This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft File: d6ZVRx-6dn5r39z-zejQR3AQCW0.mft (raw, json) Hash identifier: fylrK/VtNJaaexW0d8tM9ydFqraOJhcsK3H7xV4O4+o= Subject key identifier: 9D:F5:90:62:18:38:6E:A9:63:C2:9F:33:33:8A:72:0F:67:69:DC:46 Authority key identifier: 77:A6:55:47:1F:BA:76:7E:6B:DF:DC:FE:CD:E8:D0:47:70:10:09:6D Certificate issuer: /CN=A91CCF26/serialNumber=77A655471FBA767E6BDFDCFECDE8D0477010096D Certificate serial: 09AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft Manifest number: 09AA Signing time: Mon 22 Dec 2025 19:23:10 +0000 Manifest this update: Mon 22 Dec 2025 19:23:10 +0000 Manifest next update: Mon 29 Dec 2025 19:23:10 +0000 Files and hashes: 1: d6ZVRx-6dn5r39z-zejQR3AQCW0.crl (hash: 8pWq9X6PJn2IF6Q066DSNvebml3RlEgKdb2ekugHkUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.crl rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2474 (0x9aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCF26, serialNumber=77A655471FBA767E6BDFDCFECDE8D0477010096D Validity Not Before: Dec 22 19:23:10 2025 GMT Not After : Dec 29 19:23:10 2025 GMT Subject: CN=69499a9e-c494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:32:3b:e2:e0:67:f5:92:47:b3:5c:63:ad:66: 2d:e7:f3:9f:37:b4:ad:b2:b6:bf:b7:03:41:eb:80: 1c:ad:1f:1e:52:82:28:27:32:6b:51:0e:fe:39:5b: 0d:98:62:ff:46:18:83:20:7f:f6:c0:a7:f7:21:c7: 60:c8:70:fe:b8:60:0b:68:1e:ae:c8:55:b8:49:fb: da:36:66:ef:b4:70:7c:78:69:98:95:48:fa:34:ce: ff:c5:06:ca:ac:83:21:db:ef:13:c1:b9:ed:a7:03: 00:c3:2f:73:39:a3:db:09:ca:b8:97:c2:83:0c:bf: 72:76:02:8d:cb:80:33:0a:99:f7:be:e2:d8:5d:ed: e2:c0:af:07:ab:9e:5c:82:81:51:8b:fb:55:82:76: c5:6c:cd:96:6d:d6:69:cb:75:ff:a8:39:e0:f3:fe: 23:ea:52:05:78:24:b6:3b:05:46:22:46:9d:3c:b9: b9:cd:1b:65:7e:f2:54:70:4f:08:72:b9:21:88:5d: 18:6c:d1:37:8f:23:b0:8f:d1:f9:32:c6:dc:46:ce: ef:cf:1e:8a:7e:97:04:14:85:4d:72:e4:43:01:17: 95:03:ba:96:f6:14:5d:99:c7:e6:1c:f8:79:c4:cd: cb:6b:00:36:f1:98:3d:aa:fe:fe:88:b5:f6:ea:cf: 05:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F5:90:62:18:38:6E:A9:63:C2:9F:33:33:8A:72:0F:67:69:DC:46 X509v3 Authority Key Identifier: keyid:77:A6:55:47:1F:BA:76:7E:6B:DF:DC:FE:CD:E8:D0:47:70:10:09:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f8:72:f5:53:1b:61:d2:4f:31:e7:f2:d1:b3:ed:68:36:1c: