This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft File: z6g6HLFaT2Y_z9bITI4K00wOBnM.mft (raw, json) Hash identifier: SOZTFCVJIIHQqI9O123hktGGPTFjGFln1hl/dVKHznU= Subject key identifier: 18:15:D3:1F:D7:0C:50:82:D9:8B:45:0D:D8:CF:BB:15:3D:71:BD:C1 Authority key identifier: CF:A8:3A:1C:B1:5A:4F:66:3F:CF:D6:C8:4C:8E:0A:D3:4C:0E:06:73 Certificate issuer: /CN=A91AA5F1/serialNumber=CFA83A1CB15A4F663FCFD6C84C8E0AD34C0E0673 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft Manifest number: 25 Signing time: Tue 23 Dec 2025 06:32:26 +0000 Manifest this update: Tue 23 Dec 2025 06:32:25 +0000 Manifest next update: Tue 30 Dec 2025 06:32:25 +0000 Files and hashes: 1: z6g6HLFaT2Y_z9bITI4K00wOBnM.crl (hash: ga4tOlIAQYVvrVygpSQ3zdf+m2cphSHblzC2Fltqm70=) 2: C56E767CA89811F08959A364C4F9AE02.roa (hash: 3h7NekD5uJiBtHmPr+ql3V5I4Pzxe7a+UwFYXogXAM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.crl rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA5F1, serialNumber=CFA83A1CB15A4F663FCFD6C84C8E0AD34C0E0673 Validity Not Before: Dec 23 06:32:25 2025 GMT Not After : Dec 30 06:32:25 2025 GMT Subject: CN=694a3779-1136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4b:4b:32:15:71:b1:01:f4:4d:46:79:11:75: c0:09:1c:49:9f:d0:9e:8f:f5:5a:c7:52:14:07:60: 83:a6:8f:1c:ec:13:77:f4:f7:3f:d7:a6:04:7e:6c: 60:c9:bd:73:fe:43:ef:f8:12:1f:84:6f:67:72:01: f5:d1:29:dc:90:22:a3:b3:4e:c3:c6:4b:7e:e5:38: 72:68:9b:2b:a1:49:5b:78:c0:c6:17:d7:4d:ff:fb: 45:5a:31:0b:b0:bb:fc:d3:33:cd:4e:b9:d6:9c:1d: 00:8e:18:9a:5e:26:41:76:f0:dd:8d:86:80:06:5f: ca:d5:3b:e3:0b:44:ca:c5:21:90:7c:77:7a:89:7e: 1f:01:f7:5c:6e:3a:a2:aa:36:1c:11:eb:58:55:e5: e9:81:55:bb:e7:08:d8:21:ab:59:32:3e:96:49:54: 13:a3:7e:dd:87:f3:3f:a0:38:bb:a2:d7:85:1f:d3: 98:a8:90:a1:19:bb:d3:0e:17:74:0c:48:20:0d:60: 32:ea:91:cb:35:b8:18:30:9f:5e:d4:d6:ea:15:03: f8:ca:bf:31:e8:f0:e9:12:a7:4b:97:10:9f:4d:d7: 6c:79:1d:ab:8b:1e:5c:bb:3c:bf:da:e4:10:f6:f9: f7:94:92:29:52:5d:fc:df:69:98:43:f0:3e:11:77: ad:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:15:D3:1F:D7:0C:50:82:D9:8B:45:0D:D8:CF:BB:15:3D:71:BD:C1 X509v3 Authority Key Identifier: keyid:CF:A8:3A:1C:B1:5A:4F:66:3F:CF:D6:C8:4C:8E:0A:D3:4C:0E:06:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:0e:33:c3:c3:86:f9:0a:a2:63:af:e6:69:a8:28:39:d0:83: