This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft File: r7qhUW6eF_JM-RRbjHzUuoGlekA.mft (raw, json) Hash identifier: u2seDtZRV070JwAkevAPd4JzbcUacqpmhNbgDYPJLVI= Subject key identifier: 11:55:57:73:96:E3:AE:E8:63:53:85:78:4C:03:84:C1:C2:FE:9C:6B Authority key identifier: AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 Certificate issuer: /CN=A91568A0/serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft Manifest number: 25 Signing time: Mon 17 Nov 2025 05:21:47 +0000 Manifest this update: Mon 17 Nov 2025 05:21:46 +0000 Manifest next update: Mon 24 Nov 2025 05:21:46 +0000 Files and hashes: 1: r7qhUW6eF_JM-RRbjHzUuoGlekA.crl (hash: gFunYIO8yzhONZ9Ojdfrx+ZRK5SvXXrUh+f7hO2+AHw=) 2: 492317188E2A11F0B9BB726BC4F9AE02.roa (hash: g7RZU/wRy/WcZYbu6OOC41FcuLTqxTBZLD2lxc5r+0s=) 3: 1D0A29A68E2911F08D963C69C4F9AE02.roa (hash: 4ic8CmF7ut7Pvp2iYIvf/QMf2ZOGMMwbhjJKgiRPMl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Nov 2025 05:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568A0, serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Validity Not Before: Nov 17 05:21:46 2025 GMT Not After : Nov 24 05:21:46 2025 GMT Subject: CN=691ab0ea-ef19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3c:2f:14:ea:8d:d4:db:d9:86:70:7f:6a:f0: a6:a2:32:f0:1b:c0:d0:35:5d:f0:59:6c:d6:a6:41: df:5e:9a:48:ce:94:8e:77:56:01:e4:10:4e:d5:ce: 1a:2c:f7:e8:0e:b9:65:36:39:42:2b:ff:dd:8d:54: b2:c8:b5:c1:ee:cc:c1:3d:3e:ec:bf:3e:e7:ed:09: ee:0a:b0:12:1b:b6:19:ca:32:9c:cc:72:8e:47:f0: 3b:ec:e3:5b:78:90:68:5e:86:6c:98:09:aa:4a:f3: 8b:af:cf:07:ad:72:d3:e0:88:f4:cb:a7:9b:f3:15: 32:f1:83:66:22:d7:f5:02:64:0c:03:f8:9f:44:15: 1f:ac:7f:4a:0f:05:cd:67:6a:d9:04:28:67:c9:10: ee:4b:dc:0e:5a:4e:fd:fe:cd:ec:e4:6c:8a:50:b0: 19:f8:8a:75:16:94:d4:0e:2c:ac:da:9c:74:dc:f1: d2:7b:f3:c7:8b:06:40:ba:b8:41:07:db:31:2e:91: 0c:bb:b9:a0:24:e3:f6:24:b7:21:98:3e:cc:62:dc: c6:74:2f:45:e4:6b:3e:39:0a:74:fe:f1:e9:0f:49: a0:0d:30:4d:7a:fe:2a:96:47:36:02:a9:ee:16:0c: e4:46:11:38:65:73:20:fa:1d:9c:14:8a:4a:44:76: 77:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:55:57:73:96:E3:AE:E8:63:53:85:78:4C:03:84:C1:C2:FE:9C:6B X509v3 Authority Key Identifier: keyid:AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:15:91:26:21:9f:b2:65:3c:4e:e4:b5:12:3e:25:85:3a:15: 