This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft File: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft (raw, json) Hash identifier: XXe9oE3ESkAY4fDHhEEXqLA11MBljeFpR9rY3PW/+/I= Subject key identifier: DA:21:3C:D7:BF:6A:5C:67:B8:67:02:A6:B4:35:42:14:A5:29:74:81 Authority key identifier: EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D Certificate issuer: /CN=A91A55C9/serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft Manifest number: 0151 Signing time: Wed 03 Dec 2025 02:41:26 +0000 Manifest this update: Wed 03 Dec 2025 02:41:25 +0000 Manifest next update: Wed 10 Dec 2025 02:41:25 +0000 Files and hashes: 1: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl (hash: okwBLl+FEbNNHL8e9jLgHrxTVCVtBnjZ7sXC61tFQd0=) 2: 9DDCAB1AC9EC11EE9644540FC4F9AE02.roa (hash: u6J6SPSNjElCImZDre2hX9rdBiRV9plYfnlpPbtxhQc=) 3: 9E40D11CC9EC11EE9644540FC4F9AE02.roa (hash: hR3HemTX8sPR//njNhfSediG0DqzFMWVKhRmgOL4nRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 02:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9, serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Validity Not Before: Dec 3 02:41:25 2025 GMT Not After : Dec 10 02:41:25 2025 GMT Subject: CN=692fa355-01f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:00:3f:ba:2d:ca:35:af:f8:8d:1e:d5:2d:a9: 62:67:8c:6e:a0:68:81:62:2b:16:54:d7:2a:b7:16: ef:5e:c2:ba:ee:27:3b:47:9f:cd:09:e4:fb:6f:36: 83:be:20:d2:d3:4e:6e:be:11:3a:f8:b1:5a:0d:bf: f7:01:ba:ca:d2:59:56:03:de:02:aa:a1:c9:af:7e: 73:ad:b4:a1:69:04:2e:d3:74:cc:6a:17:99:fc:65: 01:91:3f:bf:96:68:ef:5c:c9:e0:7c:8d:c7:e5:45: aa:13:69:54:c4:9c:1a:62:28:b5:37:0e:0e:91:cc: c8:5f:18:06:15:93:e4:21:bc:4f:20:54:1c:9e:ed: bc:70:98:d6:00:08:34:02:9a:2f:eb:22:26:0f:6b: 67:41:2a:ce:b3:ba:7c:7c:ab:0b:2a:ca:82:60:7a: be:f3:49:ba:b8:b8:11:f1:72:75:dc:a1:e3:dd:06: 58:66:44:18:e0:45:44:db:53:26:43:a1:76:b3:aa: eb:f7:0e:f6:7f:d3:2a:ad:a7:e2:4d:2b:1a:aa:a8: 7c:06:50:1c:9b:3f:63:42:4c:1a:7b:f6:28:10:e5: 65:0a:c1:95:c4:4d:e9:58:54:19:ef:1e:d2:2c:77: 65:4f:f4:ff:5d:f5:61:30:47:8d:07:e6:fa:8d:3a: dd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:21:3C:D7:BF:6A:5C:67:B8:67:02:A6:B4:35:42:14:A5:29:74:81 X509v3 Authority Key Identifier: keyid:EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:35:85:83:4b:70:2f:43:ae:38:0e:3b:d5:45:6b:c3:c5:40: c6:b0:a3:29:b6:17:fc:a4:6c:2f:8b:46:2c:73:bc:70:51:d4: f7:b4:f5:7b:5f:25:9c:c7:9c:88:39:ac:9e:ff:44:0f:8e:3c: bf:90:82:0f:38:a8:28:28:eb:08:ca:c2:9f:fb:9a:24:d6:10: ed:34:2b:b6:11:93:9a:a0:30:2c:cd:7a:25:5a:8a:76:08:8d: ca:52:16:a8:17:c9:71:87:2f:f1:d1:0e:e4:44:70:06:4c:05: 42:57:74:63:7f:f1:e9:a2:6a:3a:8a:2a:30:2c:e8:28:26:01: 6e:69:e8:c1:12:d7:d7:32:38:0f:e3:32:04:45:4c:b3:c0:d8: e1:c8:14:77:87:52:bf:a1:24:00:c8:c1:8e:8d:9e:d4:13:4e: 28:db:c6:de:58:5b:2c:f5:29:21:2d:d9:cd:60:0d:c5:b0:4b: 6e:88:96:f2:ac:30:01:7d:a1:f9:bb:d6:ed:d7:e4:6d:32:7d: 7e:52:9f:82:39:43:b9:13:0a:f6:87:4a:15:55:ba:49:a7:8c: fa:49:fd:51:c5:c5:9a:48:cb:cf:c8:e1:0e:19:cc:d7:d5:d3: f6:5d:40:4c:12:da:bf:9c:b7:32:e6:2c:04:29:34:f5:86:c3: 3f:29:29:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1QzkxMTAvBgNVBAUTKEVDNjc4REUwRDdCQ0Y4MzlEOTk4QTBGQ0U1QzlFQjc1 RkZDODY3M0QwHhcNMjUxMjAzMDI0MTI1WhcNMjUxMjEwMDI0MTI1WjAYMRYwFAYD VQQDEw02OTJmYTM1NS0wMWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgA/ui3KNa/4jR7VLaliZ4xuoGiBYisWVNcqtxbvXsK67ic7R5/NCeT7bzaD viDS005uvhE6+LFaDb/3AbrK0llWA94CqqHJr35zrbShaQQu03TMaheZ/GUBkT+/ lmjvXMngfI3H5UWqE2lUxJwaYii1Nw4OkczIXxgGFZPkIbxPIFQcnu28cJjWAAg0 Apov6yImD2tnQSrOs7p8fKsLKsqCYHq+80m6uLgR8XJ13KHj3QZYZkQY4EVE21Mm Q6F2s6rr9w72f9MqrafiTSsaqqh8BlAcmz9jQkwae/YoEOVlCsGVxE3pWFQZ7x7S LHdlT/T/XfVhMEeNB+b6jTrdQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNohPNe/ alxnuGcCprQ1QhSlKXSBMB8GA1UdIwQYMBaAFOxnjeDXvPg52Zig/OXJ63X/yGc9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS83RTJGMTI2OEM5 RUIxMUVFOEI4NTdCMENDNEY5QUUwMi83R2VONE5lOC1EblptS0Q4NWNucmRmX0la ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdHZU40TmU4LURuWm1LRDg1Y25yZGZfSVp6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVDOS83RTJGMTI2OEM5RUIxMUVFOEI4NTdCMENDNEY5QUUwMi83R2VONE5lOC1E blptS0Q4NWNucmRmX0laejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCONYWDS3AvQ644DjvVRWvDxUDGsKMpthf8pGwvi0Ysc7xwUdT3tPV7 XyWcx5yIOaye/0QPjjy/kIIPOKgoKOsIysKf+5ok1hDtNCu2EZOaoDAszXolWop2 CI3KUhaoF8lxhy/x0Q7kRHAGTAVCV3Rjf/Hpomo6iiowLOgoJgFuaejBEtfXMjgP 4zIERUyzwNjhyBR3h1K/oSQAyMGOjZ7UE04o28beWFss9SkhLdnNYA3FsEtuiJby rDABfaH5u9bt1+RtMn1+Up+COUO5Ewr2h0oVVbpJp4z6Sf1RxcWaSMvPyOEOGczX 1dP2XUBMEtq/nLcy5iwEKTT1hsM/KSmJ -----END CERTIFICATE-----Generated at Wed Dec 3 16:11:01 2025 by rpki-client