This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft File: 6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft (raw, json) Hash identifier: DnjHEeANr8Cza/2cZW1a+G9739fQGGnSTp3W4z5M1w4= Subject key identifier: 02:1C:7D:3A:13:29:6C:93:D0:8D:EA:58:C5:16:05:B6:21:FA:C1:9F Authority key identifier: E8:B5:EC:24:8D:CB:13:49:0B:C2:BD:EB:D6:4B:39:0D:D1:CB:A5:09 Certificate issuer: /CN=A91BF2DB/serialNumber=E8B5EC248DCB13490BC2BDEBD64B390DD1CBA509 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LXsJI3LE0kLwr3r1ks5DdHLpQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft Manifest number: 0C Signing time: Fri 05 Dec 2025 05:49:14 +0000 Manifest this update: Fri 05 Dec 2025 05:49:13 +0000 Manifest next update: Fri 12 Dec 2025 05:49:13 +0000 Files and hashes: 1: 6LXsJI3LE0kLwr3r1ks5DdHLpQk.crl (hash: ++T8dUKq5cexwjdcAkkaBk8EEuTyR2H76mV5zRCKAD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.crl rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LXsJI3LE0kLwr3r1ks5DdHLpQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF2DB, serialNumber=E8B5EC248DCB13490BC2BDEBD64B390DD1CBA509 Validity Not Before: Dec 5 05:49:13 2025 GMT Not After : Dec 12 05:49:13 2025 GMT Subject: CN=6932725a-c295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:f5:e8:1a:bf:25:9a:82:01:2c:6b:c5:85: 70:0b:ca:99:cb:3d:e5:d5:8a:ba:9a:10:8d:01:b0: 32:da:94:0e:1d:9e:66:02:16:f6:c6:23:aa:e8:e3: 99:06:48:1c:5f:c9:8c:a3:eb:e9:23:41:4f:20:03: 04:62:d5:26:ce:08:8c:fc:be:1e:05:ef:3b:af:1b: ef:ea:86:10:e0:0b:bc:50:17:da:1e:43:7b:1e:57: 40:e4:b9:8e:13:97:61:12:84:20:9d:b5:fc:79:9d: 30:da:0a:4a:6b:b5:13:f6:e5:d2:c8:04:3b:ca:19: b0:76:a8:8e:52:4c:37:78:5b:74:67:98:41:df:36: 2b:cd:44:88:93:31:7e:81:02:0c:7a:20:63:de:a0: ae:d1:43:3c:05:7d:33:64:89:7a:46:a5:44:27:d7: ef:7b:22:04:58:94:5a:a7:02:22:0b:d1:89:7a:de: 22:de:de:5d:3a:e3:cc:49:52:f0:33:d3:aa:3c:7d: 97:c0:24:e4:f4:1b:8b:fa:07:4c:11:e6:bf:df:31: b8:05:71:0e:ed:28:81:bd:21:68:fb:e0:a0:ad:a6: 66:04:95:0e:c4:8f:c1:ee:43:f5:cb:c3:b6:02:f2: f6:6d:a7:44:54:65:c2:8a:2b:23:3d:d4:20:3d:38: aa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1C:7D:3A:13:29:6C:93:D0:8D:EA:58:C5:16:05:B6:21:FA:C1:9F X509v3 Authority Key Identifier: keyid:E8:B5:EC:24:8D:CB:13:49:0B:C2:BD:EB:D6:4B:39:0D:D1:CB:A5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LXsJI3LE0kLwr3r1ks5DdHLpQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:6c:47:cd:63:04:bd:64:7d:f2:96:1a:90:16:14:b0:74:95: