This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft File: 6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft (raw, json) Hash identifier: ueTi2xFSL2Pf5hZevNTBfpuejVwxBAjaS/bMPipXXRI= Subject key identifier: 65:87:35:6B:71:9C:6A:58:E1:DA:48:4A:7A:5D:CA:B7:FE:66:67:0B Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B Certificate issuer: /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B Certificate serial: 08D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft Manifest number: 0899 Signing time: Mon 22 Dec 2025 20:03:25 +0000 Manifest this update: Mon 22 Dec 2025 20:03:25 +0000 Manifest next update: Mon 29 Dec 2025 20:03:25 +0000 Files and hashes: 1: 6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl (hash: J087yzBoalmS4Mzv7fr9AfgUYCbow6f+PoF85h3ZIms=) 2: 54148F06C43C11F0AA77C422C4F9AE02.roa (hash: PLEUvfD92JY9LnVGJtkTw/WyNLvrl5kTRePmdGJIwyM=) 3: F5089566D57F11F0A4C3FF52C4F9AE02.roa (hash: hBZhwYqI4BbJ2uD7fXaf33uSY1cj5kmeUotdnskELFM=) 4: 87448EFE3D1D11F0A469B051C4F9AE02.roa (hash: HgipkMBuwoWvuAFvEe44spWPZ3CIisx74k8F29IRrNc=) 5: 03476D523FB011F097B5F864C4F9AE02.roa (hash: nR7G1WKVHgoejOczmztbNWOPg/UYf5k0nHYsKAHUYQo=) 6: 4500A5A669BD11F0A024565FC4F9AE02.roa (hash: MSC30OoLQMQEjzk3rRCJ2ikbFlmuhuMgNqW5DTRWJu8=) 7: DC814158DA8111F0A4C15A685FD3641D.roa (hash: SQ28bOxGGdf/j6MrxDSZ/ALEItfgjaMB/JQh9NmidPs=) 8: 75811E2EBAC911F08C6E545FC4F9AE02.roa (hash: vXdS7qeIAdiU+avCvD24p9d5iJX/nSjkZpM37825RbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2261 (0x8d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B Validity Not Before: Dec 22 20:03:25 2025 GMT Not After : Dec 29 20:03:25 2025 GMT Subject: CN=6949a40d-86b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cf:a9:b4:11:ee:9a:cc:20:ff:72:d0:e7:c7: 66:8e:b8:46:d2:3d:1e:c6:31:db:64:96:05:2d:30: 27:2b:37:9a:5f:9c:c1:e4:8a:c8:a0:bb:aa:8a:1a: 7e:7e:ac:91:37:bd:d3:ad:88:d3:7c:26:07:90:f0: 79:92:1b:24:c8:29:d8:df:31:65:2a:34:33:c5:ab: 10:f0:d1:3b:50:27:b6:16:50:3a:51:26:e4:45:fc: 0e:3b:4e:87:e5:8d:92:0a:08:68:ed:eb:b1:a1:8e: bb:22:6c:c6:35:a9:00:50:5a:e1:49:2f:01:1d:a1: 30:7d:26:7b:60:a5:e7:43:62:bf:cb:80:db:e3:1a: 0a:1d:2c:26:b3:29:3e:2e:d7:49:a0:fd:a0:54:95: 0c:93:f9:75:32:a2:37:ea:03:09:5d:dc:ba:34:ed: 1b:c5:a0:b0:5b:59:a6:07:12:58:27:64:de:46:e9: 3a:29:5c:72:fe:98:6e:54:26:89:f4:0a:00:18:d9: e4:90:10:5e:37:3f:ea:16:f4:f6:48:8b:02:80:85: fe:13:e6:44:93:b4:8e:f8:ac:be:9e:11:d1:ca:3b: 55:62:c3:bf:c4:b6:c6:e6:62:f9:a6:e8:dc:a9:1e: 22:fd:4a:2d:2f:5a:17:d7:ca:f9:d0:71:4d:ac:63: 54:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:87:35:6B:71:9C:6A:58:E1:DA:48:4A:7A:5D:CA:B7:FE:66:67:0B X509v3 Authority Key Identifier: keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:dd:3c:e2:56:87:32:56:ac:fd:b4:10:3a:e2:b7:1c:a8:d6: 1a:e2:bf:14:af:83:88:8c:98:c6:7d:1e:2d:1b:e1:2b:0a:20: 61:6b:86:36:63:67:a5:86:67:fc:44:df:4c:b1:41:3e:a6:48: 0a:9a:34:83:7d:18:7b:6c:b7:19:f9:6a:57:97:58:40:0e:c9: 42:7d:fb:f8:6b:72:c3:ed:c1:51:cd:ac:d5:8e:a8:09:02:4c: 78:83:af:b3:7b:c8:36:b3:b7:70:d8:2b:e0:ee:99:3a:0a:40: 9e:1e:44:80:62:38:77:f3:50:79:3a:04:2d:7d:0e:42:c2:52: 40:c1:fa:b3:f2:42:21:ab:d9:9f:5d:fb:d8:01:75:1c:17:3b: 51:f5:92:c0:1c:6a:6b:33:cf:68:3d:27:03:41:5b:4a:f3:85: e6:15:da:3f:b5:d2:c0:69:84:db:a2:fe:83:80:44:44:10:f2: 35:75:da:bb:fc:90:2b:b7:88:8c:40:39:d5:cf:da:9d:bc:78: 39:c6:2d:d4:a2:7a:ba:a9:81:c1:39:c2:60:f7:62:0e:18:0b: 61:cf:61:5c:44:f7:2e:7a:02:09:d9:8e:92:c4:9c:4c:e0:05: bc:39:d1:b8:13:43:c1:d7:8e:36:0b:cd:30:00:36:39:6a:15: e8:e6:c5:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVGREYxMTAvBgNVBAUTKEU4QzIxQjAzQjY1MDgzQjIxQkZBMzc1MjZEMTJCMzQx RjI0OUNDOEIwHhcNMjUxMjIyMjAwMzI1WhcNMjUxMjI5MjAwMzI1WjAYMRYwFAYD VQQDDA02OTQ5YTQwZC04NmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48+ptBHumswg/3LQ58dmjrhG0j0exjHbZJYFLTAnKzeaX5zB5IrIoLuqihp+ fqyRN73TrYjTfCYHkPB5khskyCnY3zFlKjQzxasQ8NE7UCe2FlA6USbkRfwOO06H 5Y2SCgho7euxoY67ImzGNakAUFrhSS8BHaEwfSZ7YKXnQ2K/y4Db4xoKHSwmsyk+ LtdJoP2gVJUMk/l1MqI36gMJXdy6NO0bxaCwW1mmBxJYJ2TeRuk6KVxy/phuVCaJ 9AoAGNnkkBBeNz/qFvT2SIsCgIX+E+ZEk7SO+Ky+nhHRyjtVYsO/xLbG5mL5pujc qR4i/UotL1oX18r50HFNrGNUMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWHNWtx nGpY4dpISnpdyrf+ZmcLMB8GA1UdIwQYMBaAFOjCGwO2UIOyG/o3Um0Ss0HyScyL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUZERi8wQkREN0VBMkU5 MEMxMUVBOTY1QzJBMkZDNEY5QUUwMi82TUliQTdaUWc3SWItamRTYlJLelFmSkp6 SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZNSWJBN1pRZzdJYi1qZFNiUkt6UWZKSnpJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUZERi8wQkREN0VBMkU5MEMxMUVBOTY1QzJBMkZDNEY5QUUwMi82TUliQTdaUWc3 SWItamRTYlJLelFmSkp6SXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ3TziVocyVqz9tBA64rccqNYa4r8Ur4OIjJjGfR4tG+ErCiBha4Y2 Y2elhmf8RN9MsUE+pkgKmjSDfRh7bLcZ+WpXl1hADslCffv4a3LD7cFRzazVjqgJ Akx4g6+ze8g2s7dw2Cvg7pk6CkCeHkSAYjh381B5OgQtfQ5CwlJAwfqz8kIhq9mf XfvYAXUcFztR9ZLAHGprM89oPScDQVtK84XmFdo/tdLAaYTbov6DgEREEPI1ddq7 /JArt4iMQDnVz9qdvHg5xi3Uonq6qYHBOcJg92IOGAthz2FcRPcuegIJ2Y6SxJxM 4AW8OdG4E0PB1442C80wADY5ahXo5sUs -----END CERTIFICATE-----Generated at Tue Dec 23 13:55:49 2025 by rpki-client