This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft File: 6DpZuIHOHlc10a3c2LrgXlO4U9A.mft (raw, json) Hash identifier: 0xj2PT/UZMGjA4ELlym4PykKvo9MnDlAyZ+wLJR4R7g= Subject key identifier: 36:E0:F4:C6:78:1E:28:90:E8:F1:84:86:31:C4:5B:7A:3A:0C:06:9D Authority key identifier: E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0 Certificate issuer: /CN=A91A3BB1/serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0 Certificate serial: 3530 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft Manifest number: 350A Signing time: Mon 22 Dec 2025 14:46:55 +0000 Manifest this update: Mon 22 Dec 2025 14:46:54 +0000 Manifest next update: Mon 29 Dec 2025 14:46:54 +0000 Files and hashes: 1: 6DpZuIHOHlc10a3c2LrgXlO4U9A.crl (hash: UDQpzbERftUgPC27ooONpSMQg/tN2NPir3FkQG7bmOw=) 2: 0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa (hash: IB+Pst0/hjjnT/aD3F4nsmgPYgJjXgVIAOW0RdKrpkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13616 (0x3530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3BB1, serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0 Validity Not Before: Dec 22 14:46:54 2025 GMT Not After : Dec 29 14:46:54 2025 GMT Subject: CN=694959df-7178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2b:6b:e6:23:7b:59:0c:d3:ee:aa:a0:aa:6a: 64:77:0d:af:d6:73:ad:6b:be:71:a1:7c:16:40:40: 02:8c:e7:6d:dd:30:0f:7a:b6:e8:bb:8e:c5:a3:0f: 74:b0:45:3f:b3:cc:00:6e:79:d5:17:f7:4a:3a:15: ee:8e:62:77:68:87:99:38:43:d2:1f:16:15:e6:f8: dc:82:7f:a3:b5:19:87:d9:21:6a:ec:57:b5:e7:6f: db:b5:3f:b2:b1:5f:d4:b4:c3:4e:30:37:85:62:94: 25:d5:92:4f:83:5a:f3:aa:c1:9a:59:19:a4:3e:f9: d6:dd:05:6f:5c:63:79:c0:64:71:d4:bc:2b:4f:1d: 46:fc:12:6b:94:d6:36:1e:3d:c7:8f:12:82:c0:e7: db:57:a0:30:ef:6e:b0:f2:92:70:39:af:7d:1d:d1: d7:90:8e:22:15:a8:64:8d:e7:a8:39:fa:f4:db:65: c1:0c:81:95:96:cd:51:a1:39:d8:b4:8e:69:3d:7e: 09:52:9a:48:87:18:5d:37:45:f0:06:54:0e:36:b3: f6:d3:7b:c0:40:94:d2:dd:7d:f3:dc:93:2a:fc:b8: c6:3f:7a:ce:60:8f:4e:45:9a:25:1b:a6:ad:d7:db: 4b:0b:13:d5:51:c8:f6:ee:2e:ee:db:e7:dc:4f:9c: 2b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E0:F4:C6:78:1E:28:90:E8:F1:84:86:31:C4:5B:7A:3A:0C:06:9D X509v3 Authority Key Identifier: keyid:E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:48:b8:e1:42:9b:b7:67:e2:88:87:8d:71:ef:7b:c4:1b:34: 03:3f:48:e6:31:1c:8a:c8:ad:74:85:45:9a:58:ba:4a:19:74: db:0e:96:02:61:54:ff:5c:81:f6:e5:34:4c:9c:d2:16:01:52: 60:37:f0:5d:d7:92:45:05:0c:d7:48:66:37:2d:53:08:e5:e5: 8e:a4:95:b0:d8:14:cb:e5:fc:d2:30:59:dd:7e:6d:6f:19:2b: cf:df:42:a5:0e:ec:bc:4e:47:bf:93:c8:d4:d7:a1:f4:5a:4a: 89:8a:6b:13:e9:8c:59:c7:3b:e5:27:be:13:55:90:11:cf:eb: b6:c4:27:d9:93:bc:75:29:ec:ad:0a:7d:c4:f0:b3:56:55:86: f8:ce:18:ca:8d:90:9a:2a:a1:e2:3d:31:10:77:75:dc:35:ac: 78:a2:8f:0a:c7:4f:7b:40:f4:95:d8:3b:a4:32:03:ba:24:8d: e4:34:fa:a5:bf:2c:d6:fe:43:64:ed:4f:9d:ae:bb:92:c8:35: bf:9f:f7:6c:1d:41:92:59:c2:4f:2f:36:58:7b:1c:80:c4:c4: 03:0e:76:95:5e:6a:f5:73:2f:46:b0:6d:4b:ff:04:bc:3c:d4: 5a:7c:44:38:e2:a3:bf:f0:98:5c:81:38:6d:cb:70:93:44:6b: 07:1a:41:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNCQjExMTAvBgNVBAUTKEU4M0E1OUI4ODFDRTFFNTczNUQxQUREQ0Q4QkFFMDVF NTNCODUzRDAwHhcNMjUxMjIyMTQ0NjU0WhcNMjUxMjI5MTQ0NjU0WjAYMRYwFAYD VQQDDA02OTQ5NTlkZi03MTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwitr5iN7WQzT7qqgqmpkdw2v1nOta75xoXwWQEACjOdt3TAPerbou47Fow90 sEU/s8wAbnnVF/dKOhXujmJ3aIeZOEPSHxYV5vjcgn+jtRmH2SFq7Fe152/btT+y sV/UtMNOMDeFYpQl1ZJPg1rzqsGaWRmkPvnW3QVvXGN5wGRx1LwrTx1G/BJrlNY2 Hj3HjxKCwOfbV6Aw726w8pJwOa99HdHXkI4iFahkjeeoOfr022XBDIGVls1RoTnY tI5pPX4JUppIhxhdN0XwBlQONrP203vAQJTS3X3z3JMq/LjGP3rOYI9ORZolG6at 19tLCxPVUcj27i7u2+fcT5wrdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbg9MZ4 HiiQ6PGEhjHEW3o6DAadMB8GA1UdIwQYMBaAFOg6WbiBzh5XNdGt3Ni64F5TuFPQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0JCMS9FQTFCMjJFMDFE OTYxMUUyOTgwNkM1N0YwOEIwMkNEMi82RHBadUlIT0hsYzEwYTNjMkxyZ1hsTzRV OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZEcFp1SUhPSGxjMTBhM2MyTHJnWGxPNFU5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0JCMS9FQTFCMjJFMDFEOTYxMUUyOTgwNkM1N0YwOEIwMkNEMi82RHBadUlIT0hs YzEwYTNjMkxyZ1hsTzRVOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQSLjhQpu3Z+KIh41x73vEGzQDP0jmMRyKyK10hUWaWLpKGXTbDpYC YVT/XIH25TRMnNIWAVJgN/Bd15JFBQzXSGY3LVMI5eWOpJWw2BTL5fzSMFndfm1v GSvP30KlDuy8Tke/k8jU16H0WkqJimsT6YxZxzvlJ74TVZARz+u2xCfZk7x1Keyt Cn3E8LNWVYb4zhjKjZCaKqHiPTEQd3XcNax4oo8Kx097QPSV2DukMgO6JI3kNPql vyzW/kNk7U+drruSyDW/n/dsHUGSWcJPLzZYexyAxMQDDnaVXmr1cy9GsG1L/wS8 PNRafEQ44qO/8JhcgThty3CTRGsHGkHN -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:32 2025 by rpki-client