This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft File: 7EhKUeRjuYr44bAq4ilVoTIvH3U.mft (raw, json) Hash identifier: +usdkRds8ZB4R21Fw/upOMlbcE96J8Iu3D6ATZHv/VM= Subject key identifier: 34:B6:7A:FE:4C:20:E1:40:5B:FE:59:8C:FA:4A:E9:1C:91:80:46:20 Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 Certificate issuer: /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Certificate serial: 3530 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft Manifest number: 350F Signing time: Mon 22 Dec 2025 15:08:13 +0000 Manifest this update: Mon 22 Dec 2025 15:08:13 +0000 Manifest next update: Mon 29 Dec 2025 15:08:13 +0000 Files and hashes: 1: 7EhKUeRjuYr44bAq4ilVoTIvH3U.crl (hash: Sv8ZBqUZGe1mrLykh4jSVIYlbMV6I9m71lZ4Vj+T7sk=) 2: 650B909C903B11EF924F0B86C4F9AE02.roa (hash: LlAjrsD9ycrpFNBYdBCY0r9fbGY7oXTXFKR7+XLlDrc=) 3: 10704342B82811EFBBBB8612C4F9AE02.roa (hash: COh4JhkMC+3XkvGRBIDud8yE0YD4qDE6A/jEDVUuxUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13616 (0x3530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F2, serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Validity Not Before: Dec 22 15:08:13 2025 GMT Not After : Dec 29 15:08:13 2025 GMT Subject: CN=69495edd-5bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:a2:a5:4e:94:4e:0a:c4:38:b7:d9:f2:5b: 8a:10:82:83:c8:f4:1c:af:90:6c:6d:21:39:1f:2a: b6:01:87:56:7f:0f:70:06:7d:95:73:73:cd:f1:d5: 57:1a:24:b7:81:53:be:9c:a1:69:7d:1b:0b:29:21: 03:b2:3b:d2:1d:c5:41:15:ea:e0:0c:19:c6:e1:8e: f6:a0:b5:ba:7b:9f:51:f8:9a:8b:e7:f6:80:18:64: 07:8f:a8:4f:66:81:66:cd:a4:5e:29:c3:6d:25:31: 85:67:51:fb:69:f5:ea:b2:26:97:d5:e0:0f:a2:ee: 37:41:dc:51:bc:ad:73:b9:a2:6e:44:89:5a:46:4c: db:b5:6a:d7:ba:80:bf:71:75:41:b0:6b:02:f5:a8: 70:a0:0e:03:0b:be:9c:cc:20:83:d0:73:03:c6:51: 7c:13:74:77:2d:f2:f7:bc:c2:93:f2:4e:a7:c4:88: 86:e9:51:88:a4:44:2f:cd:90:e9:5a:97:1e:7f:9c: fb:37:06:af:f8:54:a1:50:7f:1c:22:77:43:0b:96: e2:36:fd:12:3e:1e:de:c8:56:5d:fb:d9:db:eb:c4: 24:bd:12:88:26:89:06:74:93:5c:f3:10:e5:56:e6: 8a:aa:59:65:a9:ce:72:75:08:bc:89:1b:20:88:f8: 5c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B6:7A:FE:4C:20:E1:40:5B:FE:59:8C:FA:4A:E9:1C:91:80:46:20 X509v3 Authority Key Identifier: keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:91:d9:b9:e0:77:34:d2:09:c9:e2:0b:e5:08:aa:83:66:6f: c1:d8:a5:ce:cd:48:6a:7a:33:d5:89:92:a7:86:26:c9:f3:73: 75:b9:f5:44:b6:2b:e7:ba:9e:69:02:d0:79:d9:f5:05:1c:c6: 5e:10:61:28:f5:af:5d:54:6c:59:1a:91:db:01:cc:99:14:cd: 5e:f7:8f:30:80:40:79:00:de:95:b0:df:a7:f1:2d:0e:6f:4f: c0:90:53:7a:d9:9e:a0:6c:e9:80:f0:f1:bc:bc:d2:6a:0d:ff: 28:a3:a9:af:93:a4:37:7a:b6:7d:50:e9:ec:2c:0d:af:3b:60: de:87:7b:e5:a5:e7:48:c3:e9:f1:4d:f9:ad:97:86:b5:67:9b: 2d:5a:5f:ea:d0:23:cc:9b:10:2e:f2:6b:30:a7:39:2e:ec:bd: 66:06:79:99:66:49:87:1a:8b:54:a4:f6:c4:df:27:f2:2b:77: 6f:27:cf:78:e8:54:f1:c3:0c:a2:17:6d:51:a3:21:97:33:34: 79:29:4a:97:36:b5:16:49:4b:0a:c8:3d:58:9c:fb:2b:e0:17: 60:d2:46:7f:25:1e:97:88:5c:12:8e:2f:3f:a9:fa:4d:4e:83: 3a:a7:93:2f:d2:e6:74:6d:4a:ee:d1:e5:8a:90:26:55:60:35: 2d:e7:85:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjIxMTAvBgNVBAUTKEVDNDg0QTUxRTQ2M0I5OEFGOEUxQjAyQUUyMjk1NUEx MzIyRjFGNzUwHhcNMjUxMjIyMTUwODEzWhcNMjUxMjI5MTUwODEzWjAYMRYwFAYD VQQDDA02OTQ5NWVkZC01YmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkSipU6UTgrEOLfZ8luKEIKDyPQcr5BsbSE5Hyq2AYdWfw9wBn2Vc3PN8dVX GiS3gVO+nKFpfRsLKSEDsjvSHcVBFergDBnG4Y72oLW6e59R+JqL5/aAGGQHj6hP ZoFmzaReKcNtJTGFZ1H7afXqsiaX1eAPou43QdxRvK1zuaJuRIlaRkzbtWrXuoC/ cXVBsGsC9ahwoA4DC76czCCD0HMDxlF8E3R3LfL3vMKT8k6nxIiG6VGIpEQvzZDp Wpcef5z7Nwav+FShUH8cIndDC5biNv0SPh7eyFZd+9nb68QkvRKIJokGdJNc8xDl VuaKqlllqc5ydQi8iRsgiPhcKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDS2ev5M IOFAW/5ZjPpK6RyRgEYgMB8GA1UdIwQYMBaAFOxISlHkY7mK+OGwKuIpVaEyLx91 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMi80NkQwOTE5ODFE QTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZcjQ0YkFxNGlsVm9USXZI M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFaEtVZVJqdVlyNDRiQXE0aWxWb1RJdkgzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMi80NkQwOTE5ODFEQTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZ cjQ0YkFxNGlsVm9USXZIM1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPkdm54Hc00gnJ4gvlCKqDZm/B2KXOzUhqejPViZKnhibJ83N1ufVE tivnup5pAtB52fUFHMZeEGEo9a9dVGxZGpHbAcyZFM1e948wgEB5AN6VsN+n8S0O b0/AkFN62Z6gbOmA8PG8vNJqDf8oo6mvk6Q3erZ9UOnsLA2vO2Deh3vlpedIw+nx Tfmtl4a1Z5stWl/q0CPMmxAu8mswpzku7L1mBnmZZkmHGotUpPbE3yfyK3dvJ894 6FTxwwyiF21RoyGXMzR5KUqXNrUWSUsKyD1YnPsr4Bdg0kZ/JR6XiFwSji8/qfpN ToM6p5Mv0uZ0bUru0eWKkCZVYDUt54Vh -----END CERTIFICATE-----Generated at Tue Dec 23 21:12:34 2025 by rpki-client