This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft File: g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft (raw, json) Hash identifier: 0IDhcSzHh669sCZHoKSWZW2jshT70HOdanRSU1zSk60= Subject key identifier: 6B:E9:DB:B6:70:0B:92:84:0B:31:02:55:A6:7A:74:3B:54:E2:CB:71 Authority key identifier: 83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68 Certificate issuer: /CN=A91AB4BA/serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft Manifest number: 021F Signing time: Tue 23 Dec 2025 01:10:48 +0000 Manifest this update: Tue 23 Dec 2025 01:10:48 +0000 Manifest next update: Tue 30 Dec 2025 01:10:48 +0000 Files and hashes: 1: g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl (hash: qeSTEQPIJUpiJvSju3hwbnVJOX2/oTVFC7dh4IXMAvE=) 2: 93E8AC909CA111ED97E7FC20C4F9AE02.roa (hash: yz7MYEbOgQ8Al3poUxihFYnUX5uLUR4cvOqS22MeFsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB4BA, serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68 Validity Not Before: Dec 23 01:10:48 2025 GMT Not After : Dec 30 01:10:48 2025 GMT Subject: CN=6949ec18-3f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:06:21:e2:72:30:3a:49:b6:62:b0:1a:7d:d7: 7d:e7:eb:33:89:8b:c3:2f:74:00:4c:2b:ac:33:8f: f5:58:83:64:40:cd:70:7c:33:e3:4d:4d:31:f3:fe: af:f1:c7:32:b1:a4:0c:28:81:5a:b0:d7:94:7c:3f: b1:11:d8:6f:11:5a:b3:5e:1f:66:ff:08:49:d3:75: 95:f6:e0:db:97:c1:fe:5a:b3:10:77:50:70:10:8c: ae:58:ac:06:9d:84:2f:18:68:47:80:15:ef:9b:69: 5f:c0:f2:c2:13:32:9e:79:16:a2:de:0a:ad:7c:68: af:ca:0e:d1:9e:cc:68:76:26:fa:ac:f1:00:ec:d6: 9b:42:f4:f9:13:7e:15:34:28:9d:d2:78:c6:af:12: 4f:37:49:36:ca:f9:c2:89:ff:f6:a1:f6:80:3c:2b: 8d:6d:dc:fd:a3:72:9e:19:b8:c3:63:fb:dc:7c:c1: 1f:81:1c:c9:16:a8:d6:8b:2a:bd:72:fa:c3:e5:74: 21:6b:31:52:43:4a:df:8d:71:10:33:36:71:e0:2d: 0e:23:be:f7:86:f4:02:91:0e:3b:d7:57:4b:a9:2a: 0e:85:ff:22:a6:f0:7e:35:d8:7c:b3:45:e0:aa:59: ef:55:92:97:0f:21:21:1e:15:40:65:6a:b6:1b:c4: 05:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E9:DB:B6:70:0B:92:84:0B:31:02:55:A6:7A:74:3B:54:E2:CB:71 X509v3 Authority Key Identifier: keyid:83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:25:c7:87:29:29:2e:de:e4:f3:3b:d4:2f:17:07:cc:0c:2c: 3f:12:40:e3:c5:4c:e2:77:b1:66:87:0b:e4:a1:21:0d:3c:c4: 0f:03:d5:93:79:73:34:6f:4a:be:31:0b:b8:86:fd:71:68:49: 1b:4c:ca:7a:a9:5e:27:40:4c:7a:6e:53:38:d0:0c:98:e1:f5: 62:f3:77:83:30:fa:ab:e8:2a:61:25:50:df:4c:7e:c0:ba:dc: 01:6c:ff:e3:7d:0f:82:12:cd:7b:8b:0e:39:de:33:f5:17:5e: c7:86:0d:a9:e9:5d:56:0f:93:ae:b2:f1:b9:40:64:c4:3a:38: 54:14:ab:fa:5c:bf:43:0e:e5:e8:e4:55:93:00:e8:b3:48:14: a5:6e:97:ba:4f:48:64:a5:4a:29:28:47:04:4b:02:f6:68:38: 5e:7d:b7:4a:ce:ac:c1:eb:ab:f1:30:47:5d:da:5e:9b:5b:88: df:f3:84:a7:bf:89:65:30:dc:3a:50:b4:d7:a6:60:e6:2c:ff: d6:03:77:3b:88:2e:ab:9f:f2:b8:44:31:0d:5e:16:40:61:6f: f4:a8:11:a5:92:c7:86:3f:a4:0e:62:a2:d1:c7:b4:17:20:e1: 7b:81:74:6e:83:8c:c7:05:05:05:3d:8b:c4:b1:05:53:18:5a: eb:6a:97:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI0QkExMTAvBgNVBAUTKDgzQjZFN0VBMjNCREMzQTM4RDYwQjRGRkEyRUZGNUEx OEYxRENENjgwHhcNMjUxMjIzMDExMDQ4WhcNMjUxMjMwMDExMDQ4WjAYMRYwFAYD VQQDDA02OTQ5ZWMxOC0zZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywYh4nIwOkm2YrAafdd95+sziYvDL3QATCusM4/1WINkQM1wfDPjTU0x8/6v 8ccysaQMKIFasNeUfD+xEdhvEVqzXh9m/whJ03WV9uDbl8H+WrMQd1BwEIyuWKwG nYQvGGhHgBXvm2lfwPLCEzKeeRai3gqtfGivyg7Rnsxodib6rPEA7NabQvT5E34V NCid0njGrxJPN0k2yvnCif/2ofaAPCuNbdz9o3KeGbjDY/vcfMEfgRzJFqjWiyq9 cvrD5XQhazFSQ0rfjXEQMzZx4C0OI773hvQCkQ4711dLqSoOhf8ipvB+Ndh8s0Xg qlnvVZKXDyEhHhVAZWq2G8QFfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvp27Zw C5KECzECVaZ6dDtU4stxMB8GA1UdIwQYMBaAFIO25+ojvcOjjWC0/6Lv9aGPHc1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjRCQS9DNzNFMTg0NDlD OUUxMUVEOTFCNzE2MURDNEY5QUUwMi9nN2JuNmlPOXc2T05ZTFRfb3VfMW9ZOGR6 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3Ym42aU85dzZPTllMVF9vdV8xb1k4ZHpXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjRCQS9DNzNFMTg0NDlDOUUxMUVEOTFCNzE2MURDNEY5QUUwMi9nN2JuNmlPOXc2 T05ZTFRfb3VfMW9ZOGR6V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjJceHKSku3uTzO9QvFwfMDCw/EkDjxUzid7FmhwvkoSENPMQPA9WT eXM0b0q+MQu4hv1xaEkbTMp6qV4nQEx6blM40AyY4fVi83eDMPqr6CphJVDfTH7A utwBbP/jfQ+CEs17iw453jP1F17Hhg2p6V1WD5OusvG5QGTEOjhUFKv6XL9DDuXo 5FWTAOizSBSlbpe6T0hkpUopKEcESwL2aDhefbdKzqzB66vxMEdd2l6bW4jf84Sn v4llMNw6ULTXpmDmLP/WA3c7iC6rn/K4RDENXhZAYW/0qBGlkseGP6QOYqLRx7QX IOF7gXRug4zHBQUFPYvEsQVTGFrrapd0 -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:32 2025 by rpki-client