This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft File: 7NpzBwy2x3kNxguGn7sEMdln3k4.mft (raw, json) Hash identifier: kEbAainXnWn+k3u1AfyAyqDQWvu4r0mGz7vV9WkO5PQ= Subject key identifier: F7:76:5A:D9:6D:29:D7:83:26:13:03:D4:31:56:A0:D1:BB:5D:C6:A4 Authority key identifier: EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E Certificate issuer: /CN=A91A5C43/serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E Certificate serial: 0765 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft Manifest number: 0759 Signing time: Thu 18 Dec 2025 21:07:17 +0000 Manifest this update: Thu 18 Dec 2025 21:07:17 +0000 Manifest next update: Thu 25 Dec 2025 21:07:17 +0000 Files and hashes: 1: 7NpzBwy2x3kNxguGn7sEMdln3k4.crl (hash: o4rvcdiAQWiV8Dh4kZwWstK6SekucSuW6V/kDAPrzYc=) 2: 69482E56075411EFB23BE380C4F9AE02.roa (hash: ZFKSwCcup8+isfjjo8Cp7fgQpt81FqZFYGAbu1futQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1893 (0x765) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C43, serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E Validity Not Before: Dec 18 21:07:17 2025 GMT Not After : Dec 25 21:07:17 2025 GMT Subject: CN=69446d05-ceb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0f:80:ef:4d:c9:b7:4a:35:e2:d0:36:97:91: 8f:80:c2:0f:5e:26:4e:28:ca:1f:bc:f2:2f:91:d8: 22:f2:b8:bd:9c:58:82:53:90:d3:e7:ec:b8:d4:3f: e4:6f:c5:bc:7c:16:83:43:dc:1a:bc:14:bf:8b:7a: 76:90:aa:11:fc:44:8c:b6:d4:cf:6f:bd:7a:f5:2f: 79:18:4f:74:b7:88:7f:99:9f:7f:4e:d6:c5:05:fc: 03:64:21:0f:bd:87:01:fe:d7:64:e6:c4:cc:e9:bf: b4:21:34:56:a0:2d:60:2d:c1:d9:b2:2a:c2:0c:67: d5:14:da:ca:71:3c:fb:00:0b:27:a0:b5:31:ce:e0: ad:5b:6d:66:cc:cb:a4:8c:9a:e9:d0:67:91:aa:53: 3f:e6:59:7d:15:d2:60:06:09:26:2c:9a:35:b4:9f: e7:7f:4d:3a:5e:5a:60:7c:1d:b2:54:78:c9:32:28: 13:cc:90:6f:53:56:2a:f3:ea:af:1f:9d:11:3d:ac: 54:bd:50:e1:85:34:e3:ec:77:e8:49:13:2f:56:5e: 0f:70:2d:6e:e4:3c:27:8b:b7:30:80:9d:c4:a5:d2: 9f:41:9f:d2:95:53:54:7c:ff:75:8b:0e:11:69:a0: 2e:5a:3f:ee:5b:39:16:fa:73:d0:4c:82:27:31:85: 9c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:76:5A:D9:6D:29:D7:83:26:13:03:D4:31:56:A0:D1:BB:5D:C6:A4 X509v3 Authority Key Identifier: keyid:EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:eb:9f:68:a5:1d:e5:0d:8f:3e:77:5b:48:23:50:df:3f:82: 9c:3f:2b:27:2f:2a:9c:c8:0e:55:c3:b8:c9:bf:0a:1e:0e:43: db:94:fa:cc:53:f2:9d:89:d5:08:19:fd:f7:fb:f4:b6:28:f9: 33:16:9f:58:a3:79:80:65:d5:4d:e7:d4:2b:c5:a1:1f:55:4a: 37:78:75:9c:38:2c:1f:92:66:18:fb:e5:04:7c:61:43:93:97: a4:a0:47:55:23:c6:4e:23:64:76:52:48:45:fa:95:1b:3d:1c: ec:9e:ca:7b:60:fa:db:1a:bf:ae:3c:2d:d4:35:a2:90:23:09: 8f:42:cf:74:d9:da:90:fc:49:1f:91:69:6a:a5:a2:f7:d0:7e: 6d:d1:18:82:4d:ac:e8:e1:36:d7:3f:12:46:56:08:54:56:c7: 35:71:47:4b:1a:e0:9f:24:69:7a:33:eb:ae:be:bb:83:e3:19: 51:3b:50:c7:2b:85:56:a4:da:03:e6:c3:b5:ab:7a:b9:67:30: ff:b9:2d:0a:96:65:85:9e:6f:da:3a:34:f8:52:4a:83:d9:b8: fa:8b:89:7c:73:0c:b5:73:bd:bc:f2:41:e8:3a:8c:1d:db:d5: 25:85:f0:11:99:3c:8c:28:8d:8d:48:89:7b:01:2d:8c:05:2e: 8a:2c:04:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDNDMxMTAvBgNVBAUTKEVDREE3MzA3MENCNkM3NzkwREM2MEI4NjlGQkIwNDMx RDk2N0RFNEUwHhcNMjUxMjE4MjEwNzE3WhcNMjUxMjI1MjEwNzE3WjAYMRYwFAYD VQQDDA02OTQ0NmQwNS1jZWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqg+A703Jt0o14tA2l5GPgMIPXiZOKMofvPIvkdgi8ri9nFiCU5DT5+y41D/k b8W8fBaDQ9wavBS/i3p2kKoR/ESMttTPb7169S95GE90t4h/mZ9/TtbFBfwDZCEP vYcB/tdk5sTM6b+0ITRWoC1gLcHZsirCDGfVFNrKcTz7AAsnoLUxzuCtW21mzMuk jJrp0GeRqlM/5ll9FdJgBgkmLJo1tJ/nf006XlpgfB2yVHjJMigTzJBvU1Yq8+qv H50RPaxUvVDhhTTj7HfoSRMvVl4PcC1u5Dwni7cwgJ3EpdKfQZ/SlVNUfP91iw4R aaAuWj/uWzkW+nPQTIInMYWcpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPd2Wtlt KdeDJhMD1DFWoNG7XcakMB8GA1UdIwQYMBaAFOzacwcMtsd5DcYLhp+7BDHZZ95O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM0My84OUUzNkU2QTRC MkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngza054Z3VHbjdzRU1kbG4z azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdOcHpCd3kyeDNrTnhndUduN3NFTWRsbjNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM0My84OUUzNkU2QTRCMkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngz a054Z3VHbjdzRU1kbG4zazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx659opR3lDY8+d1tII1DfP4KcPysnLyqcyA5Vw7jJvwoeDkPblPrM U/KdidUIGf33+/S2KPkzFp9Yo3mAZdVN59QrxaEfVUo3eHWcOCwfkmYY++UEfGFD k5ekoEdVI8ZOI2R2UkhF+pUbPRzsnsp7YPrbGr+uPC3UNaKQIwmPQs902dqQ/Ekf kWlqpaL30H5t0RiCTazo4TbXPxJGVghUVsc1cUdLGuCfJGl6M+uuvruD4xlRO1DH K4VWpNoD5sO1q3q5ZzD/uS0KlmWFnm/aOjT4UkqD2bj6i4l8cwy1c7288kHoOowd 29UlhfARmTyMKI2NSIl7AS2MBS6KLAS3 -----END CERTIFICATE-----Generated at Fri Dec 19 22:01:17 2025 by rpki-client