This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft File: a51l6unGl9ohy0vuv030zgpBkyE.mft (raw, json) Hash identifier: CrZe1m25rIZnHKSbKg4PcEMxxLjbkv8TQIaAPtA3Pw8= Subject key identifier: 9C:57:F1:D6:87:6A:AB:A8:2B:68:F7:71:E5:6A:1B:B8:0C:04:3A:B3 Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 Certificate issuer: /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Certificate serial: 3521 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft Manifest number: 3506 Signing time: Sat 06 Dec 2025 14:38:25 +0000 Manifest this update: Sat 06 Dec 2025 14:38:24 +0000 Manifest next update: Sat 13 Dec 2025 14:38:24 +0000 Files and hashes: 1: a51l6unGl9ohy0vuv030zgpBkyE.crl (hash: wpJfaV/hMR2HIGNoJr4K+yVcIR8G0+5cDZiRjr7CXtQ=) 2: 6215E9C089CF11ECA1DA1810C4F9AE02.roa (hash: o3Ceb2MSjRakfXXsxsrz1v3BRN+sMCeTig6Z0QGV2lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13601 (0x3521) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141FD6, serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Validity Not Before: Dec 6 14:38:24 2025 GMT Not After : Dec 13 14:38:24 2025 GMT Subject: CN=69343fe0-add1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ac:94:a0:e6:1b:3c:9c:e9:16:a9:4e:31:f2: fe:5e:32:65:f1:9e:8e:b6:57:d8:a5:a7:61:9c:97: f5:eb:f2:3b:ee:a8:ae:ec:ba:e3:c0:e3:1c:98:c1: d3:39:0f:e1:5d:f5:49:7b:35:63:cb:e2:9e:20:3c: 32:9d:14:e6:e4:72:9c:f5:a2:24:76:92:c3:42:65: 1b:59:3b:b1:97:83:04:64:04:07:66:e4:85:ea:fa: 42:e3:f3:09:66:3b:86:e8:ce:40:6f:09:0c:74:22: 1a:a3:f9:bf:be:56:17:3e:00:87:09:14:d5:71:2c: 35:54:04:56:59:dd:6d:30:14:d6:2e:3a:26:24:0c: ef:6e:c9:58:ab:b9:b2:75:af:ca:1b:23:b3:e9:c3: 91:d8:24:24:95:28:a9:81:32:55:dc:13:13:a9:8c: 23:46:6d:d7:d2:d5:b4:b5:e8:fc:40:a0:f3:93:5f: e5:0c:ac:34:2e:61:1d:fa:6f:56:ac:04:23:5b:c9: c2:5a:ac:ee:7c:7e:4a:9f:3a:2c:16:45:13:ba:2e: 3f:b1:cd:fa:8b:fb:71:70:54:4c:5e:a3:9b:34:ad: 53:05:cf:dd:94:ba:01:f3:bc:64:91:31:42:94:31: c8:7c:57:19:1e:4c:e3:9b:8c:64:e5:94:2b:ed:73: 77:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:57:F1:D6:87:6A:AB:A8:2B:68:F7:71:E5:6A:1B:B8:0C:04:3A:B3 X509v3 Authority Key Identifier: keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:c0:55:77:8f:db:5c:fe:e7:29:19:a1:4a:48:58:4a:63:13: 6e:a7:65:a9:28:c3:3b:7e:91:57:e1:ab:8a:87:64:dc:90:4d: 0c:41:35:fe:14:72:f6:10:d4:55:c1:34:69:cf:26:92:e2:12: dd:75:a3:a4:7c:06:2a:4e:88:e3:d5:dc:8f:de:1f:c4:4e:47: 8a:c9:12:b1:0d:c6:9f:13:dd:fe:d8:6f:9b:de:91:0e:52:35: 6e:b7:29:f9:ee:8e:a5:d2:ae:7d:b8:03:3e:b4:d5:ab:ac:ab: 79:4a:59:22:9c:ce:3a:63:df:3b:48:62:83:95:64:9a:fc:79: 1a:0c:d4:48:1e:24:2e:71:9b:e0:ca:75:8e:4e:f8:1d:89:3b: 74:bc:a3:46:40:df:3a:08:fb:79:b5:2f:b0:e8:e5:da:b2:36: f8:6a:54:d3:37:43:50:0e:c7:e0:5b:12:25:98:a7:62:6b:a0: 62:9d:a0:80:ed:43:09:8a:41:77:46:9a:69:cc:c7:9a:61:52: 9f:a8:5c:32:8c:2a:e3:7e:0b:89:db:e9:b8:e3:5b:b8:8c:71: b7:4d:79:0b:92:61:cd:e0:bf:c3:a5:d6:a8:41:64:8f:1f:76: 4e:c1:dd:63:cd:f1:11:48:64:15:d9:8c:a7:a4:3d:34:ec:26: 2f:ee:bf:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFGRDYxMTAvBgNVBAUTKDZCOUQ2NUVBRTlDNjk3REEyMUNCNEJFRUJGNERGNENF MEE0MTkzMjEwHhcNMjUxMjA2MTQzODI0WhcNMjUxMjEzMTQzODI0WjAYMRYwFAYD VQQDEw02OTM0M2ZlMC1hZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06yUoOYbPJzpFqlOMfL+XjJl8Z6OtlfYpadhnJf16/I77qiu7LrjwOMcmMHT OQ/hXfVJezVjy+KeIDwynRTm5HKc9aIkdpLDQmUbWTuxl4MEZAQHZuSF6vpC4/MJ ZjuG6M5AbwkMdCIao/m/vlYXPgCHCRTVcSw1VARWWd1tMBTWLjomJAzvbslYq7my da/KGyOz6cOR2CQklSipgTJV3BMTqYwjRm3X0tW0tej8QKDzk1/lDKw0LmEd+m9W rAQjW8nCWqzufH5KnzosFkUTui4/sc36i/txcFRMXqObNK1TBc/dlLoB87xkkTFC lDHIfFcZHkzjm4xk5ZQr7XN3AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxX8daH aquoK2j3ceVqG7gMBDqzMB8GA1UdIwQYMBaAFGudZerpxpfaIctL7r9N9M4KQZMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUZENi82RUVDNjQzMDFE OTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5b2h5MHZ1djAzMHpncEJr eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1MWw2dW5HbDlvaHkwdnV2MDMwemdwQmt5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUZENi82RUVDNjQzMDFEOTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5 b2h5MHZ1djAzMHpncEJreUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgwFV3j9tc/ucpGaFKSFhKYxNup2WpKMM7fpFX4auKh2TckE0MQTX+ FHL2ENRVwTRpzyaS4hLddaOkfAYqTojj1dyP3h/ETkeKyRKxDcafE93+2G+b3pEO UjVutyn57o6l0q59uAM+tNWrrKt5SlkinM46Y987SGKDlWSa/HkaDNRIHiQucZvg ynWOTvgdiTt0vKNGQN86CPt5tS+w6OXasjb4alTTN0NQDsfgWxIlmKdia6BinaCA 7UMJikF3RpppzMeaYVKfqFwyjCrjfguJ2+m441u4jHG3TXkLkmHN4L/DpdaoQWSP H3ZOwd1jzfERSGQV2YynpD007CYv7r/D -----END CERTIFICATE-----Generated at Sun Dec 7 04:17:05 2025 by rpki-client