This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft File: iS3iAjP9DGSOLnuflZUPOpaBfL8.mft (raw, json) Hash identifier: Cx6DAVaMedLKQsZw80eSbGb7KQxdzSPpfCQ118vMVCo= Subject key identifier: 28:CC:B1:B5:A2:D2:BF:51:D4:EC:6F:8C:7A:E4:3F:EE:6C:66:41:E2 Authority key identifier: 89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF Certificate issuer: /CN=A91C7175/serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft Manifest number: F7 Signing time: Tue 23 Dec 2025 04:14:00 +0000 Manifest this update: Tue 23 Dec 2025 04:14:00 +0000 Manifest next update: Tue 30 Dec 2025 04:14:00 +0000 Files and hashes: 1: iS3iAjP9DGSOLnuflZUPOpaBfL8.crl (hash: Pr3mW1irNs9fZdC5NX27EjgkT1F8i/1VLAUB0L6PzBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175, serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF Validity Not Before: Dec 23 04:14:00 2025 GMT Not After : Dec 30 04:14:00 2025 GMT Subject: CN=694a1708-2a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:64:11:b3:ea:e8:42:db:b0:2c:1a:78:0c:58: bd:43:8c:a4:fd:f7:55:4e:34:2d:8f:c8:c9:92:2d: d5:06:8b:2c:c4:9d:6c:bf:9a:0f:85:90:bd:40:1d: ab:67:ea:3a:61:10:66:07:94:03:35:f3:0d:ec:6b: 12:97:90:2d:15:76:49:ff:9c:74:7d:99:76:47:33: 15:bc:71:23:5a:6d:fd:04:ba:29:b3:af:d6:c8:f7: fb:5e:22:eb:a3:01:ab:ed:8b:b8:8a:5f:0d:d9:5a: 8d:8d:c8:41:ef:8f:22:ec:61:70:d5:d0:e9:c0:4d: 8e:9f:71:86:56:f4:f1:7a:07:84:90:a7:4e:39:72: 82:17:28:9d:b8:08:87:d5:00:03:94:43:c5:74:aa: e8:2c:c6:f7:67:58:20:fd:6f:ec:46:10:a7:23:d1: 3c:bb:df:4f:17:e9:00:9c:b1:85:70:56:da:f0:c3: f1:43:24:2f:93:b2:87:35:9d:e9:e2:df:29:36:05: 03:8c:60:4b:14:6b:79:3c:ce:05:f3:97:5c:1f:93: ff:5e:ff:02:fc:14:f9:35:8b:58:73:a7:85:98:bd: dd:59:c2:af:95:6e:12:ef:8a:a5:68:39:a0:b1:ae: f9:02:08:3e:d8:c2:8c:6a:f1:71:a8:59:39:32:e7: 52:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CC:B1:B5:A2:D2:BF:51:D4:EC:6F:8C:7A:E4:3F:EE:6C:66:41:E2 X509v3 Authority Key Identifier: keyid:89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:5b:49:79:e8:0c:16:f7:e8:64:c6:64:3a:f7:50:32:b1:43: 50:57:ca:b6:57:01:c4:50:11:53:09:59:98:d4:f4:97:5f:5a: 7e:a4:23:48:e9:44:bf:81:d1:24:e4:b0:0f:b7:b0:20:2a:f7: ba:79:64:f5:c4:eb:47:9f:58:c8:c8:3f:cf:dd:6f:28:1d:4a: d3:ce:79:bf:14:92:9c:3f:9c:ac:1e:90:10:10:f8:ff:a1:3d: 2d:b5:83:9f:9d:b5:e1:a0:0c:1f:38:4f:c0:a3:b3:b5:a3:07: c8:25:c9:10:b4:12:bd:5f:4d:a0:22:e4:b3:a0:72:b2:a0:8e: 85:d9:0e:94:0b:f8:c2:46:1d:06:34:e4:2c:e0:0f:92:24:b8: 19:11:33:ff:4f:ec:67:f7:2d:0a:df:6a:0c:96:1a:e2:0a:7b: 16:4f:8a:50:d8:d9:a4:3f:ed:81:b2:c1:8b:37:8b:0c:f7:92: 53:a6:e8:92:cb:e3:d0:1d:3e:f9:24:be:21:c9:a6:3d:4a:23: d6:cb:ff:89:e6:58:97:3f:ed:59:ad:13:ec:30:af:2a:89:68: 22:8c:bb:6e:27:e0:b4:0e:6b:8a:1a:c1:c2:c8:1d:ea:81:5a: 1a:2d:7d:9a:03:77:75:71:a9:6e:aa:73:62:0d:54:dd:91:3b: 75:7d:8d:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxNzUxMTAvBgNVBAUTKDg5MkRFMjAyMzNGRDBDNjQ4RTJFN0I5Rjk1OTUwRjNB OTY4MTdDQkYwHhcNMjUxMjIzMDQxNDAwWhcNMjUxMjMwMDQxNDAwWjAYMRYwFAYD VQQDDA02OTRhMTcwOC0yYTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGQRs+roQtuwLBp4DFi9Q4yk/fdVTjQtj8jJki3VBossxJ1sv5oPhZC9QB2r Z+o6YRBmB5QDNfMN7GsSl5AtFXZJ/5x0fZl2RzMVvHEjWm39BLops6/WyPf7XiLr owGr7Yu4il8N2VqNjchB748i7GFw1dDpwE2On3GGVvTxegeEkKdOOXKCFyiduAiH 1QADlEPFdKroLMb3Z1gg/W/sRhCnI9E8u99PF+kAnLGFcFba8MPxQyQvk7KHNZ3p 4t8pNgUDjGBLFGt5PM4F85dcH5P/Xv8C/BT5NYtYc6eFmL3dWcKvlW4S74qlaDmg sa75Agg+2MKMavFxqFk5MudSCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjMsbWi 0r9R1OxvjHrkP+5sZkHiMB8GA1UdIwQYMBaAFIkt4gIz/Qxkji57n5WVDzqWgXy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE3NS9GMjJCOUNDQTY4 RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9pUzNpQWpQOURHU09MbnVmbFpVUE9wYUJm TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lTM2lBalA5REdTT0xudWZsWlVQT3BhQmZMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzE3NS9GMjJCOUNDQTY4RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9pUzNpQWpQOURH U09MbnVmbFpVUE9wYUJmTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4W0l56AwW9+hkxmQ691AysUNQV8q2VwHEUBFTCVmY1PSXX1p+pCNI 6US/gdEk5LAPt7AgKve6eWT1xOtHn1jIyD/P3W8oHUrTznm/FJKcP5ysHpAQEPj/ oT0ttYOfnbXhoAwfOE/Ao7O1owfIJckQtBK9X02gIuSzoHKyoI6F2Q6UC/jCRh0G NOQs4A+SJLgZETP/T+xn9y0K32oMlhriCnsWT4pQ2NmkP+2BssGLN4sM95JTpuiS y+PQHT75JL4hyaY9SiPWy/+J5liXP+1ZrRPsMK8qiWgijLtuJ+C0DmuKGsHCyB3q gVoaLX2aA3d1caluqnNiDVTdkTt1fY14 -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:15 2025 by rpki-client