This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft File: i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json) Hash identifier: Nq2t5V2eCxpyKgGPkesSDRkR80l3peE0XHJ+ZnkU5P0= Subject key identifier: BF:AE:6F:FE:B0:95:B5:D3:44:37:49:D2:F6:03:DF:5B:4E:1E:BB:73 Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 Certificate issuer: /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Certificate serial: 34E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft Manifest number: 34E9 Signing time: Sat 06 Dec 2025 14:29:42 +0000 Manifest this update: Sat 06 Dec 2025 14:29:41 +0000 Manifest next update: Sat 13 Dec 2025 14:29:41 +0000 Files and hashes: 1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: WmOImrX4DOTf4O8eCMkQS11YpO+lnLHNXEB0P1e8LUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13545 (0x34e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Validity Not Before: Dec 6 14:29:41 2025 GMT Not After : Dec 13 14:29:41 2025 GMT Subject: CN=69343dd5-9647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b8:d8:fc:22:c8:4c:4c:cb:03:8d:0a:f3:55: 39:c2:63:f9:72:00:ae:2d:a6:98:60:e1:56:48:b3: c6:7c:6e:bf:30:63:1f:c5:63:d0:80:79:6a:36:1a: 6f:07:e2:5d:c6:38:e2:17:66:96:62:13:d4:c2:11: d6:77:03:f3:38:4b:70:fe:31:a1:ae:e6:42:7a:00: 7f:f3:ba:0f:e2:0b:a0:98:70:ed:12:4f:b0:a5:9f: 64:53:c0:b6:14:c9:41:9b:20:a3:66:fd:6f:19:ee: 51:51:73:03:f6:d0:19:48:75:17:68:e3:cb:c3:69: a2:8b:86:1a:7e:da:dd:d3:de:68:7d:ca:b7:5b:43: 1e:b3:f8:4d:d0:22:e9:73:27:4d:da:61:b5:f3:63: 51:ee:df:66:24:99:80:01:ea:e6:f5:cb:f7:54:99: ba:18:8a:13:7f:21:88:a0:c4:c5:f0:63:c5:dd:e6: f7:02:b1:67:c3:27:d4:8d:f2:67:61:86:5c:77:ce: fb:d8:7c:e8:6f:ac:a8:fe:7d:fd:45:17:af:1d:54: cc:b1:aa:09:8d:2d:b5:37:fb:db:b0:bd:98:58:c2: af:2e:d5:69:43:5d:54:f1:1b:b1:5e:06:1f:b0:c3: 52:1c:ce:dc:d6:3e:83:30:8f:cd:70:85:66:10:79: 39:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AE:6F:FE:B0:95:B5:D3:44:37:49:D2:F6:03:DF:5B:4E:1E:BB:73 X509v3 Authority Key Identifier: keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f1:30:69:43:32:19:1f:04:5a:8f:21:64:42:5f:63:6d:81: 81:2b:19:b5:b6:ed:e0:08:99:ac:4c:fe:a5:8c:cf:e8:3a:5e: f7:e6:9a:ff:02:ad:32:58:6d:21:7b:5c:e4:67:05:33:da:fb: 96:e3:91:e1:66:a3:da:71:fd:58:42:e5:f0:cc:0e:04:a3:d6: 77:83:50:20:6b:14:8d:b5:47:ac:86:6d:30:16:55:2f:0f:ea: 7f:f1:49:76:0d:1d:aa:fb:7e:57:a2:18:39:4a:2c:78:c7:9b: ce:5a:ca:0a:96:b5:e3:9a:92:35:71:7f:23:a9:22:6a:d6:f4: a0:6b:56:d3:17:2c:fe:45:af:f3:2b:ef:3c:10:10:a0:99:90: bf:11:e5:fe:8f:a0:fb:f3:d8:23:60:66:9a:5f:67:91:a4:b5: a8:97:d6:39:5f:9b:23:d5:71:a9:2d:82:cf:53:11:04:b7:f6: 90:71:c4:2b:bb:9a:9d:c7:67:54:6f:92:96:f4:eb:a5:33:f3: 8f:ca:10:61:e2:01:63:96:e9:ea:6e:04:da:f6:a0:4d:1e:99: 88:cc:ee:dd:a4:16:be:aa:4f:4e:c2:67:c7:6b:f0:b4:47:7a: 8f:99:d8:f3:38:7d:fb:11:06:68:cc:3f:cb:84:31:45:64:00: 6b:89:18:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQUUxMTAvBgNVBAUTKDhCQUMwREQzRTQ5MTg1ODk0RkRBRTI4Mjg0RURDODA0 NzIwQjQ2MTQwHhcNMjUxMjA2MTQyOTQxWhcNMjUxMjEzMTQyOTQxWjAYMRYwFAYD VQQDEw02OTM0M2RkNS05NjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5LjY/CLITEzLA40K81U5wmP5cgCuLaaYYOFWSLPGfG6/MGMfxWPQgHlqNhpv B+JdxjjiF2aWYhPUwhHWdwPzOEtw/jGhruZCegB/87oP4gugmHDtEk+wpZ9kU8C2 FMlBmyCjZv1vGe5RUXMD9tAZSHUXaOPLw2mii4Yaftrd095ofcq3W0Mes/hN0CLp cydN2mG182NR7t9mJJmAAerm9cv3VJm6GIoTfyGIoMTF8GPF3eb3ArFnwyfUjfJn YYZcd8772Hzob6yo/n39RRevHVTMsaoJjS21N/vbsL2YWMKvLtVpQ11U8RuxXgYf sMNSHM7c1j6DMI/NcIVmEHk5/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+ub/6w lbXTRDdJ0vYD31tOHrtzMB8GA1UdIwQYMBaAFIusDdPkkYWJT9rigoTtyARyC0YU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS8xNjhGRkQ2QzFE OEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZbFAydUtDaE8zSUJISUxS aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2d04wLVNSaFlsUDJ1S0NoTzNJQkhJTFJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZBRS8xNjhGRkQ2QzFEOEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZ bFAydUtDaE8zSUJISUxSaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs8TBpQzIZHwRajyFkQl9jbYGBKxm1tu3gCJmsTP6ljM/oOl735pr/ Aq0yWG0he1zkZwUz2vuW45HhZqPacf1YQuXwzA4Eo9Z3g1AgaxSNtUeshm0wFlUv D+p/8Ul2DR2q+35Xohg5Six4x5vOWsoKlrXjmpI1cX8jqSJq1vSga1bTFyz+Ra/z K+88EBCgmZC/EeX+j6D789gjYGaaX2eRpLWol9Y5X5sj1XGpLYLPUxEEt/aQccQr u5qdx2dUb5KW9OulM/OPyhBh4gFjlunqbgTa9qBNHpmIzO7dpBa+qk9OwmfHa/C0 R3qPmdjzOH37EQZozD/LhDFFZABriRgB -----END CERTIFICATE-----Generated at Sat Dec 6 19:14:50 2025 by rpki-client