This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft File: F6I2W2QK2rIDQznh5f80TkeLWJg.mft (raw, json) Hash identifier: a8dBosR61AUCwr+FUddps7qPD53/NAiDXlcTvpL18bg= Subject key identifier: 5A:EA:2C:8A:89:77:2D:A6:FD:73:2F:D5:EF:AC:CF:B1:0E:BD:58:B0 Authority key identifier: 17:A2:36:5B:64:0A:DA:B2:03:43:39:E1:E5:FF:34:4E:47:8B:58:98 Certificate issuer: /CN=A91E1BB0/serialNumber=17A2365B640ADAB2034339E1E5FF344E478B5898 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft Manifest number: 11 Signing time: Fri 19 Dec 2025 06:50:20 +0000 Manifest this update: Fri 19 Dec 2025 06:50:19 +0000 Manifest next update: Fri 26 Dec 2025 06:50:19 +0000 Files and hashes: 1: F6I2W2QK2rIDQznh5f80TkeLWJg.crl (hash: tZTDhV1q5IQGpH+9aH8/FqjeuyPkIGmyJUAQA5wNnSI=) 2: CAA5A90CC47811F0833DFF5DC4F9AE02.roa (hash: qXETRU+GynJDK8p52SWay/hILThEiMclY+eMG2SJhMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.crl rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1BB0, serialNumber=17A2365B640ADAB2034339E1E5FF344E478B5898 Validity Not Before: Dec 19 06:50:19 2025 GMT Not After : Dec 26 06:50:19 2025 GMT Subject: CN=6944f5ac-4ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:98:88:8d:74:d7:f0:4c:91:b7:0f:60:7e:49: dc:72:e8:2e:52:a3:26:c6:68:66:af:2a:5a:cd:58: 83:f6:69:c1:72:12:b1:5d:fe:46:e2:00:a4:81:e4: ac:5e:b4:58:f3:6a:89:87:ea:ef:2b:c1:21:e7:6f: d5:49:51:b7:c5:52:14:ea:09:2b:09:32:ee:3b:c0: 7f:f9:cd:0f:20:3f:9c:f9:27:91:36:84:eb:2e:bf: 4c:a3:ab:3f:ab:57:f8:e3:13:f8:b4:b1:d1:01:39: 01:74:cf:fe:6d:8d:b5:06:66:49:70:8d:dc:e6:84: 57:19:58:51:1c:c4:62:9b:3e:6d:1f:44:fb:5d:88: da:ea:51:57:90:43:ba:e3:a7:0f:a1:fb:95:f6:35: ef:c4:da:c1:37:80:b9:69:3b:59:c6:c4:59:35:5c: 22:4b:e3:56:b4:43:2b:30:84:75:58:f1:72:9c:d8: 20:f0:5d:1f:db:4d:16:07:0b:36:09:d1:81:9c:9e: eb:a4:14:90:dc:a5:bc:ca:47:fa:6e:fd:eb:6f:0a: 79:bf:52:53:88:9b:04:9b:e2:3f:4a:0e:a0:6e:70: 22:b9:76:82:28:40:92:59:d5:93:7b:e9:51:c3:ca: 5e:d0:b3:0d:49:81:d0:1d:5a:70:8e:cb:89:85:47: d6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EA:2C:8A:89:77:2D:A6:FD:73:2F:D5:EF:AC:CF:B1:0E:BD:58:B0 X509v3 Authority Key Identifier: keyid:17:A2:36:5B:64:0A:DA:B2:03:43:39:E1:E5:FF:34:4E:47:8B:58:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:46:45:20:67:61:7f:51:67:75:4d:fd:0f:ed:9d:ef:b6:36: