This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.mft File: itYQrIti8qb8qCWJVdXxJJJ7OgA.mft (raw, json) Hash identifier: GwGOGXefdbs1PV8px5oRgk5W08W9gSZHXKmbgJiVHek= Subject key identifier: 43:CF:FF:42:09:7F:F5:EE:26:D7:1A:F9:96:67:2D:FC:BD:67:8B:0E Authority key identifier: 8A:D6:10:AC:8B:62:F2:A6:FC:A8:25:89:55:D5:F1:24:92:7B:3A:00 Certificate issuer: /CN=A91BEE1D/serialNumber=8AD610AC8B62F2A6FCA8258955D5F124927B3A00 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/itYQrIti8qb8qCWJVdXxJJJ7OgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.mft Manifest number: B7 Signing time: Tue 23 Dec 2025 04:57:45 +0000 Manifest this update: Tue 23 Dec 2025 04:57:44 +0000 Manifest next update: Tue 30 Dec 2025 04:57:44 +0000 Files and hashes: 1: itYQrIti8qb8qCWJVdXxJJJ7OgA.crl (hash: bW4DO2br3kheAxVLK12Q0NcridSDLRAJ5Au2PMsAjQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.crl rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/itYQrIti8qb8qCWJVdXxJJJ7OgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEE1D, serialNumber=8AD610AC8B62F2A6FCA8258955D5F124927B3A00 Validity Not Before: Dec 23 04:57:44 2025 GMT Not After : Dec 30 04:57:44 2025 GMT Subject: CN=694a2148-a2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:48:36:46:cd:17:78:f0:4d:69:1d:47:0e:b3: 58:22:e4:2f:32:e1:81:60:b6:de:66:0a:80:78:ef: 10:d4:83:fe:12:91:1e:8c:e3:53:04:9a:e1:7a:84: 0b:c3:26:3a:04:cc:16:c8:c7:c8:54:ee:42:49:9b: b8:9d:24:fb:f7:0d:a1:af:ee:fe:c9:59:cb:ef:5e: 55:8f:d9:7e:3d:12:11:3a:24:7b:83:8e:93:d9:fc: 3e:1a:bb:51:b8:1d:97:01:74:2d:97:13:d4:65:de: 93:8c:1d:d4:0f:66:aa:83:d7:e3:10:16:43:85:47: ec:bd:f9:3b:f9:14:e8:98:a7:9c:4e:a4:d6:3d:a4: dc:da:99:6b:b5:72:29:de:4d:26:86:5b:2e:27:98: ca:7e:95:65:ca:05:79:0f:97:54:6e:e0:38:18:ae: 45:11:48:e0:51:aa:a9:b0:c7:38:bd:4d:f1:c7:b1: 56:63:45:07:7d:1c:49:63:f7:6e:37:4f:f8:32:5d: be:84:2a:74:7c:e4:34:54:b0:af:32:26:b9:74:56: 31:77:e3:6d:db:b2:df:e2:b9:18:f8:3b:16:92:91: b0:68:b0:5f:0f:2e:4a:9c:ce:d4:4b:a3:63:0f:f6: 6e:78:5e:59:e0:04:6c:c9:84:72:42:38:6c:b7:e9: b9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CF:FF:42:09:7F:F5:EE:26:D7:1A:F9:96:67:2D:FC:BD:67:8B:0E X509v3 Authority Key Identifier: keyid:8A:D6:10:AC:8B:62:F2:A6:FC:A8:25:89:55:D5:F1:24:92:7B:3A:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/itYQrIti8qb8qCWJVdXxJJJ7OgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:50:c2:73:19:a8:f5:6e:ce:fd:e3:df:e5:08:d4:53:c5:35: 