This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft File: K6PqbAvX8YRghmD5ogTlEYZaAN0.mft (raw, json) Hash identifier: zjaHbgEeJ9/L6YBUF4E0bgI/i+GK/t31RCptu7V/1EY= Subject key identifier: 70:EC:C5:28:C3:E5:F5:DD:E4:00:C4:68:58:B7:8D:4E:D9:7C:4E:FA Authority key identifier: 2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD Certificate issuer: /CN=A91F1E8B/serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD Certificate serial: 097D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft Manifest number: 0976 Signing time: Thu 04 Dec 2025 19:18:15 +0000 Manifest this update: Thu 04 Dec 2025 19:18:14 +0000 Manifest next update: Thu 11 Dec 2025 19:18:14 +0000 Files and hashes: 1: K6PqbAvX8YRghmD5ogTlEYZaAN0.crl (hash: lblJ4lIG5fcIT8ZpuByZstB6A4yoU14APBs+30eOmbc=) 2: 33F713A8A3CF11EAA31D8C20C4F9AE02.roa (hash: U+2Kae/qqfcPAGDUNj2rc7ly1La28a/4nOUamtVuvAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2429 (0x97d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1E8B, serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD Validity Not Before: Dec 4 19:18:14 2025 GMT Not After : Dec 11 19:18:14 2025 GMT Subject: CN=6931de76-38c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:99:b2:9d:33:0f:3a:95:c4:cb:77:50:6a:41: 88:99:96:c7:2b:c3:89:00:39:f5:2a:e1:41:5f:f6: c3:cf:3b:21:6e:91:2f:97:af:95:6b:63:88:7a:e5: e3:e9:57:ee:51:00:16:37:ce:5f:d0:da:c4:32:0a: 7a:06:19:cb:23:f2:ba:f0:44:9a:44:f5:99:d9:74: 0f:db:0d:50:6c:cc:22:23:76:dd:a2:92:3b:03:9a: ea:d2:84:ce:f3:bf:33:34:f6:e4:d3:9b:b9:c6:d1: 2e:64:c6:d4:3a:0e:44:44:be:30:3f:b2:56:74:f1: 18:b1:8a:36:4e:6f:80:2d:6f:38:b3:d9:a0:2b:53: e1:22:72:09:a0:6f:cf:ef:af:26:87:9d:3c:0b:fd: 45:83:7e:22:65:4e:78:9c:0e:ae:8e:e8:ee:99:a2: fd:fd:59:9d:78:ea:68:42:a4:00:9d:dd:f4:fa:1b: 03:ec:df:d5:5a:d8:57:c0:48:72:3d:77:c0:40:43: fd:8a:54:72:52:6b:31:46:bd:74:86:40:3d:cd:69: f7:fb:ef:ed:9c:10:af:d4:b4:fc:7d:f9:c7:85:fa: 17:ce:74:ca:af:6f:73:c3:86:a0:ae:2b:94:44:4a: f5:d4:91:3f:1c:ea:aa:8d:53:7c:a0:51:ff:5e:ff: 56:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EC:C5:28:C3:E5:F5:DD:E4:00:C4:68:58:B7:8D:4E:D9:7C:4E:FA X509v3 Authority Key Identifier: keyid:2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5e:d6:40:12:e6:54:1a:dd:35:c7:33:9c:57:3c:f4:c9:28: cb:a6:3d:3d:e3:6c:62:ab:50:85:e5:99:39:2a:1f:61:33:a6: f2:fd:3c:32:f8:4a:34:68:32:67:22:94:84:35:b3:82:9a:5f: a2:46:20:e3:15:3e:cb:cd:45:31:1b:4b:2c:ce:74:28:28:00: 57:cc:a6:fd:8a:80:46:2a:c2:e1:7e:f5:a3:4d:56:f5:a3:61: fd:ae:5a:03:cb:4a:be:1f:b6:99:3e:5f:2c:90:6c:ae:2a:8a: fe:fc:74:4b:48:5f:22:97:6f:36:3d:82:db:db:23:e3:64:44: ff:19:16:a1:78:cc:7c:df:b3:dd:99:ad:d2:88:a1:e7:a4:f1: 5c:91:5b:55:9a:5f:f6:30:fe:69:01:c5:38:43:4c:1a:be:50: 94:4e:cd:9d:e4:d4:df:09:bf:69:c3:ff:a6:1b:48:57:36:b9: e3:78:55:73:c0:9f:ba:1d:5c:78:44:7f:41:09:44:1e:1c:fd: d7:c0:f2:88:6c:2b:a9:8c:e8:f1:5d:3a:92:08:d3:99:b9:96: ae:ea:f5:a7:4e:4e:32:a5:17:15:e7:34:02:5c:aa:62:11:37: c3:e8:c6:11:3d:14:9a:00:3b:a6:f8:23:da:59:ca:3d:a6:c1: 6c:b2:77:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFFOEIxMTAvBgNVBAUTKDJCQTNFQTZDMEJEN0YxODQ2MDg2NjBGOUEyMDRFNTEx ODY1QTAwREQwHhcNMjUxMjA0MTkxODE0WhcNMjUxMjExMTkxODE0WjAYMRYwFAYD VQQDEw02OTMxZGU3Ni0zOGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JmynTMPOpXEy3dQakGImZbHK8OJADn1KuFBX/bDzzshbpEvl6+Va2OIeuXj 6VfuUQAWN85f0NrEMgp6BhnLI/K68ESaRPWZ2XQP2w1QbMwiI3bdopI7A5rq0oTO 878zNPbk05u5xtEuZMbUOg5ERL4wP7JWdPEYsYo2Tm+ALW84s9mgK1PhInIJoG/P 768mh508C/1Fg34iZU54nA6ujujumaL9/VmdeOpoQqQAnd30+hsD7N/VWthXwEhy PXfAQEP9ilRyUmsxRr10hkA9zWn3++/tnBCv1LT8ffnHhfoXznTKr29zw4agriuU REr11JE/HOqqjVN8oFH/Xv9WfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDsxSjD 5fXd5ADEaFi3jU7ZfE76MB8GA1UdIwQYMBaAFCuj6mwL1/GEYIZg+aIE5RGGWgDd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUU4Qi84MDdERkRBMEEz Q0UxMUVBOEJBRTY1MjBDNEY5QUUwMi9LNlBxYkF2WDhZUmdobUQ1b2dUbEVZWmFB TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s2UHFiQXZYOFlSZ2htRDVvZ1RsRVlaYUFOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUU4Qi84MDdERkRBMEEzQ0UxMUVBOEJBRTY1MjBDNEY5QUUwMi9LNlBxYkF2WDhZ UmdobUQ1b2dUbEVZWmFBTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdXtZAEuZUGt01xzOcVzz0ySjLpj0942xiq1CF5Zk5Kh9hM6by/Twy +Eo0aDJnIpSENbOCml+iRiDjFT7LzUUxG0ssznQoKABXzKb9ioBGKsLhfvWjTVb1 o2H9rloDy0q+H7aZPl8skGyuKor+/HRLSF8il282PYLb2yPjZET/GRaheMx837Pd ma3SiKHnpPFckVtVml/2MP5pAcU4Q0wavlCUTs2d5NTfCb9pw/+mG0hXNrnjeFVz wJ+6HVx4RH9BCUQeHP3XwPKIbCupjOjxXTqSCNOZuZau6vWnTk4ypRcV5zQCXKpi ETfD6MYRPRSaADum+CPaWco9psFssncI -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:05 2025 by rpki-client