This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft File: 7mC-_JS8D3S9nREVbhW6I_fr5ag.mft (raw, json) Hash identifier: YKhb8gPuMog88vA/ljjqVhJIXlZngXozKT9B0YQ+vWs= Subject key identifier: 2B:9A:A1:15:3C:F1:9C:B5:2D:83:5C:57:85:A3:B6:F5:1B:F5:7F:34 Authority key identifier: EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8 Certificate issuer: /CN=A91B6DD0/serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft Manifest number: 11 Signing time: Fri 19 Dec 2025 06:50:07 +0000 Manifest this update: Fri 19 Dec 2025 06:50:06 +0000 Manifest next update: Fri 26 Dec 2025 06:50:06 +0000 Files and hashes: 1: 7mC-_JS8D3S9nREVbhW6I_fr5ag.crl (hash: sRonZCJcSFoieaINk8I2tlKQTm1EqQFqp5Xhdvt3uEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.crl rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6DD0, serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8 Validity Not Before: Dec 19 06:50:06 2025 GMT Not After : Dec 26 06:50:06 2025 GMT Subject: CN=6944f59e-27f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:92:58:c9:7c:be:e9:7b:9a:15:68:3c:e5:7c: 37:8a:07:d0:13:8e:f1:f9:50:0d:e3:c1:43:1c:33: 20:2f:5a:ee:26:ed:a8:2f:07:b0:f3:f6:10:26:a1: 6b:8d:01:be:ea:4f:68:4f:85:27:ed:cd:9b:30:ae: 93:5e:1d:d2:51:ff:21:e4:61:56:88:c2:c7:37:35: 33:c3:79:fb:c1:88:67:46:31:31:65:34:7b:4a:56: 36:e5:df:38:91:35:2c:48:7d:8f:79:d5:ec:cd:57: ad:6b:4b:09:1e:08:cd:92:17:c6:26:bb:2f:e5:de: f1:e9:d8:d0:62:9f:eb:31:f6:1f:d2:66:43:b8:af: fe:6c:f0:3e:19:3c:fb:9d:47:f6:b6:a3:51:44:13: 8a:bb:80:e8:98:de:91:c2:95:62:cf:b9:9c:9a:30: a9:74:bc:d1:2c:02:df:94:54:e8:dc:10:09:2e:7b: ad:e1:09:c3:4f:70:b3:ed:f0:ca:de:bc:ce:25:1a: 74:e2:64:c2:63:73:5f:8e:fa:f2:d2:01:62:84:dc: 36:e7:95:a6:75:c9:36:a5:a1:36:92:a7:71:4a:67: f5:74:5a:d3:24:22:91:28:0e:75:9e:84:a5:f1:52: 8f:41:5f:9a:0c:41:e3:33:a0:6f:1e:35:22:a3:50: fd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9A:A1:15:3C:F1:9C:B5:2D:83:5C:57:85:A3:B6:F5:1B:F5:7F:34 X509v3 Authority Key Identifier: keyid:EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f2:d4:d9:70:c6:86:97:d5:3a:3b:01:49:99:6d:24:7c:8b:7a: c5:95:dc:3f:33:74:e2:ba:e8:96:66:39:98:ac:99:ba:37:c3: 8b:94:12:2a:2d:ed:a7:51:29:ad:b4:e3:9e:2c:13:d5:bf:80: 30:b5:76:2c:d5:42:f4:b6:97:55:77:4a:e6:3b:a7:f6:b5:4e: a7:d6:0d:39:23:00:9b:ff:9d:d9:80:22:97:2a:09:af:11:d6: 44:52:7c:d4:a4:65:27:31:0a:27:bb:b5:0c:30:a7:a8:a6:e6: 7f:c4:3e:0d:0b:99:0f:cf:71:1c:17:f1:15:fa:e2:8b:0d:40: a0:fa:53:e4:bf:7c:9d:4b:63:a7:b3:eb:4a:7d:c8:03:66:d8: 27:f0:ea:ce:ba:c7:7c:51:98:6a:2a:a1:af:a9:78:10:8a:cc: 6d:f1:69:6d:97:97:a9:75:b1:35:72:4d:e3:f7:af:a3:bb:5e: fa:4f:1c:b4:62:24:6d:2c:c0:5b:1c:bc:d8:59:05:cc:f5:cc: e0:12:48:18:b8:ec:9d:c1:f4:a0:85:c5:12:50:2e:62:a1:1b: 20:27:9e:13:84:ba:ab:1f:11:80:cc:23:24:27:51:5a:c3:d0: 48:1e:75:be:0f:0b:50:6e:15:af:6c:a5:7a:24:71:03:8d:20: 38:2a:c6:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkREMDExMC8GA1UEBRMoRUU2MEJFRkM5NEJDMEY3NEJEOUQxMTE1NkUxNUJBMjNG N0VCRTVBODAeFw0yNTEyMTkwNjUwMDZaFw0yNTEyMjYwNjUwMDZaMBgxFjAUBgNV BAMMDTY5NDRmNTllLTI3ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqkljJfL7pe5oVaDzlfDeKB9ATjvH5UA3jwUMcMyAvWu4m7agvB7Dz9hAmoWuN Ab7qT2hPhSftzZswrpNeHdJR/yHkYVaIwsc3NTPDefvBiGdGMTFlNHtKVjbl3ziR NSxIfY951ezNV61rSwkeCM2SF8Ymuy/l3vHp2NBin+sx9h/SZkO4r/5s8D4ZPPud R/a2o1FEE4q7gOiY3pHClWLPuZyaMKl0vNEsAt+UVOjcEAkue63hCcNPcLPt8Mre vM4lGnTiZMJjc1+O+vLSAWKE3DbnlaZ1yTaloTaSp3FKZ/V0WtMkIpEoDnWehKXx Uo9BX5oMQeMzoG8eNSKjUP0XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK5qhFTzx nLUtg1xXhaO29Rv1fzQwHwYDVR0jBBgwFoAU7mC+/JS8D3S9nREVbhW6I/fr5agw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2REQwL0NBNzUwQUNBQzQ3 MDExRjBCRDVBNjIzOUM0RjlBRTAyLzdtQy1fSlM4RDNTOW5SRVZiaFc2SV9mcjVh Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN21DLV9KUzhEM1M5blJFVmJoVzZJX2ZyNWFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 REQwL0NBNzUwQUNBQzQ3MDExRjBCRDVBNjIzOUM0RjlBRTAyLzdtQy1fSlM4RDNT OW5SRVZiaFc2SV9mcjVhZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAPLU2XDGhpfVOjsBSZltJHyLesWV3D8zdOK66JZmOZismbo3w4uUEiot 7adRKa20454sE9W/gDC1dizVQvS2l1V3SuY7p/a1TqfWDTkjAJv/ndmAIpcqCa8R 1kRSfNSkZScxCie7tQwwp6im5n/EPg0LmQ/PcRwX8RX64osNQKD6U+S/fJ1LY6ez 60p9yANm2Cfw6s66x3xRmGoqoa+peBCKzG3xaW2Xl6l1sTVyTeP3r6O7XvpPHLRi JG0swFscvNhZBcz1zOASSBi47J3B9KCFxRJQLmKhGyAnnhOEuqsfEYDMIyQnUVrD 0Egedb4PC1BuFa9spXokcQONIDgqxoQ= -----END CERTIFICATE-----Generated at Fri Dec 19 18:59:08 2025 by rpki-client