This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft File: 6NbUISgrkBkAAJd2GiVjIjyngV4.mft (raw, json) Hash identifier: m5WsfcBbSrSZy9iI9XwU/PGvIEZrj1OH3HuCyI0yP8A= Subject key identifier: 22:00:5E:1B:84:1A:C8:F8:35:CD:B8:FF:EE:09:4A:9B:E1:77:3A:F7 Authority key identifier: E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E Certificate issuer: /CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft Manifest number: E9 Signing time: Tue 23 Dec 2025 04:24:58 +0000 Manifest this update: Tue 23 Dec 2025 04:24:57 +0000 Manifest next update: Tue 30 Dec 2025 04:24:57 +0000 Files and hashes: 1: 6NbUISgrkBkAAJd2GiVjIjyngV4.crl (hash: i1qWgkYRhPDGkO0lNbfBTx5j7LdTUgS/1Ie/SgWGB6k=) 2: CCEAF60C911311EFA9C63854C4F9AE02.roa (hash: FpNZ3HLo1o4b1YUw3bp5mGEZMF3ekFVbByklPwI6twE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFCFF, serialNumber=E8D6D421282B9019000097761A2563223CA7815E Validity Not Before: Dec 23 04:24:57 2025 GMT Not After : Dec 30 04:24:57 2025 GMT Subject: CN=694a199a-92e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1b:55:1d:fe:7e:f6:0a:2c:4b:d7:ea:fc:75: 62:2e:e5:4d:8f:b1:0a:01:17:27:3e:c5:c0:1c:ed: 9d:6c:b7:19:97:62:50:6e:97:51:14:74:9e:61:61: 05:82:ca:ee:61:34:a0:98:01:dd:e3:88:6f:89:fc: 83:1a:70:4f:1e:b0:f0:b5:82:1f:10:e5:44:95:48: b2:a5:fd:bb:2a:b1:33:5d:f7:a5:4e:c6:4d:79:9f: aa:54:4d:fe:0f:24:c1:12:89:a4:9f:14:d1:79:1a: 5a:47:c7:70:e9:fc:c4:27:44:0b:2b:05:e0:63:bb: d3:b7:a7:b5:62:d1:dd:23:45:97:f3:7d:c2:a8:e1: b1:95:96:70:36:18:ba:85:91:cf:50:66:18:73:54: 3f:1f:e6:24:7d:7d:db:82:ea:79:24:aa:12:34:4d: 3f:f0:d9:1f:57:42:3e:41:8a:35:38:e2:be:28:af: 13:44:eb:5d:4e:98:5d:10:5d:44:98:38:4b:6e:11: fb:02:25:62:56:44:ea:71:3a:5f:2f:24:2e:c7:35: 78:ce:cc:f1:2d:8e:0c:44:8b:12:8c:11:92:f4:62: 50:71:a1:77:05:e6:99:a9:9c:42:c7:54:b0:84:c2: 03:16:7c:33:80:2f:4a:92:00:13:10:e5:1a:59:d7: 45:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:00:5E:1B:84:1A:C8:F8:35:CD:B8:FF:EE:09:4A:9B:E1:77:3A:F7 X509v3 Authority Key Identifier: keyid:E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:b3:7e:a3:06:4a:1a:03:13:71:0d:55:08:6b:d2:b1:d5:2f: 05:ea:b1:05:c0:24:50:47:8e:01:27:79:cb:08:94:2e:53:96: 6e:22:cc:14:46:9f:fb:b5:bd:d9:51:f7:74:a3:f5:8e:80:97: 97:d3:dc:a6:d7:3b:7d:fc:d4:74:27:77:6a:ca:b8:bb:38:14: e4:e3:6b:8d:3b:c6:36:7c:fe:55:0f:5f:e6:32:bb:7d:33:27: 3a:50:d5:f5:db:c0:fb:f3:a4:1a:c1:54:43:ea:7d:df:4e:da: 27:95:7a:79:c3:92:83:f7:38:e1:e4:58:2a:e9:03:09:f3:03: 33:c9:91:4d:76:6f:71:c0:96:9f:43:fe:e4:c8:f8:33:e9:16: a9:eb:4b:64:62:75:b2:99:40:03:89:31:6e:de:f6:a6:4d:d9: b5:3d:91:0d:e1:b7:e8:3b:68:85:df:93:92:b1:d5:fa:d9:81: fe:fb:26:58:3f:86:91:c3:71:dd:21:c8:f5:29:fd:44:8b:22: 27:56:35:c9:f1:72:30:ae:8c:1e:16:e1:64:5f:c7:26:59:80: 98:12:52:d6:32:ea:84:37:b1:2b:79:2a:21:8d:c3:c4:cc:17: fb:5f:81:34:aa:a0:2b:53:a1:c7:66:9a:1d:d6:ec:93:2b:8a: 91:0a:e3:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDRkYxMTAvBgNVBAUTKEU4RDZENDIxMjgyQjkwMTkwMDAwOTc3NjFBMjU2MzIy M0NBNzgxNUUwHhcNMjUxMjIzMDQyNDU3WhcNMjUxMjMwMDQyNDU3WjAYMRYwFAYD VQQDDA02OTRhMTk5YS05MmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlhtVHf5+9gosS9fq/HViLuVNj7EKARcnPsXAHO2dbLcZl2JQbpdRFHSeYWEF gsruYTSgmAHd44hvifyDGnBPHrDwtYIfEOVElUiypf27KrEzXfelTsZNeZ+qVE3+ DyTBEomknxTReRpaR8dw6fzEJ0QLKwXgY7vTt6e1YtHdI0WX833CqOGxlZZwNhi6 hZHPUGYYc1Q/H+YkfX3bgup5JKoSNE0/8NkfV0I+QYo1OOK+KK8TROtdTphdEF1E mDhLbhH7AiViVkTqcTpfLyQuxzV4zszxLY4MRIsSjBGS9GJQcaF3BeaZqZxCx1Sw hMIDFnwzgC9KkgATEOUaWddFOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIAXhuE Gsj4Nc24/+4JSpvhdzr3MB8GA1UdIwQYMBaAFOjW1CEoK5AZAACXdholYyI8p4Fe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkNGRi8wRkE4NUY4ODgy MUYxMUVGQTFEQjRDNzVDNEY5QUUwMi82TmJVSVNncmtCa0FBSmQyR2lWaklqeW5n VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZOYlVJU2dya0JrQUFKZDJHaVZqSWp5bmdWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkNGRi8wRkE4NUY4ODgyMUYxMUVGQTFEQjRDNzVDNEY5QUUwMi82TmJVSVNncmtC a0FBSmQyR2lWaklqeW5nVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXs36jBkoaAxNxDVUIa9Kx1S8F6rEFwCRQR44BJ3nLCJQuU5ZuIswU Rp/7tb3ZUfd0o/WOgJeX09ym1zt9/NR0J3dqyri7OBTk42uNO8Y2fP5VD1/mMrt9 Myc6UNX128D786QawVRD6n3fTtonlXp5w5KD9zjh5Fgq6QMJ8wMzyZFNdm9xwJaf Q/7kyPgz6Rap60tkYnWymUADiTFu3vamTdm1PZEN4bfoO2iF35OSsdX62YH++yZY P4aRw3HdIcj1Kf1EiyInVjXJ8XIwroweFuFkX8cmWYCYElLWMuqEN7EreSohjcPE zBf7X4E0qqArU6HHZpod1uyTK4qRCuNn -----END CERTIFICATE-----Generated at Wed Dec 24 20:31:57 2025 by rpki-client