This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft File: 7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json) Hash identifier: K6DpxqIDLk3jfo1vQn/yVdyZNaZXRuAphW/Hy4zEG7c= Subject key identifier: 3D:3C:9C:B7:49:E4:AC:E3:49:FA:F5:EF:10:FB:94:73:42:BC:96:8E Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 Certificate issuer: /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78 Certificate serial: 0E10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft Manifest number: 0E0C Signing time: Thu 18 Dec 2025 17:37:43 +0000 Manifest this update: Thu 18 Dec 2025 17:37:43 +0000 Manifest next update: Thu 25 Dec 2025 17:37:43 +0000 Files and hashes: 1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: L8/Cetz2UGzVjsGzfOO215p3DpslITbRU0P2HnDHSN0=) 2: E64999C258D611ED86C99945C4F9AE02.roa (hash: DQ+JErFx/tRloLusNXusv2s1HWOBWc0JnN5N02SFoik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3600 (0xe10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA95A, serialNumber=EC179A58742228E30B7DF7978826583878255B78 Validity Not Before: Dec 18 17:37:43 2025 GMT Not After : Dec 25 17:37:43 2025 GMT Subject: CN=69443be7-7f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fe:67:e6:b4:b4:69:2a:e8:59:b5:21:25:8a: 85:0d:6f:32:0e:b1:d4:86:cd:84:1c:59:bc:20:0f: 37:49:d8:0e:b1:73:c9:69:45:27:dd:f7:96:98:81: 56:aa:46:96:b2:6b:f1:a5:c7:1b:a3:7b:2d:41:e6: 10:e0:3b:f9:fc:ed:41:6f:c9:5c:18:4d:b6:b5:0e: 7a:94:44:35:28:a3:59:de:bf:d7:69:5e:f1:d1:19: c5:99:14:ba:9e:45:73:93:d5:59:38:88:89:e5:85: 72:82:db:46:5f:94:d5:7f:db:2a:2b:a9:6d:23:64: e1:0c:2a:eb:52:9b:ab:f8:b4:24:4e:bf:50:52:16: 38:5c:aa:fd:55:ff:1d:2f:43:4f:23:2a:19:0b:01: 94:ff:f5:be:51:e9:c5:ce:b5:e0:33:03:12:29:72: e5:a1:b9:7e:17:df:b3:1d:e6:67:0d:b8:aa:ca:34: 96:50:26:e1:73:13:20:76:a4:fd:89:a3:93:7c:0e: 6c:5a:6b:c1:70:6d:82:27:73:bd:c3:29:a2:7f:c5: 1f:da:6d:50:9e:8f:33:aa:a1:6e:0b:b8:1b:44:69: 17:32:95:a8:4d:7d:f5:b5:1e:9b:9c:bc:78:a1:ae: 3e:d4:b1:08:0e:12:13:29:d4:22:81:b0:78:9d:b7: df:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3C:9C:B7:49:E4:AC:E3:49:FA:F5:EF:10:FB:94:73:42:BC:96:8E X509v3 Authority Key Identifier: keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:58:e2:5d:13:a9:0e:25:98:d2:26:45:07:e4:8d:8c:30:a8: 9d:7d:8a:39:f2:5c:a5:4b:bd:25:27:5e:74:b2:61:a8:c8:72: 8f:fd:64:20:b8:16:7d:57:cb:59:a6:85:69:83:40:8a:33:e4: 32:e5:14:b5:80:a3:21:72:cc:1a:a0:ea:b0:08:4f:ad:9a:e1: b1:12:6a:e4:a1:6e:f3:7e:32:98:09:f4:00:2f:89:6e:41:a1: 56:f6:ce:ee:19:d1:ee:ba:43:c2:99:ba:c4:6f:f1:4d:66:f7: ab:a5:75:f4:f4:a9:c8:47:bf:47:71:ef:5b:d5:3c:fd:c7:2b: 17:46:71:28:9d:a4:07:a0:2a:c1:45:f1:d2:8a:f5:c2:aa:4f: b8:35:3c:8b:3f:ed:3c:c5:ed:15:e8:dd:3d:c2:37:0f:59:92: 96:8f:72:ae:5d:41:18:32:a9:fc:7c:bd:a0:7f:f5:bb:75:7a: d1:ec:e0:ec:d4:3a:b4:57:19:48:ba:24:56:a8:41:3f:c3:ef: a9:ba:ea:13:d4:dc:1c:ac:17:b2:d8:e0:71:18:63:c9:7c:a6: 3f:df:4e:4b:1a:f0:6f:de:a5:93:89:25:1a:8f:89:47:39:8f: 0d:4e:f2:0b:91:7a:87:f0:f2:28:06:6b:5d:d0:50:67:e9:13: dd:ff:13:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE5NUExMTAvBgNVBAUTKEVDMTc5QTU4NzQyMjI4RTMwQjdERjc5Nzg4MjY1ODM4 NzgyNTVCNzgwHhcNMjUxMjE4MTczNzQzWhcNMjUxMjI1MTczNzQzWjAYMRYwFAYD VQQDDA02OTQ0M2JlNy03ZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1v5n5rS0aSroWbUhJYqFDW8yDrHUhs2EHFm8IA83SdgOsXPJaUUn3feWmIFW qkaWsmvxpccbo3stQeYQ4Dv5/O1Bb8lcGE22tQ56lEQ1KKNZ3r/XaV7x0RnFmRS6 nkVzk9VZOIiJ5YVygttGX5TVf9sqK6ltI2ThDCrrUpur+LQkTr9QUhY4XKr9Vf8d L0NPIyoZCwGU//W+UenFzrXgMwMSKXLlobl+F9+zHeZnDbiqyjSWUCbhcxMgdqT9 iaOTfA5sWmvBcG2CJ3O9wymif8Uf2m1Qno8zqqFuC7gbRGkXMpWoTX31tR6bnLx4 oa4+1LEIDhITKdQigbB4nbffwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD08nLdJ 5KzjSfr17xD7lHNCvJaOMB8GA1UdIwQYMBaAFOwXmlh0IijjC333l4gmWDh4JVt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk1QS9CMEQxRDVGQ0JF NzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtPTUxmZmVYaUNaWU9IZ2xX M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdCZWFXSFFpS09NTGZmZVhpQ1pZT0hnbFczZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk1QS9CMEQxRDVGQ0JFNzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtP TUxmZmVYaUNaWU9IZ2xXM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNWOJdE6kOJZjSJkUH5I2MMKidfYo58lylS70lJ150smGoyHKP/WQg uBZ9V8tZpoVpg0CKM+Qy5RS1gKMhcswaoOqwCE+tmuGxEmrkoW7zfjKYCfQAL4lu QaFW9s7uGdHuukPCmbrEb/FNZverpXX09KnIR79Hce9b1Tz9xysXRnEonaQHoCrB RfHSivXCqk+4NTyLP+08xe0V6N09wjcPWZKWj3KuXUEYMqn8fL2gf/W7dXrR7ODs 1Dq0VxlIuiRWqEE/w++puuoT1NwcrBey2OBxGGPJfKY/305LGvBv3qWTiSUaj4lH OY8NTvILkXqH8PIoBmtd0FBn6RPd/xMT -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:10 2025 by rpki-client