This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft File: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json) Hash identifier: E/QNH9fBtwat46cqgvXugFE8jNlORUPjYRR1TVRV6lQ= Subject key identifier: DB:8F:3F:C8:D6:0C:F6:B6:7A:FC:77:F9:FF:EF:B0:94:54:FA:EE:60 Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Certificate serial: 0B4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft Manifest number: 0B2F Signing time: Mon 22 Dec 2025 18:47:30 +0000 Manifest this update: Mon 22 Dec 2025 18:47:29 +0000 Manifest next update: Mon 29 Dec 2025 18:47:29 +0000 Files and hashes: 1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: hvH/xOIU+7qKVypdLwodIZoJpbNP6Bz02kK6MMCcW0A=) 2: 4D56512423F411F0A37D240FC4F9AE02.roa (hash: DR5F6HRqYYMo1uwv7ihEplZzpoKgREyzR6TXxsIOhyI=) 3: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: AlDXjMzrluQLs6V85p5i3jcfN6x00fmAUpJ1+5KxZR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2891 (0xb4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Validity Not Before: Dec 22 18:47:29 2025 GMT Not After : Dec 29 18:47:29 2025 GMT Subject: CN=69499242-6c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e1:86:2f:dd:2d:d8:49:0e:2e:6a:c8:a4:a2: 31:90:a4:e9:27:2e:04:c2:bc:c3:cd:f0:1f:62:d1: 6c:63:17:aa:90:21:b4:b5:5d:d6:b7:f3:63:f1:22: 3a:05:68:a2:8e:49:73:e9:de:69:7e:bb:30:74:f6: ae:d5:42:40:b1:4a:bc:d9:59:ba:d2:c8:0f:43:0d: 29:aa:9d:00:cc:df:fd:3d:14:65:84:4f:b4:cd:30: c3:93:24:e0:0e:0b:7f:91:1d:5b:0b:8c:bf:b4:39: bf:8c:c0:78:86:b6:bb:2c:f6:df:d0:65:3a:21:cd: 79:71:a9:71:99:f2:49:40:87:b5:1e:04:21:0a:10: 77:23:46:0c:1c:96:b7:38:5f:d8:eb:be:d8:e2:08: 7c:b9:2e:f9:16:24:e9:85:0d:4b:ea:ff:f4:06:39: 01:20:ac:7d:04:51:40:31:1e:05:56:03:a3:aa:45: bc:9a:b7:4a:01:dc:cf:ea:bf:af:95:1c:ac:6c:22: c2:df:d6:2b:8b:42:f6:88:dd:a8:0d:f6:cd:d7:f8: 89:a3:a8:04:c1:82:ef:95:09:74:2f:5d:06:a2:c1: 36:7f:a0:d2:38:32:6f:59:0c:a2:a1:ca:cc:c2:a3: 7a:e2:25:1e:1d:11:66:c8:25:fb:e5:df:a7:99:a7: be:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8F:3F:C8:D6:0C:F6:B6:7A:FC:77:F9:FF:EF:B0:94:54:FA:EE:60 X509v3 Authority Key Identifier: keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:0c:ff:c3:41:85:83:45:03:75:56:25:53:8a:43:c4:35:64: e8:90:7b:62:9e:1d:98:fd:2d:19:aa:7c:08:b7:f9:cd:b7:9d: f7:52:a5:d2:cc:6a:26:40:bf:0d:f6:06:3f:37:55:b5:12:1d: b1:7f:b7:94:1a:19:25:4d:04:6d:b8:29:13:cf:59:4d:72:c7: 12:c1:ba:5c:72:35:7a:62:b5:46:74:ee:c9:fc:ef:3a:07:84: 03:c4:1c:ad:94:8c:60:a2:b3:bf:b4:d4:c4:5f:27:b0:e5:0c: 8e:13:47:60:db:45:0f:79:ac:dc:98:75:f0:94:9e:0d:92:89: 59:08:c0:5b:5b:1f:b3:b8:bd:f4:4f:a0:53:14:c1:8c:74:05: c4:04:ce:c1:97:0f:b5:c8:bd:d4:67:9b:b0:1b:59:a4:18:ec: 45:bc:89:0c:a0:18:9d:59:62:3e:ba:f0:1f:a7:ca:de:0f:23: 85:8e:af:72:cb:8a:c9:62:4e:67:26:fa:f9:90:30:a7:90:67: af:63:86:cc:31:bd:7b:f3:d5:c2:f1:3d:e9:42:df:15:5f:89: ed:23:39:d1:73:af:6e:0a:20:e2:3f:7a:c0:3d:6b:fe:fe:3f: cc:54:2f:00:17:c1:43:8b:ea:cd:3e:1a:66:74:63:d5:01:40: 74:9c:e2:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMzYxMTAvBgNVBAUTKEVEODVFRjc3MzQzQzU1NDEyQjA2QTUzQzJBNEUyMDc2 N0FEMTJGMjUwHhcNMjUxMjIyMTg0NzI5WhcNMjUxMjI5MTg0NzI5WjAYMRYwFAYD VQQDDA02OTQ5OTI0Mi02YzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OGGL90t2EkOLmrIpKIxkKTpJy4EwrzDzfAfYtFsYxeqkCG0tV3Wt/Nj8SI6 BWiijklz6d5pfrswdPau1UJAsUq82Vm60sgPQw0pqp0AzN/9PRRlhE+0zTDDkyTg Dgt/kR1bC4y/tDm/jMB4hra7LPbf0GU6Ic15calxmfJJQIe1HgQhChB3I0YMHJa3 OF/Y677Y4gh8uS75FiTphQ1L6v/0BjkBIKx9BFFAMR4FVgOjqkW8mrdKAdzP6r+v lRysbCLC39Yri0L2iN2oDfbN1/iJo6gEwYLvlQl0L10GosE2f6DSODJvWQyiocrM wqN64iUeHRFmyCX75d+nmae+hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNuPP8jW DPa2evx3+f/vsJRU+u5gMB8GA1UdIwQYMBaAFO2F73c0PFVBKwalPCpOIHZ60S8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIzNi9ENDI4Nzk2RTUz MjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZVRXJCcVU4S2s0Z2RuclJM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZWHZkelE4VlVFckJxVThLazRnZG5yUkx5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIzNi9ENDI4Nzk2RTUzMjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZV RXJCcVU4S2s0Z2RuclJMeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoDP/DQYWDRQN1ViVTikPENWTokHtinh2Y/S0ZqnwIt/nNt533UqXS zGomQL8N9gY/N1W1Eh2xf7eUGhklTQRtuCkTz1lNcscSwbpccjV6YrVGdO7J/O86 B4QDxBytlIxgorO/tNTEXyew5QyOE0dg20UPeazcmHXwlJ4NkolZCMBbWx+zuL30 T6BTFMGMdAXEBM7Blw+1yL3UZ5uwG1mkGOxFvIkMoBidWWI+uvAfp8reDyOFjq9y y4rJYk5nJvr5kDCnkGevY4bMMb1789XC8T3pQt8VX4ntIznRc69uCiDiP3rAPWv+ /j/MVC8AF8FDi+rNPhpmdGPVAUB0nOKS -----END CERTIFICATE-----Generated at Tue Dec 23 14:39:04 2025 by rpki-client