This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft File: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft (raw, json) Hash identifier: bPCqCF6m1rO46D1YYRvkbSj6Ov4xnHpqXAgnjj56TXI= Subject key identifier: C8:D0:67:CD:6B:D8:89:22:04:98:1D:C9:57:CA:FE:8B:08:A8:52:2B Authority key identifier: FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF Certificate issuer: /CN=A91168FD/serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF Certificate serial: 21D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft Manifest number: 21C8 Signing time: Mon 22 Dec 2025 15:43:16 +0000 Manifest this update: Mon 22 Dec 2025 15:43:15 +0000 Manifest next update: Mon 29 Dec 2025 15:43:15 +0000 Files and hashes: 1: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl (hash: MG+bMFhEFwHLBFZh2KFGVtsYZ9xbgXEvmV9qyYLk7Dk=) 2: D07411B6661211ECBCD61A65C4F9AE02.roa (hash: /mOiRGW1T9qa7YdW+2kPvRZkQyewAraUry397iZAYjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8657 (0x21d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168FD, serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF Validity Not Before: Dec 22 15:43:15 2025 GMT Not After : Dec 29 15:43:15 2025 GMT Subject: CN=69496713-1fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a5:d4:ba:1c:86:7b:83:20:94:d1:e9:7b:a3: 63:1f:19:a3:75:ff:fd:21:0c:a2:1e:cc:eb:1b:48: 96:16:81:dc:b4:75:25:60:10:e4:ef:f9:6a:fe:c9: f3:d9:71:1b:b8:8c:e5:09:04:d9:1c:2f:b0:5b:12: d0:31:65:94:40:e1:58:22:6c:c2:be:c3:86:ce:ae: 38:5a:17:cb:bd:38:c2:f4:f4:79:8c:4c:dd:06:e5: 52:14:02:6e:1a:e6:98:9a:99:68:99:3c:24:85:23: aa:b2:e8:31:24:d7:be:11:14:57:e7:8c:17:52:95: a5:dd:15:b4:2f:c2:96:c6:66:0f:a4:6e:18:a1:59: f9:3d:bc:32:43:7b:83:e1:a5:1d:b2:34:f4:3f:ab: c2:14:81:52:07:74:41:56:fa:30:18:af:e0:ed:0f: 55:ab:99:bb:46:34:0a:1f:a5:44:39:94:06:bb:2e: bf:60:52:86:46:9c:f4:11:a0:0a:36:06:d0:16:9b: 61:05:39:c8:31:be:75:f1:c3:a3:45:23:fb:e8:a4: 34:ff:b7:52:54:1e:7c:df:5d:f5:01:1c:74:33:d3: e4:3c:4f:92:70:eb:f9:2a:9f:18:81:28:e0:fb:b5: e4:d2:4e:77:16:f7:8b:d9:6b:1d:75:7d:61:ac:0c: cf:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D0:67:CD:6B:D8:89:22:04:98:1D:C9:57:CA:FE:8B:08:A8:52:2B X509v3 Authority Key Identifier: keyid:FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:de:7c:04:e4:4a:91:b7:a6:2d:c0:5b:11:6d:90:e0:2f:1f: 52:36:8d:29:0c:44:ce:31:fb:ea:6e:12:2b:93:e2:0e:15:08: 0b:1a:3c:6c:a8:16:92:55:9b:df:61:d2:18:c3:a3:c0:ae:70: 12:de:70:7e:4c:a6:84:e5:36:6a:75:db:2e:4d:06:71:ec:1a: fe:ab:19:3f:8e:20:7a:86:16:f7:74:c7:c9:04:09:31:70:da: ab:f2:ef:fb:23:e9:86:3f:3e:e9:8a:c8:c8:33:8f:2b:cb:fb: fa:55:88:d7:ee:26:91:02:e1:80:13:d8:72:98:c0:1a:1c:33: a3:db:c2:6c:72:a9:f0:09:2a:b9:e8:91:d1:b7:33:51:dd:c7: 11:21:cb:c8:a8:8e:23:06:7c:0a:09:98:a3:e7:40:7d:3b:8c: 6e:cb:40:5b:e5:8f:5c:f2:80:a0:92:03:fc:60:79:92:36:da: 43:29:63:16:51:31:98:3c:ed:a3:d8:36:07:1d:a0:95:c8:b5: 46:37:cb:8d:e6:49:76:c1:b8:9f:7b:a1:01:10:ee:66:12:78: 0e:cc:4a:9c:9b:b4:6b:c4:37:ba:03:b6:01:f3:97:aa:2c:5b: 16:48:f6:81:c2:a7:f4:a1:8f:bb:f0:8c:0a:97:54:65:86:d1: e3:df:d0:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4RkQxMTAvBgNVBAUTKEZGQkMyRDQxQ0REOTVGRkNGOEE3N0U1MjkxOUUyRTZE MUJBRjAyREYwHhcNMjUxMjIyMTU0MzE1WhcNMjUxMjI5MTU0MzE1WjAYMRYwFAYD VQQDDA02OTQ5NjcxMy0xZmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjqXUuhyGe4MglNHpe6NjHxmjdf/9IQyiHszrG0iWFoHctHUlYBDk7/lq/snz 2XEbuIzlCQTZHC+wWxLQMWWUQOFYImzCvsOGzq44WhfLvTjC9PR5jEzdBuVSFAJu GuaYmplomTwkhSOqsugxJNe+ERRX54wXUpWl3RW0L8KWxmYPpG4YoVn5PbwyQ3uD 4aUdsjT0P6vCFIFSB3RBVvowGK/g7Q9Vq5m7RjQKH6VEOZQGuy6/YFKGRpz0EaAK NgbQFpthBTnIMb518cOjRSP76KQ0/7dSVB583131ARx0M9PkPE+ScOv5Kp8YgSjg +7Xk0k53FveL2WsddX1hrAzPYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjQZ81r 2IkiBJgdyVfK/osIqFIrMB8GA1UdIwQYMBaAFP+8LUHN2V/8+Kd+UpGeLm0brwLf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhGRC85QTc5OTY0NEUx MTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhfejRwMzVTa1o0dWJSdXZB dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL183d3RRYzNaWF96NHAzNVNrWjR1YlJ1dkF0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhGRC85QTc5OTY0NEUxMTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhf ejRwMzVTa1o0dWJSdXZBdDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ3nwE5EqRt6YtwFsRbZDgLx9SNo0pDETOMfvqbhIrk+IOFQgLGjxs qBaSVZvfYdIYw6PArnAS3nB+TKaE5TZqddsuTQZx7Br+qxk/jiB6hhb3dMfJBAkx cNqr8u/7I+mGPz7pisjIM48ry/v6VYjX7iaRAuGAE9hymMAaHDOj28JscqnwCSq5 6JHRtzNR3ccRIcvIqI4jBnwKCZij50B9O4xuy0Bb5Y9c8oCgkgP8YHmSNtpDKWMW UTGYPO2j2DYHHaCVyLVGN8uN5kl2wbife6EBEO5mEngOzEqcm7RrxDe6A7YB85eq LFsWSPaBwqf0oY+78IwKl1RlhtHj39B9 -----END CERTIFICATE-----Generated at Tue Dec 23 09:43:02 2025 by rpki-client