This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft File: ep7epfyIL4Z-ujeIm807O7SsYjE.mft (raw, json) Hash identifier: m9tB+4KsVCgQWRrkY1lHjryAKDFWl+71H0TJ4w0ulsw= Subject key identifier: 53:C5:25:53:9F:5B:8E:8E:A2:36:24:8E:74:2D:0E:44:66:61:6F:94 Authority key identifier: 7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31 Certificate issuer: /CN=A91EBBAF/serialNumber=7A9EDEA5FC882F867EBA37889BCD3B3BB4AC6231 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft Manifest number: 6D Signing time: Tue 23 Dec 2025 05:48:25 +0000 Manifest this update: Tue 23 Dec 2025 05:48:25 +0000 Manifest next update: Tue 30 Dec 2025 05:48:25 +0000 Files and hashes: 1: ep7epfyIL4Z-ujeIm807O7SsYjE.crl (hash: uhumG2VcQvx1jTZmVt9UFWivrroos4QT3RTNwjBfHKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.crl rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBBAF, serialNumber=7A9EDEA5FC882F867EBA37889BCD3B3BB4AC6231 Validity Not Before: Dec 23 05:48:25 2025 GMT Not After : Dec 30 05:48:25 2025 GMT Subject: CN=694a2d29-0793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:31:1b:c1:b8:ba:61:af:8c:80:41:69:03: ed:64:ab:ed:f8:b0:48:e0:cf:52:6e:0a:29:23:fd: 40:a3:93:7d:07:9e:9f:fd:82:cb:17:a1:bf:87:09: fd:80:d8:a9:e8:95:4f:8a:01:ca:df:c8:fb:db:73: b1:be:46:1f:ed:3c:52:0e:cb:a8:69:bd:6b:46:b3: 7c:66:cf:9c:26:df:35:5a:af:68:3d:1e:e2:66:df: ae:38:dd:bd:f1:2b:a7:4f:03:04:2b:37:d6:2c:ee: 83:6a:a5:ec:5d:ac:10:4c:3c:4c:72:ad:3e:73:8c: cf:ad:3b:aa:d0:1f:fa:71:3f:5f:35:d9:6c:4e:71: 8e:28:79:31:52:b3:5f:c8:9a:0d:dd:e9:87:52:04: 9a:19:2e:09:99:64:88:cf:7e:c2:de:46:e6:04:bb: 71:d1:67:81:3c:f1:f6:00:28:eb:99:79:73:3f:d4: f5:2e:0e:77:36:07:b0:53:23:33:e9:cd:c3:e8:2f: 2f:3e:d1:44:d5:90:f8:5c:55:c4:76:83:3d:34:fb: dc:d7:51:ce:dd:11:b8:54:0c:76:37:c8:33:ce:f3: 32:8e:de:67:07:03:a5:12:aa:d6:de:81:b2:72:c8: 18:54:12:2a:f6:2f:e6:63:5e:45:23:b2:15:f4:72: 3b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C5:25:53:9F:5B:8E:8E:A2:36:24:8E:74:2D:0E:44:66:61:6F:94 X509v3 Authority Key Identifier: keyid:7A:9E:DE:A5:FC:88:2F:86:7E:BA:37:88:9B:CD:3B:3B:B4:AC:62:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep7epfyIL4Z-ujeIm807O7SsYjE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/191A638636DD11F096862166C4F9AE02/ep7epfyIL4Z-ujeIm807O7SsYjE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:bc:c9:c8:4f:9b:c3:92:88:01:02:91:2b:48:a9:a7:f4:53: 