This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft File: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft (raw, json) Hash identifier: exF9GzhABuqHngKscHoVTnyf1c+pjFkbuvVVPYWLcsk= Subject key identifier: 31:04:0C:79:3A:3B:5B:E6:02:4B:99:40:C8:97:4A:5B:14:2D:00:47 Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96 Certificate issuer: /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96 Certificate serial: 0B85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft Manifest number: 0B76 Signing time: Mon 22 Dec 2025 18:39:34 +0000 Manifest this update: Mon 22 Dec 2025 18:39:34 +0000 Manifest next update: Mon 29 Dec 2025 18:39:34 +0000 Files and hashes: 1: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl (hash: L3drrnXPnW9sk/b4PI+PUszSKguHDiU5gKdj59sjo3U=) 2: 34492F3A13A011F0B2541067C4F9AE02.roa (hash: CB9T3Z9Kr+65LPAMP9ETCGEmFvpN7j5O01tRCMGo/Ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2949 (0xb85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCB3A, serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96 Validity Not Before: Dec 22 18:39:34 2025 GMT Not After : Dec 29 18:39:34 2025 GMT Subject: CN=69499066-6dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f4:f5:00:df:03:84:07:6b:cc:e7:f5:86:a7: 84:73:d8:5c:3a:55:2a:39:e5:32:fd:73:8d:dd:20: bd:49:f6:3a:a2:a9:7f:f3:2d:12:78:d1:0c:ea:b3: 33:86:0b:97:3a:7a:17:24:5a:8b:26:eb:84:39:db: 84:83:f1:b0:8f:83:ac:78:58:bc:60:ea:89:96:a1: 36:aa:c8:83:04:a8:d1:64:c7:bb:40:b5:72:8d:cd: 38:31:4f:4c:c7:49:e8:d0:f6:c4:ba:24:6f:20:94: 74:c9:2a:be:04:57:63:81:61:18:06:d9:77:24:47: 66:5b:ec:67:66:4c:dc:e4:d7:23:da:d8:b9:23:69: fb:87:1b:39:db:01:f0:c1:95:05:64:33:29:36:0e: d3:29:3a:80:2b:94:7c:63:a2:b0:b4:8e:cc:e5:b7: 7b:b5:0a:ec:ff:65:63:b8:86:ac:b6:aa:09:ef:39: cb:f8:e6:aa:ba:88:53:b3:a0:90:65:08:f4:9e:12: c7:17:27:88:6b:b2:e0:37:ea:51:50:b0:39:23:d2: 3e:50:ec:6a:29:81:f6:67:9a:65:8b:5d:62:d9:8c: cb:13:48:e3:36:b4:ac:d2:74:9a:ba:a0:f3:4d:ea: 38:50:d7:9e:62:8d:33:34:7b:ef:5e:dc:f6:39:c0: 6b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:04:0C:79:3A:3B:5B:E6:02:4B:99:40:C8:97:4A:5B:14:2D:00:47 X509v3 Authority Key Identifier: keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:78:97:14:88:b9:95:64:05:cf:6d:6b:a3:aa:95:7f:f0:ef: f1:09:05:49:dd:f1:ae:9e:7a:1b:7c:cb:27:b8:c8:61:30:c9: 99:6a:41:97:0e:f1:aa:a5:89:9f:5b:36:6a:e3:a0:1d:11:8a: 96:ef:5a:fd:fa:b3:6a:91:3a:07:03:3a:ca:25:00:79:3d:f2: 41:b6:37:5c:92:6a:34:28:f3:2d:62:ad:4e:a7:b8:8c:3a:31: d3:c4:ec:22:62:12:89:fa:92:e0:51:20:e1:e3:0a:8d:f0:d7: ed:21:b2:0d:84:74:84:94:83:12:e7:fc:84:d5:99:0b:a2:66: 8d:04:0f:38:f3:92:2f:26:6a:4b:da:78:da:18:79:be:1d:47: 10:b5:07:aa:df:bf:2c:40:e3:99:90:95:50:0a:5b:fe:82:23: 11:04:32:4e:eb:a6:3b:b8:b2:22:f5:c1:78:dc:28:01:b1:75: cf:f0:47:f3:ac:42:4f:86:58:94:8a:ed:cb:3b:38:be:05:04: a9:44:ba:60:b6:28:fb:b6:eb:10:29:93:d6:eb:6b:01:5a:92: e3:e1:6b:77:7b:66:f2:e3:1f:93:fc:29:5f:89:cd:e6:ba:fd: 8c:16:80:b0:9a:53:00:3c:f4:de:3f:28:d8:fc:53:9b:67:0b: ee:1a:d7:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNCM0ExMTAvBgNVBAUTKEVFNUVDMzdGM0QzQkM1NzU5OUYzQzczQzUyMjI2RTdF RTA1MEJGOTYwHhcNMjUxMjIyMTgzOTM0WhcNMjUxMjI5MTgzOTM0WjAYMRYwFAYD VQQDDA02OTQ5OTA2Ni02ZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvT1AN8DhAdrzOf1hqeEc9hcOlUqOeUy/XON3SC9SfY6oql/8y0SeNEM6rMz hguXOnoXJFqLJuuEOduEg/Gwj4OseFi8YOqJlqE2qsiDBKjRZMe7QLVyjc04MU9M x0no0PbEuiRvIJR0ySq+BFdjgWEYBtl3JEdmW+xnZkzc5Ncj2ti5I2n7hxs52wHw wZUFZDMpNg7TKTqAK5R8Y6KwtI7M5bd7tQrs/2VjuIastqoJ7znL+OaquohTs6CQ ZQj0nhLHFyeIa7LgN+pRULA5I9I+UOxqKYH2Z5pli11i2YzLE0jjNrSs0nSauqDz Teo4UNeeYo0zNHvvXtz2OcBr+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEEDHk6 O1vmAkuZQMiXSlsULQBHMB8GA1UdIwQYMBaAFO5ew389O8V1mfPHPFIibn7gUL+W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0IzQS85QUQ2QzVCODQ1 ODQxMUVBQTQ2RTc1NzFDNEY5QUUwMi83bDdEZnowN3hYV1o4OGM4VWlKdWZ1QlF2 NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdsN0RmejA3eFhXWjg4YzhVaUp1ZnVCUXY1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0IzQS85QUQ2QzVCODQ1ODQxMUVBQTQ2RTc1NzFDNEY5QUUwMi83bDdEZnowN3hY V1o4OGM4VWlKdWZ1QlF2NVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAueJcUiLmVZAXPbWujqpV/8O/xCQVJ3fGunnobfMsnuMhhMMmZakGX DvGqpYmfWzZq46AdEYqW71r9+rNqkToHAzrKJQB5PfJBtjdckmo0KPMtYq1Op7iM OjHTxOwiYhKJ+pLgUSDh4wqN8NftIbINhHSElIMS5/yE1ZkLomaNBA8485IvJmpL 2njaGHm+HUcQtQeq378sQOOZkJVQClv+giMRBDJO66Y7uLIi9cF43CgBsXXP8Efz rEJPhliUiu3LOzi+BQSpRLpgtij7tusQKZPW62sBWpLj4Wt3e2by4x+T/Clfic3m uv2MFoCwmlMAPPTePyjY/FObZwvuGtfo -----END CERTIFICATE-----Generated at Tue Dec 23 06:41:34 2025 by rpki-client