This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft File: 7wIl-Rz-Rn8TvZHmyaG536c7sew.mft (raw, json) Hash identifier: bEs3cml338NPPjf6xYEE8/77pINGa6/3B0aVUNeRuK0= Subject key identifier: 1E:E9:79:57:5B:8B:D7:8A:F5:B1:2C:A2:CA:11:B1:EB:D7:49:70:B5 Authority key identifier: EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC Certificate issuer: /CN=A91BA9F2/serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft Manifest number: 3F Signing time: Fri 19 Dec 2025 06:23:18 +0000 Manifest this update: Fri 19 Dec 2025 06:23:17 +0000 Manifest next update: Fri 26 Dec 2025 06:23:17 +0000 Files and hashes: 1: 7wIl-Rz-Rn8TvZHmyaG536c7sew.crl (hash: vfNDJeSMCZ1JVjTikAJGNb7sTpoBsz6SdJDIBXnsiVE=) 2: D57991447D8E11F09BE2EB75C4F9AE02.roa (hash: au2fE5QZV4wi2bNW1k3MSZSx8H26Znmq3AG3Io7itYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA9F2, serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC Validity Not Before: Dec 19 06:23:17 2025 GMT Not After : Dec 26 06:23:17 2025 GMT Subject: CN=6944ef55-db77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2e:7f:9d:1f:8b:80:5e:5b:a4:3a:57:4f:48: 54:b4:01:a6:cb:1e:c1:80:87:c1:40:f9:13:a6:14: 0f:f7:77:62:09:d0:30:d3:86:8d:c4:4c:1c:60:4b: e8:61:ae:fe:18:a5:7a:c3:31:13:e9:8f:04:4e:27: 97:8c:6d:f0:3f:bf:13:20:86:6a:e4:fe:30:be:a8: 4f:9e:85:2e:18:66:b8:f0:91:cb:a6:6c:2e:f5:02: ec:d4:09:8a:40:0f:09:86:87:67:1a:af:f7:e2:bf: 33:7d:67:e7:8f:9f:d4:a3:3f:ab:a6:59:e3:81:c9: 89:38:59:bd:60:b4:cf:6a:0e:76:21:fd:fd:ed:58: e1:ae:ff:eb:10:ba:69:d0:df:c0:92:e0:d6:4c:1b: 3e:67:ff:d7:91:73:f1:de:8f:30:db:c8:4a:34:31: 97:27:24:99:f6:0a:78:29:30:a9:0f:31:85:c7:07: fc:96:94:78:93:d5:25:2e:5c:40:28:b3:4d:ef:19: 34:fb:32:0e:c5:fb:54:0b:ad:e7:5e:b4:9a:74:01: 54:8a:b6:cf:ec:02:d3:72:dc:0d:bb:ad:b5:9e:51: 47:25:9a:26:bf:12:1d:8c:b3:0d:e1:36:4b:48:6a: 1d:df:ba:32:7b:92:6c:c8:98:fa:ee:0d:78:dd:2d: 46:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E9:79:57:5B:8B:D7:8A:F5:B1:2C:A2:CA:11:B1:EB:D7:49:70:B5 X509v3 Authority Key Identifier: keyid:EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:18:d4:64:3d:89:95:8f:f4:ce:a6:35:c8:d5:e3:72:89:c1: cf:ab:d3:67:5f:9c:21:04:11:85:c3:09:75:12:be:4d:e7:af: 8f:a5:ac:11:85:ec:f0:f8:11:2c:b4:f4:be:bd:bb:1f:d5:82: a8:a7:f3:91:04:29:a6:e1:c0:87:8b:ce:04:66:56:c9:c1:af: ae:fe:88:59:cc:c5:c9:45:cd:c2:8b:37:10:4f:e6:c2:5f:3f: 41:ab:76:24:08:a7:c0:5c:fd:d3:9c:a5:9d:a2:c5:ad:6d:a7: 1a:bb:fa:70:95:3f:4b:57:bd:96:a5:a0:2c:4f:71:b1:47:02: 37:2e:a7:d1:e1:cb:cf:67:ab:5f:82:fd:7a:f1:87:51:c2:ea: 19:32:b3:e8:3c:76:1f:dd:05:44:0b:ed:a5:9b:1e:22:fb:3b: e7:9f:47:49:f1:c4:8e:04:cd:52:57:30:d9:e3:52:b6:11:33: 2d:d9:95:a4:a6:d4:72:a6:8e:af:82:37:5e:be:ba:b4:16:ca: 29:8e:45:7f:9c:45:50:f4:80:89:be:31:76:b3:03:a8:53:43: 01:49:c6:00:31:64:e1:fb:ed:1d:87:0d:35:61:a8:b1:5c:10: 1d:83:4d:23:c6:b7:e4:b5:4f:82:ae:02:68:89:f4:b0:d5:da: ef:bd:c7:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTlGMjExMC8GA1UEBRMoRUYwMjI1RjkxQ0ZFNDY3RjEzQkQ5MUU2QzlBMUI5REZB NzNCQjFFQzAeFw0yNTEyMTkwNjIzMTdaFw0yNTEyMjYwNjIzMTdaMBgxFjAUBgNV BAMMDTY5NDRlZjU1LWRiNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYLn+dH4uAXlukOldPSFS0AabLHsGAh8FA+ROmFA/3d2IJ0DDTho3ETBxgS+hh rv4YpXrDMRPpjwROJ5eMbfA/vxMghmrk/jC+qE+ehS4YZrjwkcumbC71AuzUCYpA DwmGh2car/fivzN9Z+ePn9SjP6umWeOByYk4Wb1gtM9qDnYh/f3tWOGu/+sQumnQ 38CS4NZMGz5n/9eRc/HejzDbyEo0MZcnJJn2CngpMKkPMYXHB/yWlHiT1SUuXEAo s03vGTT7Mg7F+1QLredetJp0AVSKts/sAtNy3A27rbWeUUclmia/Eh2Msw3hNktI ah3fujJ7kmzImPruDXjdLUb3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHul5V1uL 14r1sSyiyhGx69dJcLUwHwYDVR0jBBgwFoAU7wIl+Rz+Rn8TvZHmyaG536c7seww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBOUYyLzBDNzgxRkQwN0Q4 QTExRjBBQUZCQTE4MUM0RjlBRTAyLzd3SWwtUnotUm44VHZaSG15YUc1MzZjN3Nl dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN3dJbC1Sei1SbjhUdlpIbXlhRzUzNmM3c2V3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB OUYyLzBDNzgxRkQwN0Q4QTExRjBBQUZCQTE4MUM0RjlBRTAyLzd3SWwtUnotUm44 VHZaSG15YUc1MzZjN3Nldy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJEY1GQ9iZWP9M6mNcjV43KJwc+r02dfnCEEEYXDCXUSvk3nr4+lrBGF 7PD4ESy09L69ux/Vgqin85EEKabhwIeLzgRmVsnBr67+iFnMxclFzcKLNxBP5sJf P0GrdiQIp8Bc/dOcpZ2ixa1tpxq7+nCVP0tXvZaloCxPcbFHAjcup9Hhy89nq1+C /Xrxh1HC6hkys+g8dh/dBUQL7aWbHiL7O+efR0nxxI4EzVJXMNnjUrYRMy3ZlaSm 1HKmjq+CN16+urQWyimORX+cRVD0gIm+MXazA6hTQwFJxgAxZOH77R2HDTVhqLFc EB2DTSPGt+S1T4KuAmiJ9LDV2u+9x0w= -----END CERTIFICATE-----Generated at Sat Dec 20 15:30:39 2025 by rpki-client