This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft File: 7F7zNU5M1TSrhiW5m3MS1vTkixU.mft (raw, json) Hash identifier: jLIbqFnhMUebBq0tqQvdKzh8YaLWGhvXA9HKg7h4L5U= Subject key identifier: D0:FA:7B:F5:69:AB:18:90:F3:B2:04:D7:63:43:47:C9:37:90:A9:1B Authority key identifier: EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 Certificate issuer: /CN=A91EF175/serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft Manifest number: 0170 Signing time: Tue 23 Dec 2025 03:27:38 +0000 Manifest this update: Tue 23 Dec 2025 03:27:38 +0000 Manifest next update: Tue 30 Dec 2025 03:27:38 +0000 Files and hashes: 1: 7F7zNU5M1TSrhiW5m3MS1vTkixU.crl (hash: M4djfofxv7zkLyeNRPTm2YOQvK+9XPKz8bzELUgY41Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF175, serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Validity Not Before: Dec 23 03:27:38 2025 GMT Not After : Dec 30 03:27:38 2025 GMT Subject: CN=694a0c2a-97f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2c:90:5e:2d:32:6c:48:6b:2d:69:13:24:25: 85:a4:c0:f4:59:eb:55:7a:b2:99:ee:90:83:0d:77: fe:80:d5:8f:72:1f:7c:ed:5a:5e:98:e5:1d:06:69: 67:03:5c:19:48:c2:14:d7:08:76:ab:f4:32:97:a1: 66:9e:9c:d5:a5:28:51:03:20:83:a0:9f:97:25:b7: 9e:3e:29:d4:27:f8:14:85:33:bd:7e:78:f7:c7:63: cc:a8:ed:9e:44:b1:83:8c:77:e3:46:f1:42:a4:25: d9:52:59:51:72:23:9f:54:74:12:5e:8a:9f:6c:33: 8a:c9:0c:b4:af:d2:63:78:e6:11:81:8a:7c:8f:65: 9c:79:db:cf:fd:66:f1:66:ca:51:f8:2a:91:f3:0f: b4:c6:65:c5:49:48:ec:e4:f7:8c:68:a9:42:51:da: bf:61:cb:5b:00:7f:51:fc:32:be:35:27:c8:c5:4b: 10:6e:8a:4e:99:67:e3:80:4d:0c:96:9b:91:2b:b7: f0:10:6d:75:e5:6e:f2:f3:9b:1a:90:bc:31:df:bd: 4c:96:70:10:1b:29:ff:66:37:47:0f:42:ff:94:9b: 83:11:14:ed:55:ec:fc:9a:42:b5:71:5f:3c:5f:a5: 3f:f8:74:61:ac:f0:a6:21:f0:2b:0d:ad:c4:80:cf: 53:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FA:7B:F5:69:AB:18:90:F3:B2:04:D7:63:43:47:C9:37:90:A9:1B X509v3 Authority Key Identifier: keyid:EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:1b:66:3f:db:46:79:88:39:a6:df:3c:7d:e0:b6:b9:9e:9c: 6d:8c:57:74:ea:66:6b:3d:ed:c9:91:8d:46:5a:39:ae:45:82: b8:21:69:ac:6d:47:21:0f:74:f6:75:0e:fa:6c:13:f9:0b:e3: 28:d4:20:fd:a9:78:01:fd:d3:5f:68:91:92:ad:c1:23:90:62: 4d:f4:94:7a:bd:fd:83:05:af:9b:f7:f5:19:79:40:fa:a2:25: c0:4b:d7:46:5b:a6:f8:25:c4:a7:19:08:a5:bb:aa:ff:32:db: 8b:e4:af:36:8f:b4:f1:b1:68:5d:31:96:9b:94:eb:bb:65:63: 15:e7:4c:e2:a7:c9:79:03:4d:76:21:96:13:12:19:c5:c4:0c: b7:e6:7e:a2:cb:4f:f6:04:d0:92:09:06:ae:23:e2:c2:83:18: a4:d7:9d:7c:ea:91:00:7f:42:e2:a3:cd:57:b0:14:b6:24:bc: 19:6d:b5:4c:25:ca:51:f8:48:f7:d2:08:03:f4:c2:5c:6a:e3: 6d:be:0f:e5:a6:a8:87:37:dd:bd:03:59:12:7d:d8:b7:a0:e9: 83:9e:44:7d:18:5e:12:70:f7:88:9d:bc:0f:2f:30:4e:9c:d7: 49:60:0a:b3:23:b1:52:51:89:98:fc:b9:53:e4:27:34:1e:01: 81:90:a7:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNzUxMTAvBgNVBAUTKEVDNUVGMzM1NEU0Q0Q1MzRBQjg2MjVCOTlCNzMxMkQ2 RjRFNDhCMTUwHhcNMjUxMjIzMDMyNzM4WhcNMjUxMjMwMDMyNzM4WjAYMRYwFAYD VQQDDA02OTRhMGMyYS05N2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyyQXi0ybEhrLWkTJCWFpMD0WetVerKZ7pCDDXf+gNWPch987VpemOUdBmln A1wZSMIU1wh2q/Qyl6FmnpzVpShRAyCDoJ+XJbeePinUJ/gUhTO9fnj3x2PMqO2e RLGDjHfjRvFCpCXZUllRciOfVHQSXoqfbDOKyQy0r9JjeOYRgYp8j2WcedvP/Wbx ZspR+CqR8w+0xmXFSUjs5PeMaKlCUdq/YctbAH9R/DK+NSfIxUsQbopOmWfjgE0M lpuRK7fwEG115W7y85sakLwx371MlnAQGyn/ZjdHD0L/lJuDERTtVez8mkK1cV88 X6U/+HRhrPCmIfArDa3EgM9TJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFND6e/Vp qxiQ87IE12NDR8k3kKkbMB8GA1UdIwQYMBaAFOxe8zVOTNU0q4YluZtzEtb05IsV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3NS8wNDYwQUExOEZC RkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFUU3JoaVc1bTNNUzF2VGtp eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGN3pOVTVNMVRTcmhpVzVtM01TMXZUa2l4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3NS8wNDYwQUExOEZCRkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFU U3JoaVc1bTNNUzF2VGtpeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUG2Y/20Z5iDmm3zx94La5npxtjFd06mZrPe3JkY1GWjmuRYK4IWms bUchD3T2dQ76bBP5C+Mo1CD9qXgB/dNfaJGSrcEjkGJN9JR6vf2DBa+b9/UZeUD6 oiXAS9dGW6b4JcSnGQilu6r/MtuL5K82j7TxsWhdMZablOu7ZWMV50zip8l5A012 IZYTEhnFxAy35n6iy0/2BNCSCQauI+LCgxik15186pEAf0Lio81XsBS2JLwZbbVM JcpR+Ej30ggD9MJcauNtvg/lpqiHN929A1kSfdi3oOmDnkR9GF4ScPeInbwPLzBO nNdJYAqzI7FSUYmY/LlT5Cc0HgGBkKcd -----END CERTIFICATE-----Generated at Wed Dec 24 15:45:04 2025 by rpki-client