This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft File: R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft (raw, json) Hash identifier: jyD0W25V6rnse15Aq7th8c0wZuUTGrs5DIb8uAHb5rs= Subject key identifier: 37:17:A3:D5:A1:2C:36:57:06:58:CB:CE:1B:0E:D4:9B:1E:C8:15:45 Authority key identifier: 47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1 Certificate issuer: /CN=A91BB000/serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft Manifest number: 25 Signing time: Sun 07 Dec 2025 05:42:44 +0000 Manifest this update: Sun 07 Dec 2025 05:42:43 +0000 Manifest next update: Sun 14 Dec 2025 05:42:43 +0000 Files and hashes: 1: R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl (hash: kXo1VPCW7QwyGIhervszuNKccu/ETQzHhdxQOGmrFqA=) 2: 98F8A43C9D2611F0951DD30BC4F9AE02.roa (hash: OC380MFsyyoyM7tX6fVQV1xbBPX87Cl75OkK9UhRng4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB000, serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1 Validity Not Before: Dec 7 05:42:43 2025 GMT Not After : Dec 14 05:42:43 2025 GMT Subject: CN=693513d4-44be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:9f:be:12:1f:6d:aa:2d:e2:d8:7f:2d:99: c3:06:cf:94:57:6a:bd:c9:88:e7:ec:8e:e6:83:03: 47:af:a2:58:39:77:80:cb:36:49:60:2b:ac:ed:f1: 12:2d:10:84:9e:17:fa:54:ed:e3:a1:7f:00:83:94: 03:84:66:9d:7b:87:1a:6c:02:ba:41:4b:b4:24:0c: b3:b9:06:d3:8b:cd:2b:e9:f6:70:73:ab:84:55:0f: ef:eb:8b:09:7c:17:52:80:2a:c6:f2:d7:f2:18:33: d0:0c:27:ba:92:ae:26:12:ae:07:b1:68:cf:91:57: 42:97:ff:85:c4:1e:09:33:2f:c9:c5:bc:88:f2:e2: 27:72:22:33:b0:29:1d:f5:41:fa:4a:51:02:1a:17: cc:ce:2c:b4:4a:e9:27:0e:9c:f2:60:85:70:14:31: f5:70:42:7c:b4:89:5c:35:c4:8f:c6:7b:9f:81:34: de:49:db:25:88:bd:10:97:f5:87:d5:35:fe:fd:9e: 1b:38:6d:db:d3:28:27:d4:60:fe:8c:bf:ec:fb:77: ec:9c:e9:1e:00:9e:0f:cb:ed:e3:b6:fe:04:f0:81: f3:3a:df:1d:9a:e9:55:d4:8d:fc:1f:07:9f:11:14: fd:6d:48:bc:7f:6a:92:46:8e:ce:eb:2f:ae:bf:53: 27:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:17:A3:D5:A1:2C:36:57:06:58:CB:CE:1B:0E:D4:9B:1E:C8:15:45 X509v3 Authority Key Identifier: keyid:47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:24:34:ed:c6:10:a0:7f:43:08:cc:ce:c3:c7:41:46:92:0b: 6d:40:b1:b3:c3:5b:a7:f8:54:0f:08:e6:1b:3f:1c:a9:ef:9b: d2:34:e1:e1:89:c8:c4:e0:6c:08:0a:16:38:a7:b6:fb:dc:80: b0:69:dd:ef:af:55:51:98:81:ca:32:ea:e8:96:71:e0:a5:df: 88:5a:c6:c9:93:19:7f:e6:70:e0:b7:65:41:94:32:64:ae:ae: 8c:1d:a3:55:71:45:ea:34:c2:66:9e:b5:21:5c:13:fe:3f:e8: c7:59:f6:30:32:9d:e9:a4:d6:86:a1:1e:18:63:18:dd:8a:4e: 02:25:7b:86:5d:61:e6:90:60:1c:3f:f4:cd:db:9c:62:88:42: e1:ed:0e:c9:70:f6:79:cf:6f:6c:39:d1:3d:da:45:ef:b8:70: 3a:2f:a7:12:75:b7:29:c0:f3:26:a3:7b:ff:13:33:05:b5:d1: 5f:c6:0d:54:8b:f5:26:2c:c5:f4:be:e3:e3:e4:06:e5:06:25: a0:91:0c:de:2f:98:92:4f:9e:4b:b3:af:ca:3f:82:70:f3:be: 10:e6:8e:c8:ba:75:a8:c3:4b:70:88:0c:c7:02:9f:07:7d:3e: 9b:5b:9a:92:77:49:3e:b6:4f:dd:bc:e6:c2:46:08:e2:a3:84: 14:ee:a3:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjAwMDExMC8GA1UEBRMoNDdCODU0MzY4NUQzMDFGRUVGOTBDRDEyRTUxNThGNzQw RDZCNkNCMTAeFw0yNTEyMDcwNTQyNDNaFw0yNTEyMTQwNTQyNDNaMBgxFjAUBgNV BAMTDTY5MzUxM2Q0LTQ0YmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9n5++Eh9tqi3i2H8tmcMGz5RXar3JiOfsjuaDA0evolg5d4DLNklgK6zt8RIt EISeF/pU7eOhfwCDlAOEZp17hxpsArpBS7QkDLO5BtOLzSvp9nBzq4RVD+/riwl8 F1KAKsby1/IYM9AMJ7qSriYSrgexaM+RV0KX/4XEHgkzL8nFvIjy4idyIjOwKR31 QfpKUQIaF8zOLLRK6ScOnPJghXAUMfVwQny0iVw1xI/Ge5+BNN5J2yWIvRCX9YfV Nf79nhs4bdvTKCfUYP6Mv+z7d+yc6R4Ang/L7eO2/gTwgfM63x2a6VXUjfwfB58R FP1tSLx/apJGjs7rL66/Uyf9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNxej1aEs NlcGWMvOGw7Umx7IFUUwHwYDVR0jBBgwFoAUR7hUNoXTAf7vkM0S5RWPdA1rbLEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMDAwL0VFQjgwOEI4OUQx NzExRjBCNDJFRjAzNEM0RjlBRTAyL1I3aFVOb1hUQWY3dmtNMFM1UldQZEExcmJM RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjdoVU5vWFRBZjd2a00wUzVSV1BkQTFyYkxFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MDAwL0VFQjgwOEI4OUQxNzExRjBCNDJFRjAzNEM0RjlBRTAyL1I3aFVOb1hUQWY3 dmtNMFM1UldQZEExcmJMRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJEkNO3GEKB/QwjMzsPHQUaSC21AsbPDW6f4VA8I5hs/HKnvm9I04eGJ yMTgbAgKFjintvvcgLBp3e+vVVGYgcoy6uiWceCl34haxsmTGX/mcOC3ZUGUMmSu rowdo1VxReo0wmaetSFcE/4/6MdZ9jAynemk1oahHhhjGN2KTgIle4ZdYeaQYBw/ 9M3bnGKIQuHtDslw9nnPb2w50T3aRe+4cDovpxJ1tynA8yaje/8TMwW10V/GDVSL 9SYsxfS+4+PkBuUGJaCRDN4vmJJPnkuzr8o/gnDzvhDmjsi6dajDS3CIDMcCnwd9 PptbmpJ3ST62T9285sJGCOKjhBTuo4c= -----END CERTIFICATE-----Generated at Mon Dec 8 06:01:43 2025 by rpki-client