This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft File: _u6fNgpd0TKL4cgqF3B5iWh1nUg.mft (raw, json) Hash identifier: LPGNc4Mp5mkejbXNJuDzOY1dY4VlwiYGWfA5CLbfLRI= Subject key identifier: A2:12:57:35:B7:AD:18:04:1F:D8:8E:0F:89:E6:DB:5E:31:63:13:19 Authority key identifier: FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 Certificate issuer: /CN=A91390D6/serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Certificate serial: 040B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft Manifest number: 0406 Signing time: Mon 22 Dec 2025 23:29:31 +0000 Manifest this update: Mon 22 Dec 2025 23:29:30 +0000 Manifest next update: Mon 29 Dec 2025 23:29:30 +0000 Files and hashes: 1: _u6fNgpd0TKL4cgqF3B5iWh1nUg.crl (hash: tEZPrU9XYx8jXAtEc6yLiaGVkgGcSfs3t0jEEJQ+5Us=) 2: 018377CA9AF111EC9717F22AC4F9AE02.roa (hash: ZTGzWMYHeiUgbI/Ob63uEbxBeTDxYyADhXTIjme/A3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1035 (0x40b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91390D6, serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Validity Not Before: Dec 22 23:29:30 2025 GMT Not After : Dec 29 23:29:30 2025 GMT Subject: CN=6949d45a-0ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:77:d0:af:bb:2d:bb:de:f4:4a:a9:8c:55:71: 15:f8:fa:4c:97:ab:42:98:2b:8e:42:fa:75:74:56: 6a:6b:d0:71:57:34:86:0c:97:73:cf:3e:76:9a:8f: 74:e2:1d:d8:30:05:96:b0:78:33:73:b2:ba:e2:37: 01:63:45:23:4f:d5:5d:39:43:57:56:0e:42:48:48: 9f:96:d6:d2:a8:8c:9a:a0:f2:c7:2e:c0:65:04:cf: 88:f3:a1:73:fe:73:33:8e:3d:3e:77:1c:df:08:82: a8:ed:cb:aa:7a:b2:76:c0:e7:2b:10:22:05:c2:bd: b4:3d:aa:98:c6:f1:92:aa:92:42:16:7b:61:82:7a: 88:53:bb:98:75:e6:5e:93:49:e1:45:63:67:31:69: 8a:a6:9a:47:e2:75:ad:44:a8:f6:c5:9a:45:ce:2b: 3d:d5:c6:09:99:48:82:4e:6e:3e:aa:7b:b5:07:c8: ca:9c:f7:3a:3e:22:f5:91:c6:f2:8e:c6:4f:5d:4c: 51:b2:84:72:62:73:f1:19:de:20:57:a0:d8:27:b6: 29:63:09:69:8d:2a:e9:e9:41:e8:04:9f:69:b6:bd: bf:81:3f:28:0e:22:62:de:c8:2a:13:f1:ce:cf:a9: f3:7e:0a:21:2c:1a:11:90:70:cd:20:5c:68:7f:b8: e3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:12:57:35:B7:AD:18:04:1F:D8:8E:0F:89:E6:DB:5E:31:63:13:19 X509v3 Authority Key Identifier: keyid:FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:a0:6a:49:4d:1f:60:85:e7:93:21:70:d8:4e:0c:d7:bb:8c: 67:62:ef:30:78:a4:80:83:dc:83:fb:64:19:cd:81:5c:4a:4e: 0e:6b:2e:d3:a2:47:14:8f:ae:63:ae:bc:8f:8b:7d:46:2c:b4: 2b:25:1a:5e:eb:04:45:48:b4:bb:80:34:9d:be:e5:96:f2:e7: 66:c0:cf:94:01:84:df:15:e4:5d:da:e3:11:98:00:fd:6d:ca: e0:ca:cf:56:03:84:d6:69:63:3b:66:74:4f:ed:ca:57:74:36: dd:33:ad:30:e9:64:42:f1:f5:1e:7e:3c:a3:a0:a5:b1:fd:35: a8:68:50:5f:5d:68:6a:2c:fd:17:a7:5d:db:33:43:8a:c1:fa: f2:1e:77:98:d0:23:8c:b1:2f:7f:f7:bb:96:ce:73:d2:c8:e0: 48:3f:02:f9:af:d8:2e:cd:b1:90:e3:c9:eb:3f:dd:fb:ae:d8: 8b:7e:70:b3:63:bd:73:fd:22:00:b3:3a:cb:6b:b5:e7:3a:71: 4d:4c:f6:9e:8f:c3:75:38:ae:ff:5e:82:0b:ad:2c:c6:cf:e4: 91:06:32:cf:a8:d9:24:ac:b6:1b:fa:ba:8c:c5:fa:28:81:c5: a5:57:7e:03:ed:27:61:e2:53:b5:94:1b:06:bd:51:b3:43:a9: 35:98:37:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwRDYxMTAvBgNVBAUTKEZFRUU5RjM2MEE1REQxMzI4QkUxQzgyQTE3NzA3OTg5 Njg3NTlENDgwHhcNMjUxMjIyMjMyOTMwWhcNMjUxMjI5MjMyOTMwWjAYMRYwFAYD VQQDDA02OTQ5ZDQ1YS0wYWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3fQr7stu970SqmMVXEV+PpMl6tCmCuOQvp1dFZqa9BxVzSGDJdzzz52mo90 4h3YMAWWsHgzc7K64jcBY0UjT9VdOUNXVg5CSEifltbSqIyaoPLHLsBlBM+I86Fz /nMzjj0+dxzfCIKo7cuqerJ2wOcrECIFwr20PaqYxvGSqpJCFnthgnqIU7uYdeZe k0nhRWNnMWmKpppH4nWtRKj2xZpFzis91cYJmUiCTm4+qnu1B8jKnPc6PiL1kcby jsZPXUxRsoRyYnPxGd4gV6DYJ7YpYwlpjSrp6UHoBJ9ptr2/gT8oDiJi3sgqE/HO z6nzfgohLBoRkHDNIFxof7jjewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKISVzW3 rRgEH9iOD4nm214xYxMZMB8GA1UdIwQYMBaAFP7unzYKXdEyi+HIKhdweYlodZ1I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTBENi9GOTY0QkMzMjlB RUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBUS0w0Y2dxRjNCNWlXaDFu VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191NmZOZ3BkMFRLTDRjZ3FGM0I1aVdoMW5VZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTBENi9GOTY0QkMzMjlBRUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBU S0w0Y2dxRjNCNWlXaDFuVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwoGpJTR9gheeTIXDYTgzXu4xnYu8weKSAg9yD+2QZzYFcSk4Oay7T okcUj65jrryPi31GLLQrJRpe6wRFSLS7gDSdvuWW8udmwM+UAYTfFeRd2uMRmAD9 bcrgys9WA4TWaWM7ZnRP7cpXdDbdM60w6WRC8fUefjyjoKWx/TWoaFBfXWhqLP0X p13bM0OKwfryHneY0COMsS9/97uWznPSyOBIPwL5r9guzbGQ48nrP937rtiLfnCz Y71z/SIAszrLa7XnOnFNTPaej8N1OK7/XoILrSzGz+SRBjLPqNkkrLYb+rqMxfoo gcWlV34D7Sdh4lO1lBsGvVGzQ6k1mDdy -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:13 2025 by rpki-client