This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft File: a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft (raw, json) Hash identifier: kRUx7Q8TjKOysCfXbPIgxO2KMllm8tKf3vaGXHUf+Og= Subject key identifier: 01:EB:59:A7:B9:62:C2:B3:FB:2F:66:DC:98:97:02:46:1E:39:7F:63 Authority key identifier: 6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E Certificate issuer: /CN=A91977B8/serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft Manifest number: 0156 Signing time: Tue 23 Dec 2025 03:16:31 +0000 Manifest this update: Tue 23 Dec 2025 03:16:31 +0000 Manifest next update: Tue 30 Dec 2025 03:16:31 +0000 Files and hashes: 1: a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl (hash: p7c6rwsb1hO5y+GPdSfeUiMoRFFHA3Aqm95PGx/omm4=) 2: B35DF2B8FBA211EEA8D1C351C4F9AE02.roa (hash: zfwutZduKqp+OFtvgPQ9BbGwso4D1FrRlH6RE6jDpUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91977B8, serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E Validity Not Before: Dec 23 03:16:31 2025 GMT Not After : Dec 30 03:16:31 2025 GMT Subject: CN=694a098f-d402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:74:c5:01:f4:ee:9b:ea:53:4a:79:d7:b7:6a: 4f:03:be:ae:2c:95:d3:9f:ca:73:74:87:a7:80:be: ac:8c:c7:1f:17:e0:a2:51:87:e6:bd:e5:2b:cb:f1: d2:0f:73:5e:40:bd:3d:a5:5e:40:b8:a6:35:b9:33: 59:b6:20:38:73:e9:55:28:b3:b8:e0:a0:ca:d4:ca: 43:ba:e8:77:8f:ee:1e:c7:dd:c5:02:6d:da:8d:a3: 88:2d:c8:5b:40:1a:74:5b:d8:0e:97:9e:de:29:e7: 14:d2:52:79:f8:6f:d3:1b:79:9f:86:64:6d:45:88: 40:c3:ab:f6:54:1a:35:a6:af:47:b4:b0:6c:d8:22: b2:81:2f:6e:9f:97:af:6c:08:72:79:d4:6e:e9:e6: b5:0b:e6:67:f6:d0:24:68:4f:64:9b:89:d3:6f:19: 8e:54:13:69:38:1c:e2:50:c0:47:52:80:fe:02:7a: bf:6f:9b:62:62:eb:38:53:56:af:b5:b2:e0:89:3a: 52:cb:9f:31:f6:f1:7a:ab:6a:6a:17:3e:27:8f:03: b3:71:14:76:87:0a:e7:65:88:df:85:ec:69:7c:b1: 64:17:7e:74:d2:a4:95:42:37:af:50:93:ea:b0:26: 69:cd:6d:6a:95:1d:25:ba:3e:b5:07:c7:56:8f:8d: ef:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EB:59:A7:B9:62:C2:B3:FB:2F:66:DC:98:97:02:46:1E:39:7F:63 X509v3 Authority Key Identifier: keyid:6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:29:f8:09:cf:b1:d3:56:b1:c2:32:a8:05:06:24:66:b0:0f: 31:76:a1:69:08:37:71:df:aa:44:d7:74:2b:36:05:d8:16:22: 58:ce:94:90:dc:89:f5:f6:05:da:2a:b9:c6:69:9f:18:4a:9e: 05:21:2f:b6:15:c8:99:93:b2:10:e1:ce:20:11:d3:51:c5:d5: a0:93:c9:85:8f:f5:be:92:28:d3:5e:9a:b1:f5:ef:8e:e3:de: 58:42:a6:2a:e7:0d:df:4a:50:e2:fa:c3:a4:02:c7:71:77:24: 4e:df:6b:6a:4b:57:75:4f:fc:49:a2:68:88:5d:d7:ec:47:a9: 7c:94:27:3e:32:c4:18:93:2d:80:50:4b:66:0e:89:10:72:37: a1:2e:9e:96:ff:97:3d:c0:5f:66:71:30:0b:45:e7:e9:b2:99: 94:c9:10:3f:ea:f3:c0:8b:ad:6e:4a:4f:5f:25:c6:79:be:35: b9:fc:61:85:0f:c0:42:f0:81:0a:2d:0a:a4:27:15:bb:df:5c: 3e:05:e7:de:a1:1b:22:44:bc:01:3b:71:1a:14:91:55:1f:be: 50:84:65:f0:8e:6e:dd:bb:8d:6b:ba:12:45:88:a0:e9:7d:78: ac:b9:23:33:a3:bf:31:bd:25:57:cb:a9:7f:9e:75:62:5c:50: 30:4a:a6:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc3QjgxMTAvBgNVBAUTKDZCQTk5RUQ2MzkxQTY3Q0NBNjEwRTU2NUY0NTNFQjA5 MTI1MTRGMEUwHhcNMjUxMjIzMDMxNjMxWhcNMjUxMjMwMDMxNjMxWjAYMRYwFAYD VQQDDA02OTRhMDk4Zi1kNDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXTFAfTum+pTSnnXt2pPA76uLJXTn8pzdIengL6sjMcfF+CiUYfmveUry/HS D3NeQL09pV5AuKY1uTNZtiA4c+lVKLO44KDK1MpDuuh3j+4ex93FAm3ajaOILchb QBp0W9gOl57eKecU0lJ5+G/TG3mfhmRtRYhAw6v2VBo1pq9HtLBs2CKygS9un5ev bAhyedRu6ea1C+Zn9tAkaE9km4nTbxmOVBNpOBziUMBHUoD+Anq/b5tiYus4U1av tbLgiTpSy58x9vF6q2pqFz4njwOzcRR2hwrnZYjfhexpfLFkF3500qSVQjevUJPq sCZpzW1qlR0luj61B8dWj43vLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHrWae5 YsKz+y9m3JiXAkYeOX9jMB8GA1UdIwQYMBaAFGupntY5GmfMphDlZfRT6wkSUU8O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzdCOC8wQUIwNzQwNEUx RjAxMUVFOTAxQTYwODVDNEY5QUUwMi9hNm1lMWprYVo4eW1FT1ZsOUZQckNSSlJU dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2bWUxamthWjh5bUVPVmw5RlByQ1JKUlR3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzdCOC8wQUIwNzQwNEUxRjAxMUVFOTAxQTYwODVDNEY5QUUwMi9hNm1lMWprYVo4 eW1FT1ZsOUZQckNSSlJUdzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNKfgJz7HTVrHCMqgFBiRmsA8xdqFpCDdx36pE13QrNgXYFiJYzpSQ 3In19gXaKrnGaZ8YSp4FIS+2FciZk7IQ4c4gEdNRxdWgk8mFj/W+kijTXpqx9e+O 495YQqYq5w3fSlDi+sOkAsdxdyRO32tqS1d1T/xJomiIXdfsR6l8lCc+MsQYky2A UEtmDokQcjehLp6W/5c9wF9mcTALRefpspmUyRA/6vPAi61uSk9fJcZ5vjW5/GGF D8BC8IEKLQqkJxW731w+BefeoRsiRLwBO3EaFJFVH75QhGXwjm7du41ruhJFiKDp fXisuSMzo78xvSVXy6l/nnViXFAwSqYa -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:42 2025 by rpki-client