This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json) Hash identifier: 4DCmyQXQHnerl+PQ5mFD5Lx2PO6kJaU0Z9GSHSA9wuE= Subject key identifier: 38:17:2E:36:08:DC:3E:2E:70:8B:46:0E:6F:B5:2D:CC:C8:52:32:8B Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Certificate serial: 0B9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft Manifest number: 0B91 Signing time: Mon 22 Dec 2025 18:32:19 +0000 Manifest this update: Mon 22 Dec 2025 18:32:19 +0000 Manifest next update: Mon 29 Dec 2025 18:32:19 +0000 Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: ikq/kDqCxUDPPmbDjJysL8yoVudgo9xtHP3Ml3oOQqU=) 2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: yf7uD6ZoAkwSZ6smBK5+++p61GtYidM7gXgm7RNFP38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2971 (0xb9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2492, serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Validity Not Before: Dec 22 18:32:19 2025 GMT Not After : Dec 29 18:32:19 2025 GMT Subject: CN=69498eb3-34f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f8:6c:c9:6a:0a:1b:55:ba:5b:30:5e:ed:62: c6:e3:07:4f:53:c4:8d:c6:24:7b:61:0c:d8:f9:24: 4b:49:c8:7c:72:24:b6:5f:b4:49:30:b2:b1:29:db: 97:d2:97:08:72:14:fd:b7:a8:b0:fc:98:25:3f:8e: 60:12:07:15:af:4c:71:de:84:ba:98:76:43:8f:44: 0a:1e:a0:87:e4:90:46:cb:d8:08:7b:b2:e2:a5:02: 74:75:dd:58:b9:77:f2:9e:1d:7c:80:71:60:ea:e8: a2:19:2d:c2:cc:6b:42:9c:c4:af:ef:9c:4f:f2:81: 7a:02:98:67:2f:a1:0e:dd:d9:aa:1a:b7:76:8a:92: 1a:44:6b:60:60:01:59:b7:af:3e:12:b4:a1:db:38: 33:52:62:f3:ea:ed:83:af:f5:97:6a:4a:d1:45:df: cb:f2:a0:38:dd:b6:e9:a5:fc:1d:b7:39:43:25:a5: 4a:a8:9b:0a:cf:41:17:d7:e1:f6:8e:b1:4a:bf:f9: 19:7f:26:b8:e0:a9:04:59:9b:ed:3c:fe:82:a8:cf: 4f:f8:0e:15:90:fd:e0:89:b7:40:58:76:dd:71:d2: 93:8d:54:f2:36:3f:94:62:e5:b4:38:63:0e:a3:f9: e1:5b:ae:57:73:ce:5c:6d:86:02:d5:25:98:b0:94: 2a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:17:2E:36:08:DC:3E:2E:70:8B:46:0E:6F:B5:2D:CC:C8:52:32:8B X509v3 Authority Key Identifier: keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:06:06:55:57:ac:00:cb:2b:bc:f3:73:38:ff:47:6b:05:a8: 7e:98:2a:6a:41:f3:d7:a6:4f:b6:2c:e4:1b:2a:a6:86:4e:37: 7b:1f:a5:66:09:7c:1f:b1:fa:e2:1d:92:ad:8d:28:24:72:d8: 82:af:40:a1:90:85:d4:28:8d:2a:dd:15:82:13:b9:af:73:15: cc:49:a0:e4:23:a9:1a:f5:69:7e:31:97:0a:f9:89:0c:57:0e: 53:2e:ac:f9:4d:c6:f1:fa:15:0a:54:8a:7f:cf:00:44:ad:e9: b1:84:39:3f:ea:43:97:91:f8:44:46:7f:8e:f3:f8:f3:cc:11: f1:12:60:ba:e8:d2:86:11:73:1c:fd:57:a6:10:77:49:10:c6: 94:3f:d4:16:3c:e9:e7:37:b6:d8:cb:40:c4:ba:d5:e7:8e:35: 51:c9:55:e0:94:a7:26:7c:f1:ae:85:e0:df:04:ab:6d:2d:9c: a8:36:e0:fb:34:6b:ec:b1:05:7f:f9:95:df:de:27:34:d5:8c: da:d0:61:fe:f3:f4:96:ab:bb:1e:1c:90:d3:60:20:a7:c6:78: 50:12:cb:c6:20:3d:83:c5:8e:73:b8:29:41:10:b3:cc:01:e0: 03:bd:39:ad:b4:d3:db:82:fe:af:fc:db:84:1d:9b:fa:71:47: 08:0d:22:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0OTIxMTAvBgNVBAUTKDczQjU2MURGM0E1ODk3NkY3RkFEOTk3QTlCQThERTVG Njc2RENGQjIwHhcNMjUxMjIyMTgzMjE5WhcNMjUxMjI5MTgzMjE5WjAYMRYwFAYD VQQDDA02OTQ5OGViMy0zNGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvhsyWoKG1W6WzBe7WLG4wdPU8SNxiR7YQzY+SRLSch8ciS2X7RJMLKxKduX 0pcIchT9t6iw/JglP45gEgcVr0xx3oS6mHZDj0QKHqCH5JBGy9gIe7LipQJ0dd1Y uXfynh18gHFg6uiiGS3CzGtCnMSv75xP8oF6AphnL6EO3dmqGrd2ipIaRGtgYAFZ t68+ErSh2zgzUmLz6u2Dr/WXakrRRd/L8qA43bbppfwdtzlDJaVKqJsKz0EX1+H2 jrFKv/kZfya44KkEWZvtPP6CqM9P+A4VkP3gibdAWHbdcdKTjVTyNj+UYuW0OGMO o/nhW65Xc85cbYYC1SWYsJQqdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgXLjYI 3D4ucItGDm+1LczIUjKLMB8GA1UdIwQYMBaAFHO1Yd86WJdvf62Zepuo3l9nbc+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ5Mi9EQUQ1MTBENDND QjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwyOV9yWmw2bTZqZVgyZHR6 N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3VmgzenBZbDI5X3JabDZtNmplWDJkdHo3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjQ5Mi9EQUQ1MTBENDNDQjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwy OV9yWmw2bTZqZVgyZHR6N0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJBgZVV6wAyyu883M4/0drBah+mCpqQfPXpk+2LOQbKqaGTjd7H6Vm CXwfsfriHZKtjSgkctiCr0ChkIXUKI0q3RWCE7mvcxXMSaDkI6ka9Wl+MZcK+YkM Vw5TLqz5Tcbx+hUKVIp/zwBEremxhDk/6kOXkfhERn+O8/jzzBHxEmC66NKGEXMc /VemEHdJEMaUP9QWPOnnN7bYy0DEutXnjjVRyVXglKcmfPGuheDfBKttLZyoNuD7 NGvssQV/+ZXf3ic01Yza0GH+8/SWq7seHJDTYCCnxnhQEsvGID2DxY5zuClBELPM AeADvTmttNPbgv6v/NuEHZv6cUcIDSI7 -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:40 2025 by rpki-client