This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: ee8jouooMApJB+eYksY6B7K55bLBB5zttRM4bLj+JL4= Subject key identifier: C4:AE:03:05:A0:C1:F3:74:47:BE:99:1E:2D:3C:67:83:3A:EF:30:6B Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 01D9 Signing time: Fri 05 Dec 2025 01:01:06 +0000 Manifest this update: Fri 05 Dec 2025 01:01:06 +0000 Manifest next update: Fri 12 Dec 2025 01:01:06 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: hpcIQmZ0xAWJv21ESBF4FtLYRq+8WNTDgRLWm9Kl5Kk=) 2: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: 5LwG+YuvnWBKIRnuTBcbel0b3f9GalJtz9Pj2RCQeu4=) 3: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: XEujoILkyQGDOgd5du+8WCWbh++D58fSsRkYOzlukgc=) 4: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: NGaaDsp7E7XVzTL3vht2Lwlvp5OwCewd6D52RccQHyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Dec 5 01:01:06 2025 GMT Not After : Dec 12 01:01:06 2025 GMT Subject: CN=69322ed2-6b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f8:82:23:c3:c4:32:20:86:8b:4d:92:bf:02: ac:0e:49:8e:b9:1b:dc:de:2f:37:9c:78:af:c3:ff: 7d:39:85:5c:5e:cd:dc:88:e6:82:32:66:52:e5:cd: d0:52:a9:01:92:a0:4a:21:fc:e3:58:50:1d:70:e6: 25:f7:a9:0e:71:61:9e:10:82:79:c3:cd:56:d9:cf: fb:5e:b0:c9:05:47:55:f6:b2:92:07:9f:36:20:88: 07:20:77:8e:d5:6e:e0:a8:f2:d8:e0:47:59:1c:e3: 52:1f:b6:8e:65:06:7e:c7:30:de:3f:9f:4c:71:18: 7f:79:04:27:64:27:d5:19:8a:0c:63:46:7f:fe:6c: e5:6d:54:1f:13:72:4b:7e:2d:9e:80:4d:a1:25:6b: 5c:b6:84:a8:69:0c:6c:82:bf:11:19:2b:a2:26:df: 99:62:3f:3d:76:9c:3d:52:43:c7:a1:55:37:55:4e: 3c:be:c2:43:8d:62:8a:cc:fb:ea:21:d6:b2:89:e2: 16:70:45:65:71:20:ee:1f:78:32:77:36:17:d8:95: 84:5d:68:3e:fa:02:ba:b9:aa:f3:0d:a3:16:54:e6: e8:1b:4a:23:6c:89:ba:67:26:29:7e:7f:90:4e:ca: 99:4d:23:be:a7:66:07:95:c2:4c:ba:3f:78:f7:41: 1f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AE:03:05:A0:C1:F3:74:47:BE:99:1E:2D:3C:67:83:3A:EF:30:6B X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:dd:c8:b7:b0:74:07:29:84:db:b9:0d:b8:bc:5b:70:8a:39: 55:f8:0d:89:9c:94:c4:58:f8:9a:79:a3:d9:f5:d3:49:e9:81: 4c:4f:07:1e:b4:e3:c5:75:aa:44:72:84:90:23:1c:12:73:ab: 9c:8d:3e:32:f7:e8:50:3f:27:f5:c2:e6:2b:8b:d2:da:aa:66: 24:41:c9:12:b7:c5:e7:61:1c:dd:6a:71:be:95:43:6c:16:dd: 78:1a:c1:54:56:06:ec:c2:22:a4:dd:eb:ca:f1:8e:4d:8e:55: ee:65:78:cc:94:69:d4:3b:5c:a4:d5:8e:a1:8a:58:38:9f:37: c4:82:88:6f:e8:43:ea:8b:0e:a9:75:87:27:12:e9:62:fa:27: 2f:66:22:9a:a3:03:8c:6a:02:78:3d:c5:4c:90:c8:f9:2a:89: 6c:28:b2:cf:33:e6:18:c5:0a:6c:6f:45:a1:76:ab:49:6c:90: 38:bc:e1:af:74:b2:5b:3c:4d:d2:d1:78:1d:5f:7f:19:22:95: dc:c2:c1:02:07:d8:2c:b5:b6:3d:64:5d:d2:2e:31:d6:44:8f: 48:12:57:c6:36:4b:a0:14:f0:f6:35:3d:07:25:49:be:c4:86: 61:88:2b:38:85:1b:96:3f:23:d1:1a:12:ce:be:90:7a:7e:d6: bf:b4:a5:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjUxMjA1MDEwMTA2WhcNMjUxMjEyMDEwMTA2WjAYMRYwFAYD VQQDEw02OTMyMmVkMi02YjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApviCI8PEMiCGi02SvwKsDkmOuRvc3i83nHivw/99OYVcXs3ciOaCMmZS5c3Q UqkBkqBKIfzjWFAdcOYl96kOcWGeEIJ5w81W2c/7XrDJBUdV9rKSB582IIgHIHeO 1W7gqPLY4EdZHONSH7aOZQZ+xzDeP59McRh/eQQnZCfVGYoMY0Z//mzlbVQfE3JL fi2egE2hJWtctoSoaQxsgr8RGSuiJt+ZYj89dpw9UkPHoVU3VU48vsJDjWKKzPvq IdayieIWcEVlcSDuH3gydzYX2JWEXWg++gK6uarzDaMWVOboG0ojbIm6ZyYpfn+Q TsqZTSO+p2YHlcJMuj9490EfmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSuAwWg wfN0R76ZHi08Z4M67zBrMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH3ci3sHQHKYTbuQ24vFtwijlV+A2JnJTEWPiaeaPZ9dNJ6YFMTwce tOPFdapEcoSQIxwSc6ucjT4y9+hQPyf1wuYri9LaqmYkQckSt8XnYRzdanG+lUNs Ft14GsFUVgbswiKk3evK8Y5NjlXuZXjMlGnUO1yk1Y6hilg4nzfEgohv6EPqiw6p dYcnEuli+icvZiKaowOMagJ4PcVMkMj5KolsKLLPM+YYxQpsb0WhdqtJbJA4vOGv dLJbPE3S0XgdX38ZIpXcwsECB9gstbY9ZF3SLjHWRI9IElfGNkugFPD2NT0HJUm+ xIZhiCs4hRuWPyPRGhLOvpB6fta/tKW/ -----END CERTIFICATE-----Generated at Sat Dec 6 18:32:18 2025 by rpki-client