bd:20:aa:b7:a4:56:dc:f0:87:b7:70:f7:3e:89:8e:cf:dc:72: 99:fc:81:02:06:4f:8f:ef:65:ed:aa:fd:a3:42:6d:df:d0:67: c2:9e:8b:ce:fe:01:e7:d8:75:bb:d7:22:42:7b:ed:d3:f3:02: 52:7a:99:e6:6f:b4:8b:3d:55:34:0b:17:22:b6:a1:dd:24:92: cb:0e:6f:1d:b7:3f:80:22:8d:4f:b0:26:d3:ac:06:92:ab:76: a1:e1:d8:e3:79:60:30:cc:ab:65:85:5f:9d:69:c2:a0:df:65: a4:b8:f1:93:79:db:54:5d:52:92:6b:3c:94:cb:46:b1:29:25: ba:4d:58:ef:97:b9:e0:27:f6:4d:7f:24:d6:25:56:e0:65:d0: 53:ae:0e:5a:5f:f2:94:76:8e:12:e3:ab:d7:84:ed:9f:b1:28: 5f:77:52:45:bb:2a:12:3f:d2:ee:79:2f:46:c7:12:70:ff:44: 99:5c:b0:38:e0:ef:b6:0f:ad:d3:8d:08:1d:9e:45:06:19:3f: e1:19:0e:ee:a8:65:56:58:38:37:32:12:14:b5:87:27:f0:bc: 14:cb:0e:38:48:2f:08:60:86:d5:c5:3a:b2:8b:c5:a1:a3:34: bb:19:8b:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTVGMTExMC8GA1UEBRMoQ0ZBODNBMUNCMTVBNEY2NjNGQ0ZENkM4NEM4RTBBRDM0 QzBFMDY3MzAeFw0yNTEyMjMwNjMyMjVaFw0yNTEyMzAwNjMyMjVaMBgxFjAUBgNV BAMMDTY5NGEzNzc5LTExMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTS0syFXGxAfRNRnkRdcAJHEmf0J6P9VrHUhQHYIOmjxzsE3f09z/XpgR+bGDJ vXP+Q+/4Eh+Eb2dyAfXRKdyQIqOzTsPGS37lOHJomyuhSVt4wMYX103/+0VaMQuw u/zTM81OudacHQCOGJpeJkF28N2NhoAGX8rVO+MLRMrFIZB8d3qJfh8B91xuOqKq NhwR61hV5emBVbvnCNghq1kyPpZJVBOjft2H8z+gOLui14Uf05iokKEZu9MOF3QM SCANYDLqkcs1uBgwn17U1uoVA/jKvzHo8OkSp0uXEJ9N12x5HauLHly7PL/a5BD2 +feUkilSXfzfaZhD8D4Rd61/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGBXTH9cM UILZi0UN2M+7FT1xvcEwHwYDVR0jBBgwFoAUz6g6HLFaT2Y/z9bITI4K00wOBnMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBNUYxL0VEM0VDMDA0QTg5 NzExRjA4M0Q5M0E2M0M0RjlBRTAyL3o2ZzZITEZhVDJZX3o5YklUSTRLMDB3T0Ju TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvejZnNkhMRmFUMllfejliSVRJNEswMHdPQm5NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB NUYxL0VEM0VDMDA0QTg5NzExRjA4M0Q5M0E2M0M0RjlBRTAyL3o2ZzZITEZhVDJZ X3o5YklUSTRLMDB3T0JuTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFAOM8PDhvkKomOv5mmoKDnQg70gqrekVtzwh7dw9z6Jjs/ccpn8gQIG T4/vZe2q/aNCbd/QZ8Kei87+AefYdbvXIkJ77dPzAlJ6meZvtIs9VTQLFyK2od0k kssObx23P4AijU+wJtOsBpKrdqHh2ON5YDDMq2WFX51pwqDfZaS48ZN521RdUpJr PJTLRrEpJbpNWO+XueAn9k1/JNYlVuBl0FOuDlpf8pR2jhLjq9eE7Z+xKF93UkW7 KhI/0u55L0bHEnD/RJlcsDjg77YPrdONCB2eRQYZP+EZDu6oZVZYODcyEhS1hyfw vBTLDjhILwhghtXFOrKLxaGjNLsZiyY= -----END CERTIFICATE-----Generated at Wed Dec 24 15:45:06 2025 by rpki-client