This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft File: l6zd4pEaCfOTXxhg2wV9TP9GssU.mft (raw, json) Hash identifier: 7NskyPB9ni9uXoZxlucc7kRqgNmD/m7/AuToXndRvTc= Subject key identifier: A9:C5:1E:B3:A2:1B:DA:9B:42:FF:E2:35:14:07:86:0B:0C:D5:97:A3 Authority key identifier: 97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5 Certificate issuer: /CN=A91E7A75/serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft Manifest number: 78 Signing time: Fri 19 Dec 2025 05:49:33 +0000 Manifest this update: Fri 19 Dec 2025 05:49:33 +0000 Manifest next update: Fri 26 Dec 2025 05:49:33 +0000 Files and hashes: 1: l6zd4pEaCfOTXxhg2wV9TP9GssU.crl (hash: OJELT2sK5y/rdOR523IseksE57EKcaRlnl8VnmoAWG4=) 2: 9E314E3A275211F09DB11A29C4F9AE02.roa (hash: xeAIE2lZn+YXNt0L7vlDN0DVHrs7CNulexHVxcXbegs=) 3: 9ECB0CF0275211F09DB11A29C4F9AE02.roa (hash: Pfe2htQw7FQ69zCdUGOvP9JJR+bvYFVzLzCF/2HMviU=) 4: 7538A8FC275211F0A14FD328C4F9AE02.roa (hash: 1L8lUrtPjTnoEjcERsj866aTFLWQJPYnWRL13TGRub4=) 5: 74B37F24275211F0A14FD328C4F9AE02.roa (hash: 5FSb2Jsk8vMB09hl36LtVE9KBpWP+PzKRBhhPkFdcWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A75, serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5 Validity Not Before: Dec 19 05:49:33 2025 GMT Not After : Dec 26 05:49:33 2025 GMT Subject: CN=6944e76d-8b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:34:c4:24:bd:06:35:14:35:d9:88:ca:03: ef:12:54:42:5c:51:b3:db:34:0f:bf:d9:ff:e1:69: 4c:0f:79:19:65:f3:c6:79:d4:c2:97:8e:e3:dd:89: 3e:0f:20:d8:ef:ee:7c:ed:f3:50:85:86:38:d6:21: 3c:3d:48:37:17:f0:b9:f1:69:9e:7f:90:2f:78:41: 2c:ce:31:7a:da:d2:1c:ad:17:40:13:17:2c:3f:55: 3d:a6:81:33:f6:1a:89:ed:2a:34:3a:e3:7b:2d:34: c0:9f:5f:43:5c:56:d0:22:26:97:ca:a8:e3:04:a4: cd:15:41:fb:44:7e:6b:5f:b2:67:04:ef:31:82:5d: 29:4b:70:10:6d:01:b4:e8:09:d7:58:bd:ed:61:4d: 3f:92:b2:1c:5e:f1:4e:90:a3:02:a8:72:f2:50:0c: 18:5b:26:3f:be:b3:7c:b5:85:07:ce:34:e1:bd:d3: 0c:e0:73:be:59:e9:a2:a6:5a:d8:10:6a:2c:c1:9c: a0:d5:61:a4:76:87:91:2b:5b:7d:db:95:f8:bb:bd: 36:74:21:05:2d:7a:cf:e8:f8:05:42:47:b8:c8:b6: fa:df:25:0e:19:b4:d1:03:75:d7:87:d0:7f:d2:b9: 8a:43:11:64:02:bf:59:65:b1:42:7d:c6:eb:e4:86: d9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C5:1E:B3:A2:1B:DA:9B:42:FF:E2:35:14:07:86:0B:0C:D5:97:A3 X509v3 Authority Key Identifier: keyid:97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:8c:07:b1:27:73:3d:45:48:68:55:17:32:1d:3e:eb:29:72: