This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft File: v7abwiV2uVe6tf8za36DWNy3Cio.mft (raw, json) Hash identifier: EQaO/AVDZ3mcmy4OaPSXE36/G7S4pu5XX2moksDTONk= Subject key identifier: B6:96:CB:A6:45:FC:87:DC:33:6C:C0:CB:B2:68:60:85:B1:3B:5B:F8 Authority key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A Certificate issuer: /CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Certificate serial: 2235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft Manifest number: 2214 Signing time: Mon 22 Dec 2025 15:42:27 +0000 Manifest this update: Mon 22 Dec 2025 15:42:26 +0000 Manifest next update: Mon 29 Dec 2025 15:42:26 +0000 Files and hashes: 1: v7abwiV2uVe6tf8za36DWNy3Cio.crl (hash: WGfPk8N5dZyGUdiGXnaBSwJ6sqeYZu9fSius2Mjaujo=) 2: 6D2F20B6ECEB11EE960F5531C4F9AE02.roa (hash: VxYl4qfB1zjkRKmgSxnmRNT6jpcxz/oQeuf18i1PilE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8757 (0x2235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BFB, serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Validity Not Before: Dec 22 15:42:26 2025 GMT Not After : Dec 29 15:42:26 2025 GMT Subject: CN=694966e3-a2a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:65:1c:bb:8d:f0:e4:0c:1f:8d:44:ab:32: 5b:34:9b:2f:03:c7:8a:12:bc:bf:67:da:e4:93:6c: d2:e2:2a:9b:90:18:63:68:5c:93:6c:d7:3e:5f:4b: 1b:d3:b4:d0:0f:25:33:49:a4:bc:fa:3c:84:74:53: 6a:ae:cb:f6:40:1e:39:b1:79:9a:8a:cd:1b:40:d9: 2b:00:6f:6e:6f:00:77:0a:c5:6c:52:ab:bf:32:70: 32:c7:6e:64:13:33:b7:c4:bf:18:5d:71:a5:6e:12: 4d:a1:c7:36:b7:b7:79:ad:e1:63:de:9f:59:6f:72: 99:29:92:e0:c4:96:04:3b:19:f2:08:07:79:4e:07: 94:6d:b5:83:48:2c:9c:ae:a5:7b:2a:a5:b2:8c:bf: 0b:c1:90:32:79:81:71:fd:e0:46:2e:9a:32:b8:74: 64:a0:13:95:76:6f:c1:14:42:d8:ec:47:ee:2c:6a: 5a:83:ea:a3:e5:14:2b:ad:0a:d7:f4:ec:74:e8:7a: d3:13:92:11:f4:ce:c1:f0:35:ea:b3:96:08:b9:89: 73:12:b4:d2:f7:e5:79:d0:62:db:6a:98:fc:71:85: 5b:f9:e5:b6:15:0c:67:40:15:39:4c:72:7c:25:93: e9:66:96:48:e7:fb:62:ee:c4:7c:e4:7f:74:fc:df: 24:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:96:CB:A6:45:FC:87:DC:33:6C:C0:CB:B2:68:60:85:B1:3B:5B:F8 X509v3 Authority Key Identifier: keyid:BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a3:26:fa:37:bc:25:8a:5a:c2:50:e7:85:51:cd:00:d3:7f: d3:9a:39:c9:a9:94:c1:92:eb:b7:bd:73:43:78:a9:32:75:52: c6:04:23:61:98:8a:75:f1:0b:49:da:3d:92:d8:38:0b:9c:5a: c1:bf:23:6b:4b:69:bf:8d:b1:cf:f9:4e:7b:b6:bd:54:7d:0a: 72:67:df:87:ce:5c:91:ac:79:e6:7a:39:e1:ec:9b:e5:51:af: 73:27:4a:46:32:35:c1:30:3c:d8:3c:0f:63:5c:b5:70:1c:a3: a6:5a:55:c5:bf:09:1f:dc:27:59:9a:2d:79:d8:d6:c0:4e:19: c2:a0:ed:cd:40:30:b0:08:0a:68:14:59:2b:cb:c3:12:96:38: 51:5a:1f:20:69:2c:bd:44:f6:23:bd:f7:6b:b4:62:02:05:24: 91:6a:2d:70:9c:90:1f:ea:5f:30:c6:af:d9:5a:28:45:7e:0c: d5:21:fd:42:53:1a:c7:d4:54:e5:c6:32:30:43:90:a3:67:2a: f5:fa:61:5d:46:ef:3c:f7:47:8b:9c:11:b5:5d:62:5f:cd:9b: 39:a7:d3:78:a3:d4:aa:2f:44:2e:b6:3e:65:64:43:34:13:ed: 23:b2:c4:f1:29:45:8d:57:fa:dd:1c:c1:36:1a:b3:67:a2:e1: 87:06:21:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCRkIxMTAvBgNVBAUTKEJGQjY5QkMyMjU3NkI5NTdCQUI1RkYzMzZCN0U4MzU4 RENCNzBBMkEwHhcNMjUxMjIyMTU0MjI2WhcNMjUxMjI5MTU0MjI2WjAYMRYwFAYD VQQDDA02OTQ5NjZlMy1hMmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6NlHLuN8OQMH41EqzJbNJsvA8eKEry/Z9rkk2zS4iqbkBhjaFyTbNc+X0sb 07TQDyUzSaS8+jyEdFNqrsv2QB45sXmais0bQNkrAG9ubwB3CsVsUqu/MnAyx25k EzO3xL8YXXGlbhJNocc2t7d5reFj3p9Zb3KZKZLgxJYEOxnyCAd5TgeUbbWDSCyc rqV7KqWyjL8LwZAyeYFx/eBGLpoyuHRkoBOVdm/BFELY7EfuLGpag+qj5RQrrQrX 9Ox06HrTE5IR9M7B8DXqs5YIuYlzErTS9+V50GLbapj8cYVb+eW2FQxnQBU5THJ8 JZPpZpZI5/ti7sR85H90/N8kIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaWy6ZF /IfcM2zAy7JoYIWxO1v4MB8GA1UdIwQYMBaAFL+2m8IldrlXurX/M2t+g1jctwoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJGQi9ERjJFMDEzRUQ5 RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVWZTZ0Zjh6YTM2RFdOeTND aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y3YWJ3aVYydVZlNnRmOHphMzZEV055M0Npby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJGQi9ERjJFMDEzRUQ5RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVW ZTZ0Zjh6YTM2RFdOeTNDaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaoyb6N7wlilrCUOeFUc0A03/TmjnJqZTBkuu3vXNDeKkydVLGBCNh mIp18QtJ2j2S2DgLnFrBvyNrS2m/jbHP+U57tr1UfQpyZ9+HzlyRrHnmejnh7Jvl Ua9zJ0pGMjXBMDzYPA9jXLVwHKOmWlXFvwkf3CdZmi152NbAThnCoO3NQDCwCApo FFkry8MSljhRWh8gaSy9RPYjvfdrtGICBSSRai1wnJAf6l8wxq/ZWihFfgzVIf1C UxrH1FTlxjIwQ5CjZyr1+mFdRu8890eLnBG1XWJfzZs5p9N4o9SqL0Qutj5lZEM0 E+0jssTxKUWNV/rdHME2GrNnouGHBiGy -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:47 2025 by rpki-client