This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft File: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json) Hash identifier: 0KHMM63HIQJ9PqAjktQ9Ghd2pfadChK2FN7/ZI1h19c= Subject key identifier: CA:96:B7:8D:60:B5:93:34:6C:D8:71:76:4F:64:60:91:F4:D5:07:3F Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA Certificate issuer: /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft Manifest number: 016A Signing time: Wed 17 Dec 2025 03:28:59 +0000 Manifest this update: Wed 17 Dec 2025 03:28:58 +0000 Manifest next update: Wed 24 Dec 2025 03:28:58 +0000 Files and hashes: 1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: DIDfmGuSjnytp0UVi0Z5vVNQj2/+EjgMdWSPEbSBffM=) 2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: yzICNTcM283Dqn+31XlCHYK+SaKesuIOk3Z/S3+BpWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 03:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Validity Not Before: Dec 17 03:28:58 2025 GMT Not After : Dec 24 03:28:58 2025 GMT Subject: CN=6942237b-23b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:00:60:de:75:be:bc:40:85:75:c7:b4:f4:24: 32:97:d6:a6:34:48:1b:2f:bd:bf:2a:e5:fa:19:5c: b5:90:d5:2a:36:2c:66:0e:58:f2:de:48:0d:36:a6: 67:90:6d:4e:0d:59:8b:df:9a:60:1d:95:69:b7:df: 47:c2:ca:44:7e:d9:c6:eb:26:bc:11:b1:17:92:84: 3e:15:8e:6a:9f:59:11:4b:ed:f0:34:1e:ce:58:e9: 3b:15:03:2b:6b:68:d0:13:ee:3f:e1:c8:d4:6d:3e: e6:26:4b:9c:48:36:4a:93:1a:1b:10:ef:eb:69:f3: 49:b2:be:4e:14:6b:ff:c7:d8:c7:aa:2a:e7:33:b7: cb:e8:ef:df:98:bb:f3:75:51:c7:38:55:71:8a:3b: 57:f1:f7:65:b3:00:1f:9f:82:6b:6d:53:da:49:8d: bf:7a:cb:8f:2f:9d:1c:aa:ad:cc:49:32:9d:81:1e: 71:36:7c:65:a3:5d:69:06:5c:ac:b8:41:e6:13:f3: dd:e4:4f:79:37:cd:4b:8e:ea:a2:c7:9f:ad:af:d5: a7:2a:03:72:36:7a:72:1b:b8:e1:9a:38:c2:3c:e7: 5e:d6:a4:a7:2c:9e:fe:7b:0a:2a:7f:80:7d:65:a3: bb:fc:24:83:d5:20:d5:a1:b4:3c:10:50:af:67:16: bc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:96:B7:8D:60:B5:93:34:6C:D8:71:76:4F:64:60:91:F4:D5:07:3F X509v3 Authority Key Identifier: keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:ef:ab:66:d8:a8:8b:a5:cb:dd:ef:a0:30:c0:92:a8:48:93: 1c:42:db:9d:bb:0b:a8:49:0e:c1:5b:fc:89:3a:78:ae:f9:61: 01:7a:2b:32:53:91:9f:de:5c:e8:0f:86:c9:a2:0f:6d:0d:02: 95:9e:9e:93:d4:c0:36:01:87:f1:f1:3a:2d:a9:e4:e0:fa:07: 6b:a9:05:1f:31:79:fd:d7:73:b2:bc:3c:2f:63:24:4b:ec:9d: f1:24:1b:02:fd:87:8c:6d:43:26:02:b5:a4:14:f3:39:7b:a3: 2d:f5:58:56:65:3f:70:7a:a5:93:b3:9f:86:3d:05:50:16:18: 73:47:44:64:7c:2e:d5:ab:c6:71:be:13:82:f0:11:ce:34:6a: 75:e2:f5:34:64:55:87:4d:06:c8:8d:27:07:d2:53:b4:99:ea: cb:12:09:fd:3c:14:98:8c:23:5e:dc:8f:dc:b1:93:a2:9b:bb: 6c:a4:26:c7:84:0d:99:97:b5:25:3c:88:e7:ee:fd:01:f4:c3: e8:56:c2:e2:d6:4c:d6:dc:09:25:f1:62:e2:da:fb:c9:18:e2: a8:f4:56:2f:dd:fd:47:21:2c:f0:d9:91:b3:57:ef:14:fa:70: 06:52:ec:f3:ae:2d:36:31:c8:ac:b1:1d:c4:c1:90:dd:7e:33: da:bc:bf:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzQUYxMTAvBgNVBAUTKEVGMzBBMjQxNDZERjY2QjFGQTZGQkE1RDY3Njc2OUVC NjRCMzg3QUEwHhcNMjUxMjE3MDMyODU4WhcNMjUxMjI0MDMyODU4WjAYMRYwFAYD VQQDDA02OTQyMjM3Yi0yM2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtABg3nW+vECFdce09CQyl9amNEgbL72/KuX6GVy1kNUqNixmDljy3kgNNqZn kG1ODVmL35pgHZVpt99HwspEftnG6ya8EbEXkoQ+FY5qn1kRS+3wNB7OWOk7FQMr a2jQE+4/4cjUbT7mJkucSDZKkxobEO/rafNJsr5OFGv/x9jHqirnM7fL6O/fmLvz dVHHOFVxijtX8fdlswAfn4JrbVPaSY2/esuPL50cqq3MSTKdgR5xNnxlo11pBlys uEHmE/Pd5E95N81Ljuqix5+tr9WnKgNyNnpyG7jhmjjCPOde1qSnLJ7+ewoqf4B9 ZaO7/CSD1SDVobQ8EFCvZxa8JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqWt41g tZM0bNhxdk9kYJH01Qc/MB8GA1UdIwQYMBaAFO8wokFG32ax+m+6XWdnaetks4eq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNBRi9FMTREMUFCNEI2 QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpySDZiN3BkWjJkcDYyU3po Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd6Q2lRVWJmWnJINmI3cGRaMmRwNjJTemg2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNBRi9FMTREMUFCNEI2QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpy SDZiN3BkWjJkcDYyU3poNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW76tm2KiLpcvd76AwwJKoSJMcQtuduwuoSQ7BW/yJOniu+WEBeisy U5Gf3lzoD4bJog9tDQKVnp6T1MA2AYfx8TotqeTg+gdrqQUfMXn913OyvDwvYyRL 7J3xJBsC/YeMbUMmArWkFPM5e6Mt9VhWZT9weqWTs5+GPQVQFhhzR0RkfC7Vq8Zx vhOC8BHONGp14vU0ZFWHTQbIjScH0lO0merLEgn9PBSYjCNe3I/csZOim7tspCbH hA2Zl7UlPIjn7v0B9MPoVsLi1kzW3Akl8WLi2vvJGOKo9FYv3f1HISzw2ZGzV+8U +nAGUuzzri02McissR3EwZDdfjPavL9H -----END CERTIFICATE-----Generated at Fri Dec 19 03:43:10 2025 by rpki-client