This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft File: 6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft (raw, json) Hash identifier: HEm9zUCkI+R0SdPGrXegeFtUB3dg2VoxsH22R7dEzPw= Subject key identifier: 2B:87:04:C9:B4:66:C6:4F:20:D9:5E:B5:92:82:D7:35:BB:DC:22:DE Authority key identifier: E8:B5:EC:24:8D:CB:13:49:0B:C2:BD:EB:D6:4B:39:0D:D1:CB:A5:09 Certificate issuer: /CN=A91BF2DB/serialNumber=E8B5EC248DCB13490BC2BDEBD64B390DD1CBA509 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LXsJI3LE0kLwr3r1ks5DdHLpQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft Manifest number: 15 Signing time: Tue 23 Dec 2025 06:44:21 +0000 Manifest this update: Tue 23 Dec 2025 06:44:21 +0000 Manifest next update: Tue 30 Dec 2025 06:44:21 +0000 Files and hashes: 1: 6LXsJI3LE0kLwr3r1ks5DdHLpQk.crl (hash: MVTF6BcESwPsa+b/ZLN7vtqmvUJ68is8cNm2k3ot80Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.crl rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LXsJI3LE0kLwr3r1ks5DdHLpQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF2DB, serialNumber=E8B5EC248DCB13490BC2BDEBD64B390DD1CBA509 Validity Not Before: Dec 23 06:44:21 2025 GMT Not After : Dec 30 06:44:21 2025 GMT Subject: CN=694a3a45-e4df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:eb:6b:13:bb:49:2d:1e:68:2d:f2:c5:57:12: 28:e1:5d:45:b9:00:f1:11:ac:5c:a7:5f:ad:20:de: 6e:74:7c:1d:cf:35:12:bb:74:cf:ab:be:c5:01:d4: e4:4c:bd:43:79:bd:6e:b7:eb:96:49:79:17:49:57: 45:9e:1d:d3:e5:54:98:82:72:95:59:8f:c3:96:7a: e0:fe:63:b4:d3:5c:6b:5e:5e:d5:a4:9e:d4:e5:30: 0d:52:e6:a0:33:27:48:86:1b:27:33:9a:a5:e7:26: d1:8f:f8:1e:c0:a2:49:6c:c8:17:27:e6:d1:95:b2: 55:38:01:5c:2c:b7:c4:8e:84:c3:94:83:4a:a4:c8: ea:46:ff:39:0b:7b:a4:69:41:56:37:70:a6:3d:95: a0:47:fe:6a:28:22:1a:1a:52:74:96:37:cf:ce:32: ef:4c:c3:0b:00:85:4d:b4:c3:84:ab:3a:28:e4:34: 1c:d1:7c:de:3f:7e:7f:58:3d:9a:50:d9:11:39:98: db:4c:95:44:8e:3f:c4:aa:1a:c8:8b:0e:3f:66:c4: b6:02:53:93:76:b1:81:ec:35:16:c5:f9:a4:a6:46: fe:94:98:29:1e:62:eb:77:1f:40:40:29:0f:10:7d: 8f:47:01:49:8a:9d:41:cb:0d:56:7a:f4:e1:e3:af: 04:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:87:04:C9:B4:66:C6:4F:20:D9:5E:B5:92:82:D7:35:BB:DC:22:DE X509v3 Authority Key Identifier: keyid:E8:B5:EC:24:8D:CB:13:49:0B:C2:BD:EB:D6:4B:39:0D:D1:CB:A5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LXsJI3LE0kLwr3r1ks5DdHLpQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:ca:87:d1:60:d8:ac:91:4d:3d:36:53:fe:80:6b:f9:2a:2a: 