This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft File: 6kGaeWKZYloHSmW3ys7_GLgGbIs.mft (raw, json) Hash identifier: d1DXppHSnPXAKpt7VwZAR/UX7vD/ZPghr5+si6eP6UE= Subject key identifier: 28:BA:D9:03:94:10:37:F0:30:8E:46:C9:A0:D1:A3:47:57:EA:09:3B Authority key identifier: EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B Certificate issuer: /CN=A91BEBB1/serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft Manifest number: 0252 Signing time: Tue 23 Dec 2025 00:44:20 +0000 Manifest this update: Tue 23 Dec 2025 00:44:20 +0000 Manifest next update: Tue 30 Dec 2025 00:44:20 +0000 Files and hashes: 1: 6kGaeWKZYloHSmW3ys7_GLgGbIs.crl (hash: BpbPHtep+uVLU7cDoYiB7qLbrS5SPMLlaALkaWm8Rq4=) 2: FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa (hash: AViHV7y6w+VuXdqb9Rg2Cx88Ixz8kcPYy8eDkaG1C5c=) 3: 8CD5FC2253A011EDAC40531BC4F9AE02.roa (hash: JPPg4axF52fUr6Imwg/bjNt0uzHT0+P65yVOXCd9Qfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBB1, serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B Validity Not Before: Dec 23 00:44:20 2025 GMT Not After : Dec 30 00:44:20 2025 GMT Subject: CN=6949e5e4-f812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:46:56:70:63:d1:f4:fc:62:35:90:1e:5d:f9: 36:3a:52:be:84:26:36:fc:dc:e0:fa:44:ad:3a:a9: bf:90:62:53:f2:6c:c1:b2:9b:68:c7:e6:4b:26:c7: c4:ea:d7:ee:89:70:a8:60:92:d7:1c:b2:a6:0d:6e: c4:90:bd:bf:46:68:eb:df:4d:fb:3b:04:b2:2f:01: f6:37:ab:23:72:1e:a4:03:3f:b8:13:54:58:5e:b8: 3a:97:34:f5:7d:b5:46:79:ad:43:5b:5d:11:de:5d: 3e:3a:61:4a:b1:34:6d:4f:86:a3:ac:35:33:70:73: 8c:97:8c:56:16:e1:62:33:3b:e2:b9:51:53:22:e6: f4:d5:35:a4:5c:c5:be:37:76:88:5b:45:8b:38:e3: be:80:1f:a9:27:53:20:d1:fb:d6:b3:4c:7d:33:36: 9a:3b:10:df:ec:18:05:fc:70:0e:eb:42:f3:7c:09: ce:cf:dc:88:64:ea:d5:4f:7c:2a:be:5a:f3:cb:b3: 06:94:f9:58:38:2a:14:99:91:28:73:34:bb:0f:c1: 66:ca:ec:8f:9b:fb:96:b8:1e:5a:b4:ac:e0:b5:9f: a1:5f:00:bc:f4:28:35:f2:04:11:dd:6b:39:41:5c: c5:46:98:54:19:43:a6:3f:77:cc:ff:cf:44:a2:4b: 46:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BA:D9:03:94:10:37:F0:30:8E:46:C9:A0:D1:A3:47:57:EA:09:3B X509v3 Authority Key Identifier: keyid:EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:ef:48:6d:c2:72:11:93:57:5e:63:0e:f9:ee:15:8a:e7:06: 35:3f:44:8e:cf:3f:08:b1:23:41:f9:f1:cf:fc:bb:e7:6a:d8: 92:a0:34:f6:02:5d:a6:70:f1:e5:21:f6:b1:12:99:c3:50:59: ca:49:82:34:d1:f8:44:1e:da:9a:f5:23:d5:c7:68:af:ff:cc: c7:88:9c:74:49:33:a8:73:ab:68:50:b1:d8:11:59:b9:38:6f: 4b:6c:b6:8e:96:45:b1:bd:42:09:3a:5b:3d:41:2c:9e:93:34: 90:b7:8f:e5:4c:6d:45:a1:72:02:f0:79:56:8b:dc:e3:6a:9a: eb:44:e8:eb:da:d1:e4:69:0c:55:37:af:82:ee:fe:f2:ea:9a: 45:08:2c:71:ee:b6:52:8c:11:37:f3:98:23:87:cd:73:e6:e2: 8e:b9:e1:e5:26:e1:2e:74:b9:33:6e:c2:69:db:25:ac:cf:72: 56:a3:5b:30:a7:33:df:72:b0:7e:12:7b:0c:c4:a2:88:7d:89: dd:a0:0e:3a:e4:6f:9f:80:0a:85:27:09:ec:47:ac:a8:87:3f: ef:e9:ab:51:3b:bb:7d:1f:89:73:a3:32:8a:ef:36:d2:b9:db: a4:72:b0:86:76:81:f3:38:54:ba:08:95:ce:f0:ca:5d:e5:46: 02:5d:7f:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCQjExMTAvBgNVBAUTKEVBNDE5QTc5NjI5OTYyNUEwNzRBNjVCN0NBQ0VGRjE4 QjgwNjZDOEIwHhcNMjUxMjIzMDA0NDIwWhcNMjUxMjMwMDA0NDIwWjAYMRYwFAYD VQQDDA02OTQ5ZTVlNC1mODEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUZWcGPR9PxiNZAeXfk2OlK+hCY2/Nzg+kStOqm/kGJT8mzBsptox+ZLJsfE 6tfuiXCoYJLXHLKmDW7EkL2/Rmjr3037OwSyLwH2N6sjch6kAz+4E1RYXrg6lzT1 fbVGea1DW10R3l0+OmFKsTRtT4ajrDUzcHOMl4xWFuFiMzviuVFTIub01TWkXMW+ N3aIW0WLOOO+gB+pJ1Mg0fvWs0x9MzaaOxDf7BgF/HAO60LzfAnOz9yIZOrVT3wq vlrzy7MGlPlYOCoUmZEoczS7D8FmyuyPm/uWuB5atKzgtZ+hXwC89Cg18gQR3Ws5 QVzFRphUGUOmP3fM/89EoktGawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCi62QOU EDfwMI5GyaDRo0dX6gk7MB8GA1UdIwQYMBaAFOpBmnlimWJaB0plt8rO/xi4BmyL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJCMS82N0JFQTQwNjUz OUMxMUVEQUUwMDRFMTdDNEY5QUUwMi82a0dhZVdLWllsb0hTbVczeXM3X0dMZ0di SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZrR2FlV0taWWxvSFNtVzN5czdfR0xnR2JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJCMS82N0JFQTQwNjUzOUMxMUVEQUUwMDRFMTdDNEY5QUUwMi82a0dhZVdLWlls b0hTbVczeXM3X0dMZ0diSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC670htwnIRk1deYw757hWK5wY1P0SOzz8IsSNB+fHP/LvnatiSoDT2 Al2mcPHlIfaxEpnDUFnKSYI00fhEHtqa9SPVx2iv/8zHiJx0STOoc6toULHYEVm5 OG9LbLaOlkWxvUIJOls9QSyekzSQt4/lTG1FoXIC8HlWi9zjaprrROjr2tHkaQxV N6+C7v7y6ppFCCxx7rZSjBE385gjh81z5uKOueHlJuEudLkzbsJp2yWsz3JWo1sw pzPfcrB+EnsMxKKIfYndoA465G+fgAqFJwnsR6yohz/v6atRO7t9H4lzozKK7zbS udukcrCGdoHzOFS6CJXO8Mpd5UYCXX/D -----END CERTIFICATE-----Generated at Tue Dec 23 12:40:55 2025 by rpki-client