This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft File: 6HkDAXqx8GqctGqwIb0Lkhya-og.mft (raw, json) Hash identifier: NITsrfUaFJuVbYlrPdO1o0yRD31jpaRT0FJu4SJcOpY= Subject key identifier: B3:4F:0A:24:94:DF:5C:B9:46:ED:1D:30:4C:3D:A6:8F:F7:62:D7:B5 Authority key identifier: E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88 Certificate issuer: /CN=A91C49BA/serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft Manifest number: 0D Signing time: Wed 03 Dec 2025 06:08:16 +0000 Manifest this update: Wed 03 Dec 2025 06:08:15 +0000 Manifest next update: Wed 10 Dec 2025 06:08:15 +0000 Files and hashes: 1: 6HkDAXqx8GqctGqwIb0Lkhya-og.crl (hash: A0we8YXcKuZ93avbwlULUmg3Wz3e8TG3n7PNYIbxE6s=) 2: 72F530E2BEF611F08C939B16C4F9AE02.roa (hash: OVDXYXiPK6DUjh7GuuPjYLe4oNz6kILt+KBikGM4NtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C49BA, serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88 Validity Not Before: Dec 3 06:08:15 2025 GMT Not After : Dec 10 06:08:15 2025 GMT Subject: CN=692fd3cf-8ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b4:5d:bc:fc:04:4f:98:d0:7b:a3:f0:79:2e: dc:46:fd:a7:75:cb:e7:ae:1d:ab:2a:b6:0d:9e:6c: d9:a9:4d:35:6f:da:a7:c8:43:34:72:96:5f:35:45: 60:25:4d:37:57:85:63:b6:ff:cc:2f:49:67:37:fb: f2:43:74:a2:c3:93:86:ed:f1:31:29:1f:6f:30:52: e2:49:6b:db:bd:55:a4:28:6c:f8:d4:15:49:72:2b: 47:8e:45:60:7c:71:91:ce:92:ee:a3:65:bc:1e:12: ee:a7:dc:c8:c3:0b:3c:90:c0:ff:88:15:91:87:0d: 74:21:7f:11:e6:e5:31:1c:f2:30:47:b3:c1:e7:eb: ac:88:b1:98:65:d3:17:0a:f7:69:b5:4c:b7:7b:84: 62:2f:1a:59:ef:da:b6:93:d7:ec:eb:70:c6:c0:5c: cb:2a:d7:97:c4:4d:82:44:72:42:98:a9:e4:54:6b: a1:9c:f8:7b:f2:6b:f4:92:48:aa:25:63:ec:23:8e: a6:c0:e5:18:0f:ff:de:f7:49:8a:da:d3:00:6a:60: 72:c3:22:01:0b:10:29:73:2b:10:54:d1:34:c9:0f: 8e:60:0b:c2:1a:9b:c9:1d:9c:ee:d4:99:c7:0c:10: 7d:69:32:f8:8f:03:b1:0e:61:07:da:6f:b9:06:c7: df:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4F:0A:24:94:DF:5C:B9:46:ED:1D:30:4C:3D:A6:8F:F7:62:D7:B5 X509v3 Authority Key Identifier: keyid:E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:29:b2:6c:91:04:64:32:1b:de:e3:6f:ee:77:38:c0:ec:d5: 7f:0c:73:3f:fa:6f:84:24:92:0f:50:4e:05:8f:96:6f:6e:39: 89:6f:7a:eb:e2:d5:05:86:d3:d4:2c:5c:52:0a:13:79:3c:dc: 9e:da:fb:78:05:d4:4e:64:d7:ff:16:76:72:4e:ad:b2:aa:f7: 34:c6:c7:01:04:0c:82:7f:a4:79:3b:76:05:11:95:17:91:b9: 73:88:76:15:4d:de:c2:bf:a5:f1:42:9a:ac:08:11:92:c8:25: 3c:55:08:b9:f2:bb:d3:41:a2:85:a5:77:53:c2:9e:66:05:52: 19:05:10:5f:f7:67:f8:00:34:0f:eb:4c:84:33:fc:7c:0b:70: 0a:98:a1:5d:20:f9:c2:3d:1d:1a:0f:9a:de:e5:29:77:80:fb: 54:4d:54:bc:f3:0b:c5:3a:5b:fc:70:44:9b:5f:98:1f:e5:b7: 4b:bf:95:8b:c7:ba:ed:3a:5d:43:fb:37:b3:c5:0b:84:3e:67: 4c:21:e3:af:18:ec:f0:5e:e6:66:b6:83:e8:af:b0:b4:78:a9: 18:58:93:76:9e:3b:88:dc:ea:1b:62:f9:bc:ed:f7:7b:f7:69: a2:d9:8b:07:dc:06:0b:77:bf:d7:21:04:3b:e9:c6:6e:29:d0: c0:6d:7b:cd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDlCQTExMC8GA1UEBRMoRTg3OTAzMDE3QUIxRjA2QTlDQjQ2QUIwMjFCRDBCOTIx QzlBRkE4ODAeFw0yNTEyMDMwNjA4MTVaFw0yNTEyMTAwNjA4MTVaMBgxFjAUBgNV BAMTDTY5MmZkM2NmLThhZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYtF28/ARPmNB7o/B5LtxG/ad1y+euHasqtg2ebNmpTTVv2qfIQzRyll81RWAl TTdXhWO2/8wvSWc3+/JDdKLDk4bt8TEpH28wUuJJa9u9VaQobPjUFUlyK0eORWB8 cZHOku6jZbweEu6n3MjDCzyQwP+IFZGHDXQhfxHm5TEc8jBHs8Hn66yIsZhl0xcK 92m1TLd7hGIvGlnv2raT1+zrcMbAXMsq15fETYJEckKYqeRUa6Gc+Hvya/SSSKol Y+wjjqbA5RgP/973SYra0wBqYHLDIgELEClzKxBU0TTJD45gC8Iam8kdnO7UmccM EH1pMviPA7EOYQfab7kGx99fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs08KJJTf XLlG7R0wTD2mj/di17UwHwYDVR0jBBgwFoAU6HkDAXqx8GqctGqwIb0Lkhya+ogw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0OUJBL0UzNjdGNkM2QkVG NTExRjA5QjdFNzIwOUM0RjlBRTAyLzZIa0RBWHF4OEdxY3RHcXdJYjBMa2h5YS1v Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNkhrREFYcXg4R3FjdEdxd0liMExraHlhLW9nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 OUJBL0UzNjdGNkM2QkVGNTExRjA5QjdFNzIwOUM0RjlBRTAyLzZIa0RBWHF4OEdx Y3RHcXdJYjBMa2h5YS1vZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGMpsmyRBGQyG97jb+53OMDs1X8Mcz/6b4Qkkg9QTgWPlm9uOYlveuvi 1QWG09QsXFIKE3k83J7a+3gF1E5k1/8WdnJOrbKq9zTGxwEEDIJ/pHk7dgURlReR uXOIdhVN3sK/pfFCmqwIEZLIJTxVCLnyu9NBooWld1PCnmYFUhkFEF/3Z/gANA/r TIQz/HwLcAqYoV0g+cI9HRoPmt7lKXeA+1RNVLzzC8U6W/xwRJtfmB/lt0u/lYvH uu06XUP7N7PFC4Q+Z0wh468Y7PBe5ma2g+ivsLR4qRhYk3aeO4jc6hti+bzt93v3 aaLZiwfcBgt3v9chBDvpxm4p0MBte80= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:26 2025 by rpki-client