This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft File: 6XepImIg6MeKHRs74E1gzcyKIYg.mft (raw, json) Hash identifier: Fqplp3NUXxkeCuZz7/e24nO5j1D44zAN6cLfxwj/izc= Subject key identifier: C0:0B:99:05:2B:68:FA:7A:DA:97:81:2F:45:48:0F:C1:66:BC:76:5C Authority key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88 Certificate issuer: /CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft Manifest number: 0126 Signing time: Wed 17 Dec 2025 04:10:36 +0000 Manifest this update: Wed 17 Dec 2025 04:10:35 +0000 Manifest next update: Wed 24 Dec 2025 04:10:35 +0000 Files and hashes: 1: 6XepImIg6MeKHRs74E1gzcyKIYg.crl (hash: 0WTHzrg4sbiVGsLLJTTYdmdbv0M/i5P/U3NfA2H4lzY=) 2: 5B6A06725D2C11F080B2DC7BC4F9AE02.roa (hash: l5eDg1NtuwC6/S6spgtl7+l3t055Pm1B+3DrcaZ20+Y=) 3: 1101B5C01CEC11EFA7CDC085C4F9AE02.roa (hash: BZA1P97SNGTrhAAl2/Ui2Ojz/Jo4Dfx0oXuCfnfQd+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 04:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC5BD, serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188 Validity Not Before: Dec 17 04:10:35 2025 GMT Not After : Dec 24 04:10:35 2025 GMT Subject: CN=69422d3c-078c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4b:9e:87:48:93:da:a0:c5:7a:0b:4e:14:0d: e2:24:f0:d4:97:c3:64:11:86:22:63:d4:6c:41:32: f2:09:85:6c:9c:c7:0f:94:82:8b:3a:0e:f0:c7:be: 8f:20:f3:67:be:25:0c:de:72:db:fa:76:5a:09:b7: 3f:e0:a4:b1:db:b5:e8:3b:8b:f3:23:7b:ab:50:9f: 5f:76:aa:92:a9:1c:af:24:da:5e:d3:97:30:fe:50: da:a7:43:f2:ee:d1:6a:82:20:4e:b0:fc:5a:bb:7d: 36:c4:63:71:7a:37:45:64:20:7a:f8:5d:f5:db:1c: ec:59:c2:4f:b2:ae:86:c9:a6:74:d3:cc:33:ab:f9: 3c:e2:0d:fc:61:45:a6:9d:47:a1:cd:65:f7:fd:95: 30:79:fb:0e:e6:99:f0:db:43:ff:91:f4:dc:d2:9b: 07:5c:77:8d:a7:5f:48:6c:27:08:66:c8:da:c5:3b: ff:0f:29:ca:dd:c7:8a:f5:43:27:f3:1b:55:d1:c6: c7:7d:da:0d:70:83:65:8e:38:44:af:65:11:b9:2f: 7e:14:8d:cb:a7:87:0d:2f:6b:28:b5:ef:50:d4:04: 9b:8a:0e:86:bb:94:b0:35:c8:10:05:b3:8b:b6:e6: e6:f0:e4:24:51:75:fe:88:67:dd:79:63:3c:66:4d: 30:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0B:99:05:2B:68:FA:7A:DA:97:81:2F:45:48:0F:C1:66:BC:76:5C X509v3 Authority Key Identifier: keyid:E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:6a:be:b6:aa:5b:68:ec:07:95:ee:ee:a7:2e:43:9f:33:ef: 34:62:07:2f:cb:d9:84:df:23:3c:de:f4:34:3c:08:eb:45:1e: d8:0c:3c:e9:c8:9e:41:40:64:0f:3d:d6:2e:ac:7d:d3:fb:6f: 64:cd:21:05:f0:ba:cd:c4:8e:1a:66:57:26:30:d0:06:24:3e: 29:c5:ff:7e:32:66:7f:45:26:8d:2a:60:d4:0e:2f:2e:89:24: 17:22:58:77:81:b6:24:21:0c:e9:82:8e:70:2a:03:05:ed:52: 48:14:9e:36:fd:b4:ab:53:85:72:3a:70:4e:e3:d0:31:97:65: 80:cc:b2:07:64:f0:4b:b5:48:51:01:a7:81:e9:2a:1e:bc:f3: f6:fd:13:02:a7:32:ba:7f:6c:2a:0c:21:cd:94:b3:7d:59:b8: 06:fb:39:4e:bb:5b:df:ba:99:67:d6:cf:ec:a9:5e:fa:60:a6: 4f:92:0e:44:1c:b3:d5:1b:a3:a5:f1:60:15:b3:39:b0:ee:88: 5f:aa:0d:18:1c:a0:e8:45:1c:58:3f:69:a2:07:bc:4d:a9:73: 0e:cb:8d:9c:2e:75:d3:07:31:48:b0:02:d7:94:71:44:ee:74: fe:4b:22:c1:8c:ea:4d:97:46:9c:d5:ed:47:b9:94:fe:84:8e: 73:44:85:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM1QkQxMTAvBgNVBAUTKEU5NzdBOTIyNjIyMEU4Qzc4QTFEMUIzQkUwNEQ2MENE Q0M4QTIxODgwHhcNMjUxMjE3MDQxMDM1WhcNMjUxMjI0MDQxMDM1WjAYMRYwFAYD VQQDDA02OTQyMmQzYy0wNzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kueh0iT2qDFegtOFA3iJPDUl8NkEYYiY9RsQTLyCYVsnMcPlIKLOg7wx76P IPNnviUM3nLb+nZaCbc/4KSx27XoO4vzI3urUJ9fdqqSqRyvJNpe05cw/lDap0Py 7tFqgiBOsPxau302xGNxejdFZCB6+F312xzsWcJPsq6GyaZ008wzq/k84g38YUWm nUehzWX3/ZUwefsO5pnw20P/kfTc0psHXHeNp19IbCcIZsjaxTv/DynK3ceK9UMn 8xtV0cbHfdoNcINljjhEr2URuS9+FI3Lp4cNL2sote9Q1ASbig6Gu5SwNcgQBbOL tubm8OQkUXX+iGfdeWM8Zk0wrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMALmQUr aPp62peBL0VID8FmvHZcMB8GA1UdIwQYMBaAFOl3qSJiIOjHih0bO+BNYM3MiiGI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzVCRC83NkMyQzcyRTFD RUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZNZUtIUnM3NEUxZ3pjeUtJ WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZYZXBJbUlnNk1lS0hSczc0RTFnemN5S0lZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzVCRC83NkMyQzcyRTFDRUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZN ZUtIUnM3NEUxZ3pjeUtJWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDar62qlto7AeV7u6nLkOfM+80Ygcvy9mE3yM83vQ0PAjrRR7YDDzp yJ5BQGQPPdYurH3T+29kzSEF8LrNxI4aZlcmMNAGJD4pxf9+MmZ/RSaNKmDUDi8u iSQXIlh3gbYkIQzpgo5wKgMF7VJIFJ42/bSrU4VyOnBO49Axl2WAzLIHZPBLtUhR AaeB6SoevPP2/RMCpzK6f2wqDCHNlLN9WbgG+zlOu1vfupln1s/sqV76YKZPkg5E HLPVG6Ol8WAVszmw7ohfqg0YHKDoRRxYP2miB7xNqXMOy42cLnXTBzFIsALXlHFE 7nT+SyLBjOpNl0ac1e1HuZT+hI5zRIXs -----END CERTIFICATE-----Generated at Fri Dec 19 03:12:54 2025 by rpki-client