This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json) Hash identifier: +GikC5uDS4DiOXnp2tOHZkjs1hWLxanSmm0ngm7sVfc= Subject key identifier: F5:EF:30:B0:27:5D:6E:25:23:9F:78:4D:85:EA:0E:DD:88:1F:FA:17 Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Certificate serial: 34F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft Manifest number: 34F4 Signing time: Sat 20 Dec 2025 14:46:50 +0000 Manifest this update: Sat 20 Dec 2025 14:46:49 +0000 Manifest next update: Sat 27 Dec 2025 14:46:49 +0000 Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: plo1dlhBK+jgdlBNzGBrVyMRC2GvaRv7NWBH96euB6c=) 2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: mbjRZ38hTmzNJxu5Qy/hpIsa9dhCLIHmpMwMWiWa89U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13561 (0x34f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Validity Not Before: Dec 20 14:46:49 2025 GMT Not After : Dec 27 14:46:49 2025 GMT Subject: CN=6946b6da-137b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:8c:7c:eb:fc:ea:38:94:5e:f2:61:36:31: 7e:7f:ad:ba:5c:ed:5f:3e:c9:ca:3a:9a:bf:53:45: b9:2c:8e:48:8c:ad:33:9c:5a:65:8a:d9:5c:80:46: 0b:e8:a1:5d:7d:8a:61:a6:fc:41:69:e5:84:8e:02: c0:c9:eb:d3:1a:e4:36:83:f0:a5:fd:c5:c1:08:9f: ae:64:aa:77:62:54:4a:94:b1:55:60:04:8b:52:1c: eb:36:56:f8:57:0b:9d:43:3c:ef:96:1b:08:b2:08: 12:64:bc:c0:e9:49:1f:3f:ed:5a:cf:8a:1c:0f:05: 6e:66:05:60:ac:8a:bd:d0:f7:e5:15:f4:96:4b:01: 36:8f:23:96:1b:08:5a:6f:72:04:66:01:29:6c:96: 1b:08:bb:8a:36:2b:18:5d:6d:f5:78:17:8b:2e:5c: 03:dd:7a:60:f6:7d:dd:58:3f:50:bf:cd:26:8f:32: 35:9a:e0:80:ce:4c:9a:cb:f9:b1:12:5c:e9:75:cd: 9c:be:6b:97:53:cc:5b:6d:cd:d9:4c:61:b5:6b:4d: 8c:7f:a0:a3:e5:99:d4:63:b8:de:40:4c:0c:f4:4b: 28:a6:ac:b8:7c:36:7a:c7:9f:84:95:52:c0:40:25: 34:cb:28:0e:e8:5f:22:73:bc:f8:ac:f9:94:fc:ad: 4f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EF:30:B0:27:5D:6E:25:23:9F:78:4D:85:EA:0E:DD:88:1F:FA:17 X509v3 Authority Key Identifier: keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:a1:ae:35:8e:b9:3f:e2:a5:aa:82:ef:c6:50:13:97:6a:1e: 60:b8:0f:42:e8:99:d9:ef:0b:17:ba:88:a3:c6:c9:fc:db:07: 31:f9:89:64:09:19:e5:80:ee:a6:38:77:e1:af:78:5e:9b:b8: f2:8b:a9:9b:65:45:86:99:c3:d9:c1:a3:54:83:cd:64:14:f0: 27:30:94:d0:bb:0f:aa:24:9a:4e:6c:65:f9:a5:92:5c:9d:70: a9:73:67:7b:33:2c:31:26:71:42:ce:a9:43:f4:4e:2e:04:d9: d7:23:0a:e4:3c:90:3b:57:dc:aa:5a:5d:a6:af:73:c0:80:8a: 79:d3:2e:5a:c5:54:5b:f0:7d:86:f2:3d:2b:04:1f:da:bb:53: 2b:fd:f0:ba:81:3d:3a:94:d9:59:66:f0:c4:ef:76:2e:f3:08: 93:9b:9c:36:4a:17:00:4b:8c:63:65:42:89:62:87:35:b2:6b: 86:38:63:56:4d:d6:ff:d9:a9:21:d2:b5:43:57:cf:a9:10:b8: 75:7d:c1:e0:f1:0d:28:85:a1:07:dc:5c:b5:c1:91:9f:38:3f: e7:a8:6c:d9:ea:d8:8e:b9:b0:49:91:75:09:64:69:a2:c5:a1: 5f:50:b2:b0:a9:39:cc:a2:ff:db:a0:06:4e:7c:e8:02:17:6b: 97:e2:c0:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKEU5MzY3NEIxRjNCNjkxNkIyQjYzNjNCODYxRDZCNzdC MzkwNURERDgwHhcNMjUxMjIwMTQ0NjQ5WhcNMjUxMjI3MTQ0NjQ5WjAYMRYwFAYD VQQDDA02OTQ2YjZkYS0xMzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDOMfOv86jiUXvJhNjF+f626XO1fPsnKOpq/U0W5LI5IjK0znFplitlcgEYL 6KFdfYphpvxBaeWEjgLAyevTGuQ2g/Cl/cXBCJ+uZKp3YlRKlLFVYASLUhzrNlb4 VwudQzzvlhsIsggSZLzA6UkfP+1az4ocDwVuZgVgrIq90PflFfSWSwE2jyOWGwha b3IEZgEpbJYbCLuKNisYXW31eBeLLlwD3Xpg9n3dWD9Qv80mjzI1muCAzkyay/mx Elzpdc2cvmuXU8xbbc3ZTGG1a02Mf6Cj5ZnUY7jeQEwM9Esopqy4fDZ6x5+ElVLA QCU0yygO6F8ic7z4rPmU/K1PKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXvMLAn XW4lI594TYXqDt2IH/oXMB8GA1UdIwQYMBaAFOk2dLHztpFrK2NjuGHWt3s5Bd3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8yQzRFRjk3NjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtXc3JZMk80WWRhM2V6a0Yz ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZUWjBzZk8ya1dzclkyTzRZZGEzZXprRjNkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8yQzRFRjk3NjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtX c3JZMk80WWRhM2V6a0YzZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSoa41jrk/4qWqgu/GUBOXah5guA9C6JnZ7wsXuoijxsn82wcx+Ylk CRnlgO6mOHfhr3hem7jyi6mbZUWGmcPZwaNUg81kFPAnMJTQuw+qJJpObGX5pZJc nXCpc2d7MywxJnFCzqlD9E4uBNnXIwrkPJA7V9yqWl2mr3PAgIp50y5axVRb8H2G 8j0rBB/au1Mr/fC6gT06lNlZZvDE73Yu8wiTm5w2ShcAS4xjZUKJYoc1smuGOGNW Tdb/2akh0rVDV8+pELh1fcHg8Q0ohaEH3Fy1wZGfOD/nqGzZ6tiOubBJkXUJZGmi xaFfULKwqTnMov/boAZOfOgCF2uX4sCq -----END CERTIFICATE-----Generated at Sun Dec 21 21:48:42 2025 by rpki-client