This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft File: 6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft (raw, json) Hash identifier: 3KKi8bBclBNWoVUqRfsjAzt1zVP2spHwNCNijcrrhPY= Subject key identifier: 6C:50:88:22:F5:BA:69:EE:6F:8F:F7:BD:04:82:8D:0E:9F:AD:07:DF Authority key identifier: E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41 Certificate issuer: /CN=A91E7FB1/serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541 Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft Manifest number: 0251 Signing time: Tue 23 Dec 2025 00:44:32 +0000 Manifest this update: Tue 23 Dec 2025 00:44:32 +0000 Manifest next update: Tue 30 Dec 2025 00:44:32 +0000 Files and hashes: 1: 6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl (hash: pcsqL7ec82NB4cm25KdGuqhv5zmfOUUdSKnY30zKLM8=) 2: FE79EA9A543C11ED972CDD2FC4F9AE02.roa (hash: gieWtrbcC8o5T2SuJsxAI3RuUs6fTQrcS9Bv8fXH6YA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7FB1, serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541 Validity Not Before: Dec 23 00:44:32 2025 GMT Not After : Dec 30 00:44:32 2025 GMT Subject: CN=6949e5f0-a43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a6:c0:3d:31:08:f4:15:59:b0:9b:a1:46:aa: 00:3a:bc:9f:f7:94:12:de:d9:28:80:b9:92:0b:1b: 63:1b:7a:97:b7:d3:b3:86:ab:7c:f5:63:b3:fd:b3: 62:eb:8c:ec:03:31:96:9c:f6:3b:07:e8:c4:12:53: 3b:cf:ad:76:4e:98:45:9a:17:ae:29:6c:26:67:3f: 4c:60:87:1c:71:1f:b3:d0:0e:b6:23:87:3b:9e:6b: 8b:e2:9c:eb:6f:a2:37:d0:97:45:be:9d:a5:b5:96: 0f:7b:98:d7:c9:90:b7:74:5b:9e:d6:cc:c9:54:e3: 3b:03:ed:22:bc:0f:dc:fc:c2:62:d9:ae:cd:8d:a3: 69:e5:ab:cf:40:32:49:92:76:b1:43:25:50:56:78: 70:53:69:3e:a6:be:de:9a:a7:23:a6:83:8d:39:5f: 3f:98:9f:45:a5:5e:0d:10:15:ba:d0:a2:c7:3d:06: 4f:5c:28:61:cd:7d:5b:97:68:3f:53:44:e4:53:f2: af:56:b2:0d:66:cc:5b:af:4a:c8:89:c0:89:04:9b: 60:75:f3:78:6a:b5:cc:db:83:7a:32:df:da:6e:b2: ed:25:30:52:d1:a0:a3:73:ce:82:e9:30:95:0b:89: 08:a6:f6:94:25:10:f9:a5:7d:41:31:56:75:d0:aa: 61:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:50:88:22:F5:BA:69:EE:6F:8F:F7:BD:04:82:8D:0E:9F:AD:07:DF X509v3 Authority Key Identifier: keyid:E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:99:92:55:2f:61:0d:d2:35:57:d6:76:dc:3b:77:80:5b:de: 01:8f:7c:40:1d:bb:cb:34:40:ed:bf:fe:64:87:74:19:2b:17: 87:d8:71:03:38:04:e0:56:62:ee:87:8a:44:c3:ae:ac:11:73: b2:35:e5:08:6a:4e:d3:42:ec:a1:b4:d3:8a:1c:ab:d5:4a:5e: d2:01:47:39:44:a5:f0:d3:e9:82:0d:b2:30:e8:aa:5a:93:c1: 93:c0:79:80:47:2e:d4:b6:1c:12:f5:09:27:53:eb:61:05:6d: b9:4a:25:2c:3b:b9:14:33:c8:02:1a:91:16:84:69:f0:c3:89: 4e:0e:35:4d:29:2c:bb:f1:79:af:ab:86:16:fb:e1:0d:6c:59: d7:0c:d5:3b:0d:2b:32:39:51:4d:62:b9:93:4e:17:a5:0b:af: 26:f2:d4:23:82:60:dc:83:0f:10:c9:90:4e:81:83:25:77:4e: cd:e1:84:8b:bc:a9:6e:7f:d7:d0:d3:34:0b:9e:c7:c2:04:99: cb:be:4d:42:35:77:d3:64:b8:92:83:37:c3:34:9f:2c:29:15: d2:ec:c5:79:58:4a:b8:3e:35:b8:d0:a6:a1:c9:d6:ea:da:1c: f7:bc:54:7e:f7:af:14:c5:91:7b:ac:7f:68:fa:eb:bb:30:ff: eb:27:2a:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdGQjExMTAvBgNVBAUTKEU4Q0NEQ0JGQkQyOEQ3MTE5MEU4OTM3RjNEQUE1OTU4 RkQ0ODE1NDEwHhcNMjUxMjIzMDA0NDMyWhcNMjUxMjMwMDA0NDMyWjAYMRYwFAYD VQQDDA02OTQ5ZTVmMC1hNDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwabAPTEI9BVZsJuhRqoAOryf95QS3tkogLmSCxtjG3qXt9Ozhqt89WOz/bNi 64zsAzGWnPY7B+jEElM7z612TphFmheuKWwmZz9MYIcccR+z0A62I4c7nmuL4pzr b6I30JdFvp2ltZYPe5jXyZC3dFue1szJVOM7A+0ivA/c/MJi2a7NjaNp5avPQDJJ knaxQyVQVnhwU2k+pr7emqcjpoONOV8/mJ9FpV4NEBW60KLHPQZPXChhzX1bl2g/ U0TkU/KvVrINZsxbr0rIicCJBJtgdfN4arXM24N6Mt/abrLtJTBS0aCjc86C6TCV C4kIpvaUJRD5pX1BMVZ10KphnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxQiCL1 umnub4/3vQSCjQ6frQffMB8GA1UdIwQYMBaAFOjM3L+9KNcRkOiTfz2qWVj9SBVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0ZCMS9BQUQ2OTA0MDU0 MzgxMUVEOTM4QzY2MjhDNEY5QUUwMi82TXpjdjcwbzF4R1E2Sk5fUGFwWldQMUlG VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZNemN2NzBvMXhHUTZKTl9QYXBaV1AxSUZVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0ZCMS9BQUQ2OTA0MDU0MzgxMUVEOTM4QzY2MjhDNEY5QUUwMi82TXpjdjcwbzF4 R1E2Sk5fUGFwWldQMUlGVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBymZJVL2EN0jVX1nbcO3eAW94Bj3xAHbvLNEDtv/5kh3QZKxeH2HED OATgVmLuh4pEw66sEXOyNeUIak7TQuyhtNOKHKvVSl7SAUc5RKXw0+mCDbIw6Kpa k8GTwHmARy7UthwS9QknU+thBW25SiUsO7kUM8gCGpEWhGnww4lODjVNKSy78Xmv q4YW++ENbFnXDNU7DSsyOVFNYrmTThelC68m8tQjgmDcgw8QyZBOgYMld07N4YSL vKluf9fQ0zQLnsfCBJnLvk1CNXfTZLiSgzfDNJ8sKRXS7MV5WEq4PjW40Kahydbq 2hz3vFR+968UxZF7rH9o+uu7MP/rJyoX -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:27 2025 by rpki-client