This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft File: 3K6HG3xct5vH7PZ5s7LTyVan2eM.mft (raw, json) Hash identifier: VK7T4wRLeyDRgq65b2vPw6teK7uuw+k0G0ExLqUbfTg= Subject key identifier: BE:8B:7F:19:BB:03:97:9B:09:17:C8:3B:83:2B:03:6C:CE:9A:49:DE Authority key identifier: DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3 Certificate issuer: /CN=A91604AC/serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3 Certificate serial: 06E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft Manifest number: 06DB Signing time: Mon 22 Dec 2025 21:22:57 +0000 Manifest this update: Mon 22 Dec 2025 21:22:56 +0000 Manifest next update: Mon 29 Dec 2025 21:22:56 +0000 Files and hashes: 1: 3K6HG3xct5vH7PZ5s7LTyVan2eM.crl (hash: +gDJ7eDthZlVwsvxl2tGPSFLxgO2ITHY1I0Rb6/TEw8=) 2: 0081F3D6F22111EE8EEC070EC4F9AE02.roa (hash: FOS9hpfhSMJ/5W+e+NFkrecUhC86TAOPH0uxsIPYP4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1767 (0x6e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604AC, serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3 Validity Not Before: Dec 22 21:22:56 2025 GMT Not After : Dec 29 21:22:56 2025 GMT Subject: CN=6949b6b1-e19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:1a:76:5d:88:5b:bb:49:2c:92:38:e7:fa: 6c:93:ab:f0:8f:5a:57:6e:1f:4c:88:d4:25:64:2c: f2:11:6c:80:4a:5d:f8:39:c5:aa:32:fb:b9:63:75: db:98:72:06:86:82:59:8e:27:d9:3c:dd:8c:93:07: 91:5c:94:88:41:e1:20:22:15:e5:ac:56:7f:2f:28: 16:83:7a:6b:42:f3:83:c2:dc:bd:28:cd:b8:25:52: 69:0c:5a:74:a0:95:46:4e:3d:e7:5f:30:65:f9:34: ae:44:33:cb:23:8a:9b:c8:75:d0:c2:5e:a9:b7:f8: ad:98:88:e1:1e:96:cf:a6:02:1b:e4:95:4d:eb:bd: 49:a5:4e:ae:ff:0a:48:81:19:fa:20:4c:fd:fb:7a: 45:cd:34:96:ac:cc:db:de:85:fe:2d:ef:c7:8b:e2: 91:e6:77:dd:db:5a:94:0a:38:5b:e2:54:7a:d1:42: fc:0b:37:53:1d:9b:cc:1b:4b:53:54:63:85:2d:01: 3b:e3:cc:48:19:c5:94:8f:d2:04:bf:8b:24:3e:60: 06:56:a5:f9:59:89:c8:31:02:24:65:af:3c:de:f0: f9:90:d7:65:9b:76:9d:7b:6d:89:91:60:b1:db:5b: 9c:3f:ef:69:0f:fe:db:90:be:d0:b6:df:2b:96:7d: 4e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8B:7F:19:BB:03:97:9B:09:17:C8:3B:83:2B:03:6C:CE:9A:49:DE X509v3 Authority Key Identifier: keyid:DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:4d:9e:d1:84:d1:63:c1:1e:56:ce:49:8c:76:0b:4b:a4:15: 25:6f:7a:2d:c0:a3:5a:c8:fd:12:30:65:ed:51:d2:d1:b9:0d: 21:32:96:01:b1:40:c3:7f:a1:16:64:45:7a:41:7a:94:30:c6: a0:c0:14:28:c8:41:22:fa:3e:93:9f:2b:e4:98:30:5f:6b:86: a2:ca:06:db:00:c3:6b:fa:13:87:1a:ca:6f:67:a9:83:3a:11: 31:b1:42:11:b4:b8:9e:16:db:c8:73:31:49:8d:2d:44:b1:5a: 58:6b:e3:21:f7:11:5c:a0:86:8b:5c:b5:1a:38:70:04:14:8b: f4:fe:f7:a0:ce:33:ec:10:b8:32:7c:56:9f:95:f7:aa:01:f8: 3e:36:c8:c4:d1:bb:5c:76:21:1d:87:59:a9:50:ed:07:f9:19: f8:71:f7:cb:46:01:b5:f8:4c:d4:d1:72:99:f4:f2:2d:cc:91: 76:6c:9c:22:28:6b:42:3d:a5:47:a1:9d:4d:2d:9c:de:7c:4f: ab:e2:43:5a:2d:b8:d4:cb:32:1e:11:9b:6d:92:8f:d5:e8:e9: 23:34:f2:d4:dc:41:f2:e4:cb:68:18:7b:d6:8d:bc:57:85:3d: 19:64:28:96:04:fb:5d:61:a7:75:ea:3c:01:db:1e:2a:dd:7d: f5:d0:5b:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QUMxMTAvBgNVBAUTKERDQUU4NzFCN0M1Q0I3OUJDN0VDRjY3OUIzQjJEM0M5 NTZBN0Q5RTMwHhcNMjUxMjIyMjEyMjU2WhcNMjUxMjI5MjEyMjU2WjAYMRYwFAYD VQQDDA02OTQ5YjZiMS1lMTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLUadl2IW7tJLJI45/psk6vwj1pXbh9MiNQlZCzyEWyASl34OcWqMvu5Y3Xb mHIGhoJZjifZPN2MkweRXJSIQeEgIhXlrFZ/LygWg3prQvODwty9KM24JVJpDFp0 oJVGTj3nXzBl+TSuRDPLI4qbyHXQwl6pt/itmIjhHpbPpgIb5JVN671JpU6u/wpI gRn6IEz9+3pFzTSWrMzb3oX+Le/Hi+KR5nfd21qUCjhb4lR60UL8CzdTHZvMG0tT VGOFLQE748xIGcWUj9IEv4skPmAGVqX5WYnIMQIkZa883vD5kNdlm3ade22JkWCx 21ucP+9pD/7bkL7Qtt8rln1OywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6Lfxm7 A5ebCRfIO4MrA2zOmkneMB8GA1UdIwQYMBaAFNyuhxt8XLebx+z2ebOy08lWp9nj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy80OTcyMDk5Njgx NDUxMUVCQjJERDVENEJDNEY5QUUwMi8zSzZIRzN4Y3Q1dkg3UFo1czdMVHlWYW4y ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLNkhHM3hjdDV2SDdQWjVzN0xUeVZhbjJlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBQy80OTcyMDk5NjgxNDUxMUVCQjJERDVENEJDNEY5QUUwMi8zSzZIRzN4Y3Q1 dkg3UFo1czdMVHlWYW4yZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmTZ7RhNFjwR5WzkmMdgtLpBUlb3otwKNayP0SMGXtUdLRuQ0hMpYB sUDDf6EWZEV6QXqUMMagwBQoyEEi+j6TnyvkmDBfa4aiygbbAMNr+hOHGspvZ6mD OhExsUIRtLieFtvIczFJjS1EsVpYa+Mh9xFcoIaLXLUaOHAEFIv0/vegzjPsELgy fFaflfeqAfg+NsjE0btcdiEdh1mpUO0H+Rn4cffLRgG1+EzU0XKZ9PItzJF2bJwi KGtCPaVHoZ1NLZzefE+r4kNaLbjUyzIeEZttko/V6OkjNPLU3EHy5MtoGHvWjbxX hT0ZZCiWBPtdYad16jwB2x4q3X310Fuh -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:26 2025 by rpki-client