This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft File: 6XepImIg6MeKHRs74E1gzcyKIYg.mft (raw, json) Hash identifier: R/o9mZNmx8crkkumdSKG9bCKPaAlBjn6OC1dsNVurlk= Subject key identifier: AC:57:80:D2:CE:A4:E0:E9:6A:94:5C:EC:62:59:19:CA:CD:5E:72:90 Authority key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88 Certificate issuer: /CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft Manifest number: 0128 Signing time: Sun 21 Dec 2025 03:50:03 +0000 Manifest this update: Sun 21 Dec 2025 03:50:02 +0000 Manifest next update: Sun 28 Dec 2025 03:50:02 +0000 Files and hashes: 1: 6XepImIg6MeKHRs74E1gzcyKIYg.crl (hash: 0lNShnDuayqzs9SAv7hAE4pf1aLbYktHjAk4UYycqGU=) 2: 5B6A06725D2C11F080B2DC7BC4F9AE02.roa (hash: l5eDg1NtuwC6/S6spgtl7+l3t055Pm1B+3DrcaZ20+Y=) 3: 1101B5C01CEC11EFA7CDC085C4F9AE02.roa (hash: BZA1P97SNGTrhAAl2/Ui2Ojz/Jo4Dfx0oXuCfnfQd+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC5BD, serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188 Validity Not Before: Dec 21 03:50:02 2025 GMT Not After : Dec 28 03:50:02 2025 GMT Subject: CN=69476e6a-4917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ca:69:5b:c7:f6:4f:b8:d0:c2:cc:53:14:9c: 49:f1:ee:d4:b6:f9:31:76:d7:76:7b:ef:5e:0f:34: 0d:c4:25:a0:0a:6f:ca:2b:d5:36:b2:a1:25:6c:50: f8:54:53:e2:f3:da:ca:cc:14:9e:d7:25:f4:67:3f: 82:7a:53:a1:64:4d:48:71:f7:5b:78:14:9e:ae:96: 71:83:a0:12:81:58:ec:0d:a1:83:d4:eb:ae:1e:25: ee:5e:af:0d:fc:02:9d:4a:ce:f3:9f:c5:0e:37:37: 6b:df:ac:ca:d4:d4:20:af:97:bb:2d:27:ca:ac:cf: 4b:b7:d8:fd:a3:f8:55:b7:47:86:07:0c:05:1e:29: 6b:33:fc:f6:b7:15:32:72:dd:3d:a3:5e:88:da:37: d9:e2:ec:a9:30:ab:e7:8c:af:ff:3a:ac:de:97:18: 61:f9:87:90:d0:21:48:6d:54:0d:4c:bd:64:01:f9: 35:8f:fb:68:b8:71:f1:98:e7:4c:69:8d:3f:bf:f2: 0b:14:73:1c:bc:5a:06:0d:4f:52:db:7c:ef:b7:76: 1a:90:4d:c8:42:70:45:c9:80:97:ec:04:50:e5:cf: 06:83:f9:bf:ba:64:32:e3:b0:bb:88:a6:7c:cd:94: 27:7f:84:c4:ff:26:b5:25:b1:03:41:c1:9b:eb:8c: f7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:57:80:D2:CE:A4:E0:E9:6A:94:5C:EC:62:59:19:CA:CD:5E:72:90 X509v3 Authority Key Identifier: keyid:E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:f8:ee:97:42:82:a5:a8:47:58:a5:d5:67:a9:50:0c:1f:f0: 24:f4:50:4d:2d:54:dc:b0:3a:d2:78:8f:62:08:78:2a:e0:ee: 90:e5:05:9a:4c:49:d1:75:d9:48:71:43:26:3c:5f:8c:37:35: 45:8d:da:b5:98:9f:3d:35:5a:80:d6:f0:e0:c6:fc:31:aa:3b: d8:3b:41:5d:5c:e2:20:b9:8a:76:ab:34:34:ed:f7:42:19:8c: c7:38:02:e1:a5:75:b2:89:85:29:d3:60:79:80:fe:5c:d6:d4: ad:e4:a8:78:09:d4:eb:8e:f8:c3:fa:cd:bc:6d:d1:9a:23:1c: c7:8c:a5:92:28:b5:50:1f:8c:81:86:f2:fc:4f:00:88:ff:5b: f6:12:e7:34:81:30:d2:00:53:10:a2:44:67:87:8c:37:7a:0c: 02:35:12:c7:9c:91:df:59:6e:d0:ad:19:3b:1b:34:60:4f:3a: 51:21:02:ef:11:1d:d9:13:df:41:2e:2b:98:ca:83:2b:e8:17: e9:84:28:26:1d:0d:3c:dc:9f:41:85:3d:6a:47:cf:85:ae:e6: 74:39:c8:5c:a9:40:ad:15:e2:66:7b:23:d2:c5:a7:22:ff:41: 26:8c:27:fb:3f:b2:b1:71:9c:96:4f:ae:81:b9:4a:ce:72:4a: 49:0e:8d:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM1QkQxMTAvBgNVBAUTKEU5NzdBOTIyNjIyMEU4Qzc4QTFEMUIzQkUwNEQ2MENE Q0M4QTIxODgwHhcNMjUxMjIxMDM1MDAyWhcNMjUxMjI4MDM1MDAyWjAYMRYwFAYD VQQDDA02OTQ3NmU2YS00OTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cppW8f2T7jQwsxTFJxJ8e7Utvkxdtd2e+9eDzQNxCWgCm/KK9U2sqElbFD4 VFPi89rKzBSe1yX0Zz+CelOhZE1IcfdbeBSerpZxg6ASgVjsDaGD1OuuHiXuXq8N /AKdSs7zn8UONzdr36zK1NQgr5e7LSfKrM9Lt9j9o/hVt0eGBwwFHilrM/z2txUy ct09o16I2jfZ4uypMKvnjK//Oqzelxhh+YeQ0CFIbVQNTL1kAfk1j/touHHxmOdM aY0/v/ILFHMcvFoGDU9S23zvt3YakE3IQnBFyYCX7ARQ5c8Gg/m/umQy47C7iKZ8 zZQnf4TE/ya1JbEDQcGb64z3sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxXgNLO pODpapRc7GJZGcrNXnKQMB8GA1UdIwQYMBaAFOl3qSJiIOjHih0bO+BNYM3MiiGI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzVCRC83NkMyQzcyRTFD RUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZNZUtIUnM3NEUxZ3pjeUtJ WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZYZXBJbUlnNk1lS0hSczc0RTFnemN5S0lZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzVCRC83NkMyQzcyRTFDRUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZN ZUtIUnM3NEUxZ3pjeUtJWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ+O6XQoKlqEdYpdVnqVAMH/Ak9FBNLVTcsDrSeI9iCHgq4O6Q5QWa TEnRddlIcUMmPF+MNzVFjdq1mJ89NVqA1vDgxvwxqjvYO0FdXOIguYp2qzQ07fdC GYzHOALhpXWyiYUp02B5gP5c1tSt5Kh4CdTrjvjD+s28bdGaIxzHjKWSKLVQH4yB hvL8TwCI/1v2Euc0gTDSAFMQokRnh4w3egwCNRLHnJHfWW7QrRk7GzRgTzpRIQLv ER3ZE99BLiuYyoMr6BfphCgmHQ083J9BhT1qR8+FruZ0OchcqUCtFeJmeyPSxaci /0EmjCf7P7KxcZyWT66BuUrOckpJDo0t -----END CERTIFICATE-----Generated at Sun Dec 21 22:43:59 2025 by rpki-client