This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft File: r7qhUW6eF_JM-RRbjHzUuoGlekA.mft (raw, json) Hash identifier: Wm0r4CvCoVeZiXZPa0ukP4YE5v2YMty6HkKV6e4YKZ8= Subject key identifier: EC:87:75:DB:FE:50:82:D4:11:9E:33:48:F2:2A:16:46:CA:DA:DE:78 Authority key identifier: AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 Certificate issuer: /CN=A91568A0/serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft Manifest number: 3D Signing time: Sat 03 Jan 2026 06:25:41 +0000 Manifest this update: Sat 03 Jan 2026 06:25:41 +0000 Manifest next update: Sat 10 Jan 2026 06:25:41 +0000 Files and hashes: 1: r7qhUW6eF_JM-RRbjHzUuoGlekA.crl (hash: Xe4/H7aA+DSUggbmA1OV1qod7Ib8gDVDaUGxkd+b38Q=) 2: 1D0A29A68E2911F08D963C69C4F9AE02.roa (hash: 4ic8CmF7ut7Pvp2iYIvf/QMf2ZOGMMwbhjJKgiRPMl8=) 3: 492317188E2A11F0B9BB726BC4F9AE02.roa (hash: g7RZU/wRy/WcZYbu6OOC41FcuLTqxTBZLD2lxc5r+0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Jan 2026 06:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568A0, serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Validity Not Before: Jan 3 06:25:41 2026 GMT Not After : Jan 10 06:25:41 2026 GMT Subject: CN=6958b665-97b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:78:63:e3:01:df:bb:03:e0:15:1c:f8:b7:32: 8e:e0:7d:87:1b:f0:d0:1f:2f:6e:96:f9:4a:dd:fd: 49:f0:27:e6:ae:c0:75:43:81:23:8d:d7:0f:a6:b6: bb:87:70:8d:3b:17:9d:a1:33:2b:9a:a2:e2:9a:07: 3e:4f:f2:41:f9:02:8f:3a:c2:91:bd:83:9d:8b:2e: c7:7d:4d:92:bb:fc:7c:26:18:04:e9:1b:e4:e3:80: 64:f5:00:3b:b7:9a:e7:6f:f8:30:fd:d6:ea:68:c5: 1c:69:1c:21:0a:1f:15:b0:9f:fb:24:d9:b5:e5:2a: 14:a2:ac:25:83:a9:ee:29:37:ae:31:40:3c:b2:47: f8:be:92:c7:9a:98:79:69:7c:e4:26:89:b5:2a:a1: c4:c0:72:1a:5e:a0:f1:33:ae:25:0c:a3:f8:1d:83: f8:51:f7:89:f3:41:84:f2:fb:66:b1:a7:4e:3a:20: d3:11:63:03:bb:a6:ff:26:c7:b1:ba:6a:fa:8d:8e: ec:a8:32:34:c2:31:cc:91:fc:16:a8:27:65:00:cb: 6c:1c:a3:30:37:33:3c:93:88:05:9a:b6:a7:1a:87: d9:ff:b1:8e:29:c9:86:15:1c:55:3c:ba:fd:69:46: f4:a4:dc:21:38:cb:f7:eb:23:e1:3f:e4:10:04:9a: cb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:87:75:DB:FE:50:82:D4:11:9E:33:48:F2:2A:16:46:CA:DA:DE:78 X509v3 Authority Key Identifier: keyid:AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:9a:89:9f:44:20:fd:4a:4d:7c:f5:d5:c4:b1:d0:b7:b5:bd: