This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft File: 6NbUISgrkBkAAJd2GiVjIjyngV4.mft (raw, json) Hash identifier: hJFbBujPXstd/9wm8PAYmF5KyTIJuAGUMgPywHdWvzM= Subject key identifier: DB:52:A0:F0:56:1C:0D:BC:E1:36:B2:F1:32:A5:43:43:1D:E7:F9:42 Authority key identifier: E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E Certificate issuer: /CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft Manifest number: DF Signing time: Wed 03 Dec 2025 03:56:25 +0000 Manifest this update: Wed 03 Dec 2025 03:56:25 +0000 Manifest next update: Wed 10 Dec 2025 03:56:25 +0000 Files and hashes: 1: 6NbUISgrkBkAAJd2GiVjIjyngV4.crl (hash: cK9FL960pVqD435BE/lc1QHwXgpFjniAOAxc/twvZOs=) 2: CCEAF60C911311EFA9C63854C4F9AE02.roa (hash: FpNZ3HLo1o4b1YUw3bp5mGEZMF3ekFVbByklPwI6twE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 03:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFCFF, serialNumber=E8D6D421282B9019000097761A2563223CA7815E Validity Not Before: Dec 3 03:56:25 2025 GMT Not After : Dec 10 03:56:25 2025 GMT Subject: CN=692fb4e9-c235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:06:d2:e9:00:80:9c:e6:9c:b0:d5:68:f8:1b: 3d:aa:3d:e6:c8:66:88:0f:63:74:48:2c:64:88:ed: 26:55:75:22:3a:db:5b:09:af:8a:9f:bb:2f:64:8d: f9:a5:8f:52:e3:19:d9:3f:98:4f:13:66:2d:11:18: 1b:78:d4:f6:99:59:58:58:6d:28:33:f4:9f:3a:80: f7:2e:e7:f6:4c:b6:ea:b0:2d:4f:1f:c6:79:45:ae: f3:5a:35:dd:5f:ab:54:5d:03:99:d8:3a:94:11:1c: 0e:3e:61:70:d9:f2:fe:f8:79:a8:d5:20:25:98:29: f8:e0:df:b5:5b:26:55:e4:25:48:b2:d0:77:14:c2: 36:4e:aa:62:7b:72:00:e8:1d:eb:98:3b:5c:48:0e: 39:41:2b:a7:36:b7:b2:61:f4:f7:5d:f6:5a:d1:40: 19:b3:44:89:7e:f1:01:58:19:ba:17:83:12:94:bf: 4b:be:d3:77:2b:ab:3b:68:5a:85:8a:cd:d1:67:22: bc:0d:d5:8f:13:bb:09:b9:eb:f1:9f:81:01:7d:8f: f5:85:6d:8b:aa:8d:e1:d7:c0:4b:b8:d7:19:55:2b: ec:e5:1d:69:0e:c3:d1:65:ff:a8:d9:18:60:38:cd: da:8a:3f:70:8b:58:b0:54:df:b6:d8:07:69:64:fd: a3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:52:A0:F0:56:1C:0D:BC:E1:36:B2:F1:32:A5:43:43:1D:E7:F9:42 X509v3 Authority Key Identifier: keyid:E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:c4:b2:99:45:24:4f:dc:06:1b:45:c3:46:bb:00:be:5d:3a: 8f:fb:78:4b:84:26:7d:48:a5:6d:36:e2:1b:f6:aa:86:35:62: 65:63:c3:10:5f:e3:63:9c:bf:f7:0b:c0:dd:27:e9:96:8b:23: 13:3a:b5:03:44:4d:fb:c5:3d:eb:17:71:33:31:95:07:24:68: f5:c1:04:22:07:a4:5d:cb:68:3f:3f:37:ee:ea:d0:72:fa:c4: 5b:6b:30:71:88:5e:22:35:b9:12:5d:ea:e4:2b:47:b6:62:69: 0f:87:aa:d5:a3:5f:9d:9f:95:13:1f:0a:00:57:f6:6c:cf:71: 2f:f1:cd:ab:94:98:3d:f1:f9:f0:7c:c6:11:b1:96:4c:fa:82: ee:8c:05:5e:c1:86:e4:1b:51:bf:dd:24:47:8c:c5:95:ac:bb: 78:42:ee:2a:88:85:72:e3:02:80:f2:23:57:8f:17:ea:32:5a: 6f:f6:39:18:52:b4:69:83:75:89:3b:c7:f1:34:3b:51:c7:17: a4:ab:61:48:55:ef:cf:ed:b8:4e:93:51:68:7d:1a:3c:bf:c5: 6a:60:84:24:c6:69:9e:8e:f7:ff:9f:87:aa:ff:09:f6:77:13: de:c4:b5:a0:0e:72:7c:89:e5:39:f4:d1:d0:4a:fe:b0:2d:e9: 5f:15:fb:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDRkYxMTAvBgNVBAUTKEU4RDZENDIxMjgyQjkwMTkwMDAwOTc3NjFBMjU2MzIy M0NBNzgxNUUwHhcNMjUxMjAzMDM1NjI1WhcNMjUxMjEwMDM1NjI1WjAYMRYwFAYD VQQDEw02OTJmYjRlOS1jMjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmwbS6QCAnOacsNVo+Bs9qj3myGaID2N0SCxkiO0mVXUiOttbCa+Kn7svZI35 pY9S4xnZP5hPE2YtERgbeNT2mVlYWG0oM/SfOoD3Luf2TLbqsC1PH8Z5Ra7zWjXd X6tUXQOZ2DqUERwOPmFw2fL++Hmo1SAlmCn44N+1WyZV5CVIstB3FMI2Tqpie3IA 6B3rmDtcSA45QSunNreyYfT3XfZa0UAZs0SJfvEBWBm6F4MSlL9LvtN3K6s7aFqF is3RZyK8DdWPE7sJuevxn4EBfY/1hW2Lqo3h18BLuNcZVSvs5R1pDsPRZf+o2Rhg OM3aij9wi1iwVN+22AdpZP2jpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtSoPBW HA284Tay8TKlQ0Md5/lCMB8GA1UdIwQYMBaAFOjW1CEoK5AZAACXdholYyI8p4Fe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkNGRi8wRkE4NUY4ODgy MUYxMUVGQTFEQjRDNzVDNEY5QUUwMi82TmJVSVNncmtCa0FBSmQyR2lWaklqeW5n VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZOYlVJU2dya0JrQUFKZDJHaVZqSWp5bmdWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkNGRi8wRkE4NUY4ODgyMUYxMUVGQTFEQjRDNzVDNEY5QUUwMi82TmJVSVNncmtC a0FBSmQyR2lWaklqeW5nVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjxLKZRSRP3AYbRcNGuwC+XTqP+3hLhCZ9SKVtNuIb9qqGNWJlY8MQ X+NjnL/3C8DdJ+mWiyMTOrUDRE37xT3rF3EzMZUHJGj1wQQiB6Rdy2g/Pzfu6tBy +sRbazBxiF4iNbkSXerkK0e2YmkPh6rVo1+dn5UTHwoAV/Zsz3Ev8c2rlJg98fnw fMYRsZZM+oLujAVewYbkG1G/3SRHjMWVrLt4Qu4qiIVy4wKA8iNXjxfqMlpv9jkY UrRpg3WJO8fxNDtRxxekq2FIVe/P7bhOk1FofRo8v8VqYIQkxmmejvf/n4eq/wn2 dxPexLWgDnJ8ieU59NHQSv6wLelfFfvZ -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:22 2025 by rpki-client