This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft File: 7DavWXkJHGv6WA6juiJXeTV1cNc.mft (raw, json) Hash identifier: o5PHIN4TBzHW5eFh9vI5BweZG8Za67m5Tdhsv9iFvX8= Subject key identifier: 3B:D9:A7:99:96:A8:53:36:96:9D:47:6B:FE:E3:83:11:61:9C:DB:F5 Authority key identifier: EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 Certificate issuer: /CN=A91D7578/serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7 Certificate serial: 066C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft Manifest number: 065B Signing time: Mon 22 Dec 2025 21:53:43 +0000 Manifest this update: Mon 22 Dec 2025 21:53:43 +0000 Manifest next update: Mon 29 Dec 2025 21:53:43 +0000 Files and hashes: 1: 7DavWXkJHGv6WA6juiJXeTV1cNc.crl (hash: BtH+6Pk9bdRBXDZASO8mr6RzJcFNltOHM0V6zC1zsx8=) 2: 26E44986BE8311F0B427BB65C4F9AE02.roa (hash: WDe5+WCW+WUnfyj9lW0W66HhFFb2k+ZltOdwdXoQMHI=) 3: E8542DEA6B8811ECAC731B4EC4F9AE02.roa (hash: TeJpD3Jj2YvGpGUMH39dSWrHPG/q0+u5tAy2AR+WaQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1644 (0x66c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7578, serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7 Validity Not Before: Dec 22 21:53:43 2025 GMT Not After : Dec 29 21:53:43 2025 GMT Subject: CN=6949bde7-ebfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ab:5b:48:9b:43:68:c1:a1:f3:aa:55:81:c7: 0e:94:c2:2c:11:1d:7c:c0:13:e7:e3:52:48:84:c3: fb:0b:92:33:69:55:48:6d:50:17:39:0d:7a:45:b7: 86:4b:44:3b:d9:5c:73:e9:7b:2a:df:39:1c:5e:f7: 30:1e:65:0b:b1:3d:33:40:82:12:b5:f7:8c:27:c5: 17:f7:51:e3:7f:71:cb:cd:45:6e:15:91:2d:6a:5d: 47:20:19:72:de:86:cf:9a:5b:e5:27:54:70:17:7e: cd:5a:bb:9b:0e:94:a9:9d:04:2e:b5:51:d6:ec:db: 9d:a3:2d:35:41:d6:85:9b:6b:1e:f2:d3:a0:e0:4e: 31:a8:d9:9e:2a:c7:57:a5:4c:70:fc:85:3f:be:48: 2e:1e:9a:5a:ab:61:f4:79:cc:ff:3d:16:db:ae:f0: ab:d1:02:ea:1f:70:4a:fb:6d:84:7a:fd:93:50:b6: b6:12:3a:e6:a3:8d:11:6f:c5:2d:a8:b6:3b:69:03: 4b:4f:f9:95:8a:f9:ad:b6:02:34:05:53:63:a2:12: 94:ef:d5:2a:d1:64:75:61:b3:7f:47:4d:94:65:c2: ea:a1:90:3c:5a:47:81:c6:f8:cd:7d:5f:c2:9b:4a: 52:49:b8:f8:40:7f:32:b4:a3:dd:42:8c:76:64:a0: c4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D9:A7:99:96:A8:53:36:96:9D:47:6B:FE:E3:83:11:61:9C:DB:F5 X509v3 Authority Key Identifier: keyid:EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:40:89:a7:dc:dc:63:5c:6a:39:07:8b:e9:13:1a:1c:e3:01: