This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json) Hash identifier: rm/F4IGZ9z/lTgFcHwBRSgIFkVkhB34jcJViZnT4+68= Subject key identifier: 02:F0:F7:DD:49:DE:40:CE:C4:B6:4F:8F:C4:54:83:63:22:E2:19:1C Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 0925 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft Manifest number: 08BA Signing time: Tue 16 Dec 2025 20:16:47 +0000 Manifest this update: Tue 16 Dec 2025 20:16:46 +0000 Manifest next update: Tue 23 Dec 2025 20:16:46 +0000 Files and hashes: 1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: WNnyqKcNrm0GM0w30YL6mfNmMpbEomc+ejmMRHJ3XgU=) 2: 4944017C8FAF11F0B59F0948C4F9AE02.roa (hash: BwcQamXNLiosPDRZ6f2FtmfW9jpBhqektxQqopKnPY4=) 3: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: fQqKRj97YwSX01j4RLkIYLyoFuesKb4QSmD9wM54Hnc=) 4: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: PfplpurYpM5Nlhs4wMvQOWeVvjM0XGHzdK7n61JNfpc=) 5: 8D5442E28A4011F093E0F94DC4F9AE02.roa (hash: gKM4RcuYJ3WOjsFaGVW261ymQPFBOzXDnV5oh7hrxpU=) 6: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: 8ZNPpyzaCSOR7XArDiXTgpwOZdqi5o9nlzrrurZ8f2Q=) 7: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: huVUXhJ3Ojs1r05u1jG7Kov4uI++w1LAbAYi/YZa49g=) 8: A709BC948FAE11F09FAE9C69C4F9AE02.roa (hash: h5BGjGSDw6jhnZlF9NOXRKNYmdB5F7XUQytmx7kt8pU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 20:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2341 (0x925) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Validity Not Before: Dec 16 20:16:46 2025 GMT Not After : Dec 23 20:16:46 2025 GMT Subject: CN=6941be2f-5226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c5:68:03:e2:d3:2e:e2:3b:1b:5a:54:44:a2: 42:a5:63:1b:10:5c:ac:bf:4e:1a:49:e4:c2:4f:0d: a3:6a:24:60:a5:18:20:6c:cb:8f:07:99:4a:bb:bb: 51:74:8c:df:bb:fa:22:46:a8:ba:5e:d1:6a:4a:76: ad:93:c2:9e:89:bb:21:d3:a0:a5:e3:f3:56:6d:d1: c9:6f:8a:f4:1d:f2:1b:0b:23:8a:5e:f8:0f:19:be: 69:7a:65:bf:1f:f1:58:ab:0d:9a:45:92:0f:2b:c4: 51:85:3c:10:08:d4:90:d2:bf:12:15:8b:b8:46:53: d4:65:53:ab:6d:c0:c2:4e:06:d5:10:63:07:b6:da: 26:df:7c:d2:16:d7:ae:14:4d:07:a6:eb:f6:f3:01: 62:82:e2:e4:d2:63:72:d3:38:e8:53:dd:8f:cc:1c: fe:78:6c:9e:16:d2:34:c4:b3:6b:25:ff:16:0d:cc: fe:b1:bb:b6:7b:6d:b5:18:0b:8d:1d:5c:fa:29:84: dc:a8:09:67:48:f5:aa:69:60:8b:10:07:0e:3c:fe: ac:96:54:af:4a:7b:4d:7e:84:99:b4:b0:b8:ad:15: 89:e8:61:79:d6:0f:19:29:60:ef:c1:ec:be:eb:9d: 64:6c:e8:ed:df:90:65:57:6b:ac:87:3f:05:96:f8: b8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F0:F7:DD:49:DE:40:CE:C4:B6:4F:8F:C4:54:83:63:22:E2:19:1C X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:69:61:a1:37:34:93:11:4c:e0:49:e3:2d:bd:ff:ea:4f:78: 91:71:a5:5b:f8:9d:cc:03:1b:06:08:1c:8f:c7:dc:92:7b:9d: ec:8e:f6:dc:34:f4:df:74:1e:a3:06:28:ad:ee:ba:85:a2:80: 6d:0d:92:b9:0e:08:5f:da:de:9a:29:31:65:05:c3:c3:97:7f: 4c:91:4b:88:27:c7:12:d0:4e:6b:60:07:74:1e:d8:74:f5:45: ee:c2:dc:b9:39:1c:0d:e6:e0:ab:1d:e8:44:9e:ea:6c:3b:bd: 3f:48:0d:11:e9:f6:56:25:d3:af:b8:6a:c9:6e:0f:c0:23:c8: cf:f1:b6:dd:e8:56:09:02:0a:d3:7e:f1:c5:8c:51:39:06:a2: a6:ef:03:ab:83:64:e4:dc:af:1e:f2:f2:ff:ab:bc:a9:3e:50: f9:ac:1d:0e:11:a6:2b:39:e7:cd:8d:b5:60:bb:1e:27:08:7e: 68:29:e4:d3:00:ef:84:db:79:4c:4d:06:fa:df:03:79:63:c0: 82:ee:58:24:81:61:93:d6:74:06:2e:21:9a:17:9a:73:85:12: b0:aa:04:d4:c1:f6:de:3e:f6:ce:e3:f9:d4:b5:e8:62:31:47: b5:fc:9a:5d:aa:34:82:53:ff:42:83:7b:52:0f:95:d2:1b:d5: a9:e1:78:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjUxMjE2MjAxNjQ2WhcNMjUxMjIzMjAxNjQ2WjAYMRYwFAYD VQQDDA02OTQxYmUyZi01MjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5sVoA+LTLuI7G1pURKJCpWMbEFysv04aSeTCTw2jaiRgpRggbMuPB5lKu7tR dIzfu/oiRqi6XtFqSnatk8Keibsh06Cl4/NWbdHJb4r0HfIbCyOKXvgPGb5pemW/ H/FYqw2aRZIPK8RRhTwQCNSQ0r8SFYu4RlPUZVOrbcDCTgbVEGMHttom33zSFteu FE0Hpuv28wFiguLk0mNy0zjoU92PzBz+eGyeFtI0xLNrJf8WDcz+sbu2e221GAuN HVz6KYTcqAlnSPWqaWCLEAcOPP6sllSvSntNfoSZtLC4rRWJ6GF51g8ZKWDvwey+ 651kbOjt35BlV2ushz8Flvi4sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALw991J 3kDOxLZPj8RUg2Mi4hkcMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GRjUxRTU5RUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pH WGdpQzFKNmZMNHo5Sy1nbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKaWGhNzSTEUzgSeMtvf/qT3iRcaVb+J3MAxsGCByPx9ySe53sjvbc NPTfdB6jBiit7rqFooBtDZK5Dghf2t6aKTFlBcPDl39MkUuIJ8cS0E5rYAd0Hth0 9UXuwty5ORwN5uCrHehEnupsO70/SA0R6fZWJdOvuGrJbg/AI8jP8bbd6FYJAgrT fvHFjFE5BqKm7wOrg2Tk3K8e8vL/q7ypPlD5rB0OEaYrOefNjbVgux4nCH5oKeTT AO+E23lMTQb63wN5Y8CC7lgkgWGT1nQGLiGaF5pzhRKwqgTUwfbePvbO4/nUtehi MUe1/JpdqjSCU/9Cg3tSD5XSG9Wp4Xii -----END CERTIFICATE-----Generated at Thu Dec 18 07:01:48 2025 by rpki-client