This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft File: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft (raw, json) Hash identifier: khLbf2NEyMotakf8EjZsbDYk3UYKTdDEIYdUa3IJYSw= Subject key identifier: 2A:F3:3D:BF:95:6A:BF:AD:0D:FF:C6:05:DD:78:25:D9:96:D3:40:DE Authority key identifier: EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2 Certificate issuer: /CN=A91D41AC/serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft Manifest number: 09 Signing time: Wed 03 Dec 2025 04:42:50 +0000 Manifest this update: Wed 03 Dec 2025 04:42:50 +0000 Manifest next update: Wed 10 Dec 2025 04:42:50 +0000 Files and hashes: 1: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl (hash: B4b4UiCJEXkeKmdqlZHc1xFXqzDg0pEEua0NhR55GAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 04:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D41AC, serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2 Validity Not Before: Dec 3 04:42:50 2025 GMT Not After : Dec 10 04:42:50 2025 GMT Subject: CN=692fbfca-652a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4b:a4:ab:c5:58:66:ef:9a:a4:87:92:f0:59: f7:fa:14:91:7f:c8:0d:aa:f8:4c:fd:2d:71:a9:41: 4a:6b:fc:94:c2:03:e2:aa:cd:ae:5d:dc:c8:aa:82: f2:93:98:21:2c:33:22:38:a9:8e:c9:66:f8:8f:0e: 6a:e1:36:4c:6d:86:5c:4a:d9:c4:51:3e:0a:0f:e8: 85:39:6d:66:6c:35:2a:f0:f2:56:4c:eb:5e:0c:bc: 60:39:49:86:82:e5:da:a3:2a:33:66:1e:4e:a1:be: 98:04:15:4e:c1:e9:c8:89:85:64:27:6f:45:22:f1: 20:18:44:4c:d3:1e:16:4b:d7:7f:a4:f7:25:0f:38: 2c:ae:28:44:5b:99:1e:e5:f9:5d:93:75:70:bc:5f: 48:83:37:0b:84:9c:5b:fb:99:ae:22:f0:65:37:40: c2:fa:14:6b:a4:b9:0c:80:91:1a:a1:74:9a:eb:aa: 2a:5e:a0:26:ba:28:62:30:06:23:1c:0c:f3:e2:8e: 7e:12:52:b3:9e:e9:ae:01:dd:62:70:fd:bb:50:0f: a8:25:90:bc:54:0a:d3:17:dc:99:f9:d2:ae:3f:e3: 62:b6:0e:8b:b4:ae:8a:57:29:18:e9:8c:3e:60:46: 44:38:00:06:3b:0b:63:ed:06:1b:0d:f7:fd:34:d5: 5c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F3:3D:BF:95:6A:BF:AD:0D:FF:C6:05:DD:78:25:D9:96:D3:40:DE X509v3 Authority Key Identifier: keyid:EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:af:32:43:43:97:56:26:53:4b:3c:95:52:bb:78:45:03:8b: 3b:4d:aa:b1:b3:34:ec:b6:41:90:b0:55:26:a8:98:94:8e:48: bc:b2:97:cf:bf:f2:72:e8:ca:c8:e8:72:6e:a5:7a:4d:7b:9b: bd:70:8c:b0:7f:ec:e0:f6:64:f7:52:39:11:1d:f9:43:e6:66: 55:3d:4c:47:e3:39:78:0e:27:b4:5a:15:3e:10:21:10:b1:12: a5:e3:46:0c:7d:f8:f5:0c:e0:79:d7:e0:0b:d1:08:62:a4:a8: fc:b7:a9:a2:48:7a:57:25:d1:fe:87:80:7a:c6:93:d8:0b:b8: fa:8e:6f:9b:a3:42:0d:cf:57:8d:e2:55:d3:dc:8b:07:ec:4b: 8e:dc:61:2e:82:15:ca:cf:26:5c:67:26:60:06:02:05:79:11: a4:39:ed:a8:03:e9:5b:f3:a3:a3:22:d0:73:da:26:49:e2:85: 9f:20:25:71:d8:98:43:f1:ee:0e:c2:cd:3f:f1:d7:99:d2:52: 15:0f:e8:6d:5f:97:b4:20:a4:f3:51:e4:9b:e2:ed:3f:fa:db: b8:8c:e3:f1:9b:9b:98:13:76:b0:bb:53:65:54:d8:75:ed:28: a3:00:9a:0b:21:59:19:64:ff:ee:4b:2d:f6:54:8c:20:f9:d9: d9:75:ed:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDFBQzExMC8GA1UEBRMoRUVBOTAxQjdGQjMzRkI1MENGMDRDNTk4MUY4QkVGNkM0 REVDMzVFMjAeFw0yNTEyMDMwNDQyNTBaFw0yNTEyMTAwNDQyNTBaMBgxFjAUBgNV BAMTDTY5MmZiZmNhLTY1MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBS6SrxVhm75qkh5LwWff6FJF/yA2q+Ez9LXGpQUpr/JTCA+Kqza5d3MiqgvKT mCEsMyI4qY7JZviPDmrhNkxthlxK2cRRPgoP6IU5bWZsNSrw8lZM614MvGA5SYaC 5dqjKjNmHk6hvpgEFU7B6ciJhWQnb0Ui8SAYREzTHhZL13+k9yUPOCyuKERbmR7l +V2TdXC8X0iDNwuEnFv7ma4i8GU3QML6FGukuQyAkRqhdJrrqipeoCa6KGIwBiMc DPPijn4SUrOe6a4B3WJw/btQD6glkLxUCtMX3Jn50q4/42K2Dou0ropXKRjpjD5g RkQ4AAY7C2PtBhsN9/001VyxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKvM9v5Vq v60N/8YF3Xgl2ZbTQN4wHwYDVR0jBBgwFoAU7qkBt/sz+1DPBMWYH4vvbE3sNeIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0MUFDL0EzMDJBQjQ2QzY4 QzExRjBBRDIxNDYzN0M0RjlBRTAyLzdxa0J0X3N6LTFEUEJNV1lINHZ2YkUzc05l SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN3FrQnRfc3otMURQQk1XWUg0dnZiRTNzTmVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 MUFDL0EzMDJBQjQ2QzY4QzExRjBBRDIxNDYzN0M0RjlBRTAyLzdxa0J0X3N6LTFE UEJNV1lINHZ2YkUzc05lSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFWvMkNDl1YmU0s8lVK7eEUDiztNqrGzNOy2QZCwVSaomJSOSLyyl8+/ 8nLoysjocm6lek17m71wjLB/7OD2ZPdSOREd+UPmZlU9TEfjOXgOJ7RaFT4QIRCx EqXjRgx9+PUM4HnX4AvRCGKkqPy3qaJIelcl0f6HgHrGk9gLuPqOb5ujQg3PV43i VdPciwfsS47cYS6CFcrPJlxnJmAGAgV5EaQ57agD6Vvzo6Mi0HPaJknihZ8gJXHY mEPx7g7CzT/x15nSUhUP6G1fl7QgpPNR5Jvi7T/627iM4/Gbm5gTdrC7U2VU2HXt KKMAmgshWRlk/+5LLfZUjCD52dl17cU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:22 2025 by rpki-client