f7:17:64:88:39:91:0b:c3:0c:8e:b8:e9:44:a8:64:7f:32:1f: 75:05:47:d5:2f:fa:87:87:9e:d2:1c:37:97:59:ce:99:25:fb: 76:cb:e2:76:84:e4:5f:03:ab:c3:67:4a:54:b9:32:b3:d2:6c: 75:aa:60:fe:17:3c:c9:60:f2:2c:9f:b8:5e:d0:65:12:15:f4: 8c:3a:8d:cd:8f:a2:61:31:d7:cb:2d:68:dd:c6:ee:47:6b:dd: 29:21:2b:73:1f:50:e7:f1:53:c2:e6:0c:5e:97:01:28:f0:2f: bd:ed:2e:02:83:00:2b:64:c2:bb:ff:8a:b4:d5:90:23:bf:2e: 57:12:44:cd:41:13:51:cd:c0:e8:e2:d3:75:a4:be:e5:d4:f9: a4:2c:5e:7f:4d:73:70:c8:51:0f:36:78:b7:e8:89:f2:ea:69: dd:04:61:b9:61:e8:06:f8:ba:d5:34:88:ef:cc:8a:9b:2e:85: 93:46:c1:d1:67:23:fc:6e:f5:65:ab:9e:33:1c:be:bb:5e:92: 14:44:5a:ae:3e:60:de:28:d7:83:c7:01:77:63:6d:a5:a8:17: 0a:8f:89:f8:11:f7:0a:c4:be:bd:d5:0c:e0:65:03:0b:72:1e: 1c:f2:f7:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc1NzgxMTAvBgNVBAUTKEVDMzZBRjU5NzkwOTFDNkJGQTU4MEVBM0JBMjI1Nzc5 MzU3NTcwRDcwHhcNMjUxMjIyMjE1MzQzWhcNMjUxMjI5MjE1MzQzWjAYMRYwFAYD VQQDDA02OTQ5YmRlNy1lYmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7KtbSJtDaMGh86pVgccOlMIsER18wBPn41JIhMP7C5IzaVVIbVAXOQ16RbeG S0Q72Vxz6Xsq3zkcXvcwHmULsT0zQIIStfeMJ8UX91Hjf3HLzUVuFZEtal1HIBly 3obPmlvlJ1RwF37NWrubDpSpnQQutVHW7Nudoy01QdaFm2se8tOg4E4xqNmeKsdX pUxw/IU/vkguHppaq2H0ecz/PRbbrvCr0QLqH3BK+22Eev2TULa2Ejrmo40Rb8Ut qLY7aQNLT/mVivmttgI0BVNjohKU79Uq0WR1YbN/R02UZcLqoZA8WkeBxvjNfV/C m0pSSbj4QH8ytKPdQox2ZKDE4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvZp5mW qFM2lp1Ha/7jgxFhnNv1MB8GA1UdIwQYMBaAFOw2r1l5CRxr+lgOo7oiV3k1dXDX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC9EM0MwMTkwQ0JC OUQxMUVCODRGNzNCM0FDNEY5QUUwMi83RGF2V1hrSkhHdjZXQTZqdWlKWGVUVjFj TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEYXZXWGtKSEd2NldBNmp1aUpYZVRWMWNOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzU3OC9EM0MwMTkwQ0JCOUQxMUVCODRGNzNCM0FDNEY5QUUwMi83RGF2V1hrSkhH djZXQTZqdWlKWGVUVjFjTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5QImn3NxjXGo5B4vpExoc4wH3F2SIOZELwwyOuOlEqGR/Mh91BUfV L/qHh57SHDeXWc6ZJft2y+J2hORfA6vDZ0pUuTKz0mx1qmD+FzzJYPIsn7he0GUS FfSMOo3Nj6JhMdfLLWjdxu5Ha90pIStzH1Dn8VPC5gxelwEo8C+97S4CgwArZMK7 /4q01ZAjvy5XEkTNQRNRzcDo4tN1pL7l1PmkLF5/TXNwyFEPNni36Iny6mndBGG5 YegG+LrVNIjvzIqbLoWTRsHRZyP8bvVlq54zHL67XpIURFquPmDeKNeDxwF3Y22l qBcKj4n4EfcKxL691QzgZQMLch4c8vfY -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:48 2025 by rpki-client