This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft File: n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json) Hash identifier: KBdOAdTS4oO/bbm9Zg0ouSaoQUAwt9UuGAENCkdhsSI= Subject key identifier: EF:0D:05:28:4A:EC:C7:34:BD:74:B0:8A:11:26:75:4F:52:AC:EE:DB Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Certificate serial: 10B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft Manifest number: 10AD Signing time: Thu 18 Dec 2025 17:10:37 +0000 Manifest this update: Thu 18 Dec 2025 17:10:36 +0000 Manifest next update: Thu 25 Dec 2025 17:10:36 +0000 Files and hashes: 1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: NGpTEseKsOgUBT4StpH7NYRjGUTzbOVIBk2gmgnCTMI=) 2: 566988C8717411E9AF629E4BC4F9AE02.roa (hash: EtmvbN1xVVE7PUjHrIh1I7up8NoBR/klrPWqoCS0Bq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4278 (0x10b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Validity Not Before: Dec 18 17:10:36 2025 GMT Not After : Dec 25 17:10:36 2025 GMT Subject: CN=6944358c-5316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:77:e9:1c:33:b3:94:02:15:06:e6:7f:54:e6: 18:26:e6:d4:c2:dc:f1:f1:ca:e4:ba:5f:1d:78:7f: f8:6b:9c:ba:f6:d2:3b:58:d1:d1:77:c5:e9:2d:01: e1:fc:e0:3a:af:8f:a8:05:6b:e9:db:e3:81:6a:72: 91:54:1a:a6:6c:5a:99:a1:13:40:63:8b:32:6f:c9: 47:d8:32:d4:49:4d:4c:77:a8:5f:b3:4f:24:12:e0: a1:34:fb:d3:dc:3e:fe:6c:39:f9:0d:7b:3f:3a:19: 04:ec:9c:24:79:ee:bf:2c:f7:75:df:5d:db:1d:3d: 8e:7e:7e:56:e7:66:ef:84:9a:cb:3c:98:01:b0:f0: 3c:1d:17:a6:97:17:8c:b4:6f:b9:66:74:70:4e:e9: 55:c7:37:52:07:9a:82:75:0c:2c:5f:ae:2f:1d:80: 26:c6:0b:94:d0:11:8c:e8:7b:5f:4f:96:94:aa:69: cb:be:d2:4b:da:14:2c:1f:76:c7:c3:fd:fc:c7:46: 85:fe:c8:2e:57:0d:9f:7e:ab:60:3e:b3:f3:9d:4d: d3:b3:cf:fb:42:0c:b6:89:6a:8d:94:39:a0:f6:08: 76:6d:b2:b6:f8:50:04:a0:f8:18:cb:9f:ef:cc:27: 54:bd:6f:9b:d3:28:a3:83:6a:2c:88:e6:d6:0b:6a: 51:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0D:05:28:4A:EC:C7:34:BD:74:B0:8A:11:26:75:4F:52:AC:EE:DB X509v3 Authority Key Identifier: keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:95:79:89:3f:fa:ee:81:20:91:52:74:3c:d3:ae:47:0a:cf: 00:54:af:f4:e2:cf:f2:b7:0a:60:02:c1:8d:8a:ca:9d:d0:69: 1b:df:9a:bb:fc:1c:5b:c3:13:6f:ab:1c:4e:95:1c:b2:55:c7: eb:d2:6e:a7:f1:3e:42:27:0f:02:0d:bb:46:28:94:c7:fd:67: 83:c6:31:b8:54:69:ba:63:25:5e:b3:6c:29:49:1c:a5:f7:4a: 28:3b:55:3d:98:40:dd:93:b7:b2:e5:f4:dd:db:b6:7c:09:65: d3:7b:0a:07:fa:bc:19:39:a3:24:12:c9:17:de:2f:3f:5a:78: d0:cf:cf:ef:50:02:b4:08:e8:95:0d:1e:9d:cf:51:08:66:cf: 57:3c:d3:f6:78:09:98:c6:4f:8e:b8:b9:13:84:5c:dd:48:6d: ed:a8:c6:15:9c:cd:18:88:61:46:3a:10:6d:65:3b:d2:13:d6: 96:44:36:77:e0:37:9a:a0:d7:f8:37:e5:ec:a8:50:38:e1:d0: 91:c4:47:d4:0f:6e:46:1c:cc:2b:3d:fe:92:8d:41:94:93:72: 67:60:6e:aa:83:29:15:62:72:24:b1:53:da:46:ce:18:bd:95: 20:34:c7:52:2c:da:a2:d0:c1:60:76:25:09:ed:ad:be:b3:e8: f8:23:ec:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1RDgxMTAvBgNVBAUTKDlGQkE5RkFGQzFBNjdENDUxQTJGNTlCOUVFMjMyNDJF QTlERDQ1NzIwHhcNMjUxMjE4MTcxMDM2WhcNMjUxMjI1MTcxMDM2WjAYMRYwFAYD VQQDDA02OTQ0MzU4Yy01MzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13fpHDOzlAIVBuZ/VOYYJubUwtzx8crkul8deH/4a5y69tI7WNHRd8XpLQHh /OA6r4+oBWvp2+OBanKRVBqmbFqZoRNAY4syb8lH2DLUSU1Md6hfs08kEuChNPvT 3D7+bDn5DXs/OhkE7Jwkee6/LPd1313bHT2Ofn5W52bvhJrLPJgBsPA8HRemlxeM tG+5ZnRwTulVxzdSB5qCdQwsX64vHYAmxguU0BGM6HtfT5aUqmnLvtJL2hQsH3bH w/38x0aF/sguVw2ffqtgPrPznU3Ts8/7Qgy2iWqNlDmg9gh2bbK2+FAEoPgYy5/v zCdUvW+b0yijg2osiObWC2pR5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8NBShK 7Mc0vXSwihEmdU9SrO7bMB8GA1UdIwQYMBaAFJ+6n6/Bpn1FGi9Zue4jJC6p3UVy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTVEOC80RjMxNEM0MDNB REMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZVVWFMMW01N2lNa0xxbmRS WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL243cWZyOEdtZlVVYUwxbTU3aU1rTHFuZFJYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTVEOC80RjMxNEM0MDNBREMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZV VWFMMW01N2lNa0xxbmRSWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCblXmJP/rugSCRUnQ8065HCs8AVK/04s/ytwpgAsGNisqd0Gkb35q7 /BxbwxNvqxxOlRyyVcfr0m6n8T5CJw8CDbtGKJTH/WeDxjG4VGm6YyVes2wpSRyl 90ooO1U9mEDdk7ey5fTd27Z8CWXTewoH+rwZOaMkEskX3i8/WnjQz8/vUAK0COiV DR6dz1EIZs9XPNP2eAmYxk+OuLkThFzdSG3tqMYVnM0YiGFGOhBtZTvSE9aWRDZ3 4DeaoNf4N+XsqFA44dCRxEfUD25GHMwrPf6SjUGUk3JnYG6qgykVYnIksVPaRs4Y vZUgNMdSLNqi0MFgdiUJ7a2+s+j4I+yM -----END CERTIFICATE-----Generated at Fri Dec 19 22:01:21 2025 by rpki-client