This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft File: h6XSzfwKU6WS2h-P8ndToSk0N_g.mft (raw, json) Hash identifier: Vh6lL7+ArAyfRl6BmvdLs9TmNEtNRBoj2ogSlLEAzqk= Subject key identifier: 8B:E6:9F:2D:54:32:D0:C2:A7:DE:DD:E7:45:0E:31:C6:BC:EC:BC:1E Authority key identifier: 87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8 Certificate issuer: /CN=A91E1BB0/serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft Manifest number: 13 Signing time: Tue 23 Dec 2025 06:44:48 +0000 Manifest this update: Tue 23 Dec 2025 06:44:47 +0000 Manifest next update: Tue 30 Dec 2025 06:44:47 +0000 Files and hashes: 1: h6XSzfwKU6WS2h-P8ndToSk0N_g.crl (hash: vHl9cBjR47NFtM1qlDjBoUIg04SLpyPZZtQH/85tdL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1BB0, serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8 Validity Not Before: Dec 23 06:44:47 2025 GMT Not After : Dec 30 06:44:47 2025 GMT Subject: CN=694a3a60-4724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4a:37:20:ae:8d:ad:50:d6:55:5e:e3:87:78: d0:35:4e:28:1d:89:c5:2f:9c:06:cf:16:8f:80:dc: b2:7f:3b:51:3b:f3:62:ea:1d:19:70:fc:d4:7d:b8: a3:b5:a1:7d:47:00:1e:21:0f:31:ea:88:d9:af:e9: 2d:6b:43:95:22:e3:11:85:2f:e3:a6:00:02:d2:72: 65:1c:22:05:5e:a3:3b:27:1f:f2:e5:e6:9a:dc:32: d2:e5:0e:bf:ef:34:a7:37:bc:3e:08:d1:84:fd:f8: 89:7f:97:47:8e:5b:3b:53:eb:36:d7:a5:e3:bd:93: a2:fd:4f:32:64:21:d6:98:9f:2c:9b:17:8b:ea:cc: b8:2f:0f:89:e2:ce:c8:56:03:6b:7c:0f:4a:74:9f: 0e:eb:f2:10:db:b2:ea:f6:b0:af:fa:18:09:7a:bc: 26:6f:4c:a0:f9:d1:a2:ee:8d:a8:57:8d:4f:a4:32: 75:23:10:78:8c:39:2a:9f:27:f2:71:de:df:50:22: e9:42:24:c6:5f:c6:a0:b6:f4:e1:2d:4f:44:cd:cc: 1b:b6:ea:71:29:9d:5e:ef:83:e0:13:7c:1d:64:e2: c0:8a:7e:b4:a4:75:bf:93:2d:fa:6a:34:4e:f9:ad: fb:dc:99:24:5d:98:5a:e7:54:59:5a:3b:64:5a:e7: f0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E6:9F:2D:54:32:D0:C2:A7:DE:DD:E7:45:0E:31:C6:BC:EC:BC:1E X509v3 Authority Key Identifier: keyid:87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:00:5a:c9:61:f1:e9:21:93:cf:c1:98:2e:3d:7a:85:48:84: 3c:7c:1c:1b:9e:ee:4e:2f:f7:ae:fa:56:f1:ec:49:22:34:71: bf:24:7d:e3:a4:4f:92:21:21:31:e8:9f:cd:81:39:49:02:b6: f0:6d:0d:58:b8:72:cd:a4:d4:4f:76:e4:db:07:14:66:2f:f7: 0b:50:77:47:a1:ea:3e:0e:82:61:d6:76:4d:e6:68:d2:50:eb: 55:77:17:00:c2:c3:30:dd:f1:31:a6:92:54:bb:71:33:48:43: 79:8a:61:45:1d:d5:b6:19:5f:db:f9:07:9b:3a:dd:8e:a5:5f: 10:4a:fa:20:dc:af:8a:77:03:ea:a8:e3:6f:bc:64:bc:e1:0b: 49:ba:a2:07:3f:94:ba:98:6d:d0:65:68:37:5c:ea:bd:76:12: 4b:b2:2a:73:6f:d7:a2:db:8e:ec:d3:e0:3c:e4:0e:11:e9:fa: db:32:79:c1:56:b4:93:7c:b7:20:58:d2:5b:38:d3:5c:8b:6d: 08:88:1d:00:6b:37:92:44:95:3e:18:3f:3d:22:91:86:2b:67: eb:c3:23:f6:a1:22:ad:af:0a:93:2b:8a:8a:58:d9:67:c2:3c: b3:cc:1f:b5:cd:94:4c:82:bb:54:e9:05:a5:d5:6f:89:88:aa: c8:5e:51:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUJCMDExMC8GA1UEBRMoODdBNUQyQ0RGQzBBNTNBNTkyREExRjhGRjI3NzUzQTEy OTM0MzdGODAeFw0yNTEyMjMwNjQ0NDdaFw0yNTEyMzAwNjQ0NDdaMBgxFjAUBgNV BAMMDTY5NGEzYTYwLTQ3MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXSjcgro2tUNZVXuOHeNA1TigdicUvnAbPFo+A3LJ/O1E782LqHRlw/NR9uKO1 oX1HAB4hDzHqiNmv6S1rQ5Ui4xGFL+OmAALScmUcIgVeozsnH/Ll5prcMtLlDr/v NKc3vD4I0YT9+Il/l0eOWztT6zbXpeO9k6L9TzJkIdaYnyybF4vqzLgvD4nizshW A2t8D0p0nw7r8hDbsur2sK/6GAl6vCZvTKD50aLujahXjU+kMnUjEHiMOSqfJ/Jx 3t9QIulCJMZfxqC29OEtT0TNzBu26nEpnV7vg+ATfB1k4sCKfrSkdb+TLfpqNE75 rfvcmSRdmFrnVFlaO2Ra5/BxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi+afLVQy 0MKn3t3nRQ4xxrzsvB4wHwYDVR0jBBgwFoAUh6XSzfwKU6WS2h+P8ndToSk0N/gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxQkIwLzVENkJGM0RDQzQ3 ODExRjA5NEI4NTAyNUM0RjlBRTAyL2g2WFN6ZndLVTZXUzJoLVA4bmRUb1NrME5f Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaDZYU3pmd0tVNldTMmgtUDhuZFRvU2swTl9nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx QkIwLzVENkJGM0RDQzQ3ODExRjA5NEI4NTAyNUM0RjlBRTAyL2g2WFN6ZndLVTZX UzJoLVA4bmRUb1NrME5fZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACAAWslh8ekhk8/BmC49eoVIhDx8HBue7k4v9676VvHsSSI0cb8kfeOk T5IhITHon82BOUkCtvBtDVi4cs2k1E925NsHFGYv9wtQd0eh6j4OgmHWdk3maNJQ 61V3FwDCwzDd8TGmklS7cTNIQ3mKYUUd1bYZX9v5B5s63Y6lXxBK+iDcr4p3A+qo 42+8ZLzhC0m6ogc/lLqYbdBlaDdc6r12EkuyKnNv16LbjuzT4DzkDhHp+tsyecFW tJN8tyBY0ls401yLbQiIHQBrN5JElT4YPz0ikYYrZ+vDI/ahIq2vCpMriopY2WfC PLPMH7XNlEyCu1TpBaXVb4mIqsheUe4= -----END CERTIFICATE-----Generated at Wed Dec 24 14:05:05 2025 by rpki-client