This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft File: z6g6HLFaT2Y_z9bITI4K00wOBnM.mft (raw, json) Hash identifier: ecV7NGzFn3Nk53bAsCXbu4CxAtKQCOvGHlhxJRs9m8g= Subject key identifier: 63:50:E0:20:86:10:ED:C9:31:AC:C6:11:C3:89:28:BB:7B:B0:E9:34 Authority key identifier: CF:A8:3A:1C:B1:5A:4F:66:3F:CF:D6:C8:4C:8E:0A:D3:4C:0E:06:73 Certificate issuer: /CN=A91AA5F1/serialNumber=CFA83A1CB15A4F663FCFD6C84C8E0AD34C0E0673 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft Manifest number: 1C Signing time: Fri 05 Dec 2025 05:37:37 +0000 Manifest this update: Fri 05 Dec 2025 05:37:36 +0000 Manifest next update: Fri 12 Dec 2025 05:37:36 +0000 Files and hashes: 1: z6g6HLFaT2Y_z9bITI4K00wOBnM.crl (hash: 7eNknUpbzxFgajDsCYZAC5nRq6KP5u/Vz6URGo8QD64=) 2: C56E767CA89811F08959A364C4F9AE02.roa (hash: 3h7NekD5uJiBtHmPr+ql3V5I4Pzxe7a+UwFYXogXAM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.crl rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA5F1, serialNumber=CFA83A1CB15A4F663FCFD6C84C8E0AD34C0E0673 Validity Not Before: Dec 5 05:37:36 2025 GMT Not After : Dec 12 05:37:36 2025 GMT Subject: CN=69326fa1-f2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:de:6a:74:7d:ab:a3:4f:0a:7b:d0:a3:b1:95: 70:38:b0:00:b1:40:89:48:86:74:8b:76:69:89:8c: cc:34:28:fa:0e:57:08:d5:1b:ba:e6:75:5d:6d:05: 6d:4b:79:8a:38:d4:d0:ba:a7:40:9f:5f:bf:1d:c7: 6f:90:a6:6a:c2:54:3f:9d:d9:02:d7:e3:15:d7:d6: d3:0b:a9:63:ad:5d:ed:52:7b:7c:e7:14:d3:98:1a: b6:03:3d:89:c2:99:8c:47:8d:25:9c:33:93:6e:98: d6:f7:75:e9:08:b5:2b:a9:0a:33:5b:7d:fd:e9:6b: f5:13:3e:0b:fd:29:55:c7:79:11:b5:ec:ab:8d:b8: a2:f4:ba:13:ce:dc:fd:f0:b6:45:b5:9f:83:2c:3a: ae:4c:c6:f0:b6:e8:ee:37:66:69:85:c2:75:99:e4: 0d:2a:4b:ef:b7:24:32:22:aa:eb:48:c9:f0:21:5f: 51:40:16:81:aa:19:e0:d3:8c:6b:53:80:12:26:24: 63:49:b8:c3:9c:20:3f:7c:dd:d0:c2:80:35:dd:b8: ec:77:93:ef:07:dd:97:4f:1f:80:a1:e4:99:cd:dd: b8:81:93:29:20:19:04:1e:81:fa:b3:bd:5a:48:b7: de:e6:0d:f3:9f:67:a2:20:0a:dd:6f:7a:a2:5e:1f: 76:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:50:E0:20:86:10:ED:C9:31:AC:C6:11:C3:89:28:BB:7B:B0:E9:34 X509v3 Authority Key Identifier: keyid:CF:A8:3A:1C:B1:5A:4F:66:3F:CF:D6:C8:4C:8E:0A:D3:4C:0E:06:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:0e:01:fc:f9:44:ec:92:ba:50:ed:85:25:8c:c9:d3:04:80: