This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft File: MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json) Hash identifier: SYw7lo3dcVMYBEVNNSBlm2UT2xeR9DzW/2Lxv+aMP5Q= Subject key identifier: CD:E2:A7:D1:BE:ED:00:4E:C4:C8:41:2E:23:7D:E0:E3:59:22:43:C8 Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Certificate serial: 14B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft Manifest number: 14A6 Signing time: Mon 22 Dec 2025 16:36:14 +0000 Manifest this update: Mon 22 Dec 2025 16:36:14 +0000 Manifest next update: Mon 29 Dec 2025 16:36:14 +0000 Files and hashes: 1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: oRh6n/7OpUqm1QjCG0q6AI3IJ/pzWsoB3WL+emd/OXQ=) 2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: +fYcXUUOxqjne/yMdR0BaLunZ8SANdMDHI2Ya9W1pUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5297 (0x14b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Validity Not Before: Dec 22 16:36:14 2025 GMT Not After : Dec 29 16:36:14 2025 GMT Subject: CN=6949737e-ba58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e4:9b:55:04:51:53:2d:20:a7:8d:6f:5a:58: 00:1b:42:77:b3:4a:90:e2:93:34:03:61:d6:28:8a: 9c:d8:56:92:ba:d9:11:2f:d9:ce:72:12:82:08:81: 18:1b:e9:4d:ea:a7:4e:93:ce:89:d4:22:b3:d4:3b: 13:7b:1c:73:a7:77:bc:75:c1:00:6a:ed:da:56:9c: 4a:fb:dd:fa:28:e8:89:62:be:cf:d9:59:9d:41:64: 57:93:88:0c:9c:f0:bd:19:2c:b9:e0:a6:d2:f4:fa: a9:5d:b6:a1:ad:76:59:91:f7:ce:92:53:f5:3e:ee: 52:a2:26:8e:66:0f:77:06:b9:e7:79:53:c2:cd:30: bd:0a:7d:ab:78:e2:44:ef:2b:77:96:1e:69:84:f5: 93:33:57:3d:74:22:9f:86:33:cd:b8:9f:00:89:b3: 50:00:66:00:2f:c1:e8:be:a5:94:e3:92:21:bf:94: 10:d3:99:b5:3e:cf:e7:95:e2:db:81:4a:eb:4c:2f: a1:98:96:82:4d:d0:3c:61:c2:e0:ee:94:18:e6:a0: 48:9d:15:06:24:8f:92:5a:e1:7c:5b:a1:ba:d4:04: db:29:74:4b:bb:a0:2a:ff:d8:d6:e1:a8:61:70:00: be:4c:06:38:6e:da:82:e7:e8:cf:b2:8c:58:d3:ca: cb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E2:A7:D1:BE:ED:00:4E:C4:C8:41:2E:23:7D:E0:E3:59:22:43:C8 X509v3 Authority Key Identifier: keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:e6:1a:6b:5d:34:ee:7d:b4:12:e3:1f:35:12:fb:47:48:11: 4f:96:27:c6:4f:70:48:36:5d:f7:ce:61:5c:54:be:73:e8:e5: c1:d0:e5:00:1d:c1:ce:74:4d:8b:3a:56:ee:77:ab:3e:f6:1e: f7:3f:e6:bc:85:20:66:f6:b7:79:06:42:dd:4a:59:28:15:8d: 61:54:90:b8:37:8f:e2:6b:b9:cd:a0:09:f1:52:42:02:d2:bc: 20:c9:1b:1c:57:2c:47:d5:6b:77:b7:b6:d9:35:d9:6b:15:51: 7f:4d:68:f0:3e:f0:d4:38:1c:7c:db:be:bc:7e:90:04:78:cf: 0e:8a:bd:33:8f:0b:28:be:b6:b3:2b:78:a0:d9:a1:ef:c5:a1: 13:bb:36:4e:46:83:34:86:ef:8b:6d:41:16:87:d1:c8:68:c9: d5:71:ea:07:8f:b1:a6:57:9a:2f:f8:9b:4e:58:ed:93:b3:56: 8e:36:7f:d9:8c:ae:85:1b:1b:c7:76:3a:eb:0b:71:fd:19:5e: 67:01:5b:fb:76:af:8e:1e:22:81:93:50:c0:5a:11:7b:75:53: 67:75:14:77:0e:ef:84:da:e3:26:17:76:b3:fb:b8:6d:0d:a6: 7d:ab:4a:db:30:6c:03:65:69:05:ad:69:df:fd:11:02:47:ae: 7e:8d:7d:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz QTUzOTcwMjQwHhcNMjUxMjIyMTYzNjE0WhcNMjUxMjI5MTYzNjE0WjAYMRYwFAYD VQQDDA02OTQ5NzM3ZS1iYTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuSbVQRRUy0gp41vWlgAG0J3s0qQ4pM0A2HWKIqc2FaSutkRL9nOchKCCIEY G+lN6qdOk86J1CKz1DsTexxzp3e8dcEAau3aVpxK+936KOiJYr7P2VmdQWRXk4gM nPC9GSy54KbS9PqpXbahrXZZkffOklP1Pu5SoiaOZg93BrnneVPCzTC9Cn2reOJE 7yt3lh5phPWTM1c9dCKfhjPNuJ8AibNQAGYAL8HovqWU45Ihv5QQ05m1Ps/nleLb gUrrTC+hmJaCTdA8YcLg7pQY5qBInRUGJI+SWuF8W6G61ATbKXRLu6Aq/9jW4ahh cAC+TAY4btqC5+jPsoxY08rLowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3ip9G+ 7QBOxMhBLiN94ONZIkPIMB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0 RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw czg5NVBRRXZlTjA2VTVjQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg5hprXTTufbQS4x81EvtHSBFPlifGT3BINl33zmFcVL5z6OXB0OUA HcHOdE2LOlbud6s+9h73P+a8hSBm9rd5BkLdSlkoFY1hVJC4N4/ia7nNoAnxUkIC 0rwgyRscVyxH1Wt3t7bZNdlrFVF/TWjwPvDUOBx82768fpAEeM8Oir0zjwsovraz K3ig2aHvxaETuzZORoM0hu+LbUEWh9HIaMnVceoHj7GmV5ov+JtOWO2Ts1aONn/Z jK6FGxvHdjrrC3H9GV5nAVv7dq+OHiKBk1DAWhF7dVNndRR3Du+E2uMmF3az+7ht DaZ9q0rbMGwDZWkFrWnf/RECR65+jX2N -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:31 2025 by rpki-client