This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft File: 7sDpmYfcHqnUAviE_NqX4DFFpKA.mft (raw, json) Hash identifier: vbW1I+qpoZPMNXb9bu9Gryq5GqLoRZ6prfBJFZe+clk= Subject key identifier: D8:0A:DF:A2:BB:19:74:57:EB:01:D5:3C:61:F9:9B:BE:72:2D:D4:4C Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0 Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft Manifest number: 013B Signing time: Tue 23 Dec 2025 03:29:31 +0000 Manifest this update: Tue 23 Dec 2025 03:29:31 +0000 Manifest next update: Tue 30 Dec 2025 03:29:31 +0000 Files and hashes: 1: 7sDpmYfcHqnUAviE_NqX4DFFpKA.crl (hash: oP+1iJ/8EaQIt+pySYy6TfI1q9d68wsZNkb5uBmKt48=) 2: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (hash: 7/3ODwQ2dlZbxqeVnJstobH8SWsvoF3IBlCZtLMYHu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE1B5, serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0 Validity Not Before: Dec 23 03:29:31 2025 GMT Not After : Dec 30 03:29:31 2025 GMT Subject: CN=694a0c9b-99c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:74:7a:c1:95:1e:c2:0c:1f:20:19:c9:91: 32:d0:0a:7c:e1:71:7e:4f:76:04:1e:e9:7e:32:c7: 10:c2:71:94:58:28:24:92:d1:9d:b2:fd:87:c5:4c: 08:0f:21:d8:f4:33:36:61:3e:1c:1e:8b:47:22:bd: 2e:9b:0a:e9:eb:3e:85:a3:2c:da:59:31:b5:49:1b: bb:25:fc:4d:24:64:88:6f:db:6a:51:7b:5b:f6:0d: a2:c0:17:7a:12:85:b0:be:9b:25:38:61:ae:4f:2f: f8:9d:03:27:6b:db:76:99:bd:49:56:02:a9:b7:95: e4:70:97:ab:7d:32:38:32:c8:80:08:0e:68:18:36: 76:79:7d:64:00:1d:3f:7b:a3:ac:32:b6:7b:85:75: 30:e6:12:5f:9b:d2:a5:e3:59:4b:1b:45:46:63:6c: a8:48:75:5f:96:c8:03:92:df:87:63:72:7b:d9:0b: 6a:f0:50:62:95:19:22:af:f1:ed:d5:3d:4e:25:95: e2:0c:d7:0b:90:ee:fd:56:d3:73:b6:18:7b:28:a0: e1:60:50:27:2a:c5:ea:78:3e:56:83:42:85:b9:3f: 46:73:f7:cc:9e:51:3f:4f:78:f6:75:1e:f6:d8:0f: 51:cf:37:b4:a1:38:da:f6:0e:90:ff:8d:60:6e:14: 1e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0A:DF:A2:BB:19:74:57:EB:01:D5:3C:61:F9:9B:BE:72:2D:D4:4C X509v3 Authority Key Identifier: keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:e2:5a:63:38:08:7c:41:66:0b:fc:0c:18:ad:53:54:b9:b4: af:31:66:17:56:f0:cc:f9:c5:10:39:cd:a3:f1:b6:9f:ac:cf: 14:41:b7:f7:38:ae:d7:74:e9:0a:63:e3:57:05:75:98:11:f0: f0:13:e0:29:f9:cb:7c:b7:5e:f3:f1:55:f5:ae:66:1c:dd:96: f5:4b:8b:0b:3e:e7:47:55:8d:3d:cf:ba:e3:1e:7d:59:65:e8: eb:e0:0f:72:1b:dc:6d:fb:57:97:97:e7:7c:47:bd:8f:84:3b: e0:8d:88:30:ac:57:81:08:3a:54:6a:8f:fc:ac:4a:6f:c7:75: 2e:e2:7d:5d:2b:fb:90:33:3d:8b:f0:ca:ad:43:73:f7:ef:03: 03:4f:31:a2:22:36:58:ac:4d:c5:78:03:2b:82:33:a5:b9:69: f1:a4:43:26:c7:88:fa:6b:ef:e3:fb:60:53:f9:71:dd:ac:1e: 7b:e2:11:95:da:62:86:da:57:c7:5a:5d:e0:5a:e7:9a:cf:cf: b7:69:e1:3a:7b:29:56:f8:9b:0e:92:7f:7a:d2:7b:50:0c:af: b5:ff:c8:76:24:76:bd:24:3e:5a:d5:0f:be:a5:8b:51:86:7b: b8:e2:d9:01:79:13:cd:d0:92:ae:48:cd:d7:bb:cc:cc:4b:8e: a8:7f:d9:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUxQjUxMTAvBgNVBAUTKEVFQzBFOTk5ODdEQzFFQTlENDAyRjg4NEZDREE5N0Uw MzE0NUE0QTAwHhcNMjUxMjIzMDMyOTMxWhcNMjUxMjMwMDMyOTMxWjAYMRYwFAYD VQQDDA02OTRhMGM5Yi05OWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQd0esGVHsIMHyAZyZEy0Ap84XF+T3YEHul+MscQwnGUWCgkktGdsv2HxUwI DyHY9DM2YT4cHotHIr0umwrp6z6FoyzaWTG1SRu7JfxNJGSIb9tqUXtb9g2iwBd6 EoWwvpslOGGuTy/4nQMna9t2mb1JVgKpt5XkcJerfTI4MsiACA5oGDZ2eX1kAB0/ e6OsMrZ7hXUw5hJfm9Kl41lLG0VGY2yoSHVflsgDkt+HY3J72Qtq8FBilRkir/Ht 1T1OJZXiDNcLkO79VtNzthh7KKDhYFAnKsXqeD5Wg0KFuT9Gc/fMnlE/T3j2dR72 2A9Rzze0oTja9g6Q/41gbhQeDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgK36K7 GXRX6wHVPGH5m75yLdRMMB8GA1UdIwQYMBaAFO7A6ZmH3B6p1AL4hPzal+AxRaSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTFCNS84QjQwNUU1RTAw M0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hxblVBdmlFX05xWDRERkZw S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdzRHBtWWZjSHFuVUF2aUVfTnFYNERGRnBLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTFCNS84QjQwNUU1RTAwM0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hx blVBdmlFX05xWDRERkZwS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF4lpjOAh8QWYL/AwYrVNUubSvMWYXVvDM+cUQOc2j8bafrM8UQbf3 OK7XdOkKY+NXBXWYEfDwE+Ap+ct8t17z8VX1rmYc3Zb1S4sLPudHVY09z7rjHn1Z Zejr4A9yG9xt+1eXl+d8R72PhDvgjYgwrFeBCDpUao/8rEpvx3Uu4n1dK/uQMz2L 8MqtQ3P37wMDTzGiIjZYrE3FeAMrgjOluWnxpEMmx4j6a+/j+2BT+XHdrB574hGV 2mKG2lfHWl3gWueaz8+3aeE6eylW+JsOkn960ntQDK+1/8h2JHa9JD5a1Q++pYtR hnu44tkBeRPN0JKuSM3Xu8zMS46of9ms -----END CERTIFICATE-----Generated at Wed Dec 24 19:32:16 2025 by rpki-client