This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft File: 6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft (raw, json) Hash identifier: JHXQirL6ASiW2biUDdREkKht6TcROcSNzXpLNU2qlvk= Subject key identifier: 95:7C:30:8E:78:53:82:71:FD:8C:95:0E:A7:50:85:F8:85:C0:5F:10 Authority key identifier: E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE Certificate issuer: /CN=A91EBDB8/serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft Manifest number: 76 Signing time: Thu 25 Dec 2025 05:46:17 +0000 Manifest this update: Thu 25 Dec 2025 05:46:17 +0000 Manifest next update: Thu 01 Jan 2026 05:46:17 +0000 Files and hashes: 1: 6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl (hash: 7359AMEhHjKqMiz7GTDbup4ytXBIgLdegzIInEWzAIw=) 2: B0B587222FC911F0938FE136C4F9AE02.roa (hash: U0nalOiOtuUPs+ZNE9vz6uJAGl5jCeilRyMtxAjY7ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 05:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBDB8, serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE Validity Not Before: Dec 25 05:46:17 2025 GMT Not After : Jan 1 05:46:17 2026 GMT Subject: CN=694ccfa9-9358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:70:f0:97:be:2c:a8:9f:5a:01:21:f6:b7:b0: 6c:43:31:b4:5b:66:4f:f2:c1:44:0f:c2:69:96:c5: c0:db:92:d3:21:36:06:7c:cf:01:98:2a:c5:f2:f2: d6:f7:c1:c8:94:4d:e6:13:12:9e:07:46:0c:fe:c3: b6:e0:95:83:91:96:7f:c0:78:a5:8e:47:f8:a7:c3: 63:30:5f:ec:81:ca:ea:97:38:3d:62:4b:e6:14:3d: 44:b0:83:b9:83:aa:85:ae:bf:25:02:3f:55:25:94: 9e:d7:6f:59:75:2d:81:3d:8b:e8:a4:09:ab:ca:9c: 12:ff:0e:4c:6d:e4:d8:64:d5:cb:20:ca:c2:01:52: 0a:1f:f9:72:b8:50:52:4f:58:4b:93:ec:eb:76:0b: be:4a:81:4e:c7:de:0f:af:30:d3:be:e7:4a:f9:9e: 63:d1:3a:2e:79:0e:37:31:b2:88:1d:14:04:29:10: 5d:a2:59:8b:05:88:dc:89:2f:1b:4e:38:2a:55:b7: 4d:93:08:63:94:b7:e9:6e:4e:57:8f:35:f7:90:ad: 9a:6b:aa:70:1e:3a:32:22:1e:99:e0:e8:d5:b3:d7: 7d:b0:31:01:e6:9d:94:4a:53:0b:a6:c9:8d:3e:63: 54:60:4e:90:95:41:62:b2:e8:00:75:e8:2d:07:df: 81:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7C:30:8E:78:53:82:71:FD:8C:95:0E:A7:50:85:F8:85:C0:5F:10 X509v3 Authority Key Identifier: keyid:E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:57:d6:4d:1d:c6:1d:03:fd:19:5a:e4:ee:ff:49:c6:45:9f: f9:43:42:dc:2e:82:20:10:bd:7d:96:da:c7:b7:ac:c3:b4:e7: 4f:0f:83:30:29:05:04:8c:f9:d7:5e:02:0d:51:45:24:da:9c: 57:7e:4a:2e:db:1e:1c:4c:87:f5:e2:27:8f:c4:1b:ad:63:93: 48:ea:1a:ec:36:a8:df:c0:26:a2:f1:54:14:c7:bf:e0:8f:43: 41:75:a0:b3:42:55:63:be:02:bf:85:77:f2:69:ec:e6:59:72: 7d:10:29:81:65:cf:a5:b8:1c:3f:5a:e1:bd:5d:76:f1:2e:a7: 8c:db:40:7e:fe:83:e1:3a:f0:dd:62:ad:cb:b6:1c:68:3d:b5: d7:0b:84:70:06:45:f1:b9:19:13:41:6d:c1:e5:d1:8a:7e:61: 0f:38:4c:b0:29:19:1d:1a:20:13:3c:11:aa:8f:6c:e7:b4:6c: 9b:5a:f4:ac:7a:08:ee:a6:1d:74:3f:ea:05:32:d4:28:96:65: 51:ca:06:7d:f0:7e:d6:fb:c5:34:37:18:0f:8b:05:86:cd:ba: 4c:27:b6:48:64:37:17:9a:6e:c1:48:bb:0a:08:31:90:dd:41: f9:75:a3:98:70:71:60:fc:49:ed:74:39:8d:fd:f1:55:d3:b1: 4f:7a:40:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkRCODExMC8GA1UEBRMoRTg4QjNCMjNFMDk2NzVCNDM3QTgzMjg5NjNDNUNEM0NF M0U5NUZFRTAeFw0yNTEyMjUwNTQ2MTdaFw0yNjAxMDEwNTQ2MTdaMBgxFjAUBgNV BAMMDTY5NGNjZmE5LTkzNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDacPCXviyon1oBIfa3sGxDMbRbZk/ywUQPwmmWxcDbktMhNgZ8zwGYKsXy8tb3 wciUTeYTEp4HRgz+w7bglYORln/AeKWOR/inw2MwX+yByuqXOD1iS+YUPUSwg7mD qoWuvyUCP1UllJ7Xb1l1LYE9i+ikCavKnBL/Dkxt5Nhk1csgysIBUgof+XK4UFJP WEuT7Ot2C75KgU7H3g+vMNO+50r5nmPROi55DjcxsogdFAQpEF2iWYsFiNyJLxtO OCpVt02TCGOUt+luTlePNfeQrZprqnAeOjIiHpng6NWz132wMQHmnZRKUwumyY0+ Y1RgTpCVQWKy6AB16C0H34HhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlXwwjnhT gnH9jJUOp1CF+IXAXxAwHwYDVR0jBBgwFoAU6Is7I+CWdbQ3qDKJY8XNPOPpX+4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCREI4Lzk4MjMwQjJDMkVG QjExRjA5MEUzNjM4NUM0RjlBRTAyLzZJczdJLUNXZGJRM3FES0pZOFhOUE9QcFgt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNklzN0ktQ1dkYlEzcURLSlk4WE5QT1BwWC00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC REI4Lzk4MjMwQjJDMkVGQjExRjA5MEUzNjM4NUM0RjlBRTAyLzZJczdJLUNXZGJR M3FES0pZOFhOUE9QcFgtNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJtX1k0dxh0D/Rla5O7/ScZFn/lDQtwugiAQvX2W2se3rMO0508PgzAp BQSM+ddeAg1RRSTanFd+Si7bHhxMh/XiJ4/EG61jk0jqGuw2qN/AJqLxVBTHv+CP Q0F1oLNCVWO+Ar+Fd/Jp7OZZcn0QKYFlz6W4HD9a4b1ddvEup4zbQH7+g+E68N1i rcu2HGg9tdcLhHAGRfG5GRNBbcHl0Yp+YQ84TLApGR0aIBM8EaqPbOe0bJta9Kx6 CO6mHXQ/6gUy1CiWZVHKBn3wftb7xTQ3GA+LBYbNukwntkhkNxeabsFIuwoIMZDd Qfl1o5hwcWD8Se10OY398VXTsU96QAE= -----END CERTIFICATE-----Generated at Thu Dec 25 07:06:19 2025 by rpki-client