d6:5f:d4:3e:b4:9d:ec:9b:57:cb:3c:50:91:06:be:d0:fc:db: 3d:1e:4a:90:21:d9:a0:88:63:25:7e:28:e7:ae:f9:23:62:38: 3a:5f:4d:0c:ad:aa:85:c7:ad:bb:19:18:46:56:5b:9e:8f:9e: 10:c1:e8:12:cf:f3:1d:23:20:51:8f:5a:d6:e1:21:fc:a9:5a: 3f:c4:ae:1c:f4:df:9d:fd:19:e7:0a:b6:28:72:01:92:b3:b1: 87:5d:00:4b:14:24:8e:29:25:d3:7a:0c:2a:8b:36:1c:e4:e7: d0:65:8b:3f:88:b4:3a:fe:d7:5f:c3:da:d8:c9:43:53:e4:c7: 29:a0:a6:74:23:f9:7d:87:ec:b7:29:0b:c4:18:67:5a:be:a4: d7:ee:89:59:f2:e6:a5:f5:21:34:d8:0f:27:e0:c8:ca:a2:66: a5:59:82:d0:62:cb:b4:cd:b1:46:0e:01:51:95:40:50:e9:58: 08:dc:88:8b:0a:6f:07:dd:7a:b0:ea:bd:ba:53:b7:fe:03:de: 39:92:97:4e:7b:6d:b6:c0:01:7f:14:65:5f:17:e3:15:41:4b: 9b:51:07:98:4d:04:b7:f3:b6:dc:78:ec:2b:ad:a0:bc:41:f6: 09:5d:ae:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTVGMTExMC8GA1UEBRMoQ0ZBODNBMUNCMTVBNEY2NjNGQ0ZENkM4NEM4RTBBRDM0 QzBFMDY3MzAeFw0yNTEyMDUwNTM3MzZaFw0yNTEyMTIwNTM3MzZaMBgxFjAUBgNV BAMTDTY5MzI2ZmExLWYyYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK3mp0faujTwp70KOxlXA4sACxQIlIhnSLdmmJjMw0KPoOVwjVG7rmdV1tBW1L eYo41NC6p0CfX78dx2+QpmrCVD+d2QLX4xXX1tMLqWOtXe1Se3znFNOYGrYDPYnC mYxHjSWcM5NumNb3dekItSupCjNbff3pa/UTPgv9KVXHeRG17KuNuKL0uhPO3P3w tkW1n4MsOq5MxvC26O43ZmmFwnWZ5A0qS++3JDIiqutIyfAhX1FAFoGqGeDTjGtT gBImJGNJuMOcID983dDCgDXduOx3k+8H3ZdPH4Ch5JnN3biBkykgGQQegfqzvVpI t97mDfOfZ6IgCt1veqJeH3ZDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY1DgIIYQ 7ckxrMYRw4kou3uw6TQwHwYDVR0jBBgwFoAUz6g6HLFaT2Y/z9bITI4K00wOBnMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBNUYxL0VEM0VDMDA0QTg5 NzExRjA4M0Q5M0E2M0M0RjlBRTAyL3o2ZzZITEZhVDJZX3o5YklUSTRLMDB3T0Ju TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvejZnNkhMRmFUMllfejliSVRJNEswMHdPQm5NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB NUYxL0VEM0VDMDA0QTg5NzExRjA4M0Q5M0E2M0M0RjlBRTAyL3o2ZzZITEZhVDJZ X3o5YklUSTRLMDB3T0JuTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGEOAfz5ROySulDthSWMydMEgNZf1D60neybV8s8UJEGvtD82z0eSpAh 2aCIYyV+KOeu+SNiODpfTQytqoXHrbsZGEZWW56PnhDB6BLP8x0jIFGPWtbhIfyp Wj/Erhz03539GecKtihyAZKzsYddAEsUJI4pJdN6DCqLNhzk59Bliz+ItDr+11/D 2tjJQ1PkxymgpnQj+X2H7LcpC8QYZ1q+pNfuiVny5qX1ITTYDyfgyMqiZqVZgtBi y7TNsUYOAVGVQFDpWAjciIsKbwfderDqvbpTt/4D3jmSl057bbbAAX8UZV8X4xVB S5tRB5hNBLfzttx47CutoLxB9gldrgs= -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:01 2025 by rpki-client