This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft File: K6PqbAvX8YRghmD5ogTlEYZaAN0.mft (raw, json) Hash identifier: oxwv/wwWuUp/d6SxlSUlFryhYzk7HjN9SyzBBpXqOeM= Subject key identifier: EE:4D:F0:69:69:47:54:E5:00:D8:68:41:0D:1A:6B:66:77:E8:10:51 Authority key identifier: 2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD Certificate issuer: /CN=A91F1E8B/serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD Certificate serial: 0986 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft Manifest number: 097F Signing time: Mon 22 Dec 2025 19:26:59 +0000 Manifest this update: Mon 22 Dec 2025 19:26:59 +0000 Manifest next update: Mon 29 Dec 2025 19:26:59 +0000 Files and hashes: 1: K6PqbAvX8YRghmD5ogTlEYZaAN0.crl (hash: 3nn97SbX3Tnc8vkqO6KwrJW1NoO/cZd3X2EE25r3NJ0=) 2: 33F713A8A3CF11EAA31D8C20C4F9AE02.roa (hash: U+2Kae/qqfcPAGDUNj2rc7ly1La28a/4nOUamtVuvAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2438 (0x986) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1E8B, serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD Validity Not Before: Dec 22 19:26:59 2025 GMT Not After : Dec 29 19:26:59 2025 GMT Subject: CN=69499b83-c9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0f:d0:2c:29:28:de:cc:ce:89:71:42:c6:e6: 60:33:c1:88:ce:dd:ce:3f:89:42:93:76:23:10:d3: 3e:cc:e7:61:5b:03:81:75:bf:73:86:c9:1a:0b:49: 62:ae:26:01:e6:3a:c1:99:72:72:ff:c9:35:e4:89: 15:5e:97:b5:ab:64:45:01:be:58:38:65:13:49:f7: 0c:53:39:d6:03:cf:e7:44:77:65:70:c8:17:a7:aa: 2f:f9:60:2c:a7:c9:7d:01:44:8b:49:aa:6d:b6:47: 40:30:5a:a4:3f:21:69:d6:fa:d8:80:cf:83:6f:54: 79:7a:fb:f7:bc:97:fa:67:30:31:a0:69:23:54:fc: 37:45:c4:f5:03:45:fc:8b:05:bb:1a:45:4c:04:57: cf:3e:bc:f7:ef:05:d5:96:4d:97:3c:29:d4:e8:71: 0f:14:18:c5:44:b3:9b:98:aa:9e:e4:23:d8:25:af: d9:56:bb:ee:dc:1c:ab:68:89:4d:b7:78:8b:b6:26: 22:1a:64:94:96:80:5d:8f:59:8b:ff:7b:05:85:d3: 7d:c9:c3:84:18:46:60:d8:8c:5c:bb:64:e1:94:f8: a0:f1:9f:dc:68:14:84:a5:95:c6:94:4a:f8:50:09: 6c:4e:a3:f7:9a:52:eb:3e:d2:26:dd:f1:6b:0a:eb: aa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4D:F0:69:69:47:54:E5:00:D8:68:41:0D:1A:6B:66:77:E8:10:51 X509v3 Authority Key Identifier: keyid:2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:18:f1:6b:d9:72:d8:d8:0e:7e:ed:9e:67:0e:2c:33:c6:4d: 5f:98:1d:45:5a:a8:26:9b:7f:5c:ef:f5:6f:7c:b2:a3:2b:85: 69:25:ae:35:d0:ad:d9:c6:a4:80:82:d8:97:c9:7a:fb:e4:8e: 1d:9b:78:43:7b:d6:73:26:ae:31:c1:1f:50:e6:cd:18:cd:34: 52:00:79:fe:cf:70:37:3d:00:e5:6b:cb:9f:2d:bb:9f:d3:fc: cd:36:9b:f4:ab:c5:cc:7c:29:9b:d4:0b:ef:88:57:03:6b:83: 0c:ef:21:a4:cb:a9:2e:15:4e:c6:a5:c1:84:ed:2e:a7:79:24: 11:9d:13:8a:37:dc:3f:67:91:c9:be:5a:20:5f:5a:3c:9e:e0: 2b:cd:76:dc:9a:c6:0c:d2:2b:36:83:ac:74:1d:98:26:14:1c: e7:e0:e8:d6:b9:10:a0:44:dd:05:6e:f2:5f:65:e0:68:58:0f: 94:9c:b1:e6:63:2b:4e:07:96:93:9a:35:24:71:66:d1:8f:5c: 05:7b:fd:44:2b:ce:85:53:d8:94:8c:25:cf:02:3c:61:62:28: 0d:6f:f3:19:05:4d:49:66:31:4a:21:ac:45:6c:29:f1:f5:24: 83:98:3a:e2:d7:47:36:fb:7c:e4:03:bc:3d:1b:8e:89:5a:fd: 9a:ab:a2:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFFOEIxMTAvBgNVBAUTKDJCQTNFQTZDMEJEN0YxODQ2MDg2NjBGOUEyMDRFNTEx ODY1QTAwREQwHhcNMjUxMjIyMTkyNjU5WhcNMjUxMjI5MTkyNjU5WjAYMRYwFAYD VQQDDA02OTQ5OWI4My1jOWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwA/QLCko3szOiXFCxuZgM8GIzt3OP4lCk3YjENM+zOdhWwOBdb9zhskaC0li riYB5jrBmXJy/8k15IkVXpe1q2RFAb5YOGUTSfcMUznWA8/nRHdlcMgXp6ov+WAs p8l9AUSLSapttkdAMFqkPyFp1vrYgM+Db1R5evv3vJf6ZzAxoGkjVPw3RcT1A0X8 iwW7GkVMBFfPPrz37wXVlk2XPCnU6HEPFBjFRLObmKqe5CPYJa/ZVrvu3ByraIlN t3iLtiYiGmSUloBdj1mL/3sFhdN9ycOEGEZg2Ixcu2ThlPig8Z/caBSEpZXGlEr4 UAlsTqP3mlLrPtIm3fFrCuuqjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5N8Glp R1TlANhoQQ0aa2Z36BBRMB8GA1UdIwQYMBaAFCuj6mwL1/GEYIZg+aIE5RGGWgDd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUU4Qi84MDdERkRBMEEz Q0UxMUVBOEJBRTY1MjBDNEY5QUUwMi9LNlBxYkF2WDhZUmdobUQ1b2dUbEVZWmFB TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s2UHFiQXZYOFlSZ2htRDVvZ1RsRVlaYUFOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUU4Qi84MDdERkRBMEEzQ0UxMUVBOEJBRTY1MjBDNEY5QUUwMi9LNlBxYkF2WDhZ UmdobUQ1b2dUbEVZWmFBTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAGPFr2XLY2A5+7Z5nDiwzxk1fmB1FWqgmm39c7/VvfLKjK4VpJa41 0K3ZxqSAgtiXyXr75I4dm3hDe9ZzJq4xwR9Q5s0YzTRSAHn+z3A3PQDla8ufLbuf 0/zNNpv0q8XMfCmb1AvviFcDa4MM7yGky6kuFU7GpcGE7S6neSQRnROKN9w/Z5HJ vlogX1o8nuArzXbcmsYM0is2g6x0HZgmFBzn4OjWuRCgRN0FbvJfZeBoWA+UnLHm YytOB5aTmjUkcWbRj1wFe/1EK86FU9iUjCXPAjxhYigNb/MZBU1JZjFKIaxFbCnx 9SSDmDri10c2+3zkA7w9G46JWv2aq6Ja -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:21 2025 by rpki-client