This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft File: R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft (raw, json) Hash identifier: 4/0JrpyhqMBaj8In8qjF0suCWRSw5cBdA/wLP0yXaRs= Subject key identifier: 4B:9C:84:61:16:30:F6:39:15:81:49:3D:95:EB:90:CF:B1:A4:20:A0 Authority key identifier: 47:A6:19:0A:C0:5C:30:80:7E:D1:5F:40:92:1B:B2:32:DB:55:24:84 Certificate issuer: /CN=A91583E2/serialNumber=47A6190AC05C30807ED15F40921BB232DB552484 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft Manifest number: 64 Signing time: Fri 05 Dec 2025 04:56:09 +0000 Manifest this update: Fri 05 Dec 2025 04:56:08 +0000 Manifest next update: Fri 12 Dec 2025 04:56:08 +0000 Files and hashes: 1: R6YZCsBcMIB-0V9AkhuyMttVJIQ.crl (hash: Kt9WCcUohGnjtGBFMQRkfnMQd2U16m+9yFNbj91SjsY=) 2: B0E8BC383B9911F09DE90D79C4F9AE02.roa (hash: sAZrKqeMzoSTzbfqkrtyTfEKHbSYlRzZrsbcTgM/X7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.crl rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=47A6190AC05C30807ED15F40921BB232DB552484 Validity Not Before: Dec 5 04:56:08 2025 GMT Not After : Dec 12 04:56:08 2025 GMT Subject: CN=693265e8-a2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:29:45:eb:ec:98:d1:00:11:41:c0:28:4d:ce: 07:82:d6:68:3f:4c:65:6d:4b:ab:c3:a7:1d:50:cb: 68:0c:17:0f:10:bf:43:15:3d:1f:d6:c2:25:79:c1: f2:5b:5b:b0:59:d3:64:1a:fc:4c:01:ae:d2:30:36: 4a:da:14:63:ea:2f:a1:08:44:ac:df:f6:50:d1:8c: 74:3c:07:96:73:19:bc:b8:aa:ac:d9:cc:0a:e2:41: 35:87:d1:38:33:03:7f:39:0e:11:78:a8:1e:6c:36: a0:d8:58:c6:d4:80:e3:99:73:0c:a6:1b:1e:73:c3: 80:86:13:d5:75:d7:55:67:7c:29:19:ba:a0:a8:7a: bb:f4:f8:b8:6d:67:be:5a:3b:a0:5e:b6:e9:9c:7e: ff:2f:30:bd:7d:53:e4:9b:3e:31:1d:92:cb:85:55: 75:d7:97:94:cd:3d:41:e8:c5:78:90:e2:e0:d0:8c: 0e:7e:11:38:e4:78:e5:9b:20:13:cb:04:6f:5e:c2: b9:56:af:d2:cf:e0:dd:7f:2e:aa:f2:18:f8:14:d6: 9f:c5:30:96:2a:95:06:24:fb:1f:c7:72:b8:5f:9d: 5f:66:ff:ef:57:0d:25:0a:be:c0:72:fc:63:66:62: 15:b4:11:01:92:b5:82:5b:09:1c:ba:e2:b0:68:0d: 6b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9C:84:61:16:30:F6:39:15:81:49:3D:95:EB:90:CF:B1:A4:20:A0 X509v3 Authority Key Identifier: keyid:47:A6:19:0A:C0:5C:30:80:7E:D1:5F:40:92:1B:B2:32:DB:55:24:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:c1:c4:65:b9:7f:c6:37:a5:94:a3:4b:94:6b:96:1f:7d:f3: f3:36:99:a0:f2:a9:45:6b:51:ba:8c:0d:19:a9:8c:4e:e4:a0: c1:30:82:36:99:06:8d:e3:b8:03:cd:d0:fb:76:d5:e2:e1:a7: 6d:02:02:f5:4b:24:8a:1f:08:63:8c:c7:94:f1:c8:93:fa:d8: c5:83:03:5f:86:67:fa:74:73:f0:44:a0:64:1d:f6:26:10:b3: f6:82:8d:e0:4e:d6:bb:e9:a8:cb:3a:86:9b:fd:ad:ea:e7:b6: a5:77:25:80:16:d5:10:c6:50:65:51:9a:10:be:3b:a5:12:85: 31:7e:25:4f:3a:5c:22:ef:98:27:8c:90:84:a9:c6:c2:09:3f: 19:d7:c9:de:e8:d8:82:a1:d2:52:72:54:b6:06:d7:4a:f5:d5: f1:21:91:db:5b:e8:ff:b4:bd:88:a0:d3:85:f8:42:a6:64:a7: 81:01:0a:bc:18:9e:1f:bb:73:ec:41:7f:b4:79:48:ee:9c:2e: 05:52:77:8b:e6:60:6b:95:e8:58:e6:44:c5:e6:45:2e:a2:93: 4d:e9:e3:da:37:92:fb:51:4b:e8:6e:85:ee:aa:90:40:b1:15: 63:f3:29:73:88:ee:48:57:68:48:48:8b:89:c3:64:b3:7e:38: 31:58:70:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNDdBNjE5MEFDMDVDMzA4MDdFRDE1RjQwOTIxQkIyMzJE QjU1MjQ4NDAeFw0yNTEyMDUwNDU2MDhaFw0yNTEyMTIwNDU2MDhaMBgxFjAUBgNV BAMTDTY5MzI2NWU4LWEyZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhKUXr7JjRABFBwChNzgeC1mg/TGVtS6vDpx1Qy2gMFw8Qv0MVPR/WwiV5wfJb W7BZ02Qa/EwBrtIwNkraFGPqL6EIRKzf9lDRjHQ8B5ZzGby4qqzZzAriQTWH0Tgz A385DhF4qB5sNqDYWMbUgOOZcwymGx5zw4CGE9V111VnfCkZuqCoerv0+LhtZ75a O6Betumcfv8vML19U+SbPjEdksuFVXXXl5TNPUHoxXiQ4uDQjA5+ETjkeOWbIBPL BG9ewrlWr9LP4N1/LqryGPgU1p/FMJYqlQYk+x/HcrhfnV9m/+9XDSUKvsBy/GNm YhW0EQGStYJbCRy64rBoDWsZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS5yEYRYw 9jkVgUk9leuQz7GkIKAwHwYDVR0jBBgwFoAUR6YZCsBcMIB+0V9AkhuyMttVJIQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzREM0NDMDhBM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1I2WVpDc0JjTUlCLTBWOUFraHV5TXR0VkpJ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjZZWkNzQmNNSUItMFY5QWtodXlNdHRWSklRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 M0UyLzREM0NDMDhBM0I5OTExRjBBMENDNTk3OEM0RjlBRTAyL1I2WVpDc0JjTUlC LTBWOUFraHV5TXR0VkpJUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALHBxGW5f8Y3pZSjS5Rrlh998/M2maDyqUVrUbqMDRmpjE7koMEwgjaZ Bo3juAPN0Pt21eLhp20CAvVLJIofCGOMx5TxyJP62MWDA1+GZ/p0c/BEoGQd9iYQ s/aCjeBO1rvpqMs6hpv9rerntqV3JYAW1RDGUGVRmhC+O6UShTF+JU86XCLvmCeM kISpxsIJPxnXyd7o2IKh0lJyVLYG10r11fEhkdtb6P+0vYig04X4QqZkp4EBCrwY nh+7c+xBf7R5SO6cLgVSd4vmYGuV6FjmRMXmRS6ik03p49o3kvtRS+huhe6qkECx FWPzKXOI7khXaEhIi4nDZLN+ODFYcN8= -----END CERTIFICATE-----Generated at Sat Dec 6 12:23:08 2025 by rpki-client