This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft File: Ar6z5iH6umNCHtP4hPonC80zHXc.mft (raw, json) Hash identifier: LqJVqfJDoT3pPRixMSKDGY4aSvFrBo/lrCKk6Jga0Ow= Subject key identifier: 0F:1E:F2:1A:08:0F:47:2F:2D:5D:EB:2F:AD:F5:CA:23:92:FD:B5:9D Authority key identifier: 02:BE:B3:E6:21:FA:BA:63:42:1E:D3:F8:84:FA:27:0B:CD:33:1D:77 Certificate issuer: /CN=A91C0E5D/serialNumber=02BEB3E621FABA63421ED3F884FA270BCD331D77 Certificate serial: 06A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft Manifest number: 069F Signing time: Thu 04 Dec 2025 21:11:24 +0000 Manifest this update: Thu 04 Dec 2025 21:11:23 +0000 Manifest next update: Thu 11 Dec 2025 21:11:23 +0000 Files and hashes: 1: Ar6z5iH6umNCHtP4hPonC80zHXc.crl (hash: 5BDK2u9jFkJmbnOZF8PXvtxIBbJpiiqbiWBBewi15ks=) 2: C34EB9A6C28311EB9370913FC4F9AE02.roa (hash: Al61RmIvimM1KwvJGrf39fcF1DIlgNVctNk1tZ67VR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.crl rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1705 (0x6a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0E5D, serialNumber=02BEB3E621FABA63421ED3F884FA270BCD331D77 Validity Not Before: Dec 4 21:11:23 2025 GMT Not After : Dec 11 21:11:23 2025 GMT Subject: CN=6931f8fc-1725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:09:97:66:9d:8d:ac:d0:99:73:29:f8:b2: 58:aa:49:6f:d4:bc:7c:1d:75:4f:fa:7a:a5:42:62: 4b:a6:6a:cb:66:20:d6:57:57:76:e3:a0:89:3c:e8: 0e:4f:31:b5:b5:b3:1c:b5:e7:25:cb:ed:29:46:59: 1a:d4:7a:96:f7:cc:7e:7a:78:08:66:c6:05:f4:05: 91:7a:f8:69:77:07:a1:ee:aa:3d:1f:ec:87:89:94: dc:a0:28:3f:8c:be:84:e4:ce:27:9d:34:71:1a:81: 89:52:dd:91:52:6f:dc:ce:12:2f:11:cf:65:3e:c2: ad:d4:df:1c:7e:b3:ad:aa:9d:dc:eb:d9:6e:7a:53: 2e:ba:21:56:b2:0e:d0:ef:84:27:c3:40:f3:00:5c: 0d:d7:23:bf:9f:19:24:18:f2:76:8d:85:82:65:13: e6:12:fb:12:16:aa:2a:89:f1:b0:cd:10:69:f0:18: 18:aa:34:46:e2:d0:63:11:86:93:8e:07:8b:da:dd: 2a:8b:1a:42:ee:b2:27:66:11:f6:72:67:d6:79:9e: 09:6f:f3:5d:f9:df:7c:bd:8d:2f:b1:e9:51:33:34: 6d:ba:41:9c:c7:98:89:d7:0e:a8:4e:58:15:60:4d: 86:13:0c:0a:f0:ee:0f:13:8a:07:9b:45:ea:43:44: 87:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1E:F2:1A:08:0F:47:2F:2D:5D:EB:2F:AD:F5:CA:23:92:FD:B5:9D X509v3 Authority Key Identifier: keyid:02:BE:B3:E6:21:FA:BA:63:42:1E:D3:F8:84:FA:27:0B:CD:33:1D:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:64:7e:e0:1c:e5:3d:a9:11:27:b7:82:10:42:ce:82:ba:ce: 