This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft File: u759h-rKuKMp6DvLD_fVAIi-Cc0.mft (raw, json) Hash identifier: gBQf6dj62SUvyNxz+4klN4kN1sop+cKFWsb/VyRaU+o= Subject key identifier: 21:CA:C2:60:FE:A0:23:06:AB:44:25:CF:5E:05:6F:D1:BD:4E:F0:96 Authority key identifier: BB:BE:7D:87:EA:CA:B8:A3:29:E8:3B:CB:0F:F7:D5:00:88:BE:09:CD Certificate issuer: /CN=A91AF15E/serialNumber=BBBE7D87EACAB8A329E83BCB0FF7D50088BE09CD Certificate serial: 02F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft Manifest number: 02F7 Signing time: Tue 23 Dec 2025 00:12:17 +0000 Manifest this update: Tue 23 Dec 2025 00:12:16 +0000 Manifest next update: Tue 30 Dec 2025 00:12:16 +0000 Files and hashes: 1: u759h-rKuKMp6DvLD_fVAIi-Cc0.crl (hash: foqapXHhqGOVLu60W/l+1PM867a9z7xox4M7ydSkG4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.crl rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 759 (0x2f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF15E, serialNumber=BBBE7D87EACAB8A329E83BCB0FF7D50088BE09CD Validity Not Before: Dec 23 00:12:16 2025 GMT Not After : Dec 30 00:12:16 2025 GMT Subject: CN=6949de60-13ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7f:02:9a:d7:fc:b3:a5:79:28:76:55:88:95: 43:a7:6d:0c:ed:b5:fe:dd:62:3d:93:a1:32:16:bd: 6e:3c:d5:e5:15:5c:87:ba:8a:6c:1b:e8:64:fb:13: 23:5e:54:93:cd:9f:b9:51:cd:69:c9:49:1d:79:c3: ba:ef:c8:ec:e3:7f:b8:06:85:35:e4:f7:6b:fc:e5: 0a:3d:4f:26:e4:83:24:98:38:7a:e6:8e:2d:6c:55: e8:0c:6c:dc:ee:96:57:d4:f3:f0:eb:53:f1:77:9b: 64:59:ba:48:16:67:98:d4:52:fb:90:1a:ea:37:11: 2d:89:a7:78:6a:e4:47:90:8a:74:49:2a:02:c6:21: b7:60:56:04:e7:e4:a7:4c:b7:74:0d:78:a1:e4:5e: 03:5c:6d:5d:de:1d:cf:18:93:af:31:90:fe:43:a3: b4:c4:da:2f:09:23:f7:5a:19:e0:fd:61:63:2f:4a: b4:1f:90:69:09:b1:de:0e:6e:e9:1d:bf:fc:9b:c9: e3:c2:52:c6:4d:bb:ba:c2:c2:0c:1d:1f:95:d2:3f: 74:22:d5:2d:fa:24:e5:33:53:d4:99:8a:7e:36:11: 79:d7:cf:90:c4:36:e1:ba:85:77:cf:5a:a5:5e:df: a2:77:6f:e3:64:80:2b:04:fd:ef:f3:46:d8:a2:27: 6a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CA:C2:60:FE:A0:23:06:AB:44:25:CF:5E:05:6F:D1:BD:4E:F0:96 X509v3 Authority Key Identifier: keyid:BB:BE:7D:87:EA:CA:B8:A3:29:E8:3B:CB:0F:F7:D5:00:88:BE:09:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:b9:24:c0:70:62:f2:44:61:aa:d7:fa:66:00:b9:2a:d0:dd: