This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft File: M6AXSkpLAJwBFRWWkTbzAQidtbU.mft (raw, json) Hash identifier: aHFOPoMogIwJ8ZLQr0ZuJEzOA8J69DNUlNDdeyJ3Va4= Subject key identifier: 38:8A:86:B0:6B:87:A8:14:B7:12:20:06:21:5B:20:10:00:04:64:D5 Authority key identifier: 33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 Certificate issuer: /CN=A91FF1CC/serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft Manifest number: 9C Signing time: Tue 23 Dec 2025 05:17:41 +0000 Manifest this update: Tue 23 Dec 2025 05:17:41 +0000 Manifest next update: Tue 30 Dec 2025 05:17:41 +0000 Files and hashes: 1: M6AXSkpLAJwBFRWWkTbzAQidtbU.crl (hash: qpSEU4cxpyJkl3sx4DWuMep0NIUsfuctFqri0Cds3AU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Validity Not Before: Dec 23 05:17:41 2025 GMT Not After : Dec 30 05:17:41 2025 GMT Subject: CN=694a25f5-fea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:8a:ae:0f:75:30:b8:a3:87:ab:0f:33:b3: e0:12:e3:09:06:3e:a3:20:ae:6d:a2:9f:73:f0:52: b5:88:97:27:42:f6:e6:3d:23:75:4a:aa:e3:ea:b7: 8c:4c:9a:84:2b:33:7e:4b:f0:75:80:6c:b1:de:e6: a3:e0:c2:1a:09:49:47:08:9e:bb:81:ab:42:75:3a: 9d:db:26:3b:35:bb:50:cf:58:a4:28:c7:ad:3a:32: 83:1b:0e:41:7d:f5:15:99:d7:1e:fe:74:8c:11:64: 5a:a7:fd:e7:b2:54:d1:6d:bf:19:75:42:c3:49:1c: 46:08:bc:a8:b9:5a:26:03:6e:73:97:c3:43:0e:ac: c0:6b:fe:ca:cf:17:6b:2d:ef:d2:f1:47:da:70:b1: 22:df:e6:77:4e:79:a7:6e:4c:14:ea:46:d2:af:4d: 86:c2:a6:25:41:7b:56:55:ee:fc:d7:65:b9:ef:39: 23:5a:99:0f:e1:b1:08:3b:27:e4:2d:3a:69:9c:bd: f2:bc:38:e1:08:97:d6:5d:9f:7e:bc:d9:0f:a1:55: c6:fc:77:52:2f:f1:1f:a6:b2:0d:c5:a2:03:c8:0b: 9e:03:10:f3:5c:ab:92:8d:7f:b0:6a:62:91:d5:e6: 59:63:85:05:01:6f:ea:e6:32:d7:ed:e6:9b:bb:9d: 27:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8A:86:B0:6B:87:A8:14:B7:12:20:06:21:5B:20:10:00:04:64:D5 X509v3 Authority Key Identifier: keyid:33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:d9:e7:a4:1b:fb:90:23:48:03:c8:db:86:f7:fa:1a:0c:93: b9:7f:38:6e:43:d1:ca:88:e8:15:dc:eb:55:47:6a:bb:ba:3e: 01:13:ff:55:d2:ed:2e:e9:e2:12:17:e6:3a:02:8b:68:ee:02: d5:dc:03:92:4c:80:dd:93:02:b0:43:64:98:eb:1a:63:5b:41: aa:bd:89:18:b3:6a:aa:e6:d0:1e:2f:2c:10:75:c9:32:83:5d: 4a:3a:66:91:72:71:fc:0e:27:9f:91:98:7c:40:d3:41:2b:e5: ce:37:ff:b6:73:d7:5c:c4:d6:3d:bd:84:b2:83:80:8a:98:ca: f7:47:77:e4:4d:4e:0c:21:db:3b:53:62:44:89:e4:08:ff:c1: 39:35:7d:f8:f3:25:2d:53:d5:b7:da:35:e2:6e:45:69:f3:c4: 06:b2:45:27:b4:4d:d1:56:f3:96:f5:c4:c0:d5:c5:bd:eb:4c: 13:b5:33:14:5d:c3:cb:2c:04:85:64:d9:74:6f:0f:53:c9:e1: c6:0e:76:a6:bc:b0:61:bb:e0:b3:d9:1a:de:f3:6d:4d:9c:60: 25:18:89:ab:6d:92:e0:31:14:96:0e:d2:ab:ae:27:fa:28:16: 44:bf:0b:a9:a0:5c:c3:d2:51:dc:57:bd:c1:b9:83:fa:71:a2: 91:e4:e6:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxQ0MxMTAvBgNVBAUTKDMzQTAxNzRBNEE0QjAwOUMwMTE1MTU5NjkxMzZGMzAx MDg5REI1QjUwHhcNMjUxMjIzMDUxNzQxWhcNMjUxMjMwMDUxNzQxWjAYMRYwFAYD VQQDDA02OTRhMjVmNS1mZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWeKrg91MLijh6sPM7PgEuMJBj6jIK5top9z8FK1iJcnQvbmPSN1Sqrj6reM TJqEKzN+S/B1gGyx3uaj4MIaCUlHCJ67gatCdTqd2yY7NbtQz1ikKMetOjKDGw5B ffUVmdce/nSMEWRap/3nslTRbb8ZdULDSRxGCLyouVomA25zl8NDDqzAa/7Kzxdr Le/S8UfacLEi3+Z3TnmnbkwU6kbSr02GwqYlQXtWVe7812W57zkjWpkP4bEIOyfk LTppnL3yvDjhCJfWXZ9+vNkPoVXG/HdSL/EfprINxaIDyAueAxDzXKuSjX+wamKR 1eZZY4UFAW/q5jLX7eabu50n4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDiKhrBr h6gUtxIgBiFbIBAABGTVMB8GA1UdIwQYMBaAFDOgF0pKSwCcARUVlpE28wEInbW1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjFDQy80M0VBNkIxOEVG NjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9NNkFYU2twTEFKd0JGUldXa1RiekFRaWR0 YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL002QVhTa3BMQUp3QkZSV1drVGJ6QVFpZHRiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjFDQy80M0VBNkIxOEVGNjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9NNkFYU2twTEFK d0JGUldXa1RiekFRaWR0YlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC02eekG/uQI0gDyNuG9/oaDJO5fzhuQ9HKiOgV3OtVR2q7uj4BE/9V 0u0u6eISF+Y6Aoto7gLV3AOSTIDdkwKwQ2SY6xpjW0GqvYkYs2qq5tAeLywQdcky g11KOmaRcnH8DiefkZh8QNNBK+XON/+2c9dcxNY9vYSyg4CKmMr3R3fkTU4MIds7 U2JEieQI/8E5NX348yUtU9W32jXibkVp88QGskUntE3RVvOW9cTA1cW960wTtTMU XcPLLASFZNl0bw9TyeHGDnamvLBhu+Cz2Rre821NnGAlGImrbZLgMRSWDtKrrif6 KBZEvwupoFzD0lHcV73BuYP6caKR5OaI -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:50 2025 by rpki-client