10:dc:a8:95:d4:34:44:ef:60:92:a5:1b:fd:29:62:4c:d8:64: 45:7c:ad:65:6a:ad:31:bc:a2:9f:2b:03:02:d2:fe:ef:44:35: e6:42:bf:50:3c:e0:da:6c:f6:b2:13:20:b5:82:f8:7b:e2:b9: ca:11:77:d4:dc:29:36:13:3b:ed:28:bf:57:51:75:a0:64:9b: d1:cf:4b:a4:ed:63:79:e7:25:be:db:bd:61:cf:11:13:4c:1d: 55:77:8a:cd:d1:ff:73:6e:31:90:75:5e:77:96:e8:e0:3c:60: 15:81:bd:84:07:2e:15:97:49:c2:b0:66:94:0f:8f:d3:ea:b6: 07:f2:cd:24:04:62:9c:b9:4a:96:0a:dd:d5:b8:93:53:61:b8: ec:70:77:96:1f:3e:60:9c:0b:75:42:15:53:89:48:71:4a:43: 0c:aa:e5:75:db:dc:8d:83:86:06:7b:41:53:ab:20:49:8f:26: 09:01:c2:65:d5:d7:b3:74:fd:99:d1:f2:50:fe:27:35:91:de: 8e:f7:b2:c7:08:fc:f7:82:fe:b4:96:57:52:97:18:4d:29:ea: df:88:66:1a:72:e1:ce:e3:27:ba:f4:22:44:0e:96:cf:b2:04: a3:a7:a5:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RjJEQjExMC8GA1UEBRMoRThCNUVDMjQ4RENCMTM0OTBCQzJCREVCRDY0QjM5MERE MUNCQTUwOTAeFw0yNTEyMjMwNjQ0MjFaFw0yNTEyMzAwNjQ0MjFaMBgxFjAUBgNV BAMMDTY5NGEzYTQ1LWU0ZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC662sTu0ktHmgt8sVXEijhXUW5APERrFynX60g3m50fB3PNRK7dM+rvsUB1ORM vUN5vW6365ZJeRdJV0WeHdPlVJiCcpVZj8OWeuD+Y7TTXGteXtWkntTlMA1S5qAz J0iGGyczmqXnJtGP+B7AoklsyBcn5tGVslU4AVwst8SOhMOUg0qkyOpG/zkLe6Rp QVY3cKY9laBH/mooIhoaUnSWN8/OMu9MwwsAhU20w4SrOijkNBzRfN4/fn9YPZpQ 2RE5mNtMlUSOP8SqGsiLDj9mxLYCU5N2sYHsNRbF+aSmRv6UmCkeYut3H0BAKQ8Q fY9HAUmKnUHLDVZ69OHjrwSTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK4cEybRm xk8g2V61koLXNbvcIt4wHwYDVR0jBBgwFoAU6LXsJI3LE0kLwr3r1ks5DdHLpQkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGMkRCL0JDNkYzQUMwQzQz MTExRjBBNTg0OUM0Q0M0RjlBRTAyLzZMWHNKSTNMRTBrTHdyM3Ixa3M1RGRITHBR ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkxYc0pJM0xFMGtMd3IzcjFrczVEZEhMcFFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG MkRCL0JDNkYzQUMwQzQzMTExRjBBNTg0OUM0Q0M0RjlBRTAyLzZMWHNKSTNMRTBr THdyM3Ixa3M1RGRITHBRay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMPKh9Fg2KyRTT02U/6Aa/kqKhDcqJXUNETvYJKlG/0pYkzYZEV8rWVq rTG8op8rAwLS/u9ENeZCv1A84Nps9rITILWC+HviucoRd9TcKTYTO+0ov1dRdaBk m9HPS6TtY3nnJb7bvWHPERNMHVV3is3R/3NuMZB1XneW6OA8YBWBvYQHLhWXScKw ZpQPj9PqtgfyzSQEYpy5SpYK3dW4k1NhuOxwd5YfPmCcC3VCFVOJSHFKQwyq5XXb 3I2DhgZ7QVOrIEmPJgkBwmXV17N0/ZnR8lD+JzWR3o73sscI/PeC/rSWV1KXGE0p 6t+IZhpy4c7jJ7r0IkQOls+yBKOnpaM= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:33 2025 by rpki-client