7f:a2:dd:14:a3:66:f7:7d:4f:88:97:6f: 8b:c2:98:8e:96:5e:66:3a:d0:fe:48:00:fc:2c:2e: 55:fb:ff:11:40:e0:d2:33:93:2b:6f:ea:5e:58:77: 7b:1d:e2:f0:1b:33:3f:48:65:bf:73:62:30:74:89: 47:ea:77:b7:68:4b:c2:ad:30:8d:40:ed:6b:91:17: c9:f3:27:47:1f:d4:eb:1d:99:6e:32:0d:55:2d:d6: a3:61:89:c2:0f:c7:b5:8a:c3:cd:cf:de:2e:6c:32: 85:04:c1:32:51:cf:fd:3b:7e:1d:01:4b:9c:4f:78: b5:d0:cd:39:d2:b2:56:92:64:7d:ee:45:4a:4b:21: 5f:c1:5f:51:dc:a2:7e:64:27:92:63:2d:d8:0d:1b: 67:05:c4:cf:44:86:c6:a9:00:11:1a:1c:0e:c7:f3: 6f:1e:5e:ab:64:9d:58:6d:1e:f2:63:13:82:ca:46: 29:68:f4:b2:d2:3e:ff:eb:42:79:d8:8d:bf:b6:c3: 87:aa:c9:43:8c:0e:cd:4b:86:e6:d1:d3:f8:3b:f2: 41:9f:fe:b9:37:2f:98:86:58:91:ab:d4:02:3b:55: 4c:c7:43:5a:e7:25:c3:35:13:79:69:6c:d2:ff:cf: 41:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:92:98:2A:B0:92:72:1D:56:C3:84:F7:57:16:2F:6E:45:A6:62:47 X509v3 Authority Key Identifier: keyid:E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:75:77:50:18:18:83:18:c0:91:a1:71:12:79:8e:fe:34:21: 80:66:4c:57:98:f2:db:36:43:74:41:bc:2d:e7:69:f8:a7:74: b1:e8:e8:db:f5:5a:05:0d:7a:89:fb:60:56:a7:94:c0:ef:71: 85:88:0c:26:84:ad:cb:4d:0a:ad:bb:66:25:ca:ae:6d:b9:2b: 2b:ca:bb:f4:7b:38:cb:c4:67:d2:b6:73:37:1c:d7:dd:0b:94: 31:2d:bb:58:b7:00:3b:86:e7:a1:c3:e9:8e:34:68:19:6f:e5: 64:d8:6d:de:df:64:26:c8:7e:54:5f:81:2f:03:52:8b:1e:0d: 4b:2e:cb:9f:49:87:9a:e4:92:47:75:56:6e:9d:ad:69:a6:1e: e9:f3:c5:cb:1a:7b:b8:f0:a7:14:5b:44:58:c0:23:7f:5f:49: 77:8d:a0:c7:c3:56:58:98:85:d7:e2:37:44:3a:16:e1:c9:e4: 01:ea:bc:4c:52:b5:81:3d:c6:db:a8:e0:82:f0:5e:2b:bb:e5: c7:f2:ae:3d:0a:fa:d6:ea:7e:a1:f0:9c:f9:45:31:b6:f9:0e: 80:c9:06:d6:02:b7:09:bd:97:f3:bd:bb:f5:9d:63:4d:34:26: 8d:ec:ac:d0:3d:63:43:25:7c:37:b1:31:ff:84:39:68:a9:74: 80:20:1d:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhEQ0IxMTAvBgNVBAUTKEU5QjdBMURGMjA4Qzc1QjlFQjMwM0NGODgzQ0ExMjhF QTA0RkM1MEEwHhcNMjUxMjIwMTYzMDUzWhcNMjUxMjI3MTYzMDUzWjAYMRYwFAYD VQQDDA02OTQ2Y2YzZC0zOWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxhsdphizv6DXM51bWt3hVd/ot0Uo2b3fU+Il2+LwpiOll5mOtD+SAD8LC5V +/8RQODSM5Mrb+peWHd7HeLwGzM/SGW/c2IwdIlH6ne3aEvCrTCNQO1rkRfJ8ydH H9TrHZluMg1VLdajYYnCD8e1isPNz94ubDKFBMEyUc/9O34dAUucT3i10M050rJW kmR97kVKSyFfwV9R3KJ+ZCeSYy3YDRtnBcTPRIbGqQARGhwOx/NvHl6rZJ1YbR7y YxOCykYpaPSy0j7/60J52I2/tsOHqslDjA7NS4bm0dP4O/JBn/65Ny+YhliRq9QC O1VMx0Na5yXDNRN5aWzS/89BbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmSmCqw knIdVsOE91cWL25FpmJHMB8GA1UdIwQYMBaAFOm3od8gjHW56zA8+IPKEo6gT8UK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOERDQi83NDNGNzBDODJG MkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRibnJNRHo0ZzhvU2pxQlB4 UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZiZWgzeUNNZGJuck1EejRnOG9TanFCUHhRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OERDQi83NDNGNzBDODJGMkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRi bnJNRHo0ZzhvU2pxQlB4UW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqdXdQGBiDGMCRoXESeY7+NCGAZkxXmPLbNkN0Qbwt52n4p3Sx6Ojb 9VoFDXqJ+2BWp5TA73GFiAwmhK3LTQqtu2Ylyq5tuSsryrv0ezjLxGfStnM3HNfd C5QxLbtYtwA7huehw+mONGgZb+Vk2G3e32QmyH5UX4EvA1KLHg1LLsufSYea5JJH dVZuna1pph7p88XLGnu48KcUW0RYwCN/X0l3jaDHw1ZYmIXX4jdEOhbhyeQB6rxM UrWBPcbbqOCC8F4ru+XH8q49CvrW6n6h8Jz5RTG2+Q6AyQbWArcJvZfzvbv1nWNN NCaN7KzQPWNDJXw3sTH/hDloqXSAIB03 -----END CERTIFICATE-----Generated at Sat Dec 20 17:36:00 2025 by rpki-client