This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft File: m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json) Hash identifier: zsvtgPxWhhPBn0L+kS8ELrg/z24CXzwUjgiKcc1zGfQ= Subject key identifier: 01:A9:8F:34:5A:34:83:0F:56:9A:B1:95:90:5E:81:70:86:38:53:73 Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Certificate serial: 088D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft Manifest number: 0887 Signing time: Sat 06 Dec 2025 19:42:00 +0000 Manifest this update: Sat 06 Dec 2025 19:41:59 +0000 Manifest next update: Sat 13 Dec 2025 19:41:59 +0000 Files and hashes: 1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: asU7M00bX6hnLKJ4TZMlIRhOr2rmsq+Pfk1b0NLzqAk=) 2: 021C59CCD1D011EAA2763743C4F9AE02.roa (hash: 9/6FBIuUpW3NyM8fzRBAE8GJH3DWuJevjPt7vt5pHkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2189 (0x88d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Validity Not Before: Dec 6 19:41:59 2025 GMT Not After : Dec 13 19:41:59 2025 GMT Subject: CN=69348707-4db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:12:84:61:aa:b0:3c:a4:dd:06:54:f6:f4:90: c1:c8:47:a6:26:a2:47:cf:87:b1:16:53:f7:9a:9b: 4f:26:a8:42:8c:15:4c:4a:2d:e0:ff:7b:e7:5e:f3: b5:38:87:6f:f5:45:48:45:72:a1:62:a1:77:94:d5: e2:96:e4:e5:4c:02:d4:fd:aa:5d:0a:ea:8d:c0:74: 73:12:56:cc:81:ff:54:08:25:31:a9:3d:33:77:cd: 1b:f9:4c:b8:7e:99:4c:a8:7f:96:29:55:73:d0:b9: d1:84:cd:77:4d:3c:c6:c1:7a:23:70:ff:89:45:3c: b1:fe:35:e2:b0:b2:e9:5a:ba:c2:c3:d1:8a:17:31: fd:7c:52:db:76:9e:de:b9:bf:9c:7b:e8:0a:2c:75: 61:97:73:25:e6:5a:7a:b9:b0:aa:c2:92:ee:0f:b3: 64:b0:22:a5:c5:40:a9:16:f1:cd:ec:21:33:5b:ad: 27:eb:5a:9f:d6:85:3b:09:de:78:08:cd:54:81:2b: 24:10:a0:30:6a:e7:1d:57:2a:6e:c9:fd:da:95:f4: 78:6d:a2:38:b6:0c:af:82:da:df:55:9e:4a:0f:db: 3d:08:d9:29:7a:f3:d0:77:f2:9d:2a:d1:53:59:78: 82:e4:30:ab:04:53:8d:3b:dc:02:a8:e3:88:47:b2: 0a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A9:8F:34:5A:34:83:0F:56:9A:B1:95:90:5E:81:70:86:38:53:73 X509v3 Authority Key Identifier: keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:eb:58:cb:80:22:27:06:15:db:cb:25:e4:89:26:f8:59:5d: 33:fb:5e:b5:76:0e:ed:6f:81:bc:e1:e0:31:78:04:f5:8a:92: a1:e3:fe:8f:6c:76:97:4a:4e:25:1f:ad:06:60:5d:da:3b:c0: 01:d3:09:5f:d9:26:cd:0f:20:0b:e0:ef:bc:02:a9:f1:6d:e7: 05:6b:6c:22:c9:63:66:21:e8:c6:b4:fd:87:7b:8c:ad:c5:0f: df:04:56:14:89:0e:5c:66:b9:51:fe:43:53:c0:6b:6b:5b:9d: d0:ce:f0:1d:82:38:64:b6:14:b1:e2:72:30:2c:f2:43:e8:a5: 36:0e:b6:8c:14:ad:be:6c:37:fc:a1:57:af:84:fc:64:e1:73: 32:a3:1e:ed:c0:e2:29:4e:c6:72:40:a2:65:d2:f0:f8:73:10: 9b:1c:61:79:5b:0b:b6:71:3c:d2:8a:7c:47:12:2c:c7:71:48: 65:dd:7a:2f:5e:9d:4c:d3:54:7b:6b:e1:e9:24:50:74:91:77: 2e:d8:3d:96:0f:42:80:2c:51:bc:f9:be:5f:5c:1d:f6:7a:8c: 8c:5b:7e:cb:2a:c0:8c:d2:d8:76:c4:bb:63:29:79:ef:11:0c: 33:ee:44:3f:c8:af:fa:0b:7e:3c:75:dc:34:6a:6e:16:5a:eb: 1c:22:f8:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QTgxMTAvBgNVBAUTKDlCQjJCNEQxQThGRTgxMURDNDk1M0Q4MDJEMTAyRjVE MDQ4RDA4MUQwHhcNMjUxMjA2MTk0MTU5WhcNMjUxMjEzMTk0MTU5WjAYMRYwFAYD VQQDEw02OTM0ODcwNy00ZGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRKEYaqwPKTdBlT29JDByEemJqJHz4exFlP3mptPJqhCjBVMSi3g/3vnXvO1 OIdv9UVIRXKhYqF3lNXiluTlTALU/apdCuqNwHRzElbMgf9UCCUxqT0zd80b+Uy4 fplMqH+WKVVz0LnRhM13TTzGwXojcP+JRTyx/jXisLLpWrrCw9GKFzH9fFLbdp7e ub+ce+gKLHVhl3Ml5lp6ubCqwpLuD7NksCKlxUCpFvHN7CEzW60n61qf1oU7Cd54 CM1UgSskEKAwaucdVypuyf3alfR4baI4tgyvgtrfVZ5KD9s9CNkpevPQd/KdKtFT WXiC5DCrBFONO9wCqOOIR7IKAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGpjzRa NIMPVpqxlZBegXCGOFNzMB8GA1UdIwQYMBaAFJuytNGo/oEdxJU9gC0QL10EjQgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRBOC9FMjk1MjBCOEQx Q0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdSM0VsVDJBTFJBdlhRU05D QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL203SzAwYWotZ1IzRWxUMkFMUkF2WFFTTkNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRBOC9FMjk1MjBCOEQxQ0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdS M0VsVDJBTFJBdlhRU05DQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC161jLgCInBhXbyyXkiSb4WV0z+161dg7tb4G84eAxeAT1ipKh4/6P bHaXSk4lH60GYF3aO8AB0wlf2SbNDyAL4O+8AqnxbecFa2wiyWNmIejGtP2He4yt xQ/fBFYUiQ5cZrlR/kNTwGtrW53QzvAdgjhkthSx4nIwLPJD6KU2DraMFK2+bDf8 oVevhPxk4XMyox7twOIpTsZyQKJl0vD4cxCbHGF5Wwu2cTzSinxHEizHcUhl3Xov Xp1M01R7a+HpJFB0kXcu2D2WD0KALFG8+b5fXB32eoyMW37LKsCM0th2xLtjKXnv EQwz7kQ/yK/6C348ddw0am4WWuscIvj/ -----END CERTIFICATE-----Generated at Mon Dec 8 12:36:40 2025 by rpki-client