This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft File: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft (raw, json) Hash identifier: b0Ir6sa23EqVUs3up0GXkSNunzgcUDCrt+pVdqbeF6s= Subject key identifier: 7D:E9:0E:03:DA:E6:2D:D8:D3:1F:2F:CE:9C:E0:4D:54:52:B4:17:B1 Authority key identifier: 13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09 Certificate issuer: /CN=A91FFEDB/serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609 Certificate serial: 0255 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft Manifest number: 0251 Signing time: Tue 23 Dec 2025 00:44:55 +0000 Manifest this update: Tue 23 Dec 2025 00:44:55 +0000 Manifest next update: Tue 30 Dec 2025 00:44:55 +0000 Files and hashes: 1: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl (hash: o7dc1WH6Xfp7CVjo9MC1pIDMFv/9iHyyJkXoHNPZl4g=) 2: 26BE1334558F11EDB3A5ED4FC4F9AE02.roa (hash: xbr5k+oMz+33UETHV5RDRi0ZbqdxRQyrCpH45h+fV+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFEDB, serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609 Validity Not Before: Dec 23 00:44:55 2025 GMT Not After : Dec 30 00:44:55 2025 GMT Subject: CN=6949e607-d1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e2:65:54:99:05:19:5f:57:17:eb:2e:e2:3d: c6:42:ae:1f:29:a0:7e:72:d5:3f:ff:03:1e:4d:d8: 45:71:67:78:42:22:6e:50:2a:61:6d:74:22:33:63: 90:48:c8:6a:58:31:57:cb:8a:fb:51:da:6f:eb:0e: cc:45:e8:b5:a2:1a:2d:7b:01:4f:8f:c3:66:fb:50: 41:d7:6e:85:92:20:4c:68:a0:61:1d:94:20:4a:c1: 23:05:eb:e9:34:fc:5f:34:d7:26:69:fe:3c:5d:23: 23:19:5a:51:89:5e:8c:e2:be:06:d3:18:be:22:ce: 23:5c:5e:7e:11:a5:9d:71:52:f2:77:bc:16:8b:68: 35:78:67:8c:7e:ee:4d:1e:ab:5f:51:a9:18:8e:37: 4f:f3:21:03:d7:2e:de:98:e2:02:72:1f:46:3f:45: 9e:0a:a2:c1:77:a2:c2:d2:ef:f8:b1:da:66:1f:06: a2:65:5c:48:99:65:d7:43:79:7e:8a:7b:a0:92:07: 6f:0e:d9:3f:90:5c:a1:db:53:92:8f:57:5c:26:d0: 35:a3:d6:74:36:57:70:95:14:e8:0c:b6:1b:99:83: 0e:ef:a2:0a:b5:e1:13:0a:6e:70:a3:2b:36:f9:11: c4:07:54:aa:e0:f7:ec:06:1b:31:2e:10:81:46:08: ff:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E9:0E:03:DA:E6:2D:D8:D3:1F:2F:CE:9C:E0:4D:54:52:B4:17:B1 X509v3 Authority Key Identifier: keyid:13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:f7:ca:22:e4:0f:12:d7:49:2e:6e:2b:88:f8:b8:5f:c7:9b: 3f:ac:27:ef:57:4a:24:3c:08:fa:40:62:6c:f0:16:68:25:c9: 7a:3d:b2:16:3d:49:67:63:b5:49:0e:07:ff:38:42:ca:33:2b: 7e:0d:dd:65:32:cb:84:b6:de:e5:e5:4d:b1:9f:a9:33:35:81: cf:4c:91:96:93:ec:cd:97:0e:b1:68:6d:da:22:c4:23:0e:f2: 70:57:47:a7:44:41:58:62:86:c0:6d:f6:d3:6a:1f:25:02:3f: 3d:fb:31:1c:42:bd:bd:1d:d7:fb:6b:d2:7d:42:f8:de:7b:a0: 2a:81:7c:ef:22:0d:cf:b6:74:3a:df:1a:63:e1:8b:c2:eb:90: 96:15:fe:6a:52:55:fb:a7:ca:16:48:17:f6:f0:f9:d1:f8:60: 90:3a:1b:69:73:ef:cc:79:38:1b:a1:8e:bb:f2:0f:e5:ce:3a: ce:44:6a:99:50:02:53:f9:34:64:74:92:ad:49:da:58:8c:5e: ee:3e:e8:9e:44:02:5e:33:cf:28:2d:78:6e:8f:ff:dc:9e:ff: dc:05:d0:03:dc:18:c7:6a:41:0f:7e:88:75:3a:09:41:7d:07: 18:a7:69:c1:e0:f3:f4:67:54:16:80:fb:56:60:b4:97:50:83: 0f:1e:5c:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFREIxMTAvBgNVBAUTKDEzQjI3RkQ0NjI0OEY0QTczM0Q5MjQ2NTFDOTQwQ0I3 RjFBMzA2MDkwHhcNMjUxMjIzMDA0NDU1WhcNMjUxMjMwMDA0NDU1WjAYMRYwFAYD VQQDDA02OTQ5ZTYwNy1kMWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5+JlVJkFGV9XF+su4j3GQq4fKaB+ctU//wMeTdhFcWd4QiJuUCphbXQiM2OQ SMhqWDFXy4r7Udpv6w7MRei1ohotewFPj8Nm+1BB126FkiBMaKBhHZQgSsEjBevp NPxfNNcmaf48XSMjGVpRiV6M4r4G0xi+Is4jXF5+EaWdcVLyd7wWi2g1eGeMfu5N HqtfUakYjjdP8yED1y7emOICch9GP0WeCqLBd6LC0u/4sdpmHwaiZVxImWXXQ3l+ inugkgdvDtk/kFyh21OSj1dcJtA1o9Z0NldwlRToDLYbmYMO76IKteETCm5woys2 +RHEB1Sq4PfsBhsxLhCBRgj/IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3pDgPa 5i3Y0x8vzpzgTVRStBexMB8GA1UdIwQYMBaAFBOyf9RiSPSnM9kkZRyUDLfxowYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkVEQi8zRUY3RTlCQzU1 MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlLY3oyU1JsSEpRTXRfR2pC Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Sl8xR0pJOUtjejJTUmxISlFNdF9HakJnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkVEQi8zRUY3RTlCQzU1MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlL Y3oyU1JsSEpRTXRfR2pCZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV98oi5A8S10kubiuI+Lhfx5s/rCfvV0okPAj6QGJs8BZoJcl6PbIW PUlnY7VJDgf/OELKMyt+Dd1lMsuEtt7l5U2xn6kzNYHPTJGWk+zNlw6xaG3aIsQj DvJwV0enREFYYobAbfbTah8lAj89+zEcQr29Hdf7a9J9Qvjee6AqgXzvIg3PtnQ6 3xpj4YvC65CWFf5qUlX7p8oWSBf28PnR+GCQOhtpc+/MeTgboY678g/lzjrORGqZ UAJT+TRkdJKtSdpYjF7uPuieRAJeM88oLXhuj//cnv/cBdAD3BjHakEPfoh1OglB fQcYp2nB4PP0Z1QWgPtWYLSXUIMPHlzc -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:33 2025 by rpki-client