f0:36:e3:ce:8a:5e:6e:db:05:fe:a5:e6:40:c1:80:22:75:3a: 88:41:84:91:ae:47:0c:13:05:b4:89:62:c1:38:43:0e:f1:01: fe:d3:12:ea:75:d9:43:f9:da:6c:1e:91:4c:03:85:37:c3:ca: 8b:70:04:76:ea:83:8c:6c:78:2e:50:44:7b:80:92:7c:01:37: e7:2f:ae:2a:1a:3e:8a:33:87:14:1f:5b:05:eb:0d:24:8b:ab: 2e:a8:33:99:a9:84:49:71:0e:3f:de:b3:ce:a8:f1:7e:fc:32: fd:76:fa:af:37:6c:b5:3d:13:e1:61:f2:29:65:1d:c4:2c:4b: 1d:c5:de:9c:b3:90:b3:c5:e7:85:45:20:6a:2c:04:a4:ad:a5: c9:0c:9f:19:f2:4a:4d:91:99:53:9a:76:c2:96:44:11:59:5f: 3a:2d:a0:9a:ce:ca:02:f9:4f:15:77:24:3e:b1:a5:90:11:d0: ca:fd:15:f9:32:ac:85:43:ed:dc:c6:4e:a7:f7:8c:e7:97:0e: 96:b5:11:5f:89:31:9a:9f:99:14:c0:35:82:2c:6b:f6:ff:84: b0:d9:4e:c7:ef:36:fd:cd:3b:1e:1d:55:f2:a2:8d:ad:7f:0e: 2d:1e:42:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNUUxMTAvBgNVBAUTKEJCQkU3RDg3RUFDQUI4QTMyOUU4M0JDQjBGRjdENTAw ODhCRTA5Q0QwHhcNMjUxMjIzMDAxMjE2WhcNMjUxMjMwMDAxMjE2WjAYMRYwFAYD VQQDDA02OTQ5ZGU2MC0xM2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy38Cmtf8s6V5KHZViJVDp20M7bX+3WI9k6EyFr1uPNXlFVyHuopsG+hk+xMj XlSTzZ+5Uc1pyUkdecO678js43+4BoU15Pdr/OUKPU8m5IMkmDh65o4tbFXoDGzc 7pZX1PPw61Pxd5tkWbpIFmeY1FL7kBrqNxEtiad4auRHkIp0SSoCxiG3YFYE5+Sn TLd0DXih5F4DXG1d3h3PGJOvMZD+Q6O0xNovCSP3Whng/WFjL0q0H5BpCbHeDm7p Hb/8m8njwlLGTbu6wsIMHR+V0j90ItUt+iTlM1PUmYp+NhF518+QxDbhuoV3z1ql Xt+id2/jZIArBP3v80bYoidqHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHKwmD+ oCMGq0Qlz14Fb9G9TvCWMB8GA1UdIwQYMBaAFLu+fYfqyrijKeg7yw/31QCIvgnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE1RS85NEIyRDM3NjAz MUQxMUVEOTlGMjlFMUNDNEY5QUUwMi91NzU5aC1yS3VLTXA2RHZMRF9mVkFJaS1D YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U3NTloLXJLdUtNcDZEdkxEX2ZWQUlpLUNjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE1RS85NEIyRDM3NjAzMUQxMUVEOTlGMjlFMUNDNEY5QUUwMi91NzU5aC1yS3VL TXA2RHZMRF9mVkFJaS1DYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVuSTAcGLyRGGq1/pmALkq0N3wNuPOil5u2wX+peZAwYAidTqIQYSR rkcMEwW0iWLBOEMO8QH+0xLqddlD+dpsHpFMA4U3w8qLcAR26oOMbHguUER7gJJ8 ATfnL64qGj6KM4cUH1sF6w0ki6suqDOZqYRJcQ4/3rPOqPF+/DL9dvqvN2y1PRPh YfIpZR3ELEsdxd6cs5CzxeeFRSBqLASkraXJDJ8Z8kpNkZlTmnbClkQRWV86LaCa zsoC+U8VdyQ+saWQEdDK/RX5MqyFQ+3cxk6n94znlw6WtRFfiTGan5kUwDWCLGv2 /4Sw2U7H7zb9zTseHVXyoo2tfw4tHkKn -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:25 2025 by rpki-client