This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft File: S7U1I5SOxqyZE7LVCcHXspRtnpI.mft (raw, json) Hash identifier: 3ZRVqSyzuwSjNEFk5hL3o4Ixmn++8cIr/m+s0kOhp2E= Subject key identifier: 8C:BB:B4:5A:6F:0F:E8:2E:44:F2:76:45:54:C7:DA:94:23:58:08:9D Authority key identifier: 4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92 Certificate issuer: /CN=A91AF431/serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft Manifest number: 2F Signing time: Tue 23 Dec 2025 06:26:55 +0000 Manifest this update: Tue 23 Dec 2025 06:26:54 +0000 Manifest next update: Tue 30 Dec 2025 06:26:54 +0000 Files and hashes: 1: S7U1I5SOxqyZE7LVCcHXspRtnpI.crl (hash: vG1+MruxtE//4oDJofKBtzAWCEvPBuJk1juYP9L1hQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF431, serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92 Validity Not Before: Dec 23 06:26:54 2025 GMT Not After : Dec 30 06:26:54 2025 GMT Subject: CN=694a362f-7bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:68:e9:68:f4:e8:33:23:04:56:12:39:5b: ef:05:95:24:2f:42:3e:09:c4:6d:a1:41:e6:27:c6: 83:9d:63:5a:b4:ee:f6:4a:2f:f6:c1:64:e4:2f:a9: 96:96:96:3f:a6:71:21:83:75:ce:c9:4c:b8:06:94: ce:af:32:75:23:92:24:2c:3a:2e:2e:80:76:ac:5d: ae:9c:af:71:38:27:77:5a:93:b0:c6:85:d2:95:1c: 73:5a:32:15:61:c7:9d:ca:77:68:e7:89:8c:04:72: d4:20:fa:36:1e:9f:94:f3:f5:43:11:c8:c6:1f:a0: 1b:9c:96:39:e9:03:fa:02:6a:62:2b:8f:59:76:e4: bc:46:57:37:4f:ba:12:82:4c:06:6a:e2:cc:b0:57: 2e:aa:01:22:7c:9c:c8:ab:c3:33:b8:b7:3b:fb:3c: 3e:da:57:6e:66:ab:e5:02:23:7d:5a:8d:72:39:bf: 52:16:a3:b2:aa:3a:d9:f6:7b:08:cd:71:69:c5:48: 9e:59:28:ff:f0:7b:4c:08:53:04:58:d8:ff:81:1f: 2f:35:f2:24:f2:ef:2c:ce:9b:7c:34:89:aa:b5:6b: 37:c3:ca:f8:67:41:d7:f1:e1:46:d1:08:85:c0:e9: 28:7e:ab:ca:0f:6c:07:56:4b:fe:8c:e4:eb:79:c3: 21:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BB:B4:5A:6F:0F:E8:2E:44:F2:76:45:54:C7:DA:94:23:58:08:9D X509v3 Authority Key Identifier: keyid:4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c0:cb:c3:61:76:8d:15:9c:b8:98:c6:28:85:c9:1b:fc:5b: 8b:23:48:fb:9a:d5:e8:6d:d9:3b:fd:52:da:90:4c:8c:27:4d: f7:d4:65:86:fd:c9:3a:38:34:68:b4:bd:f4:9e:a0:a8:f3:82: 90:a9:a6:fd:a9:98:e3:ad:aa:43:fc:b0:43:30:3a:2c:93:26: 75:18:3e:b6:3c:e1:8d:52:b2:23:81:7a:35:b5:34:10:4a:11: 38:b1:74:67:e5:87:f0:76:0f:b4:84:59:16:31:a0:ed:09:44: 58:a6:41:b0:12:a8:4a:a2:b7:a4:30:3d:5c:68:bb:3f:3d:e3: d8:6e:6a:bf:14:a1:65:7a:15:86:ef:25:43:16:c8:fb:e8:08: 34:47:0c:3e:0e:3f:c5:f0:d7:58:7b:93:27:6e:4c:3d:d7:8b: e8:06:aa:1d:ee:63:75:f5:44:a2:5e:3c:a7:07:90:ab:d8:3f: 44:1f:7f:5c:60:79:4d:6d:5b:6b:e7:8d:d3:4c:e9:9f:a5:ba: 04:31:01:8a:45:57:f7:63:7c:2e:cf:be:00:de:33:10:df:e2: 05:1d:23:09:0e:9c:8a:ce:4e:5f:ef:81:5b:12:14:b0:f1:f4: ed:91:b2:82:47:ad:e8:a4:a6:ad:67:c2:50:1e:b5:a9:81:23: 6b:8e:6f:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjQzMTExMC8GA1UEBRMoNEJCNTM1MjM5NDhFQzZBQzk5MTNCMkQ1MDlDMUQ3QjI5 NDZEOUU5MjAeFw0yNTEyMjMwNjI2NTRaFw0yNTEyMzAwNjI2NTRaMBgxFjAUBgNV BAMMDTY5NGEzNjJmLTdiYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsUWjpaPToMyMEVhI5W+8FlSQvQj4JxG2hQeYnxoOdY1q07vZKL/bBZOQvqZaW lj+mcSGDdc7JTLgGlM6vMnUjkiQsOi4ugHasXa6cr3E4J3dak7DGhdKVHHNaMhVh x53Kd2jniYwEctQg+jYen5Tz9UMRyMYfoBucljnpA/oCamIrj1l25LxGVzdPuhKC TAZq4sywVy6qASJ8nMirwzO4tzv7PD7aV25mq+UCI31ajXI5v1IWo7KqOtn2ewjN cWnFSJ5ZKP/we0wIUwRY2P+BHy818iTy7yzOm3w0iaq1azfDyvhnQdfx4UbRCIXA 6Sh+q8oPbAdWS/6M5Ot5wyGFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjLu0Wm8P 6C5E8nZFVMfalCNYCJ0wHwYDVR0jBBgwFoAUS7U1I5SOxqyZE7LVCcHXspRtnpIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGNDMxL0ZGN0QxOERBOTkx ODExRjBCNDUwQ0Y0RkM0RjlBRTAyL1M3VTFJNVNPeHF5WkU3TFZDY0hYc3BSdG5w SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzdVMUk1U094cXlaRTdMVkNjSFhzcFJ0bnBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG NDMxL0ZGN0QxOERBOTkxODExRjBCNDUwQ0Y0RkM0RjlBRTAyL1M3VTFJNVNPeHF5 WkU3TFZDY0hYc3BSdG5wSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG/Ay8Nhdo0VnLiYxiiFyRv8W4sjSPua1eht2Tv9UtqQTIwnTffUZYb9 yTo4NGi0vfSeoKjzgpCppv2pmOOtqkP8sEMwOiyTJnUYPrY84Y1SsiOBejW1NBBK ETixdGflh/B2D7SEWRYxoO0JRFimQbASqEqit6QwPVxouz8949huar8UoWV6FYbv JUMWyPvoCDRHDD4OP8Xw11h7kyduTD3Xi+gGqh3uY3X1RKJePKcHkKvYP0Qff1xg eU1tW2vnjdNM6Z+lugQxAYpFV/djfC7PvgDeMxDf4gUdIwkOnIrOTl/vgVsSFLDx 9O2RsoJHreikpq1nwlAetamBI2uOb78= -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:01 2025 by rpki-client