This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft File: 6EhjdESa3lWB63jDmC8d4SpKYAM.mft (raw, json) Hash identifier: SLcqc4lUDPqO8963YXALSr5IME1xRYqT9SAi3bYHIb8= Subject key identifier: 35:2E:A5:5B:B9:64:60:FC:DB:C4:77:B4:5A:83:E4:BD:4D:F2:00:E6 Authority key identifier: E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03 Certificate issuer: /CN=A919D2AF/serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft Manifest number: 025E Signing time: Fri 05 Dec 2025 00:40:57 +0000 Manifest this update: Fri 05 Dec 2025 00:40:57 +0000 Manifest next update: Fri 12 Dec 2025 00:40:57 +0000 Files and hashes: 1: 6EhjdESa3lWB63jDmC8d4SpKYAM.crl (hash: mZAuQvFC9L3qoxQ5l4/LNEQyeq4XAgP95hu6GdLf0ao=) 2: AA13A4AC58BA11F08C19015DC4F9AE02.roa (hash: i2dZXW4ctNp3phocZHsJWaRw5A5TAnPYhmdH2iztb0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D2AF, serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003 Validity Not Before: Dec 5 00:40:57 2025 GMT Not After : Dec 12 00:40:57 2025 GMT Subject: CN=69322a19-6091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e3:10:d8:4b:07:2e:a0:84:55:2b:cb:ba:c1: 30:23:38:9c:0c:c8:29:8a:72:3f:10:0e:8c:18:05: 43:27:d2:d6:e1:f5:85:66:e2:e5:9b:c4:cd:8b:db: 50:a5:e7:bd:a4:19:81:35:06:1c:87:d7:4a:16:8a: 8b:77:8a:80:d2:84:e2:2b:99:7d:a8:c3:83:53:d8: a8:7b:c8:e4:65:c6:1d:cd:6f:8e:e3:b7:0b:b4:b7: 68:2d:b4:c5:26:d8:c1:08:4c:4e:56:ae:e8:2b:4c: eb:51:e1:a9:52:f7:82:e3:e9:f4:92:1c:05:07:70: 2d:79:ad:c7:66:a0:e7:f7:bd:4f:23:61:a3:73:af: ae:95:71:61:be:3a:90:60:5f:1f:4e:49:7f:8c:ac: b0:1e:e6:5c:8c:7e:2e:f9:ff:5e:0e:33:3b:8d:30: f2:f5:39:d7:e6:59:e7:55:10:96:62:5b:e9:7d:8c: a9:bf:d5:22:1e:25:82:c8:6d:93:84:50:c9:ce:28: a6:ef:a2:56:eb:5c:43:d4:e5:2d:37:9b:78:cb:0e: 0a:7a:03:6b:5e:c6:8f:1f:07:10:74:f1:46:73:1a: f2:75:6e:97:11:63:a6:da:be:b4:d0:7b:65:70:c6: 3d:7b:60:ae:13:fb:1c:cd:73:e0:a6:82:38:5a:85: 87:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2E:A5:5B:B9:64:60:FC:DB:C4:77:B4:5A:83:E4:BD:4D:F2:00:E6 X509v3 Authority Key Identifier: keyid:E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:05:f7:08:b8:01:af:6e:59:fb:6a:44:d7:fa:ab:8e:b1:71: 3b:20:fb:0d:c4:b6:26:22:7a:97:e5:f9:4b:96:dd:81:15:dc: 2c:53:21:f1:a5:5c:c8:0b:d9:b2:5a:68:66:a8:47:24:12:0f: c7:51:a9:a5:14:52:29:f5:95:a5:5e:d2:a4:cb:fe:f2:27:b2: 98:5d:97:a4:89:5e:3f:9d:6a:8c:61:d3:83:df:2e:53:bc:ab: 19:d0:cc:79:29:fa:61:be:40:a5:b7:f9:5c:09:4c:0e:52:52: 7c:06:a6:43:06:e9:e7:2c:27:ce:14:ab:df:2b:a4:13:0a:94: b5:e6:f3:69:2a:7d:cb:6f:ed:4f:e8:de:b3:8e:bd:14:fe:26: 5e:8c:92:d1:0f:60:a4:da:0c:15:53:91:e6:bf:f3:a3:15:f2: 8f:12:df:1d:e5:95:6b:f5:bd:61:20:36:9d:a0:d0:56:18:db: 3a:09:13:b7:1d:09:8c:15:23:e3:0e:5d:ef:41:35:9c:19:10: e8:8d:58:fe:1e:4a:5f:13:38:35:19:dc:9d:c8:7a:43:7d:c1: 43:4f:9d:16:f9:1f:7c:de:bc:e8:a0:3f:a9:21:dc:2f:8a:1b: f6:d5:cb:2b:42:25:7c:f0:bf:bb:11:4a:a5:e6:cc:d7:8b:8a: da:94:c4:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDJBRjExMC8GA1UEBRMoRTg0ODYzNzQ0NDlBREU1NTgxRUI3OEMzOTgyRjFERTEy QTRBNjAwMzAeFw0yNTEyMDUwMDQwNTdaFw0yNTEyMTIwMDQwNTdaMBgxFjAUBgNV BAMTDTY5MzIyYTE5LTYwOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH4xDYSwcuoIRVK8u6wTAjOJwMyCmKcj8QDowYBUMn0tbh9YVm4uWbxM2L21Cl 572kGYE1BhyH10oWiot3ioDShOIrmX2ow4NT2Kh7yORlxh3Nb47jtwu0t2gttMUm 2MEITE5WrugrTOtR4alS94Lj6fSSHAUHcC15rcdmoOf3vU8jYaNzr66VcWG+OpBg Xx9OSX+MrLAe5lyMfi75/14OMzuNMPL1OdfmWedVEJZiW+l9jKm/1SIeJYLIbZOE UMnOKKbvolbrXEPU5S03m3jLDgp6A2texo8fBxB08UZzGvJ1bpcRY6bavrTQe2Vw xj17YK4T+xzNc+CmgjhahYcTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNS6lW7lk YPzbxHe0WoPkvU3yAOYwHwYDVR0jBBgwFoAU6EhjdESa3lWB63jDmC8d4SpKYAMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMkFGL0YzRUZCODk4QkNC QTExRUQ5QzlBRkEyNUM0RjlBRTAyLzZFaGpkRVNhM2xXQjYzakRtQzhkNFNwS1lB TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkVoamRFU2EzbFdCNjNqRG1DOGQ0U3BLWUFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE MkFGL0YzRUZCODk4QkNCQTExRUQ5QzlBRkEyNUM0RjlBRTAyLzZFaGpkRVNhM2xX QjYzakRtQzhkNFNwS1lBTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJAF9wi4Aa9uWftqRNf6q46xcTsg+w3EtiYiepfl+UuW3YEV3CxTIfGl XMgL2bJaaGaoRyQSD8dRqaUUUin1laVe0qTL/vInsphdl6SJXj+daoxh04PfLlO8 qxnQzHkp+mG+QKW3+VwJTA5SUnwGpkMG6ecsJ84Uq98rpBMKlLXm82kqfctv7U/o 3rOOvRT+Jl6MktEPYKTaDBVTkea/86MV8o8S3x3llWv1vWEgNp2g0FYY2zoJE7cd CYwVI+MOXe9BNZwZEOiNWP4eSl8TODUZ3J3IekN9wUNPnRb5H3zevOigP6kh3C+K G/bVyytCJXzwv7sRSqXmzNeLitqUxDo= -----END CERTIFICATE-----Generated at Sat Dec 6 13:24:10 2025 by rpki-client