18:85:be:92:bf:75:9f:d1:d8:a2:36:83:05:c9:e9:8c:2d:65: 2c:3c:60:81:f0:e4:ef:f8:92:0c:62:06:2d:db:99:27:d6:47: f4:7b:35:31:bd:b8:a1:3a:de:1c:2d:78:6f:9a:5a:42:40:32: 77:9d:f3:a1:f8:74:57:3d:5b:87:82:65:74:10:3a:78:22:b2: 8e:d4:23:73:ea:fc:37:cb:3b:a9:22:7f:dd:5d:e1:be:2a:be: dd:50:19:f5:6a:0f:3b:f7:40:74:f2:15:55:9c:22:d6:d7:00: 1f:8a:1d:f5:13:34:0e:ba:93:7a:28:8a:69:20:8a:4f:4f:58: f0:f2:e4:ba:07:2b:c4:f7:1c:dc:06:f8:10:7d:34:a8:c5:e0: 9c:ae:0b:a6:ab:31:12:b8:b6:7e:6f:ac:d4:ff:8b:03:53:fa: d9:c6:30:26:77:84:7b:c8:50:c9:18:4f:fa:96:57:fa:17:10: e2:d8:6c:aa:66:ba:80:6f:53:68:de:dd:66:2f:30:02:41:c7: c8:a9:a2:e5:9b:c7:3d:73:e7:05:38:3c:f4:89:df:8d:de:45: 38:61:3c:27:86:e8:46:c3:eb:0f:f1:ca:3e:1d:98:23:93:fd: 71:71:91:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkJBRjExMC8GA1UEBRMoN0E5RURFQTVGQzg4MkY4NjdFQkEzNzg4OUJDRDNCM0JC NEFDNjIzMTAeFw0yNTEyMjMwNTQ4MjVaFw0yNTEyMzAwNTQ4MjVaMBgxFjAUBgNV BAMMDTY5NGEyZDI5LTA3OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClmDEbwbi6Ya+MgEFpA+1kq+34sEjgz1JuCikj/UCjk30Hnp/9gssXob+HCf2A 2KnolU+KAcrfyPvbc7G+Rh/tPFIOy6hpvWtGs3xmz5wm3zVar2g9HuJm36443b3x K6dPAwQrN9Ys7oNqpexdrBBMPExyrT5zjM+tO6rQH/pxP1812WxOcY4oeTFSs1/I mg3d6YdSBJoZLgmZZIjPfsLeRuYEu3HRZ4E88fYAKOuZeXM/1PUuDnc2B7BTIzPp zcPoLy8+0UTVkPhcVcR2gz00+9zXUc7dEbhUDHY3yDPO8zKO3mcHA6USqtbegbJy yBhUEir2L+ZjXkUjshX0cjuZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU8UlU59b jo6iNiSOdC0ORGZhb5QwHwYDVR0jBBgwFoAUep7epfyIL4Z+ujeIm807O7SsYjEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQkFGLzE5MUE2Mzg2MzZE RDExRjA5Njg2MjE2NkM0RjlBRTAyL2VwN2VwZnlJTDRaLXVqZUltODA3TzdTc1lq RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZXA3ZXBmeUlMNFotdWplSW04MDdPN1NzWWpFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QkFGLzE5MUE2Mzg2MzZERDExRjA5Njg2MjE2NkM0RjlBRTAyL2VwN2VwZnlJTDRa LXVqZUltODA3TzdTc1lqRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADi8ychPm8OSiAECkStIqaf0UxiFvpK/dZ/R2KI2gwXJ6YwtZSw8YIHw 5O/4kgxiBi3bmSfWR/R7NTG9uKE63hwteG+aWkJAMned86H4dFc9W4eCZXQQOngi so7UI3Pq/DfLO6kif91d4b4qvt1QGfVqDzv3QHTyFVWcItbXAB+KHfUTNA66k3oo imkgik9PWPDy5LoHK8T3HNwG+BB9NKjF4JyuC6arMRK4tn5vrNT/iwNT+tnGMCZ3 hHvIUMkYT/qWV/oXEOLYbKpmuoBvU2je3WYvMAJBx8ipouWbxz1z5wU4PPSJ343e RThhPCeG6EbD6w/xyj4dmCOT/XFxkUY= -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:22 2025 by rpki-client