This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft File: 6HkDAXqx8GqctGqwIb0Lkhya-og.mft (raw, json) Hash identifier: nXPwyRKLknjQ0Yc/aMTFw4XVKt5n7tbKXyhtLTozStM= Subject key identifier: 21:65:05:D6:F5:61:A9:47:00:73:C8:56:60:02:24:65:55:94:FB:59 Authority key identifier: E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88 Certificate issuer: /CN=A91C49BA/serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft Manifest number: 0E Signing time: Fri 05 Dec 2025 05:47:06 +0000 Manifest this update: Fri 05 Dec 2025 05:47:05 +0000 Manifest next update: Fri 12 Dec 2025 05:47:05 +0000 Files and hashes: 1: 6HkDAXqx8GqctGqwIb0Lkhya-og.crl (hash: faB25fVcZPfscW7IhCdMPDylZSsipkgRC7ShORLvrNs=) 2: 72F530E2BEF611F08C939B16C4F9AE02.roa (hash: OVDXYXiPK6DUjh7GuuPjYLe4oNz6kILt+KBikGM4NtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C49BA, serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88 Validity Not Before: Dec 5 05:47:05 2025 GMT Not After : Dec 12 05:47:05 2025 GMT Subject: CN=693271d9-0523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f9:62:52:10:0c:b5:90:4f:9b:ff:99:30:8e: 93:9b:61:61:23:c5:35:f9:a2:eb:fd:92:e8:6b:53: e5:48:ac:0a:b1:2b:ce:b5:07:a7:45:86:b5:95:fc: fb:96:18:7f:5c:b7:eb:6b:2b:31:9c:48:a4:28:a9: c0:16:1e:a3:b8:b2:0d:5c:a9:be:9c:64:4c:94:25: f5:e2:6b:38:1c:fb:ec:50:c7:8f:c7:86:d6:a0:0f: 81:ce:03:9c:9a:63:41:31:56:ae:f5:13:a6:a8:2f: 05:12:15:08:2b:c3:51:92:d9:ce:9a:8d:06:00:58: a6:f8:b4:80:19:17:85:43:74:d2:dd:1f:22:65:bc: 98:8a:39:d2:8f:b4:7b:67:1b:59:44:6e:bc:5b:0e: 02:75:2e:dd:34:a8:45:6f:60:a7:0f:3c:24:04:e3: de:34:53:1c:3b:e6:e8:1c:51:20:05:6f:a6:89:d6: 55:2a:41:3b:8a:bf:fc:75:3c:f0:5d:0f:1f:2b:10: b4:99:be:ce:cb:16:7b:23:50:a3:c4:45:fa:73:6d: 51:32:cd:6d:f1:51:cb:58:58:8d:31:0f:66:ec:e7: e1:29:8f:ba:e7:fc:58:06:32:28:69:96:2b:df:33: 8c:e0:b5:84:25:7a:fb:22:fe:3f:d8:30:c0:38:18: c5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:65:05:D6:F5:61:A9:47:00:73:C8:56:60:02:24:65:55:94:FB:59 X509v3 Authority Key Identifier: keyid:E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:1f:69:d4:aa:f4:21:33:bb:4d:e8:71:a0:84:b5:9b:f0:3c: 2b:6a:97:02:c4:16:0f:68:f0:d8:f0:d8:f4:70:2f:09:b0:35: 24:e5:fb:ef:ea:45:90:05:09:13:1a:70:1a:3a:6f:79:ac:c1: d4:f1:cf:51:53:ac:2c:b8:76:3e:07:80:cb:ec:07:bd:b5:22: 39:17:64:b9:69:78:31:8e:2f:00:e1:fb:a0:7d:34:0c:ae:ae: 12:45:07:18:8f:8d:a2:a7:6c:7b:78:51:5c:93:47:d3:d4:e1: ec:0e:75:0d:5e:75:c5:9a:1a:c6:fe:e0:fe:0a:0e:0f:67:8e: 4e:4c:4d:f7:f5:b0:ce:0e:bb:a9:81:7a:0a:e1:93:20:ae:f5: 27:e2:82:67:ec:02:7b:a6:cd:78:9e:0f:df:c2:6c:fb:55:e4: 40:44:6f:42:71:08:10:c2:09:28:f7:ee:3c:4c:05:43:18:09: 9d:0b:aa:a8:8a:ff:78:95:a7:27:d3:e2:13:a7:3c:ac:46:d2: ee:b5:f7:96:09:7a:2b:de:45:36:87:2b:6c:f8:35:1f:02:07: d6:d2:17:8f:4e:14:3e:a7:1a:74:50:18:34:05:35:9b:6e:c6: 62:5a:cd:f3:65:4c:ef:0c:5d:99:c9:e1:81:7f:48:72:cb:0f: 22:9c:29:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDlCQTExMC8GA1UEBRMoRTg3OTAzMDE3QUIxRjA2QTlDQjQ2QUIwMjFCRDBCOTIx QzlBRkE4ODAeFw0yNTEyMDUwNTQ3MDVaFw0yNTEyMTIwNTQ3MDVaMBgxFjAUBgNV BAMTDTY5MzI3MWQ5LTA1MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH+WJSEAy1kE+b/5kwjpObYWEjxTX5ouv9kuhrU+VIrAqxK861B6dFhrWV/PuW GH9ct+trKzGcSKQoqcAWHqO4sg1cqb6cZEyUJfXiazgc++xQx4/HhtagD4HOA5ya Y0ExVq71E6aoLwUSFQgrw1GS2c6ajQYAWKb4tIAZF4VDdNLdHyJlvJiKOdKPtHtn G1lEbrxbDgJ1Lt00qEVvYKcPPCQE4940Uxw75ugcUSAFb6aJ1lUqQTuKv/x1PPBd Dx8rELSZvs7LFnsjUKPERfpzbVEyzW3xUctYWI0xD2bs5+Epj7rn/FgGMihplivf M4zgtYQlevsi/j/YMMA4GMUFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIWUF1vVh qUcAc8hWYAIkZVWU+1kwHwYDVR0jBBgwFoAU6HkDAXqx8GqctGqwIb0Lkhya+ogw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0OUJBL0UzNjdGNkM2QkVG NTExRjA5QjdFNzIwOUM0RjlBRTAyLzZIa0RBWHF4OEdxY3RHcXdJYjBMa2h5YS1v Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNkhrREFYcXg4R3FjdEdxd0liMExraHlhLW9nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 OUJBL0UzNjdGNkM2QkVGNTExRjA5QjdFNzIwOUM0RjlBRTAyLzZIa0RBWHF4OEdx Y3RHcXdJYjBMa2h5YS1vZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACkfadSq9CEzu03ocaCEtZvwPCtqlwLEFg9o8Njw2PRwLwmwNSTl++/q RZAFCRMacBo6b3mswdTxz1FTrCy4dj4HgMvsB721IjkXZLlpeDGOLwDh+6B9NAyu rhJFBxiPjaKnbHt4UVyTR9PU4ewOdQ1edcWaGsb+4P4KDg9njk5MTff1sM4Ou6mB egrhkyCu9SfigmfsAnumzXieD9/CbPtV5EBEb0JxCBDCCSj37jxMBUMYCZ0LqqiK /3iVpyfT4hOnPKxG0u6195YJeiveRTaHK2z4NR8CB9bSF49OFD6nGnRQGDQFNZtu xmJazfNlTO8MXZnJ4YF/SHLLDyKcKRw= -----END CERTIFICATE-----Generated at Sat Dec 6 13:12:25 2025 by rpki-client