f8:3d:7f:94:b5:be:1c:83:11:e3:9b:e6:ed:a3:d2:72:3e:c5: ec:e5:98:30:ee:09:16:65:cc:33:5e:f2:60:99:d2:4f:b6:f2: 25:11:34:c2:89:1f:e9:ef:58:a2:2d:e0:55:aa:9b:7c:d6:92: c4:9d:74:2f:a8:86:8e:48:99:44:a3:1a:bb:a6:a4:46:83:a6: df:a4:5c:4d:c9:b2:75:b9:82:49:46:a1:1d:b5:7e:3a:58:ca: 01:76:74:05:e2:37:75:02:62:20:78:6e:c5:4d:cb:56:c9:af: c8:0f:e5:98:83:26:9e:b7:dc:2d:4e:76:c5:7a:45:43:e3:2f: 44:23:93:1a:3f:4a:94:92:36:08:1f:4d:2b:62:a3:60:be:50: a0:bb:f5:0d:d1:c7:ce:84:6d:fe:68:8a:01:32:52:09:17:21: 81:49:34:c3:65:d7:ff:cd:59:15:f5:24:ff:3c:22:4d:f9:98: a8:eb:cf:7b:b7:42:71:36:6a:83:74:ec:4c:74:a1:9f:c1:bd: ae:b9:56:bd:95:17:84:8c:1a:ae:98:53:7e:95:e5:24:90:6a: d7:d6:c9:dd:4a:5c:db:19:43:30:4d:8a:fc:63:61:56:cb:b5: 8e:2c:43:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjhBMDExMC8GA1UEBRMoQUZCQUExNTE2RTlFMTdGMjRDRjkxNDVCOEM3Q0Q0QkE4 MUE1N0E0MDAeFw0yNjAxMDMwNjI1NDFaFw0yNjAxMTAwNjI1NDFaMBgxFjAUBgNV BAMMDTY5NThiNjY1LTk3YjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSeGPjAd+7A+AVHPi3Mo7gfYcb8NAfL26W+Urd/UnwJ+auwHVDgSON1w+mtruH cI07F52hMyuaouKaBz5P8kH5Ao86wpG9g52LLsd9TZK7/HwmGATpG+TjgGT1ADu3 mudv+DD91upoxRxpHCEKHxWwn/sk2bXlKhSirCWDqe4pN64xQDyyR/i+kseamHlp fOQmibUqocTAchpeoPEzriUMo/gdg/hR94nzQYTy+2axp046INMRYwO7pv8mx7G6 avqNjuyoMjTCMcyR/BaoJ2UAy2wcozA3MzyTiAWatqcah9n/sY4pyYYVHFU8uv1p RvSk3CE4y/frI+E/5BAEmstvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7Id12/5Q gtQRnjNI8ioWRsra3ngwHwYDVR0jBBgwFoAUr7qhUW6eF/JM+RRbjHzUuoGlekAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2OEEwL0IyMDY4Q0Y4OEUy ODExRjA5QzJBNkI0OUM0RjlBRTAyL3I3cWhVVzZlRl9KTS1SUmJqSHpVdW9HbGVr QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjdxaFVXNmVGX0pNLVJSYmpIelV1b0dsZWtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 OEEwL0IyMDY4Q0Y4OEUyODExRjA5QzJBNkI0OUM0RjlBRTAyL3I3cWhVVzZlRl9K TS1SUmJqSHpVdW9HbGVrQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACaaiZ9EIP1KTXz11cSx0Le1vfg9f5S1vhyDEeOb5u2j0nI+xezlmDDu CRZlzDNe8mCZ0k+28iURNMKJH+nvWKIt4FWqm3zWksSddC+oho5ImUSjGrumpEaD pt+kXE3JsnW5gklGoR21fjpYygF2dAXiN3UCYiB4bsVNy1bJr8gP5ZiDJp633C1O dsV6RUPjL0Qjkxo/SpSSNggfTStio2C+UKC79Q3Rx86Ebf5oigEyUgkXIYFJNMNl 1//NWRX1JP88Ik35mKjrz3u3QnE2aoN07Ex0oZ/Bva65Vr2VF4SMGq6YU36V5SSQ atfWyd1KXNsZQzBNivxjYVbLtY4sQ1c= -----END CERTIFICATE-----Generated at Sat Jan 3 08:48:44 2026 by rpki-client