This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft File: 7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json) Hash identifier: j8mqeZ3rAKk2Y+93lLMPtT/F5RL9cCXwtF/rwf9qaNk= Subject key identifier: 65:10:73:9C:94:8F:61:A9:AC:65:31:C6:82:3A:86:41:96:E5:3D:90 Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 Certificate issuer: /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78 Certificate serial: 0E11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft Manifest number: 0E0D Signing time: Sat 20 Dec 2025 17:31:07 +0000 Manifest this update: Sat 20 Dec 2025 17:31:06 +0000 Manifest next update: Sat 27 Dec 2025 17:31:06 +0000 Files and hashes: 1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: TuV9WHrEiBU3l4/IHa2Wmm5ja+4IzI6GSuQMXXS13Hc=) 2: E64999C258D611ED86C99945C4F9AE02.roa (hash: DQ+JErFx/tRloLusNXusv2s1HWOBWc0JnN5N02SFoik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3601 (0xe11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA95A, serialNumber=EC179A58742228E30B7DF7978826583878255B78 Validity Not Before: Dec 20 17:31:06 2025 GMT Not After : Dec 27 17:31:06 2025 GMT Subject: CN=6946dd5b-426a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:11:3c:25:15:a3:16:d6:25:f4:21:ef:8b:e4: 22:21:c6:7e:4b:ee:42:9a:ba:47:76:db:a8:05:df: 98:5b:a4:dc:0f:cf:06:d1:7f:3f:27:8f:b8:e6:dd: c7:c9:d3:b2:7d:fe:51:6b:41:71:36:82:f9:ed:a4: ef:2d:4b:ce:5c:31:72:f6:09:7e:74:43:d1:20:0f: 1d:4b:02:da:e3:5e:8f:ce:32:33:82:a8:bc:01:2c: f9:25:5d:e9:86:1a:68:f3:e4:7a:7b:39:eb:69:ca: 51:ba:d6:e3:4e:79:f9:ec:c8:6f:8c:fe:7a:45:0a: 69:0f:93:44:cc:7a:60:30:08:84:6c:ca:1a:d1:58: 9a:5b:74:b9:03:08:b2:1d:72:56:55:d0:ac:ad:e0: fc:48:27:67:20:c8:10:9a:16:32:83:15:19:fa:aa: 27:3d:be:1f:d1:cd:31:5a:07:e2:57:72:12:49:e0: 32:5c:5d:1c:c9:e5:3e:4d:87:63:5a:71:2c:fd:33: a6:1e:1f:0f:3b:8b:73:40:89:2c:88:59:f6:a8:89: 19:8b:67:f4:78:7a:b3:be:c8:7b:31:7b:ad:f8:2e: 81:40:36:10:84:75:15:cd:84:77:9a:2a:2e:50:32: 95:e6:5e:33:ef:e4:a0:76:9f:83:f3:ab:e2:70:9f: dd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:10:73:9C:94:8F:61:A9:AC:65:31:C6:82:3A:86:41:96:E5:3D:90 X509v3 Authority Key Identifier: keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ef:6d:a6:9f:57:c2:9c:62:0e:d0:69:ca:5b:7b:b8:58:93: 6f:42:8b:37:67:2b:10:4d:13:01:9b:c5:db:d8:bf:42:65:80: 62:5f:f7:f8:8c:73:22:9b:e4:f7:fa:0b:1d:4f:d4:ec:5e:8e: 88:69:a3:e8:dc:1d:06:2f:cf:c3:57:de:af:15:25:7d:01:db: 50:49:9f:03:bb:b8:79:08:fa:01:c1:c9:6a:8e:af:fb:22:b0: 34:95:f1:04:98:2b:c7:6e:f1:20:c4:0f:4d:c6:88:be:4f:c4: 50:d0:d6:f8:83:99:32:b4:67:22:2b:73:88:94:4f:13:40:ac: 74:f9:23:44:0c:2d:b6:17:37:a8:71:84:c0:2e:47:8d:81:b2: a5:e8:d3:41:0a:7e:c8:7a:a6:c6:28:b9:63:81:37:c0:44:f1: 4c:96:78:60:d7:02:e3:ce:15:11:22:e3:47:d9:9b:58:ad:66: 42:d0:91:f2:70:72:f8:8d:21:8a:53:ca:44:65:eb:5c:70:5f: 1f:ee:36:51:2e:53:77:54:fb:9b:b2:38:49:7d:76:1a:71:4f: db:ce:2c:19:7b:06:67:a1:3f:39:91:90:d8:2f:42:e8:06:b3: aa:c9:94:02:c5:a0:3a:2b:b4:11:47:76:b8:c8:10:3e:18:a2: cd:5a:bb:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE5NUExMTAvBgNVBAUTKEVDMTc5QTU4NzQyMjI4RTMwQjdERjc5Nzg4MjY1ODM4 NzgyNTVCNzgwHhcNMjUxMjIwMTczMTA2WhcNMjUxMjI3MTczMTA2WjAYMRYwFAYD VQQDDA02OTQ2ZGQ1Yi00MjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BE8JRWjFtYl9CHvi+QiIcZ+S+5CmrpHdtuoBd+YW6TcD88G0X8/J4+45t3H ydOyff5Ra0FxNoL57aTvLUvOXDFy9gl+dEPRIA8dSwLa416PzjIzgqi8ASz5JV3p hhpo8+R6eznracpRutbjTnn57MhvjP56RQppD5NEzHpgMAiEbMoa0ViaW3S5Awiy HXJWVdCsreD8SCdnIMgQmhYygxUZ+qonPb4f0c0xWgfiV3ISSeAyXF0cyeU+TYdj WnEs/TOmHh8PO4tzQIksiFn2qIkZi2f0eHqzvsh7MXut+C6BQDYQhHUVzYR3miou UDKV5l4z7+Sgdp+D86vicJ/dBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUQc5yU j2GprGUxxoI6hkGW5T2QMB8GA1UdIwQYMBaAFOwXmlh0IijjC333l4gmWDh4JVt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk1QS9CMEQxRDVGQ0JF NzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtPTUxmZmVYaUNaWU9IZ2xX M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdCZWFXSFFpS09NTGZmZVhpQ1pZT0hnbFczZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk1QS9CMEQxRDVGQ0JFNzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtP TUxmZmVYaUNaWU9IZ2xXM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/722mn1fCnGIO0GnKW3u4WJNvQos3ZysQTRMBm8Xb2L9CZYBiX/f4 jHMim+T3+gsdT9TsXo6IaaPo3B0GL8/DV96vFSV9AdtQSZ8Du7h5CPoBwclqjq/7 IrA0lfEEmCvHbvEgxA9Nxoi+T8RQ0Nb4g5kytGciK3OIlE8TQKx0+SNEDC22Fzeo cYTALkeNgbKl6NNBCn7IeqbGKLljgTfARPFMlnhg1wLjzhURIuNH2ZtYrWZC0JHy cHL4jSGKU8pEZetccF8f7jZRLlN3VPubsjhJfXYacU/bziwZewZnoT85kZDYL0Lo BrOqyZQCxaA6K7QRR3a4yBA+GKLNWrtI -----END CERTIFICATE-----Generated at Mon Dec 22 02:21:18 2025 by rpki-client