This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft File: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft (raw, json) Hash identifier: cNh3AGn6z1+05YlIVM8r3LUWCNDGgNHagKR9pFKh5f8= Subject key identifier: DD:F6:BF:95:C7:9F:80:80:D7:C7:69:51:2E:06:BA:5B:FF:81:04:F1 Authority key identifier: EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D Certificate issuer: /CN=A91A55C9/serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft Manifest number: 0159 Signing time: Fri 19 Dec 2025 03:17:00 +0000 Manifest this update: Fri 19 Dec 2025 03:17:00 +0000 Manifest next update: Fri 26 Dec 2025 03:17:00 +0000 Files and hashes: 1: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl (hash: DJcuWohVo6y5o3ywYx9bwK5SYV+KFlUqNttC84DM8A4=) 2: 9E40D11CC9EC11EE9644540FC4F9AE02.roa (hash: hR3HemTX8sPR//njNhfSediG0DqzFMWVKhRmgOL4nRY=) 3: 9DDCAB1AC9EC11EE9644540FC4F9AE02.roa (hash: u6J6SPSNjElCImZDre2hX9rdBiRV9plYfnlpPbtxhQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9, serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Validity Not Before: Dec 19 03:17:00 2025 GMT Not After : Dec 26 03:17:00 2025 GMT Subject: CN=6944c3ac-2406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fe:08:68:96:ec:16:0f:c2:6f:f7:08:58:a4: 18:3d:b9:28:94:72:10:ee:5d:a9:c1:be:f6:0e:77: c7:04:ee:09:16:f4:af:3d:d5:14:7d:ed:b4:23:13: 1a:61:09:d6:dc:c4:e9:49:f9:63:1a:a1:18:9c:dd: da:21:a2:a4:b1:25:10:11:61:f0:c7:53:84:92:84: fc:34:65:4f:22:93:65:bf:97:60:14:89:9f:b1:ec: 97:e3:e4:6e:46:cd:f6:70:83:2b:12:cb:89:ef:88: 78:67:30:1e:95:0b:ea:d7:b7:2c:2f:ef:31:d4:3c: 56:6b:16:ad:f2:92:ee:44:d0:f1:3e:c2:90:b2:de: 58:ed:1d:53:2e:3f:ed:fa:5e:7b:89:c4:16:9f:cb: 44:10:b6:a3:b8:5b:67:77:44:28:c4:4a:cb:6a:b6: 8a:63:12:53:6d:bf:ba:5c:e1:51:7a:b6:ef:26:d7: 52:95:a7:07:b5:a9:8d:95:f2:74:74:39:4e:4d:b9: 61:d9:6f:d7:3e:31:2c:2d:61:bd:2a:7a:ee:11:4b: 7f:c8:23:12:60:45:bf:75:c0:4b:be:a5:20:71:96: 76:a9:a5:39:44:94:f6:41:1a:40:f5:33:3a:9c:cc: f6:2c:9d:4d:0e:66:32:0b:8a:25:b5:b6:aa:20:c9: a6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F6:BF:95:C7:9F:80:80:D7:C7:69:51:2E:06:BA:5B:FF:81:04:F1 X509v3 Authority Key Identifier: keyid:EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:de:f2:4f:db:ce:7f:03:e2:b2:c0:7a:03:ca:e8:b4:37:56: 61:e6:7a:7b:15:8d:80:ae:50:dd:18:b4:75:9a:13:18:20:d2: 4b:22:69:7b:d7:ac:86:df:e9:79:20:82:11:15:f0:4e:fd:e1: 5b:f0:28:84:74:52:98:e5:eb:16:38:7c:e1:34:35:35:5e:1d: 12:28:e8:9f:d7:c2:9d:a8:99:ea:06:45:48:d1:b2:ae:90:f8: c6:e6:fe:22:82:61:c4:41:9b:7b:a6:e9:5a:b0:39:44:58:0d: 34:19:18:68:ee:35:82:03:42:df:69:9c:e9:76:56:fb:4b:be: 06:51:95:ff:b7:5a:2f:a9:90:a9:f7:bc:a6:af:73:2a:9d:4d: e5:e8:37:d2:16:f6:d5:68:bb:0b:ca:77:bf:3b:be:25:8d:38: ef:4a:db:dc:cd:87:8e:37:a1:6d:9c:dc:10:ca:6b:c3:8e:a6: 90:69:b7:f5:f2:7d:84:ac:99:4f:8e:2e:38:1f:e8:d6:b0:80: e7:08:cd:43:e8:90:08:18:00:bf:4c:8b:27:74:8a:90:76:63: fc:f2:0e:4f:32:ee:de:60:1e:bc:ad:6d:dd:90:96:9c:69:89: d9:6d:a6:73:7d:cb:4f:17:f8:60:62:07:1d:98:62:30:ca:3f: 8a:60:f7:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1QzkxMTAvBgNVBAUTKEVDNjc4REUwRDdCQ0Y4MzlEOTk4QTBGQ0U1QzlFQjc1 RkZDODY3M0QwHhcNMjUxMjE5MDMxNzAwWhcNMjUxMjI2MDMxNzAwWjAYMRYwFAYD VQQDDA02OTQ0YzNhYy0yNDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArf4IaJbsFg/Cb/cIWKQYPbkolHIQ7l2pwb72DnfHBO4JFvSvPdUUfe20IxMa YQnW3MTpSfljGqEYnN3aIaKksSUQEWHwx1OEkoT8NGVPIpNlv5dgFImfseyX4+Ru Rs32cIMrEsuJ74h4ZzAelQvq17csL+8x1DxWaxat8pLuRNDxPsKQst5Y7R1TLj/t +l57icQWn8tEELajuFtnd0QoxErLaraKYxJTbb+6XOFRerbvJtdSlacHtamNlfJ0 dDlOTblh2W/XPjEsLWG9KnruEUt/yCMSYEW/dcBLvqUgcZZ2qaU5RJT2QRpA9TM6 nMz2LJ1NDmYyC4oltbaqIMmmewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN32v5XH n4CA18dpUS4Gulv/gQTxMB8GA1UdIwQYMBaAFOxnjeDXvPg52Zig/OXJ63X/yGc9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS83RTJGMTI2OEM5 RUIxMUVFOEI4NTdCMENDNEY5QUUwMi83R2VONE5lOC1EblptS0Q4NWNucmRmX0la ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdHZU40TmU4LURuWm1LRDg1Y25yZGZfSVp6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVDOS83RTJGMTI2OEM5RUIxMUVFOEI4NTdCMENDNEY5QUUwMi83R2VONE5lOC1E blptS0Q4NWNucmRmX0laejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg3vJP285/A+KywHoDyui0N1Zh5np7FY2ArlDdGLR1mhMYINJLIml7 16yG3+l5IIIRFfBO/eFb8CiEdFKY5esWOHzhNDU1Xh0SKOif18KdqJnqBkVI0bKu kPjG5v4igmHEQZt7pulasDlEWA00GRho7jWCA0LfaZzpdlb7S74GUZX/t1ovqZCp 97ymr3MqnU3l6DfSFvbVaLsLyne/O74ljTjvStvczYeON6FtnNwQymvDjqaQabf1 8n2ErJlPji44H+jWsIDnCM1D6JAIGAC/TIsndIqQdmP88g5PMu7eYB68rW3dkJac aYnZbaZzfctPF/hgYgcdmGIwyj+KYPdq -----END CERTIFICATE-----Generated at Sat Dec 20 00:58:59 2025 by rpki-client