This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json) Hash identifier: pplGEKmsBV74OS2IL2YSs714qybipHapclEr8hhCWdI= Subject key identifier: 41:26:AD:E1:00:74:F1:2C:07:DA:20:49:AF:4F:13:DD:86:3C:D6:EB Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Certificate serial: 20E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft Manifest number: 20BD Signing time: Sat 06 Dec 2025 15:40:42 +0000 Manifest this update: Sat 06 Dec 2025 15:40:41 +0000 Manifest next update: Sat 13 Dec 2025 15:40:41 +0000 Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: HCheptfx1MSGsqe74fjzbWpfXLvGlQzlXaERbQmmuBk=) 2: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: dRYh9WAvcIumZjCZ5S62u32XoLkiqwXXygrg2DE1FBI=) 3: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: 0oF1Qfg6/q63oXyqNiJvhv+IBvlt379syGArKmuw6+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8418 (0x20e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Validity Not Before: Dec 6 15:40:41 2025 GMT Not After : Dec 13 15:40:41 2025 GMT Subject: CN=69344e79-b1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:32:0f:ce:f3:4a:85:2a:d8:65:bd:ae:3e:07: ed:4e:63:09:fc:92:f5:4e:91:02:cd:ee:fb:98:78: ed:15:eb:ae:17:3b:85:9a:e2:16:cd:18:92:28:e8: 3a:ed:df:b9:ec:e3:85:cd:38:53:61:81:0a:51:5e: db:24:e4:7f:1b:c6:7a:85:8f:3f:f9:00:70:4b:89: 9a:1d:d3:31:6b:98:be:55:dd:a7:42:5b:ea:d5:26: b6:d7:de:6f:31:6c:f9:05:2c:dd:dd:c4:a9:f0:40: 61:3d:9c:52:69:e2:a9:56:9a:1a:a7:f8:34:c4:9e: b4:41:a8:b3:b6:9c:e1:7d:41:5e:8f:64:00:98:92: 29:26:ba:37:c0:9b:ce:e5:ad:4c:47:38:ca:b0:17: 10:67:27:ec:3e:04:e9:85:22:b7:a1:91:f5:93:b8: 94:21:77:14:e4:e0:1e:9f:c0:4a:65:2a:fa:8b:e1: 66:24:f6:ab:ec:70:8e:f5:dc:25:fe:ba:1e:a4:8d: 95:1b:2b:2e:ff:e1:8c:fa:1b:21:fb:d2:82:ba:02: 99:0a:89:a9:95:aa:4d:09:45:9b:57:c6:bb:82:5c: bc:98:10:a6:a6:68:0f:9b:6e:74:c2:37:2b:e6:d8: f1:5b:cc:7a:3a:b7:c5:15:74:0e:b4:e2:a6:30:fe: e7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:26:AD:E1:00:74:F1:2C:07:DA:20:49:AF:4F:13:DD:86:3C:D6:EB X509v3 Authority Key Identifier: keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:4e:c2:16:12:f9:0a:08:00:ac:aa:df:b8:c4:e6:5a:11:9f: 30:51:94:6a:1c:54:1a:1c:9f:b1:54:2f:37:58:f0:84:5e:c5: 45:a7:18:ab:06:e7:57:63:13:7f:4e:10:4f:97:14:88:7a:91: 24:9a:fd:44:01:5b:d5:f6:8e:93:65:af:ae:b1:4f:e2:bd:74: 8d:bf:20:b1:89:e3:e7:7b:f3:58:72:99:96:ca:3b:54:f7:df: fa:3c:57:4e:b2:e0:c4:4e:90:fe:17:3a:8f:fd:6b:61:26:f3: 89:6c:b7:b9:d1:9b:35:0b:7d:57:02:70:a2:91:50:52:d6:6d: 77:b6:70:c2:98:00:f5:ca:93:07:c7:83:84:f1:b8:4f:36:df: 84:fe:bf:70:09:eb:3e:41:ab:f9:80:39:03:7d:69:7e:50:8a: 55:8e:5f:da:b9:61:04:ab:b6:0b:de:46:e0:90:b7:43:93:53: f5:f3:62:fb:26:53:da:45:04:97:65:e8:bb:d3:17:d0:6e:50: db:09:68:d2:b9:41:52:b8:c6:11:8c:3b:2a:c7:0f:a8:a8:13: 2f:15:23:bc:40:80:c8:fe:b1:02:10:2f:9e:cc:5a:fc:c1:d0: ce:61:89:c8:d3:4f:6f:81:ed:d5:e1:29:b3:1e:83:cf:ee:62: ed:36:81:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1 M0NBOEYzODkwHhcNMjUxMjA2MTU0MDQxWhcNMjUxMjEzMTU0MDQxWjAYMRYwFAYD VQQDEw02OTM0NGU3OS1iMWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDIPzvNKhSrYZb2uPgftTmMJ/JL1TpECze77mHjtFeuuFzuFmuIWzRiSKOg6 7d+57OOFzThTYYEKUV7bJOR/G8Z6hY8/+QBwS4maHdMxa5i+Vd2nQlvq1Sa2195v MWz5BSzd3cSp8EBhPZxSaeKpVpoap/g0xJ60QaiztpzhfUFej2QAmJIpJro3wJvO 5a1MRzjKsBcQZyfsPgTphSK3oZH1k7iUIXcU5OAen8BKZSr6i+FmJPar7HCO9dwl /roepI2VGysu/+GM+hsh+9KCugKZComplapNCUWbV8a7gly8mBCmpmgPm250wjcr 5tjxW8x6OrfFFXQOtOKmMP7nvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEmreEA dPEsB9ogSa9PE92GPNbrMB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2 ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzI0Qi8xQkM3MUE2MjE2ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBw OEd3a29yYlJ0M0ZUeW84NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpTsIWEvkKCACsqt+4xOZaEZ8wUZRqHFQaHJ+xVC83WPCEXsVFpxir BudXYxN/ThBPlxSIepEkmv1EAVvV9o6TZa+usU/ivXSNvyCxiePne/NYcpmWyjtU 99/6PFdOsuDETpD+FzqP/WthJvOJbLe50Zs1C31XAnCikVBS1m13tnDCmAD1ypMH x4OE8bhPNt+E/r9wCes+Qav5gDkDfWl+UIpVjl/auWEEq7YL3kbgkLdDk1P182L7 JlPaRQSXZei70xfQblDbCWjSuUFSuMYRjDsqxw+oqBMvFSO8QIDI/rECEC+ezFr8 wdDOYYnI009vge3V4SmzHoPP7mLtNoGD -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:47 2025 by rpki-client