This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft File: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft (raw, json) Hash identifier: 7ThbtRTSziYTEPK/i+y8BYYXvkIOFc8LHN9MJyPsnyk= Subject key identifier: BC:29:4B:C4:B9:8C:EB:A8:9A:AC:7E:10:FF:68:31:DD:13:8D:2E:41 Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C Certificate issuer: /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Certificate serial: 0BF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft Manifest number: 0BEA Signing time: Mon 22 Dec 2025 18:23:40 +0000 Manifest this update: Mon 22 Dec 2025 18:23:40 +0000 Manifest next update: Mon 29 Dec 2025 18:23:40 +0000 Files and hashes: 1: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl (hash: rquOKfdu2uYvRsYjO32StOF1b8ognfvW/UUu0c9xgA8=) 2: 001209082A2111EAB1BF9C2EC4F9AE02.roa (hash: vpJeDwiHWNxR3ZSraALkWmUoFKXJKlqfWZWB6I2fGis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3056 (0xbf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9F87, serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Validity Not Before: Dec 22 18:23:40 2025 GMT Not After : Dec 29 18:23:40 2025 GMT Subject: CN=69498cac-10f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:16:19:c6:21:71:f5:ae:7c:28:09:f2:83:0d: 11:39:48:c6:27:dd:8e:0e:e7:57:42:5a:5b:bb:f6: 68:43:33:d3:bb:d8:f7:8d:41:c1:29:a9:fc:b2:7b: ca:d6:f1:45:da:3c:23:fc:c2:13:c4:be:2b:86:e6: a1:d3:a2:3a:e3:9a:d2:34:f1:42:d3:df:b9:f3:25: 1a:6a:1c:b1:75:7f:83:86:f3:9b:6b:ff:26:b3:75: e2:00:39:f2:05:c0:f7:c0:95:02:77:60:2a:8a:67: b0:19:55:fc:a0:d8:1d:4b:81:27:a4:5d:1c:b3:1e: be:7b:72:a8:d3:a0:95:39:bb:38:9a:fc:7d:21:c7: 25:50:4a:0c:41:ad:a1:57:fa:0e:8c:1f:04:b7:e4: ef:46:c1:aa:8a:3e:df:ac:21:ec:a2:58:6f:7f:1d: 16:9d:9d:3a:90:2b:39:ec:5b:6e:fb:c1:ef:54:fa: c6:f4:32:bf:33:5c:b1:4d:85:d6:53:8a:ee:07:f3: 5f:18:c0:18:8e:1e:7a:f5:de:90:65:38:12:b8:5a: 43:95:6f:c5:35:29:de:3e:6e:c2:1a:df:2f:70:b3: b3:9e:52:5f:e7:a7:58:8e:25:24:35:ba:a9:a9:8c: ea:1b:35:cd:4a:72:77:6a:23:38:d8:9d:96:bb:40: 0c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:29:4B:C4:B9:8C:EB:A8:9A:AC:7E:10:FF:68:31:DD:13:8D:2E:41 X509v3 Authority Key Identifier: keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:b2:eb:29:24:9d:d8:fe:75:c6:64:35:89:0b:8b:72:16:7e: ba:2b:3c:6b:ab:3d:78:43:6a:6c:8b:2e:3c:42:29:83:0f:39: 13:d7:3e:67:e0:b7:9a:e7:fc:48:5f:91:4d:02:ca:2b:06:25: 6a:a4:77:0b:ca:0e:38:3a:86:38:1d:2f:2c:59:4f:01:9a:2e: aa:11:82:2d:c8:a3:1a:d3:8a:dc:6e:f6:2d:1b:73:d6:b9:9b: 69:08:4f:1a:e2:c3:f9:33:75:54:3d:f3:32:e2:57:3b:ee:58: 15:18:38:c0:57:12:9c:f9:eb:32:6b:23:72:6c:6d:04:41:49: 5f:79:93:ac:8b:22:4c:fb:21:29:df:92:92:2c:d2:5e:0f:7a: 5d:17:d9:cd:0c:4f:03:ea:81:ff:8d:03:83:fb:4d:05:9d:84: c0:67:53:a3:dd:28:2e:9c:ce:ce:e1:51:6b:5a:e1:b8:14:60: f5:40:73:24:ce:27:f7:78:f3:8f:61:7a:0c:91:4c:67:1f:1f: 56:bf:01:22:22:55:7c:ce:04:83:0d:f4:b4:3a:8d:62:5e:0d: d2:3e:ad:24:a6:1e:2c:21:9e:f6:1b:d3:4c:ec:e7:9e:b9:63: 9a:f2:1b:f5:4c:6b:e3:96:63:7f:9b:a9:a8:ba:bb:9d:fe:db: ce:5f:14:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGODcxMTAvBgNVBAUTKEVDQzFEQzgyODhGODQ1QTkxQzlGNkNDMTg3QTk5Qzk5 RDkwOThDMUMwHhcNMjUxMjIyMTgyMzQwWhcNMjUxMjI5MTgyMzQwWjAYMRYwFAYD VQQDDA02OTQ5OGNhYy0xMGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBYZxiFx9a58KAnygw0ROUjGJ92ODudXQlpbu/ZoQzPTu9j3jUHBKan8snvK 1vFF2jwj/MITxL4rhuah06I645rSNPFC09+58yUaahyxdX+DhvOba/8ms3XiADny BcD3wJUCd2AqimewGVX8oNgdS4EnpF0csx6+e3Ko06CVObs4mvx9IcclUEoMQa2h V/oOjB8Et+TvRsGqij7frCHsolhvfx0WnZ06kCs57Ftu+8HvVPrG9DK/M1yxTYXW U4ruB/NfGMAYjh569d6QZTgSuFpDlW/FNSnePm7CGt8vcLOznlJf56dYjiUkNbqp qYzqGzXNSnJ3aiM42J2Wu0AM0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwpS8S5 jOuomqx+EP9oMd0TjS5BMB8GA1UdIwQYMBaAFOzB3IKI+EWpHJ9swYepnJnZCYwc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUY4Ny83MDI3QzI5QzJB MjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJha2NuMnpCaDZtY21ka0pq QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNSGNnb2o0UmFrY24yekJoNm1jbWRrSmpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUY4Ny83MDI3QzI5QzJBMjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJh a2NuMnpCaDZtY21ka0pqQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5suspJJ3Y/nXGZDWJC4tyFn66Kzxrqz14Q2psiy48QimDDzkT1z5n 4Lea5/xIX5FNAsorBiVqpHcLyg44OoY4HS8sWU8Bmi6qEYItyKMa04rcbvYtG3PW uZtpCE8a4sP5M3VUPfMy4lc77lgVGDjAVxKc+esyayNybG0EQUlfeZOsiyJM+yEp 35KSLNJeD3pdF9nNDE8D6oH/jQOD+00FnYTAZ1Oj3SgunM7O4VFrWuG4FGD1QHMk zif3ePOPYXoMkUxnHx9WvwEiIlV8zgSDDfS0Oo1iXg3SPq0kph4sIZ72G9NM7Oee uWOa8hv1TGvjlmN/m6mourud/tvOXxTL -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:46 2025 by rpki-client