This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft File: -6D4tMTQWqlqqvV6OUQDcbyNBDc.mft (raw, json) Hash identifier: cBFYGmqmK0zydaVVQwfr35sWY0H9Q7AWnXPGXDANPfM= Subject key identifier: B6:0C:9B:0B:24:94:ED:D9:22:DC:EF:C5:3B:88:14:BA:22:3E:05:1D Authority key identifier: FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37 Certificate issuer: /CN=A91F9ECA/serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437 Certificate serial: 05A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft Manifest number: 059D Signing time: Mon 22 Dec 2025 22:18:38 +0000 Manifest this update: Mon 22 Dec 2025 22:18:37 +0000 Manifest next update: Mon 29 Dec 2025 22:18:37 +0000 Files and hashes: 1: -6D4tMTQWqlqqvV6OUQDcbyNBDc.crl (hash: 5awzZP6crgNAMR/z851XM24tgPYamvNoSHFO9PBKAws=) 2: 9F2BA98AF90611EBB8E0C27FC4F9AE02.roa (hash: H5HzvqvaFcgyJmUGVWINJTj96jgcqceA7VesKwIUnvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1442 (0x5a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9ECA, serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437 Validity Not Before: Dec 22 22:18:37 2025 GMT Not After : Dec 29 22:18:37 2025 GMT Subject: CN=6949c3bd-6007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9d:59:e7:c6:7f:39:73:0f:ec:5e:f8:0b:d0: 6b:c8:4d:23:a5:22:43:96:48:ae:82:d1:67:90:b4: 6c:46:cb:5a:13:d4:5f:18:19:c7:05:cf:34:e3:3a: 1b:e7:f0:d1:d9:e8:bd:7a:b7:63:85:1b:29:c1:af: fb:97:4e:3b:27:26:7b:0a:a4:ba:e4:45:17:fd:a7: 85:18:3c:62:ad:b9:5d:42:6e:5d:1e:4f:6b:bb:68: a7:00:fc:98:cb:65:7b:47:71:d9:5b:19:f5:ec:b2: ef:bc:03:3b:b6:e6:18:8d:4c:39:85:1b:f2:74:5b: e1:2b:87:a6:3d:61:76:4e:c1:d4:d3:f7:d6:93:f6: 0c:e5:69:8c:71:b5:af:02:74:55:44:d8:9d:35:00: 63:cc:67:ea:f1:cc:01:57:9e:32:fa:cc:e0:34:a3: f9:40:e1:db:c8:38:ec:30:d2:8e:08:d4:a2:c7:a4: 98:92:81:ca:78:ae:4e:b1:07:b9:09:ac:08:ac:df: 45:2f:87:08:16:69:6e:64:44:5b:a8:0e:fc:92:7c: 52:7a:1e:99:9c:bf:82:25:81:41:9a:5a:af:b5:04: ec:d2:1d:d2:84:80:c2:1a:5b:2e:c9:82:7f:79:ad: 46:d9:e8:db:c8:a3:99:46:5e:95:0f:04:d2:29:ee: 83:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0C:9B:0B:24:94:ED:D9:22:DC:EF:C5:3B:88:14:BA:22:3E:05:1D X509v3 Authority Key Identifier: keyid:FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:21:4f:79:af:47:ad:4b:94:6e:00:cd:c7:1a:7a:76:3e:27: f1:84:38:ec:8f:4d:b3:60:0a:39:69:4d:0b:23:e5:c0:10:aa: fd:23:8c:f3:d5:d6:16:7c:9c:ed:e8:f2:a7:7b:3a:c9:58:83: df:cd:29:8e:ac:5a:e6:cb:fa:07:7c:28:94:e2:7e:f4:aa:b2: 22:44:51:a6:43:98:ab:69:81:91:2a:30:93:37:86:4c:63:64: 2f:98:93:0c:47:7e:84:cd:e5:cc:53:9b:d5:68:ca:29:fc:f8: dc:f1:99:c2:b4:c1:dc:79:15:a2:ab:3d:b2:e9:74:67:50:b7: ad:5a:30:aa:d2:b8:23:7e:2f:d0:54:9a:fc:e0:5c:1f:b0:33: ac:a2:75:95:91:98:95:d8:0d:dd:6e:f9:43:96:ff:f4:bc:48: aa:c3:a6:bd:8b:9f:f8:60:f3:86:10:0a:18:b5:03:5d:cc:16: 8d:fa:6c:9d:04:10:aa:6f:4b:31:41:a2:fc:84:54:1b:f1:9b: ec:39:2b:4e:1c:4b:6c:db:91:31:54:a9:8c:8a:ae:24:76:2b: 98:8b:da:d4:2b:10:80:8c:61:af:bc:a0:ac:af:91:c3:d8:a7: 3b:d6:0c:a4:9f:de:a2:6e:e5:07:89:74:90:ab:cb:11:1a:ca: a2:5b:a8:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFQ0ExMTAvBgNVBAUTKEZCQTBGOEI0QzREMDVBQTk2QUFBRjU3QTM5NDQwMzcx QkM4RDA0MzcwHhcNMjUxMjIyMjIxODM3WhcNMjUxMjI5MjIxODM3WjAYMRYwFAYD VQQDDA02OTQ5YzNiZC02MDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Z1Z58Z/OXMP7F74C9BryE0jpSJDlkiugtFnkLRsRstaE9RfGBnHBc804zob 5/DR2ei9erdjhRspwa/7l047JyZ7CqS65EUX/aeFGDxirbldQm5dHk9ru2inAPyY y2V7R3HZWxn17LLvvAM7tuYYjUw5hRvydFvhK4emPWF2TsHU0/fWk/YM5WmMcbWv AnRVRNidNQBjzGfq8cwBV54y+szgNKP5QOHbyDjsMNKOCNSix6SYkoHKeK5OsQe5 CawIrN9FL4cIFmluZERbqA78knxSeh6ZnL+CJYFBmlqvtQTs0h3ShIDCGlsuyYJ/ ea1G2ejbyKOZRl6VDwTSKe6D/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYMmwsk lO3ZItzvxTuIFLoiPgUdMB8GA1UdIwQYMBaAFPug+LTE0Fqpaqr1ejlEA3G8jQQ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUVDQS9FMUVDRTBBMkY5 MDMxMUVCQjA3QTAzN0FDNEY5QUUwMi8tNkQ0dE1UUVdxbHFxdlY2T1VRRGNieU5C RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02RDR0TVRRV3FscXF2VjZPVVFEY2J5TkJEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUVDQS9FMUVDRTBBMkY5MDMxMUVCQjA3QTAzN0FDNEY5QUUwMi8tNkQ0dE1UUVdx bHFxdlY2T1VRRGNieU5CRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLIU95r0etS5RuAM3HGnp2PifxhDjsj02zYAo5aU0LI+XAEKr9I4zz 1dYWfJzt6PKnezrJWIPfzSmOrFrmy/oHfCiU4n70qrIiRFGmQ5iraYGRKjCTN4ZM Y2QvmJMMR36EzeXMU5vVaMop/Pjc8ZnCtMHceRWiqz2y6XRnULetWjCq0rgjfi/Q VJr84FwfsDOsonWVkZiV2A3dbvlDlv/0vEiqw6a9i5/4YPOGEAoYtQNdzBaN+myd BBCqb0sxQaL8hFQb8ZvsOStOHEts25ExVKmMiq4kdiuYi9rUKxCAjGGvvKCsr5HD 2Kc71gykn96ibuUHiXSQq8sRGsqiW6gp -----END CERTIFICATE-----Generated at Wed Dec 24 23:28:25 2025 by rpki-client