This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft File: 7w5JMvxot1LjQokiqT5mq-MfNDE.mft (raw, json) Hash identifier: AYHsItWmYl7XEuJWDXen6PJv+C9I5yNGfVsv4JgiZUc= Subject key identifier: 31:65:13:7A:74:EC:8F:EC:70:BA:56:9D:DC:61:38:57:DA:F0:30:C8 Authority key identifier: EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 Certificate issuer: /CN=A91B4B33/serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft Manifest number: 0120 Signing time: Fri 19 Dec 2025 03:51:22 +0000 Manifest this update: Fri 19 Dec 2025 03:51:22 +0000 Manifest next update: Fri 26 Dec 2025 03:51:22 +0000 Files and hashes: 1: 7w5JMvxot1LjQokiqT5mq-MfNDE.crl (hash: HwB+QCy11YAox9/bRhlNeq/tzQs4o8Xydg4Qsil0E3E=) 2: 80741B04221F11EF92A42E1AC4F9AE02.roa (hash: tCXmsiS2pZhfyBR2w7/CD7l4+Sf7uzGB1XazUIv4/b4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33, serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Validity Not Before: Dec 19 03:51:22 2025 GMT Not After : Dec 26 03:51:22 2025 GMT Subject: CN=6944cbba-d462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cf:d5:0f:1d:6f:89:ed:d9:6d:8a:26:f4:f6: 75:39:cc:55:f0:ef:e2:28:68:5d:35:35:50:94:b8: cc:e8:49:bc:67:e0:85:c0:e9:85:5c:13:28:fc:f9: b3:d5:85:d2:7e:7d:f8:b1:61:fd:15:2e:d1:ab:03: ec:1a:73:ac:c8:ea:cf:03:c3:3b:ea:7e:73:37:0b: 67:cd:60:19:d7:07:a6:3f:bd:d6:19:91:0f:b7:04: 4a:4f:c2:78:bc:14:e3:a1:2e:1e:54:b2:9d:36:6c: f5:e4:12:30:c7:28:9b:3e:d1:03:f4:92:4a:91:15: c0:9a:a5:b5:10:bd:62:29:9b:e7:52:09:ac:9e:20: 8f:54:0d:47:2a:f1:fc:7c:6d:4b:a6:4b:b7:2f:bd: 3a:f5:16:d0:a0:2c:9b:89:ec:3b:51:8b:98:93:fe: ea:97:9c:63:72:15:c7:ff:14:e8:52:15:3d:82:46: 24:e5:b4:ef:5a:66:3a:23:c1:c0:31:cb:8d:52:07: 0a:f9:53:64:bf:74:38:f7:d1:7b:12:0c:1b:89:07: 21:64:33:c2:3c:a6:81:9a:76:76:ec:53:7d:64:ac: 39:ad:7b:f5:5b:c5:d0:d5:e8:ea:61:db:5c:40:20: 82:d7:a9:ba:6e:9a:db:ec:44:35:e7:e9:db:7b:75: c8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:65:13:7A:74:EC:8F:EC:70:BA:56:9D:DC:61:38:57:DA:F0:30:C8 X509v3 Authority Key Identifier: keyid:EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:19:72:ac:db:ab:2b:65:f5:70:40:6b:40:97:ff:bb:95:d8: 39:2b:56:4a:28:0c:ab:fb:a3:60:8a:60:de:f5:91:8d:fc:2d: e4:1c:78:15:44:9e:5a:d1:29:14:5e:66:18:9e:af:67:14:af: 38:4f:e0:ec:69:f8:79:ad:0e:83:27:3e:fe:bb:e7:b6:79:20: de:0c:24:a1:7e:c6:de:e9:2c:71:c4:82:b7:3c:ca:72:43:0e: 4d:8d:dd:65:30:fa:c6:0e:00:8c:54:df:87:20:26:4f:90:e1: fa:46:64:b4:3a:5d:16:f3:4e:cd:a7:40:d5:3e:d4:f8:0e:23: 5d:88:61:83:02:54:29:51:16:3a:9b:ae:99:11:62:1c:0a:0d: 7b:15:bb:06:3a:0b:bf:a5:d4:5a:ce:eb:be:7a:cf:50:48:6a: 0f:ce:23:1f:e9:d9:9e:5a:05:d2:d6:3c:aa:86:d5:d5:82:26: d9:21:c2:37:3a:f0:93:e4:62:b3:31:76:3b:a9:c8:b4:c6:f2: b1:c0:90:3e:c1:2e:55:d6:2d:f9:5a:68:e0:43:5f:d1:d8:96: 43:0c:b6:df:ba:de:fb:45:2a:6c:a4:52:ed:2c:73:90:8c:aa: c6:9f:9e:05:2b:e4:27:54:34:39:ee:8e:e3:d9:4e:82:c6:94: 85:47:4b:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRCMzMxMTAvBgNVBAUTKEVGMEU0OTMyRkM2OEI3NTJFMzQyODkyMkE5M0U2NkFC RTMxRjM0MzEwHhcNMjUxMjE5MDM1MTIyWhcNMjUxMjI2MDM1MTIyWjAYMRYwFAYD VQQDDA02OTQ0Y2JiYS1kNDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8/VDx1vie3ZbYom9PZ1OcxV8O/iKGhdNTVQlLjM6Em8Z+CFwOmFXBMo/Pmz 1YXSfn34sWH9FS7RqwPsGnOsyOrPA8M76n5zNwtnzWAZ1wemP73WGZEPtwRKT8J4 vBTjoS4eVLKdNmz15BIwxyibPtED9JJKkRXAmqW1EL1iKZvnUgmsniCPVA1HKvH8 fG1Lpku3L7069RbQoCybiew7UYuYk/7ql5xjchXH/xToUhU9gkYk5bTvWmY6I8HA McuNUgcK+VNkv3Q499F7EgwbiQchZDPCPKaBmnZ27FN9ZKw5rXv1W8XQ1ejqYdtc QCCC16m6bprb7EQ15+nbe3XILQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFlE3p0 7I/scLpWndxhOFfa8DDIMB8GA1UdIwQYMBaAFO8OSTL8aLdS40KJIqk+ZqvjHzQx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8xQUNFN0QwNDIy MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3QxTGpRb2tpcVQ1bXEtTWZO REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzd3NUpNdnhvdDFMalFva2lxVDVtcS1NZk5ERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEIzMy8xQUNFN0QwNDIyMUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3Qx TGpRb2tpcVQ1bXEtTWZOREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADGXKs26srZfVwQGtAl/+7ldg5K1ZKKAyr+6NgimDe9ZGN/C3kHHgV RJ5a0SkUXmYYnq9nFK84T+Dsafh5rQ6DJz7+u+e2eSDeDCShfsbe6SxxxIK3PMpy Qw5Njd1lMPrGDgCMVN+HICZPkOH6RmS0Ol0W807Np0DVPtT4DiNdiGGDAlQpURY6 m66ZEWIcCg17FbsGOgu/pdRazuu+es9QSGoPziMf6dmeWgXS1jyqhtXVgibZIcI3 OvCT5GKzMXY7qci0xvKxwJA+wS5V1i35WmjgQ1/R2JZDDLbfut77RSpspFLtLHOQ jKrGn54FK+QnVDQ57o7j2U6CxpSFR0sr -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:31 2025 by rpki-client