This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft File: C7ukEkukx8in-dCX7uqpgy8JeWc.mft (raw, json) Hash identifier: tLUZOL48vMIZbW5EweSlT4BhsCA+ivR14dNe7VYbq8I= Subject key identifier: C2:3D:37:69:6F:13:BC:3D:EF:62:8E:7D:7B:62:B7:CB:E7:2C:83:9F Authority key identifier: 0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67 Certificate issuer: /CN=A91D901E/serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft Manifest number: 45 Signing time: Tue 23 Dec 2025 06:15:04 +0000 Manifest this update: Tue 23 Dec 2025 06:15:04 +0000 Manifest next update: Tue 30 Dec 2025 06:15:04 +0000 Files and hashes: 1: C7ukEkukx8in-dCX7uqpgy8JeWc.crl (hash: 1QnsOvE2WepOUW+Ym6/5I8SwUHtQCvEAZEKMZD/ThDs=) 2: 58F7915E78DC11F084C71D2BC4F9AE02.roa (hash: jTESa3U73YRI0+Qom5Rj/Y57jrY10Y9T/v9pDSvTy48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:15:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D901E, serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967 Validity Not Before: Dec 23 06:15:04 2025 GMT Not After : Dec 30 06:15:04 2025 GMT Subject: CN=694a3368-105b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:e2:c3:7b:fc:f5:c0:cd:62:c0:b1:df:44: 8f:d4:cf:fd:f3:75:3d:41:f8:8f:9c:18:98:07:19: 25:96:4b:fb:07:7e:e1:09:5b:c5:9b:64:86:e0:ed: 12:40:48:78:7e:5b:1a:ed:8d:a8:e8:e3:01:68:3b: 44:27:11:c5:32:c9:3b:1f:55:c4:80:3c:33:7f:f6: ab:ef:06:ed:df:c3:85:ea:10:2d:54:04:c3:cb:cc: cd:2d:13:3c:e4:a3:75:fa:08:c8:6a:28:93:42:fc: 02:e0:dc:a8:8d:fa:d6:b0:27:33:1f:54:4f:5a:28: d6:2b:a0:3c:86:7b:12:5f:9c:ce:2c:7d:83:9f:3e: e6:a0:41:ca:60:72:d2:ca:0b:e6:db:3a:93:d0:ab: a7:d9:65:b5:74:fb:7c:dc:38:8a:86:23:6c:20:41: 48:84:87:79:5a:94:40:e8:4d:7f:20:a5:6a:55:4d: 57:ea:57:1f:ca:c5:36:c0:87:7c:fe:7b:16:5f:b4: bd:8a:f9:d8:05:1c:37:7e:87:7a:89:0a:65:ee:f2: b0:67:e7:dc:23:6c:30:be:3a:73:ac:1c:34:9c:2b: 4f:18:c1:29:36:36:50:ea:4e:a7:8b:ee:dc:71:a2: a0:6b:75:3d:2d:bf:8e:12:51:e7:7f:a5:61:55:c2: 0c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3D:37:69:6F:13:BC:3D:EF:62:8E:7D:7B:62:B7:CB:E7:2C:83:9F X509v3 Authority Key Identifier: keyid:0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:aa:26:02:b0:0e:b2:fe:ba:67:b0:e5:dc:41:e9:0f:8b:3d: 96:7f:c3:aa:e1:a7:8a:80:df:a6:6c:97:a5:5b:48:4e:a1:7e: 30:54:88:fd:4c:6e:ed:d7:16:1c:ed:7d:85:07:9a:a9:05:5a: eb:bd:04:8d:d4:16:3a:ff:35:2d:ab:84:ed:93:f4:e4:87:63: 33:c8:5b:07:8d:9e:68:69:61:32:86:1f:2f:80:26:db:ff:f5: 16:89:b9:c2:66:d9:a9:34:27:75:06:02:6f:a0:51:cf:68:96: e1:b4:d4:b1:4f:93:17:a0:33:c2:1f:1b:4f:6e:d4:37:d4:e5: c6:60:2b:dc:c6:f9:69:54:32:33:37:2b:34:99:37:34:c7:8a: 8f:f7:23:99:2e:52:ea:67:4f:5d:c4:11:d8:2e:2b:91:d2:e4: e8:bd:bd:23:7d:5c:0f:93:cc:0b:15:8d:5d:f8:04:2d:39:f3: 14:98:53:e5:85:a9:7a:b7:b0:4d:c1:bc:46:65:6b:2e:d4:ab: 19:72:29:ec:81:d2:16:16:36:e5:dc:63:fe:79:24:82:68:9d: 94:9e:7a:9f:5f:ea:34:0c:98:16:98:b7:a4:ed:9d:c8:50:c1: f7:79:06:bf:f0:ae:6f:f5:2c:eb:11:c1:71:42:0e:e0:0e:21: 6f:5a:e2:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTAxRTExMC8GA1UEBRMoMEJCQkE0MTI0QkE0QzdDOEE3RjlEMDk3RUVFQUE5ODMy RjA5Nzk2NzAeFw0yNTEyMjMwNjE1MDRaFw0yNTEyMzAwNjE1MDRaMBgxFjAUBgNV BAMMDTY5NGEzMzY4LTEwNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDKeLDe/z1wM1iwLHfRI/Uz/3zdT1B+I+cGJgHGSWWS/sHfuEJW8WbZIbg7RJA SHh+Wxrtjajo4wFoO0QnEcUyyTsfVcSAPDN/9qvvBu3fw4XqEC1UBMPLzM0tEzzk o3X6CMhqKJNC/ALg3KiN+tawJzMfVE9aKNYroDyGexJfnM4sfYOfPuagQcpgctLK C+bbOpPQq6fZZbV0+3zcOIqGI2wgQUiEh3lalEDoTX8gpWpVTVfqVx/KxTbAh3z+ exZftL2K+dgFHDd+h3qJCmXu8rBn59wjbDC+OnOsHDScK08YwSk2NlDqTqeL7txx oqBrdT0tv44SUed/pWFVwgwZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwj03aW8T vD3vYo59e2K3y+csg58wHwYDVR0jBBgwFoAUC7ukEkukx8in+dCX7uqpgy8JeWcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5MDFFL0U2RTg4MEQ4NzhE QTExRjBCMEZCRTIxNkM0RjlBRTAyL0M3dWtFa3VreDhpbi1kQ1g3dXFwZ3k4SmVX Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzd1a0VrdWt4OGluLWRDWDd1cXBneThKZVdjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 MDFFL0U2RTg4MEQ4NzhEQTExRjBCMEZCRTIxNkM0RjlBRTAyL0M3dWtFa3VreDhp bi1kQ1g3dXFwZ3k4SmVXYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABqqJgKwDrL+umew5dxB6Q+LPZZ/w6rhp4qA36Zsl6VbSE6hfjBUiP1M bu3XFhztfYUHmqkFWuu9BI3UFjr/NS2rhO2T9OSHYzPIWweNnmhpYTKGHy+AJtv/ 9RaJucJm2ak0J3UGAm+gUc9oluG01LFPkxegM8IfG09u1DfU5cZgK9zG+WlUMjM3 KzSZNzTHio/3I5kuUupnT13EEdguK5HS5Oi9vSN9XA+TzAsVjV34BC058xSYU+WF qXq3sE3BvEZlay7UqxlyKeyB0hYWNuXcY/55JIJonZSeep9f6jQMmBaYt6TtnchQ wfd5Br/wrm/1LOsRwXFCDuAOIW9a4qk= -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:33 2025 by rpki-client