This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft File: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft (raw, json) Hash identifier: chRT741W6cxOgvlp8G45MEztGpOve4gpuOlXlQPYbns= Subject key identifier: AB:75:E6:3A:3A:26:4B:5B:DD:DB:41:BA:1F:D0:22:AA:86:D7:B7:CC Authority key identifier: FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 Certificate issuer: /CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft Manifest number: 022A Signing time: Tue 23 Dec 2025 01:08:40 +0000 Manifest this update: Tue 23 Dec 2025 01:08:40 +0000 Manifest next update: Tue 30 Dec 2025 01:08:40 +0000 Files and hashes: 1: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl (hash: cqQxKedwee804pt9KeTy1E6/pDFju4snl91cc2WiP4Y=) 2: B966D678C0C611EE8F5F0458C4F9AE02.roa (hash: J2faMLBlgt9GzAmsM2dSN7aVP9JzekH0nQNt2xO6dtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91230B8, serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Validity Not Before: Dec 23 01:08:40 2025 GMT Not After : Dec 30 01:08:40 2025 GMT Subject: CN=6949eb98-8bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:74:fd:38:fd:73:78:4f:68:66:36:65:40:0d: 2a:3a:8b:ec:1c:8d:55:8f:c3:b5:85:30:a2:af:62: 88:e8:44:32:b8:ff:16:b8:be:9e:81:d1:31:cb:aa: 82:97:00:4e:29:1f:09:6a:9e:79:dd:24:d7:d7:64: 59:d6:68:0c:6e:5d:21:3d:df:b5:2b:d2:37:d0:5f: b0:bf:f7:66:7e:64:fd:61:de:5f:05:d5:0e:ca:be: 38:d5:92:f7:c0:10:75:d1:a1:0d:c5:c1:88:ae:0e: da:da:16:60:e3:f6:df:a9:ef:69:26:a2:de:41:38: 19:51:8d:e6:36:b6:ba:97:89:b2:76:5d:91:1f:b2: 36:74:02:2c:50:fd:3c:cb:3c:b5:7f:a6:da:19:b9: e0:10:b5:af:7b:32:93:12:5d:32:9d:e8:f7:fd:6f: 7e:da:0d:a5:b1:b8:2e:ae:f8:cf:e2:c7:44:bb:c0: b9:d2:0b:4e:8c:8c:4e:da:53:c3:8a:80:20:08:c9: 00:7d:7d:52:24:34:5b:75:49:c9:b4:7a:c1:95:1b: 4d:f1:0d:58:3a:7b:68:e5:e6:fb:f4:7e:0e:03:13: 50:eb:74:71:27:b6:e9:43:ec:b0:d7:a0:6e:e3:9d: 8d:e5:5e:13:0b:cf:ca:bf:07:70:26:a9:a1:8f:a3: 2c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:75:E6:3A:3A:26:4B:5B:DD:DB:41:BA:1F:D0:22:AA:86:D7:B7:CC X509v3 Authority Key Identifier: keyid:FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c8:ba:61:18:23:fb:7e:da:f6:c8:65:e4:3d:fe:47:6a:f3: 0c:f1:7e:40:55:6d:5d:63:7f:d6:34:74:ef:e5:68:e9:b6:aa: 68:6f:dd:32:5f:a0:ef:23:11:d6:b4:de:0c:3d:0d:f9:33:71: a8:6d:b6:7d:ea:c8:b7:42:3a:49:ff:b7:84:d1:f1:97:d6:dc: d0:ba:9e:25:48:1a:5d:8e:a0:f4:cb:f5:31:7b:37:bd:a6:76: 80:26:22:9b:53:cd:e8:a3:1c:1e:6a:c7:38:60:8f:82:b8:27: aa:9c:85:04:20:68:66:79:b1:84:ef:99:8e:5b:fc:df:fe:38: 9c:32:be:28:76:ed:2c:5b:a2:94:87:b9:5b:af:e7:00:e9:c1: 83:2b:21:b9:7a:b9:6e:1e:c3:2f:64:9f:e1:60:bf:19:11:96: c7:87:f3:98:05:86:47:dc:78:4b:57:46:22:7b:64:e0:2e:e0: 46:ce:65:86:5d:6d:af:34:81:3c:ca:fc:af:73:7b:da:c3:fc: 47:f4:06:98:bb:e6:ac:0f:53:26:75:fd:55:83:f8:81:da:d9: 1b:9a:84:01:2b:0f:fe:14:31:c1:ac:65:14:16:3e:7c:9d:aa: 9f:5f:33:24:82:b4:1f:ee:f9:89:28:41:a4:00:12:27:28:d6: be:98:cb:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwQjgxMTAvBgNVBAUTKEZCQkFCNjkwQURGRTEwRUY0MzRCNzE4OTU0RjE3Mzg3 RDYzODQ2NjgwHhcNMjUxMjIzMDEwODQwWhcNMjUxMjMwMDEwODQwWjAYMRYwFAYD VQQDDA02OTQ5ZWI5OC04YmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXT9OP1zeE9oZjZlQA0qOovsHI1Vj8O1hTCir2KI6EQyuP8WuL6egdExy6qC lwBOKR8Jap553STX12RZ1mgMbl0hPd+1K9I30F+wv/dmfmT9Yd5fBdUOyr441ZL3 wBB10aENxcGIrg7a2hZg4/bfqe9pJqLeQTgZUY3mNra6l4mydl2RH7I2dAIsUP08 yzy1f6baGbngELWvezKTEl0ynej3/W9+2g2lsbgurvjP4sdEu8C50gtOjIxO2lPD ioAgCMkAfX1SJDRbdUnJtHrBlRtN8Q1YOnto5eb79H4OAxNQ63RxJ7bpQ+yw16Bu 452N5V4TC8/KvwdwJqmhj6Ms5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKt15jo6 Jktb3dtBuh/QIqqG17fMMB8GA1UdIwQYMBaAFPu6tpCt/hDvQ0txiVTxc4fWOEZo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzBCOC9GMUY4OTBGMDk2 NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVPOURTM0dKVlBGemg5WTRS bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cTJrSzMtRU85RFMzR0pWUEZ6aDlZNFJtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzBCOC9GMUY4OTBGMDk2NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVP OURTM0dKVlBGemg5WTRSbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOyLphGCP7ftr2yGXkPf5HavMM8X5AVW1dY3/WNHTv5Wjptqpob90y X6DvIxHWtN4MPQ35M3GobbZ96si3QjpJ/7eE0fGX1tzQup4lSBpdjqD0y/Uxeze9 pnaAJiKbU83ooxweasc4YI+CuCeqnIUEIGhmebGE75mOW/zf/jicMr4odu0sW6KU h7lbr+cA6cGDKyG5erluHsMvZJ/hYL8ZEZbHh/OYBYZH3HhLV0Yie2TgLuBGzmWG XW2vNIE8yvyvc3vaw/xH9AaYu+asD1Mmdf1Vg/iB2tkbmoQBKw/+FDHBrGUUFj58 naqfXzMkgrQf7vmJKEGkABInKNa+mMuD -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:33 2025 by rpki-client