This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft File: df43qD7agAphAmCFh-30CJ2CQOA.mft (raw, json) Hash identifier: mda1GuaHPXD0qWNpe6pinHUbbpRytJETQ74UXYSSkFI= Subject key identifier: 16:A7:AA:33:55:47:24:63:06:C2:2C:BC:79:3B:6F:F9:9E:E0:8E:28 Authority key identifier: 75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0 Certificate issuer: /CN=A91DC7AA/serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft Manifest number: 7A Signing time: Sun 21 Dec 2025 05:52:26 +0000 Manifest this update: Sun 21 Dec 2025 05:52:25 +0000 Manifest next update: Sun 28 Dec 2025 05:52:25 +0000 Files and hashes: 1: df43qD7agAphAmCFh-30CJ2CQOA.crl (hash: /Cn5GqQPmJwdZxltDmln+T/ZwBkTmtZhXHsawfWmzn8=) 2: A7C7EF962A8911F09526D35BC4F9AE02.roa (hash: t0RTmg56JthvruW6/lKLjUx4XzWAwdY96H4SSM4fLcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC7AA, serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0 Validity Not Before: Dec 21 05:52:25 2025 GMT Not After : Dec 28 05:52:25 2025 GMT Subject: CN=69478b1a-38f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a7:ac:61:47:08:f8:ff:f1:c7:97:c3:76:a9: d8:cb:b9:3b:b9:97:9a:a5:af:b7:f4:7c:21:d1:03: d9:fd:f2:61:8a:41:59:d7:1d:c1:8b:a7:b5:58:f5: 21:01:f2:52:a2:8e:dd:ef:e1:9e:e7:39:8c:28:30: 89:3a:e3:c2:7b:27:b8:90:42:cb:8d:48:cf:8f:74: cb:69:0f:10:93:5d:30:df:75:52:b4:a8:74:a1:79: fc:88:d9:7f:03:67:f9:b2:18:be:ec:20:bb:b4:5f: 61:62:ad:8a:76:7a:9b:7b:68:ca:f1:b6:06:43:ee: 6b:b5:0a:e2:93:3e:15:fc:5f:a3:af:af:34:ba:d7: dd:32:7b:29:1d:0a:7a:07:c0:08:fe:20:d3:99:2a: 49:0b:29:f5:42:52:9d:80:dc:d9:a5:9d:31:ae:fb: 99:95:71:42:04:9b:2b:0f:f6:90:d2:61:16:0e:48: 7a:de:1d:b0:f9:6c:ee:42:58:fc:3f:a9:79:42:6e: 0d:9b:5e:27:e0:0c:2d:bd:9c:f3:f0:c7:17:65:ac: 5e:23:cb:6e:7e:b9:e6:79:87:29:4b:78:a0:88:65: 54:dc:af:a7:a9:07:16:9a:5d:30:75:1c:51:f1:39: ab:18:d4:59:52:70:7b:4f:62:f4:46:b9:45:9f:4a: a8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A7:AA:33:55:47:24:63:06:C2:2C:BC:79:3B:6F:F9:9E:E0:8E:28 X509v3 Authority Key Identifier: keyid:75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:36:73:28:b9:19:f4:be:ab:c8:8b:f2:ac:19:1e:a4:26:af: 89:61:96:f5:28:81:82:07:01:16:38:04:76:8c:2f:b2:99:57: 2a:35:5f:a4:7e:99:d1:31:ea:8a:e0:89:e0:58:66:d5:48:95: 8e:a6:a3:04:c6:38:3b:69:8b:75:fa:5c:bd:1f:6f:e4:d1:37: ec:0f:92:ad:6b:1d:aa:17:f9:9b:84:eb:59:9c:b3:3e:5b:56: b2:46:03:8b:63:69:ca:c7:00:ea:97:79:05:ce:0f:e7:38:e7: b1:df:56:ed:c1:6e:e8:ab:40:66:4f:96:ce:57:eb:47:9b:d1: e2:05:1f:32:62:52:77:14:e7:f3:b4:b1:14:15:09:1d:86:83: dc:9d:9e:65:6f:13:29:73:62:07:00:eb:e9:52:ce:ab:d2:cb: 93:f5:30:48:82:6f:02:cb:c0:e6:af:51:b9:2d:58:5b:cd:25: ae:70:0f:6c:f1:e9:3d:30:0d:1a:df:9b:06:ab:d0:61:92:79: f1:fa:c4:76:c9:35:8d:1d:bb:d5:be:89:3f:21:3d:ee:5a:62: 6a:b4:6e:0e:d4:35:ab:a8:e2:dd:57:21:83:12:a3:1d:20:8e: 25:fa:91:df:fa:32:9f:46:a8:85:d8:fa:4b:08:e1:40:75:e8: d7:d8:cd:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QzdBQTExMC8GA1UEBRMoNzVGRTM3QTgzRURBODAwQTYxMDI2MDg1ODdFREY0MDg5 RDgyNDBFMDAeFw0yNTEyMjEwNTUyMjVaFw0yNTEyMjgwNTUyMjVaMBgxFjAUBgNV BAMMDTY5NDc4YjFhLTM4ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqp6xhRwj4//HHl8N2qdjLuTu5l5qlr7f0fCHRA9n98mGKQVnXHcGLp7VY9SEB 8lKijt3v4Z7nOYwoMIk648J7J7iQQsuNSM+PdMtpDxCTXTDfdVK0qHShefyI2X8D Z/myGL7sILu0X2FirYp2ept7aMrxtgZD7mu1CuKTPhX8X6OvrzS6190yeykdCnoH wAj+INOZKkkLKfVCUp2A3NmlnTGu+5mVcUIEmysP9pDSYRYOSHreHbD5bO5CWPw/ qXlCbg2bXifgDC29nPPwxxdlrF4jy25+ueZ5hylLeKCIZVTcr6epBxaaXTB1HFHx OasY1FlScHtPYvRGuUWfSqgTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFqeqM1VH JGMGwiy8eTtv+Z7gjigwHwYDVR0jBBgwFoAUdf43qD7agAphAmCFh+30CJ2CQOAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDN0FBL0QyMkVEQTM0MkE4 ODExRjBBMzBEOTE1OUM0RjlBRTAyL2RmNDNxRDdhZ0FwaEFtQ0ZoLTMwQ0oyQ1FP QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGY0M3FEN2FnQXBoQW1DRmgtMzBDSjJDUU9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD N0FBL0QyMkVEQTM0MkE4ODExRjBBMzBEOTE1OUM0RjlBRTAyL2RmNDNxRDdhZ0Fw aEFtQ0ZoLTMwQ0oyQ1FPQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMw2cyi5GfS+q8iL8qwZHqQmr4lhlvUogYIHARY4BHaML7KZVyo1X6R+ mdEx6orgieBYZtVIlY6mowTGODtpi3X6XL0fb+TRN+wPkq1rHaoX+ZuE61mcsz5b VrJGA4tjacrHAOqXeQXOD+c457HfVu3BbuirQGZPls5X60eb0eIFHzJiUncU5/O0 sRQVCR2Gg9ydnmVvEylzYgcA6+lSzqvSy5P1MEiCbwLLwOavUbktWFvNJa5wD2zx 6T0wDRrfmwar0GGSefH6xHbJNY0du9W+iT8hPe5aYmq0bg7UNauo4t1XIYMSox0g jiX6kd/6Mp9GqIXY+ksI4UB16NfYzW4= -----END CERTIFICATE-----Generated at Sun Dec 21 21:15:07 2025 by rpki-client