20:21:95:ea:a1:f8:ad:88:08:6a:d1:fd:e5:a1:a7:d8:31:38: 56:d5:af:6b:2e:84:57:8c:00:2e:12:0c:22:92:0f:cc:9b:52: ad:95:35:8f:6a:57:02:29:55:81:d2:6b:4a:ee:33:9f:3d:08: 41:8d:d1:94:74:73:67:f6:5d:59:30:ca:37:b6:32:72:7f:45: f5:74:d8:cf:e8:b3:9b:55:2c:6b:15:e2:9a:b2:ef:5e:fa:ff: c0:6c:c1:75:93:06:66:52:ec:b1:c5:6e:2d:71:fb:b0:25:3e: 34:4b:cb:98:cb:4b:c5:60:31:f7:d3:c6:8d:a1:36:91:35:ec: c5:94:d0:23:75:fa:c5:54:ee:cc:e4:6d:b8:83:58:35:86:fa: 78:07:40:66:01:05:30:3c:20:9c:a8:1f:6e:60:3d:00:8c:72: 9f:2d:33:85:59:91:9c:29:93:9d:03:11:43:bb:3c:e3:0a:e2: 31:e6:55:8e:1e:d2:d2:94:46:f5:37:bc:d9:5d:d4:e4:d5:91: d0:d7:57:c6:6c:bb:7b:fd:31:3f:12:4c:14:2b:d7:1f:c4:ef: 02:71:cc:ad:51:21:20:76:18:eb:11:4f:6d:26:b7:c1:df:c2: df:ab:35:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFNUQxMTAvBgNVBAUTKDAyQkVCM0U2MjFGQUJBNjM0MjFFRDNGODg0RkEyNzBC Q0QzMzFENzcwHhcNMjUxMjA0MjExMTIzWhcNMjUxMjExMjExMTIzWjAYMRYwFAYD VQQDEw02OTMxZjhmYy0xNzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAYJl2adjazQmXMp+LJYqklv1Lx8HXVP+nqlQmJLpmrLZiDWV1d246CJPOgO TzG1tbMctecly+0pRlka1HqW98x+engIZsYF9AWRevhpdweh7qo9H+yHiZTcoCg/ jL6E5M4nnTRxGoGJUt2RUm/czhIvEc9lPsKt1N8cfrOtqp3c69luelMuuiFWsg7Q 74Qnw0DzAFwN1yO/nxkkGPJ2jYWCZRPmEvsSFqoqifGwzRBp8BgYqjRG4tBjEYaT jgeL2t0qixpC7rInZhH2cmfWeZ4Jb/Nd+d98vY0vselRMzRtukGcx5iJ1w6oTlgV YE2GEwwK8O4PE4oHm0XqQ0SHGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8e8hoI D0cvLV3rL631yiOS/bWdMB8GA1UdIwQYMBaAFAK+s+Yh+rpjQh7T+IT6JwvNMx13 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU1RC8wRDBGRkJEQzkx RDcxMUVCODZGQTM0MjZDNEY5QUUwMi9BcjZ6NWlINnVtTkNIdFA0aFBvbkM4MHpI WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FyNno1aUg2dW1OQ0h0UDRoUG9uQzgwekhYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEU1RC8wRDBGRkJEQzkxRDcxMUVCODZGQTM0MjZDNEY5QUUwMi9BcjZ6NWlINnVt TkNIdFA0aFBvbkM4MHpIWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrZH7gHOU9qREnt4IQQs6Cus4gIZXqofitiAhq0f3loafYMThW1a9r LoRXjAAuEgwikg/Mm1KtlTWPalcCKVWB0mtK7jOfPQhBjdGUdHNn9l1ZMMo3tjJy f0X1dNjP6LObVSxrFeKasu9e+v/AbMF1kwZmUuyxxW4tcfuwJT40S8uYy0vFYDH3 08aNoTaRNezFlNAjdfrFVO7M5G24g1g1hvp4B0BmAQUwPCCcqB9uYD0AjHKfLTOF WZGcKZOdAxFDuzzjCuIx5lWOHtLSlEb1N7zZXdTk1ZHQ11fGbLt7/TE/EkwUK9cf xO8CccytUSEgdhjrEU9tJrfB38LfqzXz -----END CERTIFICATE-----Generated at Sat Dec 6 22:40:44 2025 by rpki-client