This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft File: EdT02sf7qLXBIiQwBTm9xhVEXeU.mft (raw, json) Hash identifier: JNfbNuPqf2vRCs2tgcyUdAGyn5DDrT+XY1Kkbp0doSI= Subject key identifier: C6:E5:31:89:34:F1:7F:EF:38:4A:72:2B:3A:60:7D:71:F1:CD:E7:07 Authority key identifier: 11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5 Certificate issuer: /CN=A91F79A2/serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft Manifest number: 0126 Signing time: Tue 23 Dec 2025 03:44:06 +0000 Manifest this update: Tue 23 Dec 2025 03:44:06 +0000 Manifest next update: Tue 30 Dec 2025 03:44:06 +0000 Files and hashes: 1: EdT02sf7qLXBIiQwBTm9xhVEXeU.crl (hash: pnBVUUaphuFqdd8I1ZgZ/v081r6oPDgzSfVREsFVNUE=) 2: 6B10AF52379A11F0B3AC7740C4F9AE02.roa (hash: rykf5EiwJxMbaGGZx16BKp2POKraZb9uuOUjLdA5j+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F79A2, serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5 Validity Not Before: Dec 23 03:44:06 2025 GMT Not After : Dec 30 03:44:06 2025 GMT Subject: CN=694a1006-9647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:a2:27:33:77:bf:63:76:c7:57:a2:a5:d7: fa:af:4c:67:38:f5:24:e5:2a:82:fa:99:da:13:01: b4:17:f9:6a:50:3c:90:13:8a:41:f5:0d:f1:ab:fb: 38:2a:4d:e2:ab:3f:7e:7b:0a:59:54:cf:2f:d9:f6: b2:af:84:9c:51:6e:b2:a0:6a:78:94:75:7a:35:a1: d1:7e:18:71:d6:8d:89:00:7f:13:33:5c:46:95:da: c4:30:67:3b:5f:36:07:31:ea:9c:6d:49:a1:60:7e: 06:59:79:08:bf:0d:b2:8b:31:8d:f7:0b:bd:f1:06: cd:d9:7e:dd:88:cb:86:47:f6:08:94:e3:fe:c0:7c: 01:2f:6f:58:b6:c0:e8:4f:21:3d:6e:11:2f:9e:a0: af:68:02:93:50:43:91:61:d5:f5:73:94:bf:df:66: 38:dc:7b:90:62:29:7e:63:80:f4:78:35:20:d3:55: 2a:80:5d:0c:cc:26:92:b9:b5:1a:57:00:15:96:df: e3:d7:73:c4:2f:42:72:98:78:0c:8f:83:fb:32:d6: 16:ee:9f:af:a1:be:30:e9:75:9c:48:a9:25:ea:63: 6b:ab:0f:ca:d2:c3:8b:dd:50:34:f9:d1:76:b1:88: b7:c8:63:2c:0e:e3:69:63:1a:97:14:85:f9:53:46: a4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E5:31:89:34:F1:7F:EF:38:4A:72:2B:3A:60:7D:71:F1:CD:E7:07 X509v3 Authority Key Identifier: keyid:11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:d7:cf:63:1c:ee:69:6b:57:20:13:72:e1:fe:e9:2e:94:70: 64:3b:88:80:01:58:8f:01:fd:80:41:5e:8a:ba:c0:04:bc:a8: 82:a7:a3:e6:dd:fe:bb:94:73:59:9d:7a:74:81:fe:56:80:f8: 21:b7:d7:47:a8:07:44:8f:33:86:14:73:80:42:cb:49:f8:56: cd:0b:60:d2:90:30:9e:08:93:cb:19:68:fa:21:f1:84:68:30: 38:a5:03:3a:47:d2:93:bc:fc:73:b5:a9:38:c2:22:45:ee:0e: df:84:9b:14:a9:29:a2:64:90:bf:c1:69:23:e6:c3:7e:53:69: 90:b4:f6:ea:24:8b:00:c8:b8:a2:73:35:9d:51:38:7e:6f:fd: b6:f4:f0:f0:9a:ed:d7:da:3e:e3:81:b8:df:b1:f2:d2:7d:75: 1c:59:02:29:74:45:c5:7b:e6:40:d8:9b:41:ac:2a:6f:fb:fa: 15:c9:9d:13:2c:c1:e7:bd:52:4f:d8:83:74:b8:c0:3e:ae:88: f9:37:b9:1f:43:67:1e:52:16:ce:e1:af:db:ac:26:86:f2:ca: e6:4b:7b:ac:23:de:e4:96:30:08:0b:15:c1:92:85:ad:18:91: a2:bc:9e:58:49:4a:06:d1:b1:7c:91:de:e3:43:9a:59:0c:80: ae:0a:ef:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc5QTIxMTAvBgNVBAUTKDExRDRGNERBQzdGQkE4QjVDMTIyMjQzMDA1MzlCREM2 MTU0NDVERTUwHhcNMjUxMjIzMDM0NDA2WhcNMjUxMjMwMDM0NDA2WjAYMRYwFAYD VQQDDA02OTRhMTAwNi05NjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyT+iJzN3v2N2x1eipdf6r0xnOPUk5SqC+pnaEwG0F/lqUDyQE4pB9Q3xq/s4 Kk3iqz9+ewpZVM8v2fayr4ScUW6yoGp4lHV6NaHRfhhx1o2JAH8TM1xGldrEMGc7 XzYHMeqcbUmhYH4GWXkIvw2yizGN9wu98QbN2X7diMuGR/YIlOP+wHwBL29YtsDo TyE9bhEvnqCvaAKTUEORYdX1c5S/32Y43HuQYil+Y4D0eDUg01UqgF0MzCaSubUa VwAVlt/j13PEL0JymHgMj4P7MtYW7p+vob4w6XWcSKkl6mNrqw/K0sOL3VA0+dF2 sYi3yGMsDuNpYxqXFIX5U0ak5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMblMYk0 8X/vOEpyKzpgfXHxzecHMB8GA1UdIwQYMBaAFBHU9NrH+6i1wSIkMAU5vcYVRF3l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzlBMi9COEMwQjBBMDI2 QTAxMUVGQjlBMzdFMzlDNEY5QUUwMi9FZFQwMnNmN3FMWEJJaVF3QlRtOXhoVkVY ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkVDAyc2Y3cUxYQklpUXdCVG05eGhWRVhlVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzlBMi9COEMwQjBBMDI2QTAxMUVGQjlBMzdFMzlDNEY5QUUwMi9FZFQwMnNmN3FM WEJJaVF3QlRtOXhoVkVYZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx189jHO5pa1cgE3Lh/ukulHBkO4iAAViPAf2AQV6KusAEvKiCp6Pm 3f67lHNZnXp0gf5WgPght9dHqAdEjzOGFHOAQstJ+FbNC2DSkDCeCJPLGWj6IfGE aDA4pQM6R9KTvPxztak4wiJF7g7fhJsUqSmiZJC/wWkj5sN+U2mQtPbqJIsAyLii czWdUTh+b/229PDwmu3X2j7jgbjfsfLSfXUcWQIpdEXFe+ZA2JtBrCpv+/oVyZ0T LMHnvVJP2IN0uMA+roj5N7kfQ2ceUhbO4a/brCaG8srmS3usI97kljAICxXBkoWt GJGivJ5YSUoG0bF8kd7jQ5pZDICuCu8N -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:38 2025 by rpki-client