This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft File: h6XSzfwKU6WS2h-P8ndToSk0N_g.mft (raw, json) Hash identifier: YyL1PtjK3iHzSw+pDjQiymvKHJaV+cIwgQy2iNcNIZc= Subject key identifier: 76:CD:4B:35:F5:25:EF:9E:97:61:AB:68:45:C1:45:FF:5B:1A:1A:4F Authority key identifier: 87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8 Certificate issuer: /CN=A91E1BB0/serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft Manifest number: 0A Signing time: Fri 05 Dec 2025 05:49:39 +0000 Manifest this update: Fri 05 Dec 2025 05:49:38 +0000 Manifest next update: Fri 12 Dec 2025 05:49:38 +0000 Files and hashes: 1: h6XSzfwKU6WS2h-P8ndToSk0N_g.crl (hash: WTiCss9Abi0yRWeTn2TJacu68r+BJ6C7dPnqLVMCXjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:49:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1BB0, serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8 Validity Not Before: Dec 5 05:49:38 2025 GMT Not After : Dec 12 05:49:38 2025 GMT Subject: CN=69327272-f311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d3:52:0d:6f:28:9c:f8:9a:f1:cb:55:aa:99: d5:f3:22:fb:df:24:67:b8:ca:01:ba:ea:2e:f6:5f: 7f:f1:75:e4:ea:7c:9e:23:44:af:1b:10:a3:17:47: 5f:0b:3f:a8:54:18:17:7e:c2:9c:81:9d:98:c2:b6: e3:e1:64:ad:28:08:80:96:f9:44:f7:57:eb:10:17: 22:f2:7e:84:c9:47:39:3d:97:fe:55:82:d8:20:78: 34:ee:f5:a2:2f:57:ad:fb:97:ef:d0:b5:a9:64:af: 2a:de:36:b0:be:6c:92:99:b9:1e:30:2a:44:c5:36: dd:a9:91:4c:1f:1b:09:5a:dc:ad:3e:3a:25:c2:a9: 28:70:88:5e:43:18:9e:99:72:c5:b7:32:27:6b:44: b8:5d:96:9a:a5:08:50:cb:15:ef:69:5c:2e:bd:91: 7f:ba:92:07:a6:e7:b7:c4:04:62:f1:1e:94:d2:a8: d0:14:6b:d2:c4:27:ba:94:a0:e2:f5:8a:d1:f2:66: 50:70:ff:96:3f:a5:dd:e3:f7:20:e4:e4:1a:d2:cb: 90:57:46:c2:51:8b:0c:aa:ca:18:31:c3:d3:66:dd: 82:b3:f2:d5:7e:c9:82:bb:46:07:e2:16:a1:a6:b6: 36:84:f7:48:9f:e0:53:5d:ed:98:4c:22:fd:07:45: 5a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CD:4B:35:F5:25:EF:9E:97:61:AB:68:45:C1:45:FF:5B:1A:1A:4F X509v3 Authority Key Identifier: keyid:87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:4a:78:79:6a:78:67:fb:8a:94:69:63:5c:47:3d:75:86:aa: 7f:0d:32:1f:53:1b:90:fd:f3:f3:92:09:8d:92:1b:a6:87:61: 8c:b3:40:6b:66:f7:e1:99:9c:42:24:ca:9a:fe:b6:40:32:ec: 94:72:00:45:41:ab:b6:e9:a5:a5:4b:da:11:c9:05:07:d9:e5: b2:ec:e3:ab:e9:1b:fd:98:62:fd:9b:cd:28:a1:8a:2b:81:2a: 45:04:5e:38:bd:ad:b6:72:57:91:a0:15:1b:81:fa:d4:ee:27: 19:15:08:89:38:cd:a6:bd:77:80:70:1e:6c:fe:f7:84:59:70: f8:54:69:46:b1:69:05:a5:61:fc:44:52:02:28:8e:0c:d3:b8: d5:4e:26:67:3c:5a:a7:fd:34:75:b9:8b:38:d0:a1:59:14:95: 42:e5:ca:91:6c:e3:99:24:c9:30:ba:f3:22:2f:d9:15:10:00: 79:f6:ac:f1:6d:f0:fc:a0:47:78:dc:7b:e2:00:b6:ca:72:66: c5:a4:5d:76:f0:f5:a9:d0:d7:b8:10:07:19:08:38:b8:36:98: 9b:de:64:5a:34:ef:77:c5:6d:e3:c9:f0:ca:b2:ce:5b:a7:b5: 8c:88:d5:18:a9:c1:b2:fe:9f:a9:70:f6:32:ff:1f:d8:c3:49: dd:5e:e7:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUJCMDExMC8GA1UEBRMoODdBNUQyQ0RGQzBBNTNBNTkyREExRjhGRjI3NzUzQTEy OTM0MzdGODAeFw0yNTEyMDUwNTQ5MzhaFw0yNTEyMTIwNTQ5MzhaMBgxFjAUBgNV BAMTDTY5MzI3MjcyLWYzMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC301INbyic+Jrxy1WqmdXzIvvfJGe4ygG66i72X3/xdeTqfJ4jRK8bEKMXR18L P6hUGBd+wpyBnZjCtuPhZK0oCICW+UT3V+sQFyLyfoTJRzk9l/5VgtggeDTu9aIv V637l+/QtalkryreNrC+bJKZuR4wKkTFNt2pkUwfGwla3K0+OiXCqShwiF5DGJ6Z csW3MidrRLhdlpqlCFDLFe9pXC69kX+6kgem57fEBGLxHpTSqNAUa9LEJ7qUoOL1 itHyZlBw/5Y/pd3j9yDk5BrSy5BXRsJRiwyqyhgxw9Nm3YKz8tV+yYK7RgfiFqGm tjaE90if4FNd7ZhMIv0HRVorAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUds1LNfUl 756XYatoRcFF/1saGk8wHwYDVR0jBBgwFoAUh6XSzfwKU6WS2h+P8ndToSk0N/gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxQkIwLzVENkJGM0RDQzQ3 ODExRjA5NEI4NTAyNUM0RjlBRTAyL2g2WFN6ZndLVTZXUzJoLVA4bmRUb1NrME5f Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaDZYU3pmd0tVNldTMmgtUDhuZFRvU2swTl9nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx QkIwLzVENkJGM0RDQzQ3ODExRjA5NEI4NTAyNUM0RjlBRTAyL2g2WFN6ZndLVTZX UzJoLVA4bmRUb1NrME5fZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEBKeHlqeGf7ipRpY1xHPXWGqn8NMh9TG5D98/OSCY2SG6aHYYyzQGtm 9+GZnEIkypr+tkAy7JRyAEVBq7bppaVL2hHJBQfZ5bLs46vpG/2YYv2bzSihiiuB KkUEXji9rbZyV5GgFRuB+tTuJxkVCIk4zaa9d4BwHmz+94RZcPhUaUaxaQWlYfxE UgIojgzTuNVOJmc8Wqf9NHW5izjQoVkUlULlypFs45kkyTC68yIv2RUQAHn2rPFt 8PygR3jce+IAtspyZsWkXXbw9anQ17gQBxkIOLg2mJveZFo073fFbePJ8Mqyzlun tYyI1RipwbL+n6lw9jL/H9jDSd1e50U= -----END CERTIFICATE-----Generated at Sat Dec 6 18:46:03 2025 by rpki-client