This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft File: frs7Qcl_MxP654HvYzI8SvYrj7c.mft (raw, json) Hash identifier: WFVYM0wfdQ7X4sa9kkiKpB/FaKqdh40LvIVLAqgrt9c= Subject key identifier: 33:6F:83:76:17:F7:15:F4:B8:E3:C4:21:97:D2:87:B5:EF:3D:B7:FD Authority key identifier: 7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 Certificate issuer: /CN=A91B777C/serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Certificate serial: 065E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft Manifest number: 0656 Signing time: Mon 22 Dec 2025 21:50:17 +0000 Manifest this update: Mon 22 Dec 2025 21:50:16 +0000 Manifest next update: Mon 29 Dec 2025 21:50:16 +0000 Files and hashes: 1: frs7Qcl_MxP654HvYzI8SvYrj7c.crl (hash: Fy/CQ4pHsFnBEHwwi9vcteGLixjq1v/8H3nJejfBKSY=) 2: 10BBF6CEB2E711EB8A61B44EC4F9AE02.roa (hash: 60Txo6gAZcJLQXsyFOEwAUgH1sTvvk2S/lm7zu2sz3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1630 (0x65e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B777C, serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Validity Not Before: Dec 22 21:50:16 2025 GMT Not After : Dec 29 21:50:16 2025 GMT Subject: CN=6949bd19-6711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7b:96:a2:83:f3:29:c3:63:9e:ab:07:9a:6f: e9:c8:1a:6c:17:b5:6b:a0:2b:3c:b4:f8:85:03:76: 9e:a5:ff:5c:6f:2d:30:fa:58:53:9c:f3:be:18:d9: b5:ac:aa:4e:8e:b4:94:a5:be:bf:91:ed:5d:61:1c: b7:1a:c8:c2:59:c4:96:8b:f8:89:d7:4d:dc:0c:a3: 1b:91:9a:11:d2:da:aa:8b:d8:6c:35:24:f2:bc:27: e5:b9:53:47:16:aa:cf:ae:b6:74:79:6f:a2:8d:c6: 6d:19:74:82:98:bb:85:ab:30:ac:3e:e7:0d:8d:5b: 10:ac:f7:c5:9a:d3:94:18:32:5a:8b:b0:d7:6c:b9: ef:22:96:1f:db:5c:02:80:6f:1d:56:41:ef:ca:08: 0d:e6:3a:64:c5:e2:bc:b1:17:17:f7:38:e0:62:71: f6:b2:d4:ad:08:d0:ad:9d:20:a4:45:b4:c4:5c:f0: 83:27:d1:56:ae:fd:58:ae:70:62:ae:12:60:d5:d1: b9:39:de:53:b6:2b:d2:b0:6e:53:00:d4:c6:d5:f8: 30:ce:51:c0:44:6c:1d:3a:a8:0b:9a:fb:86:02:0b: f9:46:65:cb:ab:02:a9:30:cf:8f:ac:0c:34:a2:3f: f4:e8:a2:93:59:98:76:66:8c:0b:25:bb:4d:58:2d: 46:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6F:83:76:17:F7:15:F4:B8:E3:C4:21:97:D2:87:B5:EF:3D:B7:FD X509v3 Authority Key Identifier: keyid:7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:82:66:8a:97:2c:7d:0d:05:3c:e6:ac:bc:17:2b:c8:ce:be: c4:f9:ec:0f:fc:71:f2:66:21:73:90:6c:17:f6:2b:bb:16:d2: e1:b1:33:84:b1:fd:5e:73:ee:02:fb:0f:ff:3e:9b:a8:02:25: ea:e5:64:ad:41:6e:50:2b:8e:e2:d3:fe:b8:9a:2c:39:08:fc: b0:57:5b:51:f3:6a:4b:38:40:52:5e:c8:7e:cb:7a:49:52:8b: c7:b6:67:1c:c0:26:bc:bb:85:a2:51:b4:8e:dd:e8:75:63:cc: a2:af:6e:1a:62:57:2b:cb:46:15:f7:9f:1c:ba:31:ec:bf:6f: b9:e5:96:61:99:83:f0:40:6a:71:a3:4a:14:c0:10:e5:d8:ce: cc:6f:d0:65:cf:38:90:fb:55:a1:a1:c9:0d:ef:03:51:ca:a5: c3:a7:28:bb:5f:22:b7:d0:a5:fb:72:c5:84:83:37:f2:97:9a: 7c:5b:a9:14:2f:da:72:6c:55:7f:93:b5:d6:0b:10:26:7f:94: 3c:95:27:8f:51:dd:f5:36:e8:45:47:b0:55:e7:d2:f0:b1:88: 0a:13:39:78:1e:88:5a:c9:6c:50:a9:49:8c:82:f1:27:09:13: 46:90:f0:86:d6:4a:65:69:a2:f1:d9:9e:74:ae:47:62:94:69: 00:23:13:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3N0MxMTAvBgNVBAUTKDdFQkIzQjQxQzk3RjMzMTNGQUU3ODFFRjYzMzIzQzRB RjYyQjhGQjcwHhcNMjUxMjIyMjE1MDE2WhcNMjUxMjI5MjE1MDE2WjAYMRYwFAYD VQQDDA02OTQ5YmQxOS02NzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXuWooPzKcNjnqsHmm/pyBpsF7VroCs8tPiFA3aepf9cby0w+lhTnPO+GNm1 rKpOjrSUpb6/ke1dYRy3GsjCWcSWi/iJ103cDKMbkZoR0tqqi9hsNSTyvCfluVNH FqrPrrZ0eW+ijcZtGXSCmLuFqzCsPucNjVsQrPfFmtOUGDJai7DXbLnvIpYf21wC gG8dVkHvyggN5jpkxeK8sRcX9zjgYnH2stStCNCtnSCkRbTEXPCDJ9FWrv1YrnBi rhJg1dG5Od5TtivSsG5TANTG1fgwzlHARGwdOqgLmvuGAgv5RmXLqwKpMM+PrAw0 oj/06KKTWZh2ZowLJbtNWC1GYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNvg3YX 9xX0uOPEIZfSh7XvPbf9MB8GA1UdIwQYMBaAFH67O0HJfzMT+ueB72MyPEr2K4+3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82Q0Q4MTMzQ0Iy REExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014UDY1NEh2WXpJOFN2WXJq N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZyczdRY2xfTXhQNjU0SHZZekk4U3ZZcmo3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3Qy82Q0Q4MTMzQ0IyREExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014 UDY1NEh2WXpJOFN2WXJqN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAgmaKlyx9DQU85qy8FyvIzr7E+ewP/HHyZiFzkGwX9iu7FtLhsTOE sf1ec+4C+w//PpuoAiXq5WStQW5QK47i0/64miw5CPywV1tR82pLOEBSXsh+y3pJ UovHtmccwCa8u4WiUbSO3eh1Y8yir24aYlcry0YV958cujHsv2+55ZZhmYPwQGpx o0oUwBDl2M7Mb9BlzziQ+1WhockN7wNRyqXDpyi7XyK30KX7csWEgzfyl5p8W6kU L9pybFV/k7XWCxAmf5Q8lSePUd31NuhFR7BV59LwsYgKEzl4HohayWxQqUmMgvEn CRNGkPCG1kplaaLx2Z50rkdilGkAIxOA -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:56 2025 by rpki-client