This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft File: q6TDlMi5vRUbOziWObjG_4BwSfI.mft (raw, json) Hash identifier: AMQzA3HbGCxJudHv+nibpq0KeIF0vkVnfNYbt9sEQOw= Subject key identifier: C2:40:86:22:96:2E:D2:CC:6E:A6:3F:D2:4B:A0:CD:63:9D:8A:EA:B3 Authority key identifier: AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 Certificate issuer: /CN=A91F77FC/serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Certificate serial: 0E68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft Manifest number: 0E5F Signing time: Sat 20 Dec 2025 17:27:58 +0000 Manifest this update: Sat 20 Dec 2025 17:27:58 +0000 Manifest next update: Sat 27 Dec 2025 17:27:58 +0000 Files and hashes: 1: q6TDlMi5vRUbOziWObjG_4BwSfI.crl (hash: V8ZmndZkuEvKweLh8ertKb6j5FIMx9Z+bcPc8gtvkOE=) 2: 70783ACCAF3411E99DF2F83EC4F9AE02.roa (hash: zDcQXuAykU10DhyikYZPwzsk10KGNkvQLJMhbZSIlBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3688 (0xe68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F77FC, serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Validity Not Before: Dec 20 17:27:58 2025 GMT Not After : Dec 27 17:27:58 2025 GMT Subject: CN=6946dc9e-6996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:96:97:63:07:38:80:76:e7:95:92:4d:ee:18: db:09:5f:a0:aa:05:7c:21:a7:af:d0:39:f8:10:8c: 0b:81:f8:6b:6d:28:2e:90:9f:37:13:15:5f:4f:6b: f8:38:fe:b6:d9:49:11:ef:44:dd:ad:03:89:fb:fa: 3d:87:90:da:c6:56:0f:44:4d:13:fa:54:57:42:e0: c3:70:a7:66:f6:a6:20:94:59:8b:73:1b:4a:e8:5a: 4d:36:0f:51:74:3d:91:06:c9:78:1f:fb:5d:13:08: d2:b9:12:8e:1d:14:b3:79:8a:21:f5:ad:1d:51:24: be:59:e2:27:2a:5a:0a:22:16:ba:20:5a:02:c9:ad: 35:23:cf:65:a8:7d:cd:8a:86:d7:4d:93:1c:ed:bd: b8:5c:f2:a6:81:60:a5:03:a5:18:a9:34:b2:82:7e: 2e:95:a4:c8:1f:2d:a6:8d:7a:cc:fa:39:f4:ac:bd: 53:ee:52:f0:d1:9f:96:01:bf:db:ac:16:e7:ae:60: c6:75:20:db:47:40:94:1c:cb:e7:86:5c:e6:6b:d5: c2:3a:6e:a5:97:df:cf:14:56:6e:6f:3e:ba:35:9f: 38:cc:c5:f4:1d:4b:8f:d0:d9:31:21:ae:52:96:af: 5d:62:be:8f:03:91:10:8e:d6:f9:5a:44:36:d8:53: 7f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:40:86:22:96:2E:D2:CC:6E:A6:3F:D2:4B:A0:CD:63:9D:8A:EA:B3 X509v3 Authority Key Identifier: keyid:AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:cd:85:23:9f:e6:0d:f6:8b:31:86:d6:e3:41:5f:cf:e1:77: bc:a0:90:4d:47:2d:ce:3f:07:02:53:4d:af:98:f6:da:1d:f5: f5:c6:ae:22:2d:ad:b4:31:43:c0:9d:3c:18:23:0d:58:d1:52: 78:02:68:26:e7:97:f5:ef:66:27:d2:51:4a:48:f4:0d:d7:5a: eb:f8:a9:fa:fe:14:34:fa:0c:5b:27:e7:30:88:ca:36:7c:c1: 8b:d0:fe:66:9d:e0:79:8c:60:a2:39:75:0e:01:37:77:34:d2: df:bd:86:31:38:31:99:04:0a:3e:d2:82:90:f3:bd:8f:19:6b: d1:5e:b0:d8:d6:2a:09:4b:2c:57:6e:6d:bd:d7:02:e9:45:59: d5:80:fa:4d:23:1c:11:b8:a7:28:24:f6:77:37:14:ed:51:0a: d3:b5:40:df:7e:36:b0:46:27:0b:75:62:26:22:41:e1:48:5b: 20:11:f2:b0:01:81:6f:d2:f1:20:ae:a6:bc:98:42:4b:3c:15: ae:1d:1e:02:fb:23:8b:61:ac:b2:18:85:88:e3:3b:d7:c9:27: b0:cc:f8:31:81:31:6f:ba:2a:ab:81:e1:c3:7b:45:28:77:fc: 09:37:b2:bf:1d:0e:66:0f:92:cd:ee:4b:2d:59:0c:28:61:89: 38:7c:da:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc3RkMxMTAvBgNVBAUTKEFCQTRDMzk0QzhCOUJEMTUxQjNCMzg5NjM5QjhDNkZG ODA3MDQ5RjIwHhcNMjUxMjIwMTcyNzU4WhcNMjUxMjI3MTcyNzU4WjAYMRYwFAYD VQQDDA02OTQ2ZGM5ZS02OTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypaXYwc4gHbnlZJN7hjbCV+gqgV8Iaev0Dn4EIwLgfhrbSgukJ83ExVfT2v4 OP622UkR70TdrQOJ+/o9h5DaxlYPRE0T+lRXQuDDcKdm9qYglFmLcxtK6FpNNg9R dD2RBsl4H/tdEwjSuRKOHRSzeYoh9a0dUSS+WeInKloKIha6IFoCya01I89lqH3N iobXTZMc7b24XPKmgWClA6UYqTSygn4ulaTIHy2mjXrM+jn0rL1T7lLw0Z+WAb/b rBbnrmDGdSDbR0CUHMvnhlzma9XCOm6ll9/PFFZubz66NZ84zMX0HUuP0NkxIa5S lq9dYr6PA5EQjtb5WkQ22FN/EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJAhiKW LtLMbqY/0kugzWOdiuqzMB8GA1UdIwQYMBaAFKukw5TIub0VGzs4ljm4xv+AcEny MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdGQy9GRUQ5MDE1NkFG MzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZSVWJPemlXT2JqR180QndT ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E2VERsTWk1dlJVYk96aVdPYmpHXzRCd1NmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzdGQy9GRUQ5MDE1NkFGMzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZS VWJPemlXT2JqR180QndTZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABzYUjn+YN9osxhtbjQV/P4Xe8oJBNRy3OPwcCU02vmPbaHfX1xq4i La20MUPAnTwYIw1Y0VJ4Amgm55f172Yn0lFKSPQN11rr+Kn6/hQ0+gxbJ+cwiMo2 fMGL0P5mneB5jGCiOXUOATd3NNLfvYYxODGZBAo+0oKQ872PGWvRXrDY1ioJSyxX bm291wLpRVnVgPpNIxwRuKcoJPZ3NxTtUQrTtUDffjawRicLdWImIkHhSFsgEfKw AYFv0vEgrqa8mEJLPBWuHR4C+yOLYayyGIWI4zvXySewzPgxgTFvuiqrgeHDe0Uo d/wJN7K/HQ5mD5LN7kstWQwoYYk4fNrG -----END CERTIFICATE-----Generated at Sun Dec 21 21:47:21 2025 by rpki-client