This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json) Hash identifier: +fA6k/qEEmx7LggLrut/eAEueUUqWS5+7gKsjwuARMY= Subject key identifier: 05:0E:58:14:E9:59:06:8D:49:14:B5:82:7F:C7:5B:F9:7C:E4:A5:EB Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 0927 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft Manifest number: 08BC Signing time: Sat 20 Dec 2025 20:05:15 +0000 Manifest this update: Sat 20 Dec 2025 20:05:14 +0000 Manifest next update: Sat 27 Dec 2025 20:05:14 +0000 Files and hashes: 1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: Nz2n1cOVNOttFZ1gCL90ycICvxvLECU7FmbxR8lAF+Y=) 2: 4944017C8FAF11F0B59F0948C4F9AE02.roa (hash: BwcQamXNLiosPDRZ6f2FtmfW9jpBhqektxQqopKnPY4=) 3: 8D5442E28A4011F093E0F94DC4F9AE02.roa (hash: gKM4RcuYJ3WOjsFaGVW261ymQPFBOzXDnV5oh7hrxpU=) 4: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: huVUXhJ3Ojs1r05u1jG7Kov4uI++w1LAbAYi/YZa49g=) 5: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: PfplpurYpM5Nlhs4wMvQOWeVvjM0XGHzdK7n61JNfpc=) 6: A709BC948FAE11F09FAE9C69C4F9AE02.roa (hash: h5BGjGSDw6jhnZlF9NOXRKNYmdB5F7XUQytmx7kt8pU=) 7: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: fQqKRj97YwSX01j4RLkIYLyoFuesKb4QSmD9wM54Hnc=) 8: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: 8ZNPpyzaCSOR7XArDiXTgpwOZdqi5o9nlzrrurZ8f2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2343 (0x927) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Validity Not Before: Dec 20 20:05:14 2025 GMT Not After : Dec 27 20:05:14 2025 GMT Subject: CN=6947017b-5825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:da:61:2d:c7:e2:ab:17:9d:6b:35:0c:c9:04: cd:db:0c:c6:91:30:37:07:5e:f6:4d:e2:f4:d9:56: 1e:67:70:2a:e5:9f:0f:ce:61:aa:5e:f5:ec:84:eb: 5e:09:77:2a:50:11:44:08:8d:8b:55:5f:e7:46:13: 35:36:9b:f2:67:a2:72:7a:57:43:9e:52:08:0e:8a: 8a:c8:96:3a:52:61:e5:fc:19:08:ec:26:b0:e3:2a: 1b:cf:bc:b3:5b:9b:63:00:16:ae:9a:67:cb:05:22: 05:14:11:97:74:9c:72:d1:9d:13:73:b4:92:b5:bc: b0:47:c2:bc:67:34:bd:4e:01:e8:95:9d:20:71:95: c2:fe:2b:be:3e:81:d8:c9:f8:3e:76:f5:47:7d:2c: d2:fb:f4:69:8a:de:91:5f:3b:f5:1b:c8:de:45:db: de:77:ed:d5:06:ab:5d:4c:6e:25:8c:96:dd:26:f1: 75:ad:2d:b5:de:6d:58:61:4d:ed:98:73:4b:47:23: c1:37:9e:f0:6c:f6:55:6b:b7:9f:87:6d:c4:85:93: aa:db:4a:3d:b2:43:76:6d:ed:45:07:e2:cf:dc:12: 94:76:2e:1f:ac:d6:4f:73:f3:67:e5:c0:dc:f8:9d: 20:47:2d:f3:bf:c1:33:fc:82:00:f8:55:ad:8e:82: 15:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0E:58:14:E9:59:06:8D:49:14:B5:82:7F:C7:5B:F9:7C:E4:A5:EB X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:ef:3e:30:1e:77:a1:48:c1:4f:6d:99:6b:80:24:e0:a7:96: 07:e6:01:1e:c6:e8:b3:00:f7:40:a7:c6:1f:18:05:ea:9f:f2: b4:7e:99:9b:ed:86:10:e9:4f:b8:0a:1d:6c:0a:00:a2:7f:49: 52:6c:42:d7:65:84:d0:ea:42:6c:2f:43:6c:97:8a:5f:a6:63: db:80:b4:12:06:3b:18:66:db:c8:a4:c0:da:2d:7d:50:5d:a9: 58:bb:63:8c:af:92:28:d7:e0:c0:bf:d3:fc:bb:fa:f8:25:e5: 4e:96:1b:11:b3:f6:cd:d5:90:af:6b:4c:85:70:f7:a7:5c:56: dc:47:7c:1d:b8:89:ab:68:f0:c6:8f:34:f7:12:75:66:82:c0: 3c:bd:f0:3e:0d:98:82:69:66:26:55:0a:08:11:bc:17:44:33: 4b:2d:02:bc:db:44:d5:6b:5f:38:f7:08:05:dd:79:e5:53:d9: 5f:8c:a5:7e:f6:be:7f:ce:60:3f:60:d2:0c:c3:3e:e4:fb:36: 2d:d2:de:3d:fc:f6:2f:d3:c0:25:2e:00:6d:0a:66:bb:2b:d4: 03:cc:bc:cc:57:c4:9c:4a:ad:45:69:e4:89:e3:78:33:d7:cf: 09:fd:d4:5c:af:85:97:4b:79:48:7e:df:a7:9b:66:47:cf:a6: 53:3e:4a:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjUxMjIwMjAwNTE0WhcNMjUxMjI3MjAwNTE0WjAYMRYwFAYD VQQDDA02OTQ3MDE3Yi01ODI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA89phLcfiqxedazUMyQTN2wzGkTA3B172TeL02VYeZ3Aq5Z8PzmGqXvXshOte CXcqUBFECI2LVV/nRhM1NpvyZ6JyeldDnlIIDoqKyJY6UmHl/BkI7Caw4yobz7yz W5tjABaummfLBSIFFBGXdJxy0Z0Tc7SStbywR8K8ZzS9TgHolZ0gcZXC/iu+PoHY yfg+dvVHfSzS+/Rpit6RXzv1G8jeRdved+3VBqtdTG4ljJbdJvF1rS213m1YYU3t mHNLRyPBN57wbPZVa7efh23EhZOq20o9skN2be1FB+LP3BKUdi4frNZPc/Nn5cDc +J0gRy3zv8Ez/IIA+FWtjoIVjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUOWBTp WQaNSRS1gn/HW/l85KXrMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GRjUxRTU5RUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pH WGdpQzFKNmZMNHo5Sy1nbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ7z4wHnehSMFPbZlrgCTgp5YH5gEexuizAPdAp8YfGAXqn/K0fpmb 7YYQ6U+4Ch1sCgCif0lSbELXZYTQ6kJsL0Nsl4pfpmPbgLQSBjsYZtvIpMDaLX1Q XalYu2OMr5Io1+DAv9P8u/r4JeVOlhsRs/bN1ZCva0yFcPenXFbcR3wduImraPDG jzT3EnVmgsA8vfA+DZiCaWYmVQoIEbwXRDNLLQK820TVa1849wgF3XnlU9lfjKV+ 9r5/zmA/YNIMwz7k+zYt0t49/PYv08AlLgBtCma7K9QDzLzMV8ScSq1FaeSJ43gz 188J/dRcr4WXS3lIft+nm2ZHz6ZTPkqv -----END CERTIFICATE-----Generated at Sun Dec 21 12:58:10 2025 by rpki-client