fe:3d:c4:0a:a6:ce:8d:86:bf:3c:4b:0c:27:0e:a0:90:36:1e: 7f:d6:b0:e9:85:34:4c:52:d5:e8:15:d1:59:58:4d:a3:68:bd: 4a:04:41:89:34:6a:26:ff:06:77:70:33:0f:be:cd:a0:a5:0a: fb:4c:d7:9d:9e:91:6e:56:6f:44:48:47:40:d1:05:42:12:6f: af:b5:9d:44:ed:04:d1:22:b7:ea:f1:91:43:91:57:1d:01:c8: 15:50:73:6b:6d:f4:48:44:88:7b:9b:71:8a:eb:30:61:4e:5e: ea:9a:48:04:20:64:51:6f:db:82:cc:65:2c:e3:b4:e5:26:f6: e0:58:cc:4e:6f:cf:73:f0:7d:a0:0b:89:19:25:75:70:f1:a6: 20:cc:02:0f:83:66:e3:18:8d:fb:70:f9:12:13:f4:d9:ca:da: 15:27:1a:cd:46:f5:6d:ae:58:d3:13:e2:6e:68:8a:d3:6e:2b: ed:25:26:ef:09:f4:46:7d:90:36:e7:12:72:9f:c7:70:28:3b: 90:7f:5b:0e:58:f9:7f:b9:6e:08:8a:cb:76:10:93:f9:6f:27: 5c:e8:c7:7e:63:74:17:2b:f1:85:86:73:b3:db:c5:a6:a9:85: 88:2c:f6:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF N0E3NTExMC8GA1UEBRMoOTdBQ0RERTI5MTFBMDlGMzkzNUYxODYwREIwNTdENENG RjQ2QjJDNTAeFw0yNTEyMTkwNTQ5MzNaFw0yNTEyMjYwNTQ5MzNaMBgxFjAUBgNV BAMMDTY5NDRlNzZkLThiMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEozTEJL0GNRQ12YjKA+8SVEJcUbPbNA+/2f/haUwPeRll88Z51MKXjuPdiT4P INjv7nzt81CFhjjWITw9SDcX8LnxaZ5/kC94QSzOMXra0hytF0ATFyw/VT2mgTP2 GontKjQ643stNMCfX0NcVtAiJpfKqOMEpM0VQftEfmtfsmcE7zGCXSlLcBBtAbTo CddYve1hTT+Sshxe8U6QowKocvJQDBhbJj++s3y1hQfONOG90wzgc75Z6aKmWtgQ aizBnKDVYaR2h5ErW33blfi7vTZ0IQUtes/o+AVCR7jItvrfJQ4ZtNEDddeH0H/S uYpDEWQCv1llsUJ9xuvkhtlZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqcUes6Ib 2ptC/+I1FAeGCwzVl6MwHwYDVR0jBBgwFoAUl6zd4pEaCfOTXxhg2wV9TP9GssUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3QTc1L0U2RjRCNkRBMjc1 MTExRjBBQ0YwQUYyNEM0RjlBRTAyL2w2emQ0cEVhQ2ZPVFh4aGcyd1Y5VFA5R3Nz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDZ6ZDRwRWFDZk9UWHhoZzJ3VjlUUDlHc3NVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 QTc1L0U2RjRCNkRBMjc1MTExRjBBQ0YwQUYyNEM0RjlBRTAyL2w2emQ0cEVhQ2ZP VFh4aGcyd1Y5VFA5R3NzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ+MB7Encz1FSGhVFzIdPuspcv49xAqmzo2GvzxLDCcOoJA2Hn/WsOmF NExS1egV0VlYTaNovUoEQYk0aib/BndwMw++zaClCvtM152ekW5Wb0RIR0DRBUIS b6+1nUTtBNEit+rxkUORVx0ByBVQc2tt9EhEiHubcYrrMGFOXuqaSAQgZFFv24LM ZSzjtOUm9uBYzE5vz3PwfaALiRkldXDxpiDMAg+DZuMYjftw+RIT9NnK2hUnGs1G 9W2uWNMT4m5oitNuK+0lJu8J9EZ9kDbnEnKfx3AoO5B/Ww5Y+X+5bgiKy3YQk/lv J1zox35jdBcr8YWGc7PbxaaphYgs9iY= -----END CERTIFICATE-----Generated at Fri Dec 19 16:22:49 2025 by rpki-client