This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft File: -6D4tMTQWqlqqvV6OUQDcbyNBDc.mft (raw, json) Hash identifier: +ArqmxTrkkcizPAM9l32KY0nPp9kvsywYrV5ZYScSus= Subject key identifier: B3:53:4E:C7:12:7A:5F:EA:1D:69:D3:15:0E:E6:EA:5E:37:9E:D0:11 Authority key identifier: FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37 Certificate issuer: /CN=A91F9ECA/serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437 Certificate serial: 05A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft Manifest number: 05A2 Signing time: Wed 31 Dec 2025 22:38:50 +0000 Manifest this update: Wed 31 Dec 2025 22:38:50 +0000 Manifest next update: Wed 07 Jan 2026 22:38:50 +0000 Files and hashes: 1: -6D4tMTQWqlqqvV6OUQDcbyNBDc.crl (hash: 1l7eHiP7pCJBpbqVv0B0fNwuwyldH9jEWvsp+Wohp9E=) 2: 9F2BA98AF90611EBB8E0C27FC4F9AE02.roa (hash: H5HzvqvaFcgyJmUGVWINJTj96jgcqceA7VesKwIUnvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 22:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1447 (0x5a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9ECA, serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437 Validity Not Before: Dec 31 22:38:50 2025 GMT Not After : Jan 7 22:38:50 2026 GMT Subject: CN=6955a5fa-aacf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9b:37:e3:e9:8c:f9:36:2b:7f:f9:8b:af:05: 8e:5b:17:6f:76:21:83:ee:be:0c:d3:c0:c3:d5:d5: c4:58:e7:50:f9:d6:b4:3d:d0:47:5b:fd:72:e5:d4: f0:05:36:b7:56:ce:bd:ec:aa:57:33:b2:20:d6:7e: fe:fb:82:62:ef:53:ea:72:73:c7:a2:8f:b1:3d:6a: 40:db:09:ee:c1:74:d5:f3:41:5e:ca:6f:1d:f1:51: 2c:cc:55:0c:40:dd:25:97:a9:32:f8:5e:5b:23:a2: da:5d:1b:a9:29:f2:6e:c0:62:89:82:a8:96:8e:b8: 32:59:10:88:f7:3b:47:53:c2:63:8d:c3:da:a8:ce: df:7d:c3:2c:b0:0d:c3:5d:84:ce:e7:0f:bc:6c:32: d8:6c:97:12:69:74:1f:39:0a:23:97:b6:44:5d:67: 75:94:97:4a:34:b5:92:92:f3:67:c4:0d:f5:1a:f7: 26:55:15:7c:bd:8d:4c:e2:94:4c:22:f5:27:a5:21: 31:0a:6c:d2:ac:24:c6:e8:3e:c9:a1:e6:19:19:e6: 99:e8:49:77:6a:de:36:88:23:52:31:6b:dc:a7:af: 9f:6a:bb:9b:80:83:0d:c5:3a:65:c3:82:61:ac:1e: 1f:d4:40:c0:b8:cb:cd:93:44:87:9a:80:81:fd:b2: 55:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:53:4E:C7:12:7A:5F:EA:1D:69:D3:15:0E:E6:EA:5E:37:9E:D0:11 X509v3 Authority Key Identifier: keyid:FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:b5:e4:a1:78:64:cd:51:5e:5c:8c:cc:bb:da:0a:ef:44:16: a7:ee:6d:43:cf:56:69:d2:83:c3:28:87:6a:66:bb:0f:62:6c: ce:2c:62:80:40:88:3e:91:99:8d:b8:0f:9a:49:b5:a0:bd:66: ef:0b:aa:6c:5b:98:14:d2:81:e1:60:40:b7:8a:1a:44:8c:a9: 64:32:10:9a:90:89:da:18:17:58:ca:16:09:6e:fd:29:78:ed: 90:35:9d:8e:cb:ae:bc:27:00:4e:b4:dc:56:18:db:57:1b:eb: 1c:58:f8:da:3f:a4:c8:28:40:6e:e2:8e:c3:c9:02:64:39:7c: cc:81:99:b9:a7:14:ff:98:25:30:09:78:9d:87:06:6a:c5:23: c0:0e:65:7e:b0:cd:2c:69:4d:de:b5:ed:d7:94:b6:d9:c8:7e: 7f:30:fd:0b:d7:66:b9:33:45:5a:d5:81:1f:40:3b:26:7c:78: 06:6a:3c:a5:79:74:af:d9:58:a8:99:b8:c7:52:f3:7b:2e:4a: d3:6d:42:7b:19:56:ed:cd:fe:81:73:10:6c:c0:b7:c9:b0:81: 2e:66:63:68:52:af:62:44:96:9b:2f:b5:54:67:8b:19:b1:4a: 54:d5:5a:5e:b5:a0:7c:dd:4a:d3:6e:ee:12:35:95:9e:09:bb: d4:f0:6c:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFQ0ExMTAvBgNVBAUTKEZCQTBGOEI0QzREMDVBQTk2QUFBRjU3QTM5NDQwMzcx QkM4RDA0MzcwHhcNMjUxMjMxMjIzODUwWhcNMjYwMTA3MjIzODUwWjAYMRYwFAYD VQQDDA02OTU1YTVmYS1hYWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZs34+mM+TYrf/mLrwWOWxdvdiGD7r4M08DD1dXEWOdQ+da0PdBHW/1y5dTw BTa3Vs697KpXM7Ig1n7++4Ji71PqcnPHoo+xPWpA2wnuwXTV80Feym8d8VEszFUM QN0ll6ky+F5bI6LaXRupKfJuwGKJgqiWjrgyWRCI9ztHU8JjjcPaqM7ffcMssA3D XYTO5w+8bDLYbJcSaXQfOQojl7ZEXWd1lJdKNLWSkvNnxA31GvcmVRV8vY1M4pRM IvUnpSExCmzSrCTG6D7JoeYZGeaZ6El3at42iCNSMWvcp6+farubgIMNxTplw4Jh rB4f1EDAuMvNk0SHmoCB/bJVuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNTTscS el/qHWnTFQ7m6l43ntARMB8GA1UdIwQYMBaAFPug+LTE0Fqpaqr1ejlEA3G8jQQ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUVDQS9FMUVDRTBBMkY5 MDMxMUVCQjA3QTAzN0FDNEY5QUUwMi8tNkQ0dE1UUVdxbHFxdlY2T1VRRGNieU5C RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02RDR0TVRRV3FscXF2VjZPVVFEY2J5TkJEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUVDQS9FMUVDRTBBMkY5MDMxMUVCQjA3QTAzN0FDNEY5QUUwMi8tNkQ0dE1UUVdx bHFxdlY2T1VRRGNieU5CRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1teSheGTNUV5cjMy72grvRBan7m1Dz1Zp0oPDKIdqZrsPYmzOLGKA QIg+kZmNuA+aSbWgvWbvC6psW5gU0oHhYEC3ihpEjKlkMhCakInaGBdYyhYJbv0p eO2QNZ2Oy668JwBOtNxWGNtXG+scWPjaP6TIKEBu4o7DyQJkOXzMgZm5pxT/mCUw CXidhwZqxSPADmV+sM0saU3ete3XlLbZyH5/MP0L12a5M0Va1YEfQDsmfHgGajyl eXSv2ViombjHUvN7LkrTbUJ7GVbtzf6BcxBswLfJsIEuZmNoUq9iRJabL7VUZ4sZ sUpU1VpetaB83UrTbu4SNZWeCbvU8GyA -----END CERTIFICATE-----Generated at Fri Jan 2 23:25:59 2026 by rpki-client