This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft File: C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft (raw, json) Hash identifier: qjbGoxaU9Am7UQZvdqqyGAUJQXYpSuhfL3VxgZ74Fh8= Subject key identifier: D5:05:D6:29:59:B7:5A:DF:87:C2:BD:55:08:C4:B0:F8:1B:D3:FF:C8 Authority key identifier: 0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72 Certificate issuer: /CN=A91868EC/serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft Manifest number: 016F Signing time: Tue 23 Dec 2025 02:52:31 +0000 Manifest this update: Tue 23 Dec 2025 02:52:31 +0000 Manifest next update: Tue 30 Dec 2025 02:52:31 +0000 Files and hashes: 1: C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl (hash: YjlM1dLDyqlGqFjvaOC0W+nE4hHMzuNd7FHD+pTqVsI=) 2: 8BDE35DAADB511EEA223FA64C4F9AE02.roa (hash: 5Euxmdyfg42rk8kh2tCEWEITcp7TGJlbx40uBqp19vc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91868EC, serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772 Validity Not Before: Dec 23 02:52:31 2025 GMT Not After : Dec 30 02:52:31 2025 GMT Subject: CN=694a03ef-6701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e4:40:6f:ce:c0:31:3a:c6:09:0f:65:4e:a6: 97:af:5b:d8:1b:a2:8a:5e:c4:68:a2:91:e2:c5:74: cf:3c:45:7d:55:e1:fb:63:15:cb:f0:42:b6:e6:4b: b4:02:1f:b0:58:69:14:be:b3:67:1f:12:f5:db:e9: cd:cb:84:9b:dd:01:40:e7:ea:bb:7a:cf:8a:81:c8: fd:78:4e:0b:7c:8f:76:e1:97:6f:a1:52:3a:dd:c1: 9d:7f:9c:98:53:fd:80:f3:cc:05:16:62:51:96:f1: c8:eb:8d:48:e1:0b:bb:cc:88:b4:71:71:21:1b:d3: be:42:ad:c8:36:5b:c0:f8:1a:8b:44:4d:a1:2a:76: aa:c9:e8:81:ab:b5:cf:18:9b:b1:2b:ce:bd:35:8a: dc:f9:fe:7d:8d:27:7a:e7:04:73:f9:05:9a:7e:5f: fd:e4:25:63:dc:15:0a:85:8d:11:12:13:b1:ea:cb: 25:80:c6:58:a7:ff:bb:db:60:99:64:e3:b7:5d:e1: a5:67:89:e6:d9:41:06:7a:a2:81:20:01:5a:71:8c: 76:9f:13:43:c9:16:a7:68:67:b9:29:69:d0:ff:95: e7:6d:5b:7d:44:93:01:ea:17:14:22:85:d6:92:ed: fe:b5:1b:bf:5a:2b:87:3a:2c:86:03:6f:db:3e:7d: 95:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:05:D6:29:59:B7:5A:DF:87:C2:BD:55:08:C4:B0:F8:1B:D3:FF:C8 X509v3 Authority Key Identifier: keyid:0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:77:1a:cd:5b:52:4c:5b:60:76:1d:15:aa:1a:eb:4d:9a:70: 37:d7:f4:b0:62:f5:72:1c:0c:00:c1:af:32:3a:00:5d:78:a2: 5d:85:ad:c6:b1:0d:e8:f8:d5:4d:94:5c:eb:a6:74:b9:f7:6d: f1:e9:47:de:c0:f7:f5:26:a0:f6:10:76:f3:7c:e3:97:3f:1e: 67:f7:eb:3c:20:4d:58:a3:b9:85:a7:51:72:5d:61:23:7a:62: 3f:ba:2a:5b:8e:88:0f:41:4f:7d:36:aa:1a:a8:9f:c4:eb:ac: eb:42:77:36:2c:b7:0f:95:c3:0f:9a:da:d0:72:32:3e:4d:d8: 22:48:e9:93:56:a9:34:c8:da:85:ae:65:26:26:fb:f5:71:a8: 6a:50:cf:79:0f:3c:77:a8:be:a0:b4:7b:88:d3:af:19:5c:0b: 6e:ed:42:e1:34:99:17:40:84:57:92:34:ac:c1:79:3d:29:9a: 24:25:7c:ee:be:1e:7c:57:c7:7f:db:93:87:c4:19:a2:11:ae: a9:04:c4:da:c0:eb:b5:27:33:98:8e:d5:53:1f:9c:02:f1:31: ef:2b:8e:fa:47:26:7a:4a:4c:42:48:10:b4:1d:b0:af:1e:52: 70:9a:43:2f:4d:90:53:65:0d:70:e6:2c:44:69:70:b6:a8:18: 40:70:45:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4RUMxMTAvBgNVBAUTKDBCQThCQTQwRjg5NzM0Q0MzRjNBRTNFRDY3NzRDQkQ4 NDNFMkU3NzIwHhcNMjUxMjIzMDI1MjMxWhcNMjUxMjMwMDI1MjMxWjAYMRYwFAYD VQQDDA02OTRhMDNlZi02NzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3eRAb87AMTrGCQ9lTqaXr1vYG6KKXsRoopHixXTPPEV9VeH7YxXL8EK25ku0 Ah+wWGkUvrNnHxL12+nNy4Sb3QFA5+q7es+Kgcj9eE4LfI924ZdvoVI63cGdf5yY U/2A88wFFmJRlvHI641I4Qu7zIi0cXEhG9O+Qq3INlvA+BqLRE2hKnaqyeiBq7XP GJuxK869NYrc+f59jSd65wRz+QWafl/95CVj3BUKhY0REhOx6sslgMZYp/+722CZ ZOO3XeGlZ4nm2UEGeqKBIAFacYx2nxNDyRanaGe5KWnQ/5XnbVt9RJMB6hcUIoXW ku3+tRu/WiuHOiyGA2/bPn2VXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUF1ilZ t1rfh8K9VQjEsPgb0//IMB8GA1UdIwQYMBaAFAuoukD4lzTMPzrj7Wd0y9hD4udy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjhFQy9FMDU3RTJCMEFE QjQxMUVFQkVBN0U1NjNDNEY5QUUwMi9DNmk2UVBpWE5Nd19PdVB0WjNUTDJFUGk1 M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2aTZRUGlYTk13X091UHRaM1RMMkVQaTUzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjhFQy9FMDU3RTJCMEFEQjQxMUVFQkVBN0U1NjNDNEY5QUUwMi9DNmk2UVBpWE5N d19PdVB0WjNUTDJFUGk1M0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLdxrNW1JMW2B2HRWqGutNmnA31/SwYvVyHAwAwa8yOgBdeKJdha3G sQ3o+NVNlFzrpnS5923x6UfewPf1JqD2EHbzfOOXPx5n9+s8IE1Yo7mFp1FyXWEj emI/uipbjogPQU99NqoaqJ/E66zrQnc2LLcPlcMPmtrQcjI+TdgiSOmTVqk0yNqF rmUmJvv1cahqUM95Dzx3qL6gtHuI068ZXAtu7ULhNJkXQIRXkjSswXk9KZokJXzu vh58V8d/25OHxBmiEa6pBMTawOu1JzOYjtVTH5wC8THvK476RyZ6SkxCSBC0HbCv HlJwmkMvTZBTZQ1w5ixEaXC2qBhAcEUt -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:42 2025 by rpki-client