This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft File: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft (raw, json) Hash identifier: Z3q2h4ZDbws99I/1wejyujit4naXnkru1Q8ntUoML2Y= Subject key identifier: 18:50:51:BA:2F:14:79:E6:B5:EC:4B:23:66:68:9D:C0:CD:7C:5D:A6 Authority key identifier: AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 Certificate issuer: /CN=A91E8CB0/serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft Manifest number: 0239 Signing time: Fri 05 Dec 2025 00:15:01 +0000 Manifest this update: Fri 05 Dec 2025 00:15:00 +0000 Manifest next update: Fri 12 Dec 2025 00:15:00 +0000 Files and hashes: 1: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl (hash: Yseqzhzm1CmPkAC8GFBTgGAjrPvhbOBqDev0l0LuGeQ=) 2: F11BA4EA75B811EDA34F9687C4F9AE02.roa (hash: ZxJWdKT+dhhJyfungVSpx3334JD5sGMO+S5A+zHFl74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8CB0, serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Validity Not Before: Dec 5 00:15:00 2025 GMT Not After : Dec 12 00:15:00 2025 GMT Subject: CN=69322404-7ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:1f:fb:96:89:3e:ad:e9:ee:cf:25:04:9f: a4:c8:bc:11:00:d0:eb:76:1d:6a:ec:60:83:95:ae: d6:f8:a5:6c:76:01:72:1a:7b:e5:0c:66:0a:ce:f0: 8c:46:6a:01:53:23:5f:26:e0:15:97:4f:97:d1:87: 82:74:9e:36:1d:ed:a9:97:d0:52:06:5d:29:03:bb: 6a:78:82:80:12:aa:05:4e:fc:d9:18:4e:5d:45:74: 9c:b5:04:33:a2:8f:ca:af:56:73:10:f3:f6:4b:f4: 70:bf:3c:f6:2e:a9:d6:2a:fd:c1:6f:9a:bf:1b:49: a0:53:7f:4d:39:6c:65:74:18:8a:1c:0c:30:31:4a: a4:6c:22:d2:df:35:a0:32:ef:47:11:73:34:ad:ab: 37:d3:81:e0:4e:15:39:cf:d1:1f:69:38:56:11:12: d6:11:c3:75:80:0b:ba:2d:d8:d4:d8:ab:2c:54:a4: fb:e0:d5:2a:9e:99:4f:62:3b:d7:8d:b8:ba:25:80: 66:1d:78:e0:77:4c:c3:8b:8d:6a:d7:ef:28:40:bb: fd:66:4a:37:e1:72:61:b8:fe:32:46:92:82:cc:29: ab:c7:16:ee:cc:22:d5:58:e8:f8:78:23:d2:f8:fd: 4f:83:72:8f:b4:79:4e:52:52:ba:21:20:f4:22:9c: 82:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:50:51:BA:2F:14:79:E6:B5:EC:4B:23:66:68:9D:C0:CD:7C:5D:A6 X509v3 Authority Key Identifier: keyid:AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:49:5a:1c:4f:62:84:1b:9f:69:ef:3d:9d:8c:72:0e:3c:6d: 0d:9c:74:94:0e:3f:26:61:17:86:14:bd:a0:10:9b:30:76:3a: 6f:90:43:6c:e8:5f:f3:80:a6:d6:83:cc:7c:ab:27:4c:6f:de: 7e:c1:4f:89:fa:dc:96:7f:72:47:ed:61:c7:98:6f:2c:2f:a8: 92:54:84:c1:37:52:2e:e8:51:68:ad:c1:bc:0d:7b:75:f5:a7: c1:c7:68:e1:ca:75:87:c4:5c:e7:cf:c0:7f:76:5b:dd:73:4d: 1a:d2:49:0b:38:c8:f9:1c:41:16:61:56:41:46:b9:61:fd:f6: ba:58:55:3c:19:8e:9b:db:c5:aa:c0:5f:ae:46:03:f3:3c:63: d7:68:1d:33:06:c2:f1:11:ac:b6:86:7c:5f:9f:96:ea:c9:57: 41:6e:c6:1c:28:c8:e9:6a:1a:75:43:68:f9:3d:fd:2a:45:16: 82:01:86:c8:86:f4:63:23:6a:46:03:78:d1:52:07:1b:51:36: ea:53:9e:f1:18:3d:55:a5:36:4a:43:52:af:92:ab:34:5f:69: 28:a6:0e:fc:56:10:a0:5e:b8:c7:e2:10:c5:85:31:98:35:dc: 7f:fa:b5:bc:f9:56:a1:58:68:dd:e7:07:0b:52:db:ff:81:4d: d0:c7:15:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDQjAxMTAvBgNVBAUTKEFGQTZEN0JEQzM3QjY0QzhGMTQ2RUVBNjE3MzZEM0Q0 NTE3OEZCMzcwHhcNMjUxMjA1MDAxNTAwWhcNMjUxMjEyMDAxNTAwWjAYMRYwFAYD VQQDEw02OTMyMjQwNC03YWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtT4f+5aJPq3p7s8lBJ+kyLwRANDrdh1q7GCDla7W+KVsdgFyGnvlDGYKzvCM RmoBUyNfJuAVl0+X0YeCdJ42He2pl9BSBl0pA7tqeIKAEqoFTvzZGE5dRXSctQQz oo/Kr1ZzEPP2S/Rwvzz2LqnWKv3Bb5q/G0mgU39NOWxldBiKHAwwMUqkbCLS3zWg Mu9HEXM0ras304HgThU5z9EfaThWERLWEcN1gAu6LdjU2KssVKT74NUqnplPYjvX jbi6JYBmHXjgd0zDi41q1+8oQLv9Zko34XJhuP4yRpKCzCmrxxbuzCLVWOj4eCPS +P1Pg3KPtHlOUlK6ISD0IpyCvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhQUbov FHnmtexLI2ZoncDNfF2mMB8GA1UdIwQYMBaAFK+m173De2TI8Ubuphc209RRePs3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOENCMC8zNzcwMTI0RTZC QzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pNanhSdTZtRnpiVDFGRjQt emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I2Ylh2Y043Wk1qeFJ1Nm1GemJUMUZGNC16Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OENCMC8zNzcwMTI0RTZCQzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pN anhSdTZtRnpiVDFGRjQtemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUSVocT2KEG59p7z2djHIOPG0NnHSUDj8mYReGFL2gEJswdjpvkENs 6F/zgKbWg8x8qydMb95+wU+J+tyWf3JH7WHHmG8sL6iSVITBN1Iu6FForcG8DXt1 9afBx2jhynWHxFznz8B/dlvdc00a0kkLOMj5HEEWYVZBRrlh/fa6WFU8GY6b28Wq wF+uRgPzPGPXaB0zBsLxEay2hnxfn5bqyVdBbsYcKMjpahp1Q2j5Pf0qRRaCAYbI hvRjI2pGA3jRUgcbUTbqU57xGD1VpTZKQ1Kvkqs0X2kopg78VhCgXrjH4hDFhTGY Ndx/+rW8+VahWGjd5wcLUtv/gU3QxxXP -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:56 2025 by rpki-client