This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft File: a51l6unGl9ohy0vuv030zgpBkyE.mft (raw, json) Hash identifier: AcH6WCj1FzyAvNuEIkbPEUvVDKSdE0dVAsxBqL8CAF0= Subject key identifier: 79:CD:B0:BC:83:75:9A:70:95:27:07:D7:8C:29:02:3C:E8:56:C7:83 Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 Certificate issuer: /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Certificate serial: 3529 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft Manifest number: 350E Signing time: Mon 22 Dec 2025 14:39:59 +0000 Manifest this update: Mon 22 Dec 2025 14:39:58 +0000 Manifest next update: Mon 29 Dec 2025 14:39:58 +0000 Files and hashes: 1: a51l6unGl9ohy0vuv030zgpBkyE.crl (hash: 82Jv36y9V4cwBhkYn7DvSCeycGz4R69t0A2ideZTer4=) 2: 6215E9C089CF11ECA1DA1810C4F9AE02.roa (hash: o3Ceb2MSjRakfXXsxsrz1v3BRN+sMCeTig6Z0QGV2lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13609 (0x3529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141FD6, serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Validity Not Before: Dec 22 14:39:58 2025 GMT Not After : Dec 29 14:39:58 2025 GMT Subject: CN=6949583f-3c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:06:9a:45:ca:e6:d3:02:47:23:c6:32:8d:60: d2:81:0e:77:aa:44:35:a8:3e:53:1e:d7:d8:da:6f: 4c:4e:42:69:eb:a0:1a:de:7a:ed:90:9f:ed:ce:8f: 3d:f6:37:4f:aa:fb:fe:61:8f:b4:de:19:00:c7:5f: 28:4e:67:e1:e6:34:90:28:9c:83:86:0c:dd:85:28: 81:f6:50:81:af:07:f1:5c:42:94:72:93:ef:20:fb: 2c:be:a6:71:18:36:e6:26:b6:b7:fe:9d:6f:e4:5e: 33:9e:5a:4b:2d:e2:d0:f8:39:61:d1:c3:81:4b:5a: 04:33:99:fd:3d:c3:1c:0e:43:5b:c6:bc:2a:af:70: 12:aa:e9:c7:44:a9:93:81:20:0e:d0:3c:b7:7d:01: 81:8f:38:40:76:3f:6b:2c:c3:84:74:ca:c5:b5:1c: 9b:3a:2c:33:79:ae:e5:8d:50:6c:00:f3:44:82:5f: 12:7b:e9:70:d7:e2:ab:c0:31:19:cd:f8:31:23:cf: 61:b5:e3:dc:20:05:af:68:24:99:7b:24:e3:6e:e4: 63:bb:17:40:45:14:15:de:98:38:a2:c8:b3:65:74: a7:db:67:45:e8:f9:47:5c:22:c5:b4:60:98:6d:8e: 6b:66:38:bb:92:c0:15:8e:87:5c:9c:99:71:18:8b: 0b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CD:B0:BC:83:75:9A:70:95:27:07:D7:8C:29:02:3C:E8:56:C7:83 X509v3 Authority Key Identifier: keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:37:74:08:c0:51:66:c0:52:25:9e:b5:dd:6e:e0:f3:b4:0e: dc:fc:5d:83:cc:87:80:9e:bb:af:0c:86:e5:a6:fd:23:ce:68: fc:8a:48:6b:d4:4a:f7:67:85:9d:bb:f3:20:4f:51:65:ab:28: ce:ec:b4:1f:28:37:ca:c9:2d:c2:04:61:af:a0:aa:9f:34:c7: 30:20:0b:0e:84:16:51:6b:e9:9a:d3:22:7e:0e:ac:cf:6b:9c: 4c:e0:24:4c:b1:75:2e:5b:44:62:96:18:ee:24:c1:b6:2a:1e: 83:52:67:59:d9:8c:e6:f6:52:ca:f7:a8:91:ae:3c:d4:d7:56: 72:7a:56:72:42:6d:e2:84:64:c2:68:62:13:fc:a1:e9:c1:1f: 2e:db:ce:22:17:93:cd:e0:88:7e:8c:50:b3:3b:65:b8:89:40: 82:67:71:21:6f:53:12:b9:f1:d1:f3:b9:f2:52:65:02:56:04: b5:94:30:7b:9f:1b:90:ca:9c:04:45:52:3b:cb:44:32:1d:6d: c3:c1:4e:9e:f7:4e:ec:18:51:1f:a6:22:be:a8:88:8d:8c:ae: 34:22:84:9f:bb:08:c0:b5:06:0f:f7:dc:35:f7:c3:8b:ef:ab: bc:61:4c:1f:35:c2:ef:57:18:1a:cf:65:95:0b:1b:cf:3f:ad: d0:e0:0e:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFGRDYxMTAvBgNVBAUTKDZCOUQ2NUVBRTlDNjk3REEyMUNCNEJFRUJGNERGNENF MEE0MTkzMjEwHhcNMjUxMjIyMTQzOTU4WhcNMjUxMjI5MTQzOTU4WjAYMRYwFAYD VQQDDA02OTQ5NTgzZi0zYzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5QaaRcrm0wJHI8YyjWDSgQ53qkQ1qD5THtfY2m9MTkJp66Aa3nrtkJ/tzo89 9jdPqvv+YY+03hkAx18oTmfh5jSQKJyDhgzdhSiB9lCBrwfxXEKUcpPvIPssvqZx GDbmJra3/p1v5F4znlpLLeLQ+Dlh0cOBS1oEM5n9PcMcDkNbxrwqr3ASqunHRKmT gSAO0Dy3fQGBjzhAdj9rLMOEdMrFtRybOiwzea7ljVBsAPNEgl8Se+lw1+KrwDEZ zfgxI89htePcIAWvaCSZeyTjbuRjuxdARRQV3pg4osizZXSn22dF6PlHXCLFtGCY bY5rZji7ksAVjodcnJlxGIsLlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnNsLyD dZpwlScH14wpAjzoVseDMB8GA1UdIwQYMBaAFGudZerpxpfaIctL7r9N9M4KQZMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUZENi82RUVDNjQzMDFE OTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5b2h5MHZ1djAzMHpncEJr eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1MWw2dW5HbDlvaHkwdnV2MDMwemdwQmt5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUZENi82RUVDNjQzMDFEOTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5 b2h5MHZ1djAzMHpncEJreUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWN3QIwFFmwFIlnrXdbuDztA7c/F2DzIeAnruvDIblpv0jzmj8ikhr 1Er3Z4Wdu/MgT1FlqyjO7LQfKDfKyS3CBGGvoKqfNMcwIAsOhBZRa+ma0yJ+DqzP a5xM4CRMsXUuW0RilhjuJMG2Kh6DUmdZ2Yzm9lLK96iRrjzU11ZyelZyQm3ihGTC aGIT/KHpwR8u284iF5PN4Ih+jFCzO2W4iUCCZ3Ehb1MSufHR87nyUmUCVgS1lDB7 nxuQypwERVI7y0QyHW3DwU6e907sGFEfpiK+qIiNjK40IoSfuwjAtQYP99w198OL 76u8YUwfNcLvVxgaz2WVCxvPP63Q4A7m -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:20 2025 by rpki-client