This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft File: 6DpZuIHOHlc10a3c2LrgXlO4U9A.mft (raw, json) Hash identifier: 5NMyLus9WmX6A4PorXntCjPcAR3/u17PJtlTkB2FJfs= Subject key identifier: 67:FB:9C:64:EB:FA:BC:08:7A:23:F2:4C:38:7B:18:B8:07:59:6E:3B Authority key identifier: E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0 Certificate issuer: /CN=A91A3BB1/serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0 Certificate serial: 3528 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft Manifest number: 3502 Signing time: Sat 06 Dec 2025 14:45:16 +0000 Manifest this update: Sat 06 Dec 2025 14:45:15 +0000 Manifest next update: Sat 13 Dec 2025 14:45:15 +0000 Files and hashes: 1: 6DpZuIHOHlc10a3c2LrgXlO4U9A.crl (hash: SqJuPPQPXrkZu4avTqP9M0osyWEsaKHo9N1u4YGkET4=) 2: 0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa (hash: IB+Pst0/hjjnT/aD3F4nsmgPYgJjXgVIAOW0RdKrpkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13608 (0x3528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3BB1, serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0 Validity Not Before: Dec 6 14:45:15 2025 GMT Not After : Dec 13 14:45:15 2025 GMT Subject: CN=6934417b-1695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:6e:7f:f2:8f:4b:9d:97:30:74:46:15:f7:43: 16:17:f3:42:28:36:a0:f5:0c:ec:67:4e:a7:16:14: 4e:5f:06:d4:c8:46:30:ae:c5:fd:90:b3:b6:19:ea: 4e:52:d5:f7:5e:83:41:63:1a:83:fc:1d:96:2a:fc: 4a:5f:6e:f5:a2:52:66:e0:b2:46:32:ff:5d:36:0b: a8:ec:1f:b9:06:ea:80:fb:ff:d4:80:9b:fc:5e:2f: b2:01:db:6b:b3:1b:4a:9d:57:90:4d:ee:6f:ee:91: b7:b8:b0:d6:b4:f3:d3:5a:d1:82:55:56:cb:3c:18: ee:0b:75:29:03:02:5b:fa:76:14:10:82:2f:83:98: ed:1b:15:ea:4c:80:5a:fd:53:20:b0:9a:c0:a9:55: f3:b9:72:78:f6:fe:36:4c:26:95:ef:81:f2:50:7e: 11:94:f3:d2:56:1a:b1:01:0e:a5:77:a4:15:af:7b: 60:3e:3c:94:3d:78:b6:c6:6b:1d:ad:05:ec:68:b4: 15:81:10:8e:b5:97:44:72:f7:82:b2:50:09:66:b4: 0c:d5:2c:7a:7f:b8:f8:7a:0d:b1:3c:67:28:69:18: 96:7a:a7:5a:88:2e:12:2e:af:9b:84:d4:10:20:1d: 4c:69:a8:22:d3:ea:b7:c7:83:b1:24:96:00:7a:55: 76:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FB:9C:64:EB:FA:BC:08:7A:23:F2:4C:38:7B:18:B8:07:59:6E:3B X509v3 Authority Key Identifier: keyid:E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:ac:ec:fd:d8:f4:b7:ed:58:bc:9e:2d:27:b8:1b:a9:17:18: f8:2c:f6:d5:3e:b3:e9:a0:df:11:57:24:cf:47:4e:fc:ed:4b: 6d:be:76:60:7d:4b:7e:bc:71:0e:9b:88:a6:0a:a0:f4:2a:26: 3e:d5:4c:71:a3:c1:d6:c2:78:84:d0:86:76:cc:59:03:fc:5f: f0:6c:32:6e:4b:f2:3f:14:7a:76:d1:94:18:30:7c:2a:43:10: 64:c4:40:16:52:0d:51:7a:03:9b:6f:b7:27:68:24:2d:92:73: 6f:e0:9b:fb:2e:1d:7a:0b:a2:ca:1a:62:f0:87:1e:10:d2:f2: 66:4d:da:46:a5:cc:84:ad:6a:c9:ee:9d:80:e2:72:50:fd:48: 35:b5:0f:3f:eb:fe:23:e6:02:45:91:cd:71:6b:65:29:c1:5a: a2:d9:a0:5c:34:d0:e2:44:9d:61:39:f7:8b:3e:73:05:39:d4: db:8e:ee:50:f5:77:cb:5e:ac:59:1a:35:f1:65:b5:f2:d1:9e: 3f:ed:bd:00:3c:dd:84:0e:2c:be:7a:a6:cf:87:92:31:82:aa: 12:45:ff:7b:65:ec:84:c2:10:31:cc:ea:0a:01:68:6f:92:9c: 02:d8:f5:14:fe:8b:0e:d2:c7:91:92:07:45:10:bd:fb:27:f4: a7:11:32:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNCQjExMTAvBgNVBAUTKEU4M0E1OUI4ODFDRTFFNTczNUQxQUREQ0Q4QkFFMDVF NTNCODUzRDAwHhcNMjUxMjA2MTQ0NTE1WhcNMjUxMjEzMTQ0NTE1WjAYMRYwFAYD VQQDEw02OTM0NDE3Yi0xNjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9G5/8o9LnZcwdEYV90MWF/NCKDag9QzsZ06nFhROXwbUyEYwrsX9kLO2GepO UtX3XoNBYxqD/B2WKvxKX271olJm4LJGMv9dNguo7B+5BuqA+//UgJv8Xi+yAdtr sxtKnVeQTe5v7pG3uLDWtPPTWtGCVVbLPBjuC3UpAwJb+nYUEIIvg5jtGxXqTIBa /VMgsJrAqVXzuXJ49v42TCaV74HyUH4RlPPSVhqxAQ6ld6QVr3tgPjyUPXi2xmsd rQXsaLQVgRCOtZdEcveCslAJZrQM1Sx6f7j4eg2xPGcoaRiWeqdaiC4SLq+bhNQQ IB1Maagi0+q3x4OxJJYAelV2hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGf7nGTr +rwIeiPyTDh7GLgHWW47MB8GA1UdIwQYMBaAFOg6WbiBzh5XNdGt3Ni64F5TuFPQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0JCMS9FQTFCMjJFMDFE OTYxMUUyOTgwNkM1N0YwOEIwMkNEMi82RHBadUlIT0hsYzEwYTNjMkxyZ1hsTzRV OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZEcFp1SUhPSGxjMTBhM2MyTHJnWGxPNFU5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0JCMS9FQTFCMjJFMDFEOTYxMUUyOTgwNkM1N0YwOEIwMkNEMi82RHBadUlIT0hs YzEwYTNjMkxyZ1hsTzRVOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWrOz92PS37Vi8ni0nuBupFxj4LPbVPrPpoN8RVyTPR0787UttvnZg fUt+vHEOm4imCqD0KiY+1Uxxo8HWwniE0IZ2zFkD/F/wbDJuS/I/FHp20ZQYMHwq QxBkxEAWUg1RegObb7cnaCQtknNv4Jv7Lh16C6LKGmLwhx4Q0vJmTdpGpcyErWrJ 7p2A4nJQ/Ug1tQ8/6/4j5gJFkc1xa2UpwVqi2aBcNNDiRJ1hOfeLPnMFOdTbju5Q 9XfLXqxZGjXxZbXy0Z4/7b0APN2EDiy+eqbPh5IxgqoSRf97ZeyEwhAxzOoKAWhv kpwC2PUU/osO0seRkgdFEL37J/SnETLP -----END CERTIFICATE-----Generated at Sat Dec 6 20:06:29 2025 by rpki-client