f3:df:0b:52:78:02:9b:ec:de:c6:b2:0f:26:77:0d:8d:61:f5: 5e:0a:b2:68:f2:da:41:9e:5d:31:f5:26:a7:d8:fb:37:90:49: 81:a3:ad:bb:94:d3:15:21:28:ed:47:a2:bf:4d:6e:b4:37:0a: 99:03:32:63:e5:ef:8a:dc:9a:df:b0:a1:ca:58:49:09:e1:fa: e8:89:75:d6:e3:19:74:d2:9c:62:21:df:86:50:ce:28:10:f0: d2:98:24:0a:76:ec:23:e6:a8:38:60:3e:85:e0:23:39:33:fb: 4c:51:36:de:3c:f4:ed:94:26:97:c5:d7:a3:d3:b7:71:96:7b: 8a:de:a4:d7:64:f4:59:28:9c:d9:fa:0f:8a:1d:4a:98:c5:fe: 87:27:3d:a9:df:de:48:7f:f6:a0:ef:69:e9:93:fe:ef:13:5b: ed:06:8d:85:96:65:11:00:36:be:60:3e:7a:b5:d9:e0:a0:2e: 9c:88:06:a2:d3:51:14:5b:dd:62:32:65:3e:6c:b4:f3:58:18: d6:f6:b1:76:1b:b7:84:f9:db:52:f6:cf:8d:08:9d:59:e1:10: 5b:6b:a3:d1:ef:7e:dd:b2:2c:e7:03:ce:df:dd:b0:9b:80:0e: df:14:02:f8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUJCMDExMC8GA1UEBRMoMTdBMjM2NUI2NDBBREFCMjAzNDMzOUUxRTVGRjM0NEU0 NzhCNTg5ODAeFw0yNTEyMTkwNjUwMTlaFw0yNTEyMjYwNjUwMTlaMBgxFjAUBgNV BAMMDTY5NDRmNWFjLTRlZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtmIiNdNfwTJG3D2B+Sdxy6C5SoybGaGavKlrNWIP2acFyErFd/kbiAKSB5Kxe tFjzaomH6u8rwSHnb9VJUbfFUhTqCSsJMu47wH/5zQ8gP5z5J5E2hOsuv0yjqz+r V/jjE/i0sdEBOQF0z/5tjbUGZklwjdzmhFcZWFEcxGKbPm0fRPtdiNrqUVeQQ7rj pw+h+5X2Ne/E2sE3gLlpO1nGxFk1XCJL41a0QyswhHVY8XKc2CDwXR/bTRYHCzYJ 0YGcnuukFJDcpbzKR/pu/etvCnm/UlOImwSb4j9KDqBucCK5doIoQJJZ1ZN76VHD yl7Qsw1JgdAdWnCOy4mFR9YHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWuosiol3 Lab9cy/V76zPsQ69WLAwHwYDVR0jBBgwFoAUF6I2W2QK2rIDQznh5f80TkeLWJgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxQkIwLzUzRURCNEQwQzQ3 ODExRjA4NTM4NTAyNUM0RjlBRTAyL0Y2STJXMlFLMnJJRFF6bmg1ZjgwVGtlTFdK Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjZJMlcyUUsycklEUXpuaDVmODBUa2VMV0pnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx QkIwLzUzRURCNEQwQzQ3ODExRjA4NTM4NTAyNUM0RjlBRTAyL0Y2STJXMlFLMnJJ RFF6bmg1ZjgwVGtlTFdKZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABhGRSBnYX9RZ3VN/Q/tne+2NvPfC1J4Apvs3sayDyZ3DY1h9V4Ksmjy 2kGeXTH1JqfY+zeQSYGjrbuU0xUhKO1Hor9NbrQ3CpkDMmPl74rcmt+wocpYSQnh +uiJddbjGXTSnGIh34ZQzigQ8NKYJAp27CPmqDhgPoXgIzkz+0xRNt489O2UJpfF 16PTt3GWe4repNdk9FkonNn6D4odSpjF/ocnPanf3kh/9qDvaemT/u8TW+0GjYWW ZREANr5gPnq12eCgLpyIBqLTURRb3WIyZT5stPNYGNb2sXYbt4T521L2z40InVnh EFtro9Hvft2yLOcDzt/dsJuADt8UAvg= -----END CERTIFICATE-----Generated at Sat Dec 20 00:57:00 2025 by rpki-client