This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft File: exEvnr7DQt_Kx3TrXCaBElxl4M8.mft (raw, json) Hash identifier: L/3tW2GOH7Gt6t2Wg6b6APTsk5Wh51PALQvcYszA0EI= Subject key identifier: 76:9D:78:AF:92:D3:2A:83:C6:FF:1B:5F:76:87:69:BD:7D:6D:50:BA Authority key identifier: 7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF Certificate issuer: /CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Certificate serial: 0FDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft Manifest number: 0FD5 Signing time: Mon 22 Dec 2025 17:09:44 +0000 Manifest this update: Mon 22 Dec 2025 17:09:43 +0000 Manifest next update: Mon 29 Dec 2025 17:09:43 +0000 Files and hashes: 1: exEvnr7DQt_Kx3TrXCaBElxl4M8.crl (hash: 98khwEK1GJMDBP/g//3lJYKT+lbs8KsJkOvzF6vzucs=) 2: FD58613E7B7B11E99CCAAF73C4F9AE02.roa (hash: 090bVc+Qwt8YDuc/RlwXjl9kZ0cXU70VKlUww1lp6Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4060 (0xfdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFCB1, serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Validity Not Before: Dec 22 17:09:43 2025 GMT Not After : Dec 29 17:09:43 2025 GMT Subject: CN=69497b58-9fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f4:b1:02:e0:51:34:f2:b0:1a:76:ab:12:ed: 36:42:80:cb:e9:f5:7b:9f:bb:89:a5:95:f9:58:6a: b5:02:2e:93:b6:9a:ee:c5:02:17:1f:35:64:60:1f: b5:14:5d:eb:2b:d8:ca:7d:a6:0d:cb:e8:9d:4a:13: 66:81:ec:3b:4d:28:91:ed:1b:65:5d:32:88:eb:81: 30:fa:5a:0c:97:ba:66:11:42:a9:eb:58:21:6b:9d: da:92:dd:f2:9e:ad:37:aa:a9:10:8a:1c:1c:44:99: a2:bd:cb:a6:3a:3b:0a:f4:1b:d5:3c:b1:34:f0:7a: ed:fa:8d:59:a8:d3:ce:4e:ae:df:2d:6f:35:4b:1a: 38:ee:d9:57:ef:cb:83:f2:06:c6:67:b4:e8:55:a9: 33:b9:11:45:a2:53:4f:74:0f:81:14:d9:b7:3b:35: 81:68:67:46:53:cc:6b:eb:7a:87:d6:2e:49:fe:11: bd:f9:07:da:56:99:10:a0:25:87:1d:ff:e1:74:b8: a3:08:2c:43:11:38:d0:c0:aa:16:2e:bd:35:aa:61: 2f:64:65:c1:a5:83:2b:fe:34:d6:ee:9b:b1:bf:ae: 73:79:f9:31:f4:83:b5:fc:61:66:81:2b:c4:eb:c7: 39:fb:b9:3d:a1:85:1b:57:5f:7e:64:79:ca:eb:39: 85:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9D:78:AF:92:D3:2A:83:C6:FF:1B:5F:76:87:69:BD:7D:6D:50:BA X509v3 Authority Key Identifier: keyid:7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4e:dd:d8:f8:ae:fa:36:5f:b2:86:fd:26:d0:5d:d6:f7:af: eb:ee:11:61:a4:3a:8f:21:6e:cd:35:1f:10:ad:82:b9:88:28: 1b:83:d2:16:dc:27:78:d3:28:66:33:3f:03:a8:5c:0d:a3:9e: ec:83:5a:68:21:ce:59:f6:17:1d:57:bf:c1:da:6a:6f:82:23: ac:63:89:4a:35:af:a6:53:79:f3:e9:5c:40:3d:4e:e6:87:ef: e8:fa:02:d5:73:a5:85:07:4b:53:c7:0a:63:9a:d0:6f:40:2d: 82:f5:cf:e5:3b:e4:f2:1d:e7:5d:71:3a:67:c3:86:f0:8c:94: e0:63:e4:3f:9e:b4:7b:1f:f5:98:18:50:7e:da:ed:2b:10:58: c1:c1:33:10:22:cf:02:03:35:3a:39:51:8a:68:97:21:06:e7: 75:64:d1:bf:5f:96:e4:9f:30:25:41:17:66:42:e4:bd:ff:05: 8c:dc:d6:29:a2:15:18:69:a7:38:40:ee:3d:d9:58:e1:83:97: 89:9f:42:9c:88:92:25:d4:f1:5f:a0:97:07:45:42:98:ca:57: f2:40:60:91:f4:51:26:e3:95:2e:1c:6b:41:ab:31:3d:11:02: c0:23:d2:18:79:5c:71:de:c6:bf:25:f8:d0:ce:fa:37:7b:88: 8f:52:81:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZDQjExMTAvBgNVBAUTKDdCMTEyRjlFQkVDMzQyREZDQUM3NzRFQjVDMjY4MTEy NUM2NUUwQ0YwHhcNMjUxMjIyMTcwOTQzWhcNMjUxMjI5MTcwOTQzWjAYMRYwFAYD VQQDDA02OTQ5N2I1OC05ZmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/SxAuBRNPKwGnarEu02QoDL6fV7n7uJpZX5WGq1Ai6TtpruxQIXHzVkYB+1 FF3rK9jKfaYNy+idShNmgew7TSiR7RtlXTKI64Ew+loMl7pmEUKp61gha53akt3y nq03qqkQihwcRJmivcumOjsK9BvVPLE08Hrt+o1ZqNPOTq7fLW81Sxo47tlX78uD 8gbGZ7ToVakzuRFFolNPdA+BFNm3OzWBaGdGU8xr63qH1i5J/hG9+QfaVpkQoCWH Hf/hdLijCCxDETjQwKoWLr01qmEvZGXBpYMr/jTW7puxv65zefkx9IO1/GFmgSvE 68c5+7k9oYUbV19+ZHnK6zmFKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHadeK+S 0yqDxv8bX3aHab19bVC6MB8GA1UdIwQYMBaAFHsRL56+w0Lfysd061wmgRJcZeDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkNCMS82RTg3MkQ1RTY1 NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0X0t4M1RyWENhQkVseGw0 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4RXZucjdEUXRfS3gzVHJYQ2FCRWx4bDRNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkNCMS82RTg3MkQ1RTY1NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0 X0t4M1RyWENhQkVseGw0TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcTt3Y+K76Nl+yhv0m0F3W96/r7hFhpDqPIW7NNR8QrYK5iCgbg9IW 3Cd40yhmMz8DqFwNo57sg1poIc5Z9hcdV7/B2mpvgiOsY4lKNa+mU3nz6VxAPU7m h+/o+gLVc6WFB0tTxwpjmtBvQC2C9c/lO+TyHeddcTpnw4bwjJTgY+Q/nrR7H/WY GFB+2u0rEFjBwTMQIs8CAzU6OVGKaJchBud1ZNG/X5bknzAlQRdmQuS9/wWM3NYp ohUYaac4QO492Vjhg5eJn0KciJIl1PFfoJcHRUKYylfyQGCR9FEm45UuHGtBqzE9 EQLAI9IYeVxx3sa/JfjQzvo3e4iPUoGq -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:02 2025 by rpki-client