d8:7b:38:35:23:8a:96:2d:9d:00:a8:96:8c:ac:c6:70:16:85: b8:30:3e:97:92:62:8b:49:cb:3a:9b:9a:d9:e6:42:b7:33:f5: 10:7c:55:62:70:cd:ec:95:ad:c5:87:56:ea:dc:35:15:00:18: 96:d5:f4:c9:52:be:35:0b:40:2e:16:44:24:bc:e5:3f:88:af: 5d:ea:96:c4:75:a7:d0:f2:84:38:b2:dd:60:d0:c2:6c:04:b8: 0d:60:66:2f:23:e2:22:a4:da:9f:3f:4f:f9:7f:a9:58:b3:31: 38:3d:a7:29:b1:52:0c:38:8a:03:b5:d3:35:bf:59:f6:2f:2a: 39:7d:c0:4b:fe:d1:d2:09:63:ad:9a:9d:8b:7c:e0:8f:73:fb: b6:38:e1:f3:a3:12:23:ed:a1:b5:92:b8:c2:11:c5:ff:aa:5f: 25:ed:dc:c1:ab:fe:15:e1:7e:6e:2f:6c:0e:9f:79:5e:4a:cf: b9:df:75:81:98:d2:2b:fd:93:5b:c2:6c:be:7c:a9:f2:4e:f6: 3d:04:9d:2d:6e:63:9e:d3:66:65:82:5c:ac:d5:cd:36:c7:3e: 65:51:13:a4:09:6e:47:a5:27:f8:5f:e8:51:a5:72:03:5c:1a: 3f:53:57:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RjJEQjExMC8GA1UEBRMoRThCNUVDMjQ4RENCMTM0OTBCQzJCREVCRDY0QjM5MERE MUNCQTUwOTAeFw0yNTEyMDUwNTQ5MTNaFw0yNTEyMTIwNTQ5MTNaMBgxFjAUBgNV BAMTDTY5MzI3MjVhLWMyOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9OPXoGr8lmoIBLGvFhXALypnLPeXVirqaEI0BsDLalA4dnmYCFvbGI6ro45kG SBxfyYyj6+kjQU8gAwRi1SbOCIz8vh4F7zuvG+/qhhDgC7xQF9oeQ3seV0DkuY4T l2EShCCdtfx5nTDaCkprtRP25dLIBDvKGbB2qI5STDd4W3RnmEHfNivNRIiTMX6B Agx6IGPeoK7RQzwFfTNkiXpGpUQn1+97IgRYlFqnAiIL0Yl63iLe3l0648xJUvAz 06o8fZfAJOT0G4v6B0wR5r/fMbgFcQ7tKIG9IWj74KCtpmYElQ7Ej8HuQ/XLw7YC 8vZtp0RUZcKKKyM91CA9OKrrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAhx9OhMp bJPQjepYxRYFtiH6wZ8wHwYDVR0jBBgwFoAU6LXsJI3LE0kLwr3r1ks5DdHLpQkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGMkRCL0JDNkYzQUMwQzQz MTExRjBBNTg0OUM0Q0M0RjlBRTAyLzZMWHNKSTNMRTBrTHdyM3Ixa3M1RGRITHBR ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkxYc0pJM0xFMGtMd3IzcjFrczVEZEhMcFFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG MkRCL0JDNkYzQUMwQzQzMTExRjBBNTg0OUM0Q0M0RjlBRTAyLzZMWHNKSTNMRTBr THdyM3Ixa3M1RGRITHBRay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFFsR81jBL1kffKWGpAWFLB0ldh7ODUjipYtnQColoysxnAWhbgwPpeS YotJyzqbmtnmQrcz9RB8VWJwzeyVrcWHVurcNRUAGJbV9MlSvjULQC4WRCS85T+I r13qlsR1p9DyhDiy3WDQwmwEuA1gZi8j4iKk2p8/T/l/qVizMTg9pymxUgw4igO1 0zW/WfYvKjl9wEv+0dIJY62anYt84I9z+7Y44fOjEiPtobWSuMIRxf+qXyXt3MGr /hXhfm4vbA6feV5Kz7nfdYGY0iv9k1vCbL58qfJO9j0EnS1uY57TZmWCXKzVzTbH PmVRE6QJbkelJ/hf6FGlcgNcGj9TV6k= -----END CERTIFICATE-----Generated at Sat Dec 6 20:44:13 2025 by rpki-client