This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft File: 6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft (raw, json) Hash identifier: ajSlivno4Yi235sFT2N2K7jppHgXeo4XMOTR1YBR/+Q= Subject key identifier: 3C:31:17:59:65:10:85:47:F5:99:EC:CC:13:04:C5:11:80:72:C7:D4 Authority key identifier: E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE Certificate issuer: /CN=A91EBDB8/serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft Manifest number: 75 Signing time: Tue 23 Dec 2025 05:44:00 +0000 Manifest this update: Tue 23 Dec 2025 05:43:59 +0000 Manifest next update: Tue 30 Dec 2025 05:43:59 +0000 Files and hashes: 1: 6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl (hash: 04f3CTo+3JR+X6PdDp6zx0fDCi0GHjC4JiQ0lKUd9z8=) 2: B0B587222FC911F0938FE136C4F9AE02.roa (hash: U0nalOiOtuUPs+ZNE9vz6uJAGl5jCeilRyMtxAjY7ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBDB8, serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE Validity Not Before: Dec 23 05:43:59 2025 GMT Not After : Dec 30 05:43:59 2025 GMT Subject: CN=694a2c20-6160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:23:39:94:4a:47:cf:2d:7d:58:df:a4:aa:05: da:62:ad:b9:ea:19:70:34:2d:a9:f8:63:b8:5b:af: 50:2d:4c:9d:cc:cd:c7:79:b7:6e:63:cb:37:c0:fc: 21:06:cd:c1:51:16:ce:4d:71:63:6f:fc:b8:82:82: 7c:46:8a:e9:f3:78:b0:cc:58:94:56:8c:7f:29:69: 58:7a:8b:a7:c5:f1:08:09:c0:95:31:cc:a1:f3:d9: c6:9d:eb:b8:3b:a2:49:6a:91:98:bf:2b:68:09:c7: bb:4e:f7:fc:0d:db:fc:26:f4:c5:e9:5f:ba:b5:f9: d7:03:eb:dd:2e:26:94:e2:f6:5d:4e:7c:ba:2b:e1: d4:17:b9:7f:b5:47:9c:c5:a9:7b:c4:65:1b:39:94: 28:18:55:d3:b2:ca:d4:45:15:92:30:3d:7a:2f:b2: a5:b1:8b:cd:90:2f:58:be:41:db:85:7e:d5:3d:19: e8:b0:56:d7:04:fd:c3:68:31:e4:6b:35:fa:9f:6f: 0b:ea:bd:48:ed:d8:d3:3e:7b:d3:c0:8f:45:a4:65: 37:c4:23:30:58:30:df:63:c0:9a:5e:ff:6e:5c:ab: f5:06:1a:95:8b:8c:8d:66:aa:81:ea:6c:76:5f:75: cb:12:26:c7:f0:74:9e:08:09:3f:e1:12:dd:36:c4: 7d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:31:17:59:65:10:85:47:F5:99:EC:CC:13:04:C5:11:80:72:C7:D4 X509v3 Authority Key Identifier: keyid:E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:76:80:21:a8:05:99:23:56:a0:25:2d:40:66:26:22:26:72: 79:60:08:59:d6:41:94:76:56:fe:3e:db:d7:04:6f:f7:30:16: a9:fd:28:b9:9a:c9:a5:6e:01:96:0d:12:24:55:d2:b3:e8:cc: af:c3:ac:c6:e3:7f:73:21:b3:05:80:3a:83:a6:29:26:57:d2: 6c:63:49:3d:81:d5:7e:f9:c0:9b:62:12:04:84:60:33:b2:30: ab:b9:b5:d1:b9:08:59:98:35:b3:48:23:25:2b:3a:fd:14:73: 00:17:84:ec:57:07:f2:9d:a0:48:40:9b:86:74:f0:a9:1e:6f: 04:06:61:75:29:1a:18:3c:2b:67:12:b7:68:ef:3d:50:16:bc: bb:71:e6:21:96:42:bb:ae:91:1e:61:ad:e6:0a:28:c5:93:32: e8:38:56:c1:18:40:d3:a0:9b:48:00:47:a2:50:2c:b0:33:ab: e0:96:0c:ef:31:a8:ff:7f:f9:65:84:22:7f:7f:a5:3d:01:3c: 7b:6e:d2:3e:32:b4:3b:d9:70:48:89:8b:3c:4c:a8:8b:bc:8d: 05:8e:60:ce:fd:05:be:6f:e2:32:e0:97:00:18:11:1d:8e:9d: d2:bd:75:73:39:0e:f1:bd:93:a6:7f:b7:85:6f:6f:fd:6e:2f: 37:2e:aa:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkRCODExMC8GA1UEBRMoRTg4QjNCMjNFMDk2NzVCNDM3QTgzMjg5NjNDNUNEM0NF M0U5NUZFRTAeFw0yNTEyMjMwNTQzNTlaFw0yNTEyMzAwNTQzNTlaMBgxFjAUBgNV BAMMDTY5NGEyYzIwLTYxNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClIzmUSkfPLX1Y36SqBdpirbnqGXA0Lan4Y7hbr1AtTJ3Mzcd5t25jyzfA/CEG zcFRFs5NcWNv/LiCgnxGiunzeLDMWJRWjH8paVh6i6fF8QgJwJUxzKHz2cad67g7 oklqkZi/K2gJx7tO9/wN2/wm9MXpX7q1+dcD690uJpTi9l1OfLor4dQXuX+1R5zF qXvEZRs5lCgYVdOyytRFFZIwPXovsqWxi82QL1i+QduFftU9GeiwVtcE/cNoMeRr NfqfbwvqvUjt2NM+e9PAj0WkZTfEIzBYMN9jwJpe/25cq/UGGpWLjI1mqoHqbHZf dcsSJsfwdJ4ICT/hEt02xH3DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPDEXWWUQ hUf1mezMEwTFEYByx9QwHwYDVR0jBBgwFoAU6Is7I+CWdbQ3qDKJY8XNPOPpX+4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCREI4Lzk4MjMwQjJDMkVG QjExRjA5MEUzNjM4NUM0RjlBRTAyLzZJczdJLUNXZGJRM3FES0pZOFhOUE9QcFgt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNklzN0ktQ1dkYlEzcURLSlk4WE5QT1BwWC00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC REI4Lzk4MjMwQjJDMkVGQjExRjA5MEUzNjM4NUM0RjlBRTAyLzZJczdJLUNXZGJR M3FES0pZOFhOUE9QcFgtNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHR2gCGoBZkjVqAlLUBmJiImcnlgCFnWQZR2Vv4+29cEb/cwFqn9KLma yaVuAZYNEiRV0rPozK/DrMbjf3MhswWAOoOmKSZX0mxjST2B1X75wJtiEgSEYDOy MKu5tdG5CFmYNbNIIyUrOv0UcwAXhOxXB/KdoEhAm4Z08KkebwQGYXUpGhg8K2cS t2jvPVAWvLtx5iGWQruukR5hreYKKMWTMug4VsEYQNOgm0gAR6JQLLAzq+CWDO8x qP9/+WWEIn9/pT0BPHtu0j4ytDvZcEiJizxMqIu8jQWOYM79Bb5v4jLglwAYER2O ndK9dXM5DvG9k6Z/t4Vvb/1uLzcuqvE= -----END CERTIFICATE-----Generated at Wed Dec 24 14:08:32 2025 by rpki-client