22:d0:37:5c:76:44:1f:8e:99:07:f3:96:f1:3d:d6:e1:71:84: c2:4b:59:c7:c0:ef:31:c0:d2:e2:9d:67:3c:bd:af:04:ad:dd: eb:3f:b2:36:c2:43:70:c6:a4:86:fb:c3:93:42:d4:49:5b:66: bf:c8:88:68:a8:08:f1:d2:e3:b0:83:41:a7:67:da:ff:3d:b9: 46:7c:30:ab:1e:c1:c3:37:07:34:c5:0b:ce:3f:8e:29:77:32: ed:9a:4f:50:f2:41:41:82:9a:61:24:df:4e:31:82:7a:10:02: f5:85:ca:44:98:43:e9:aa:c3:c3:06:48:23:3f:5a:0a:49:3a: 6e:9c:91:cf:8d:5f:66:e6:17:10:a8:cc:15:a6:7b:37:db:08: d4:1f:c9:d1:7a:a0:a8:44:1a:78:12:73:00:dc:09:8f:41:97: bd:f7:45:a3:e0:5a:b9:21:21:9a:d9:44:02:7b:2f:95:6c:ad: 3a:28:8d:de:02:d9:60:2a:bc:ce:fe:c0:14:bd:5c:90:23:04: c0:ec:e0:7b:01:b8:f2:b6:77:91:c6:f9:31:ae:dd:21:7d:9a: 72:e4:37:22:0a:ed:38:97:5e:64:e7:04:73:73:96:c7:c2:84: 96:8d:db:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjhBMDExMC8GA1UEBRMoQUZCQUExNTE2RTlFMTdGMjRDRjkxNDVCOEM3Q0Q0QkE4 MUE1N0E0MDAeFw0yNTExMTcwNTIxNDZaFw0yNTExMjQwNTIxNDZaMBgxFjAUBgNV BAMTDTY5MWFiMGVhLWVmMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZPC8U6o3U29mGcH9q8KaiMvAbwNA1XfBZbNamQd9emkjOlI53VgHkEE7Vzhos 9+gOuWU2OUIr/92NVLLItcHuzME9Puy/PuftCe4KsBIbthnKMpzMco5H8Dvs41t4 kGhehmyYCapK84uvzwetctPgiPTLp5vzFTLxg2Yi1/UCZAwD+J9EFR+sf0oPBc1n atkEKGfJEO5L3A5aTv3+zezkbIpQsBn4inUWlNQOLKzanHTc8dJ788eLBkC6uEEH 2zEukQy7uaAk4/YktyGYPsxi3MZ0L0Xkaz45CnT+8ekPSaANME16/iqWRzYCqe4W DORGEThlcyD6HZwUikpEdnfVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEVVXc5bj ruhjU4V4TAOEwcL+nGswHwYDVR0jBBgwFoAUr7qhUW6eF/JM+RRbjHzUuoGlekAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2OEEwL0IyMDY4Q0Y4OEUy ODExRjA5QzJBNkI0OUM0RjlBRTAyL3I3cWhVVzZlRl9KTS1SUmJqSHpVdW9HbGVr QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjdxaFVXNmVGX0pNLVJSYmpIelV1b0dsZWtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 OEEwL0IyMDY4Q0Y4OEUyODExRjA5QzJBNkI0OUM0RjlBRTAyL3I3cWhVVzZlRl9K TS1SUmJqSHpVdW9HbGVrQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL0VkSYhn7JlPE7ktRI+JYU6FSLQN1x2RB+OmQfzlvE91uFxhMJLWcfA 7zHA0uKdZzy9rwSt3es/sjbCQ3DGpIb7w5NC1ElbZr/IiGioCPHS47CDQadn2v89 uUZ8MKsewcM3BzTFC84/jil3Mu2aT1DyQUGCmmEk304xgnoQAvWFykSYQ+mqw8MG SCM/WgpJOm6ckc+NX2bmFxCozBWmezfbCNQfydF6oKhEGngScwDcCY9Bl733RaPg WrkhIZrZRAJ7L5VsrToojd4C2WAqvM7+wBS9XJAjBMDs4HsBuPK2d5HG+TGu3SF9 mnLkNyIK7TiXXmTnBHNzlsfChJaN270= -----END CERTIFICATE-----Generated at Tue Nov 18 15:09:20 2025 by rpki-client