38:1c:6b:ef:25:a5:1a:c3:0d:f1:f4:18:25:d2:07:14:61:95: 94:2e:fd:f3:0c:83:74:27:bf:17:99:4d:a2:57:d3:0c:b2:bc: 6c:e7:d1:58:8b:37:99:57:98:de:3b:03:ea:c4:bf:10:15:f8: 39:a5:d0:9a:06:e9:e9:05:89:7f:62:31:83:d0:40:49:94:ac: ab:d0:11:9a:5d:f7:a7:31:60:e2:85:12:a0:0e:e7:9b:00:32: ab:c5:01:6f:5b:73:43:70:2a:38:76:47:92:f9:72:4d:45:66: 37:bb:63:8e:d9:59:63:e2:2a:e8:c9:09:a9:b4:15:fc:ef:7b: d0:1a:39:76:e2:1c:d9:a5:e1:71:61:c6:59:55:22:fd:f9:43: 50:08:d9:99:30:e2:72:e1:87:e8:d7:d2:23:ec:72:96:e3:f8: 39:cd:8c:5e:f4:f9:12:6e:8a:5c:3e:0e:65:b4:43:dd:d0:3f: 37:80:19:32:2e:a5:1c:0e:16:51:4b:5b:48:3d:3b:17:0f:a8: 1a:95:d7:fc:60:5c:6d:f2:c0:43:47:b2:6a:c3:19:14:46:a0: 44:a9:2c:3b:4f:7c:6c:5d:1c:6f:18:3e:fe:de:ec:5a:b7:b7: 75:44:52:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVFMUQxMTAvBgNVBAUTKDhBRDYxMEFDOEI2MkYyQTZGQ0E4MjU4OTU1RDVGMTI0 OTI3QjNBMDAwHhcNMjUxMjIzMDQ1NzQ0WhcNMjUxMjMwMDQ1NzQ0WjAYMRYwFAYD VQQDDA02OTRhMjE0OC1hMmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm0g2Rs0XePBNaR1HDrNYIuQvMuGBYLbeZgqAeO8Q1IP+EpEejONTBJrheoQL wyY6BMwWyMfIVO5CSZu4nST79w2hr+7+yVnL715Vj9l+PRIROiR7g46T2fw+GrtR uB2XAXQtlxPUZd6TjB3UD2aqg9fjEBZDhUfsvfk7+RTomKecTqTWPaTc2plrtXIp 3k0mhlsuJ5jKfpVlygV5D5dUbuA4GK5FEUjgUaqpsMc4vU3xx7FWY0UHfRxJY/du N0/4Ml2+hCp0fOQ0VLCvMia5dFYxd+Nt27Lf4rkY+DsWkpGwaLBfDy5KnM7US6Nj D/ZueF5Z4ARsyYRyQjhst+m59QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPP/0IJ f/XuJtca+ZZnLfy9Z4sOMB8GA1UdIwQYMBaAFIrWEKyLYvKm/KgliVXV8SSSezoA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUUxRC85QURBREFERUM3 MEUxMUVGODA2N0M0NjZDNEY5QUUwMi9pdFlRckl0aThxYjhxQ1dKVmRYeEpKSjdP Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l0WVFySXRpOHFiOHFDV0pWZFh4SkpKN09nQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUUxRC85QURBREFERUM3MEUxMUVGODA2N0M0NjZDNEY5QUUwMi9pdFlRckl0aThx YjhxQ1dKVmRYeEpKSjdPZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzUMJzGaj1bs7949/lCNRTxTU4HGvvJaUaww3x9Bgl0gcUYZWULv3z DIN0J78XmU2iV9MMsrxs59FYizeZV5jeOwPqxL8QFfg5pdCaBunpBYl/YjGD0EBJ lKyr0BGaXfenMWDihRKgDuebADKrxQFvW3NDcCo4dkeS+XJNRWY3u2OO2Vlj4iro yQmptBX873vQGjl24hzZpeFxYcZZVSL9+UNQCNmZMOJy4Yfo19Ij7HKW4/g5zYxe 9PkSbopcPg5ltEPd0D83gBkyLqUcDhZRS1tIPTsXD6galdf8YFxt8sBDR7JqwxkU RqBEqSw7T3xsXRxvGD7+3uxat7d1RFKA -----END CERTIFICATE-----Generated at Wed Dec 24 17:34:57 2025 by rpki-client