a9:be:c0:29:d5:91:62:a3:a5:67:bb:20:72:c7:24:99:9a:13: 25:cb:95:8d:84:0f:a8:23:86:7f:ac:a9:fb:ea:9b:e0:14:b2: 27:7d:22:27:a7:69:94:34:38:f9:79:b7:be:d1:e1:c6:da:69: 90:45:bd:33:87:a8:d9:b2:57:1c:3e:7f:7c:8a:2d:96:b2:17: b9:80:d5:80:c3:c9:7c:de:e8:65:8b:3b:d6:a1:f6:a3:58:25: d1:05:6f:f0:58:b1:50:48:49:36:9a:ba:13:82:1a:0f:89:f9: 4c:49:45:d4:c9:8f:d2:90:00:76:2e:8b:3a:0f:dc:5e:d5:ec: d3:2a:37:07:53:fc:26:6f:13:1d:40:a1:90:64:7a:ff:a4:16: ee:8e:3a:53:9e:db:13:fd:aa:ef:d0:b4:d3:73:ac:5f:d1:3b: bd:fc:db:20:d4:60:08:25:68:f6:f9:d6:44:b8:f4:f6:18:85: 2d:df:ee:3c:82:d6:7e:67:5e:3c:bf:22:79:f1:34:f7:33:c1: 16:e5:fe:3c:7b:65:b0:16:8b:ab:e1:a1:24:51:fd:6b:a1:c1: ca:b2:a4:af:aa:f9:06:21:8f:36:5f:1d:94:5b:7a:81:4c:f6: b8:b8:02:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NGMjYxMTAvBgNVBAUTKDc3QTY1NTQ3MUZCQTc2N0U2QkRGRENGRUNERThEMDQ3 NzAxMDA5NkQwHhcNMjUxMjIyMTkyMzEwWhcNMjUxMjI5MTkyMzEwWjAYMRYwFAYD VQQDDA02OTQ5OWE5ZS1jNDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkTI74uBn9ZJHs1xjrWYt5/OfN7Stsra/twNB64AcrR8eUoIoJzJrUQ7+OVsN mGL/RhiDIH/2wKf3IcdgyHD+uGALaB6uyFW4SfvaNmbvtHB8eGmYlUj6NM7/xQbK rIMh2+8TwbntpwMAwy9zOaPbCcq4l8KDDL9ydgKNy4AzCpn3vuLYXe3iwK8Hq55c goFRi/tVgnbFbM2WbdZpy3X/qDng8/4j6lIFeCS2OwVGIkadPLm5zRtlfvJUcE8I crkhiF0YbNE3jyOwj9H5MsbcRs7vzx6KfpcEFIVNcuRDAReVA7qW9hRdmcfmHPh5 xM3LawA28Zg9qv7+iLX26s8FkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ31kGIY OG6pY8KfMzOKcg9nadxGMB8GA1UdIwQYMBaAFHemVUcfunZ+a9/c/s3o0EdwEAlt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0YyNi83MkMxOUIwNjk5 N0MxMUVBOEYwOTg5NjFDNEY5QUUwMi9kNlpWUngtNmRuNXIzOXotemVqUVIzQVFD VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2WlZSeC02ZG41cjM5ei16ZWpRUjNBUUNXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0YyNi83MkMxOUIwNjk5N0MxMUVBOEYwOTg5NjFDNEY5QUUwMi9kNlpWUngtNmRu NXIzOXotemVqUVIzQVFDVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd+HL1Uxth0k8x5/LRs+1oNhypvsAp1ZFio6VnuyByxySZmhMly5WN hA+oI4Z/rKn76pvgFLInfSInp2mUNDj5ebe+0eHG2mmQRb0zh6jZslccPn98ii2W she5gNWAw8l83uhlizvWofajWCXRBW/wWLFQSEk2mroTghoPiflMSUXUyY/SkAB2 Los6D9xe1ezTKjcHU/wmbxMdQKGQZHr/pBbujjpTntsT/arv0LTTc6xf0Tu9/Nsg 1GAIJWj2+dZEuPT2GIUt3+48gtZ+Z148vyJ58TT3M8EW5f48e2WwFour4aEkUf1r ocHKsqSvqvkGIY82Xx2UW3qBTPa4uAKs -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:31 2025 by rpki-client