This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json) Hash identifier: 3DTGX8kMxPD+3fs5QwdGfTwiNPQm+woScIP9rKLm6mQ= Subject key identifier: FB:BC:22:37:5D:08:F8:D9:5F:62:A9:F9:A2:2D:7E:BA:33:63:47:52 Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Certificate serial: 34F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft Manifest number: 34ED Signing time: Sat 06 Dec 2025 14:44:30 +0000 Manifest this update: Sat 06 Dec 2025 14:44:30 +0000 Manifest next update: Sat 13 Dec 2025 14:44:30 +0000 Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: 4fqUINisrJCcALI8lB7I9JLkEy+S4eGrTxyuHXtvEKg=) 2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: mbjRZ38hTmzNJxu5Qy/hpIsa9dhCLIHmpMwMWiWa89U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13554 (0x34f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Validity Not Before: Dec 6 14:44:30 2025 GMT Not After : Dec 13 14:44:30 2025 GMT Subject: CN=6934414e-b7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4b:f0:c3:f0:78:2b:02:71:71:91:b1:b3:95: 74:c3:12:f6:15:68:39:59:f7:63:df:44:2c:a6:86: d9:8f:8f:66:26:b2:40:96:21:ea:91:5c:2d:fc:c7: 05:10:0d:04:a8:73:b0:05:72:ba:77:08:0b:c5:25: da:57:cb:f6:4a:21:fc:9e:4c:26:39:8a:15:d6:ce: d1:23:76:a0:eb:2c:6f:07:a3:06:f7:ef:fb:14:5d: 90:da:6e:64:43:9c:85:9c:63:33:dd:1b:98:91:e8: 75:66:7e:bc:77:74:0e:2b:d6:e1:19:a4:07:ef:e2: 17:3e:1e:5b:9d:a3:39:58:74:57:05:ae:07:a9:6b: f6:e0:d2:7f:d2:02:5e:e3:f1:85:55:75:cc:70:da: 68:16:fc:a7:33:80:73:bc:bd:05:0e:f8:69:9c:00: ca:33:27:1d:f5:af:d1:e7:64:ec:07:fa:4f:9e:4d: 1e:d2:0d:83:e8:a3:c8:97:6f:75:37:65:fd:98:00: d7:0e:2d:62:ef:18:0f:9e:db:4f:b8:27:f4:a7:3c: 9f:58:ce:7e:91:b8:9f:9c:7a:77:e0:5c:94:e6:ae: 6d:9c:6a:b8:f4:ee:e7:b9:6d:6b:f3:a3:78:c9:d1: c4:39:6b:d0:c7:ed:60:8e:59:4d:d2:5d:5c:9b:9b: e3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BC:22:37:5D:08:F8:D9:5F:62:A9:F9:A2:2D:7E:BA:33:63:47:52 X509v3 Authority Key Identifier: keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:8c:70:78:44:7c:d3:d9:40:f5:e3:91:e2:5b:b6:ae:43:85: 58:e6:ca:30:50:dd:38:62:71:b6:67:f1:b5:65:3e:a0:b4:3f: 06:35:8f:aa:11:59:13:73:28:26:c7:3e:15:a0:26:c7:ad:3c: 70:2e:6d:fc:5e:df:32:8f:3f:2d:f9:a4:cd:1a:f7:53:27:5e: 70:35:d7:a9:7a:07:f8:33:9c:c6:e2:0d:30:95:d5:a7:0b:ca: 6c:73:bb:13:ad:39:be:1b:fd:36:eb:08:39:f0:8f:66:dc:42: a8:3e:a2:55:0d:a3:ef:02:78:9a:7d:58:66:44:0f:e7:c7:63: 2e:77:0d:89:39:a4:9b:62:c6:1a:7f:dc:9e:3a:2e:87:e5:c8: 3f:d3:5c:91:b5:db:56:22:23:63:c8:87:c0:23:7a:28:42:09: a3:35:3e:fa:27:a2:16:22:eb:bc:d9:6d:26:bb:6d:49:cd:b2: 9d:a2:2f:02:13:84:90:70:98:b7:9d:25:13:88:ca:7c:aa:7e: eb:47:2a:4e:30:16:f6:b5:ce:96:aa:44:3b:ac:f7:f1:a2:1b: f7:37:8e:b5:73:fc:11:2e:cc:04:89:89:fb:35:a5:91:36:19: 27:e3:a0:1d:21:c6:03:28:74:47:b7:b8:d7:9a:74:6c:06:44: b5:f5:8c:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKEU5MzY3NEIxRjNCNjkxNkIyQjYzNjNCODYxRDZCNzdC MzkwNURERDgwHhcNMjUxMjA2MTQ0NDMwWhcNMjUxMjEzMTQ0NDMwWjAYMRYwFAYD VQQDEw02OTM0NDE0ZS1iN2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Uvww/B4KwJxcZGxs5V0wxL2FWg5Wfdj30QspobZj49mJrJAliHqkVwt/McF EA0EqHOwBXK6dwgLxSXaV8v2SiH8nkwmOYoV1s7RI3ag6yxvB6MG9+/7FF2Q2m5k Q5yFnGMz3RuYkeh1Zn68d3QOK9bhGaQH7+IXPh5bnaM5WHRXBa4HqWv24NJ/0gJe 4/GFVXXMcNpoFvynM4BzvL0FDvhpnADKMycd9a/R52TsB/pPnk0e0g2D6KPIl291 N2X9mADXDi1i7xgPnttPuCf0pzyfWM5+kbifnHp34FyU5q5tnGq49O7nuW1r86N4 ydHEOWvQx+1gjllN0l1cm5vjIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPu8Ijdd CPjZX2Kp+aItfrozY0dSMB8GA1UdIwQYMBaAFOk2dLHztpFrK2NjuGHWt3s5Bd3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8yQzRFRjk3NjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtXc3JZMk80WWRhM2V6a0Yz ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZUWjBzZk8ya1dzclkyTzRZZGEzZXprRjNkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8yQzRFRjk3NjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtX c3JZMk80WWRhM2V6a0YzZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnjHB4RHzT2UD145HiW7auQ4VY5sowUN04YnG2Z/G1ZT6gtD8GNY+q EVkTcygmxz4VoCbHrTxwLm38Xt8yjz8t+aTNGvdTJ15wNdepegf4M5zG4g0wldWn C8psc7sTrTm+G/026wg58I9m3EKoPqJVDaPvAniafVhmRA/nx2Mudw2JOaSbYsYa f9yeOi6H5cg/01yRtdtWIiNjyIfAI3ooQgmjNT76J6IWIuu82W0mu21JzbKdoi8C E4SQcJi3nSUTiMp8qn7rRypOMBb2tc6WqkQ7rPfxohv3N461c/wRLswEiYn7NaWR Nhkn46AdIcYDKHRHt7jXmnRsBkS19YxB -----END CERTIFICATE-----Generated at Sun Dec 7 09:00:42 2025 by rpki-client