This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft File: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json) Hash identifier: sDpa3hF6V6mzwPWjBSJG4060xbvwMj2jW7PBbdXDBhg= Subject key identifier: A2:04:7E:CE:72:25:93:B2:55:AC:22:4F:7C:9F:8C:13:65:E3:03:11 Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Certificate serial: 0B49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft Manifest number: 0B2D Signing time: Thu 18 Dec 2025 18:57:17 +0000 Manifest this update: Thu 18 Dec 2025 18:57:17 +0000 Manifest next update: Thu 25 Dec 2025 18:57:17 +0000 Files and hashes: 1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: s877POrStHj4MW9AHCALrK739RqBwwjL9vf+r/WmNyY=) 2: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: AlDXjMzrluQLs6V85p5i3jcfN6x00fmAUpJ1+5KxZR0=) 3: 4D56512423F411F0A37D240FC4F9AE02.roa (hash: DR5F6HRqYYMo1uwv7ihEplZzpoKgREyzR6TXxsIOhyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2889 (0xb49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Validity Not Before: Dec 18 18:57:17 2025 GMT Not After : Dec 25 18:57:17 2025 GMT Subject: CN=69444e8d-af4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:27:06:80:4b:1f:27:96:f7:eb:3e:c9:f2:e6: 5c:8a:da:ef:6b:c0:f3:22:7c:b8:9e:0c:db:6b:71: eb:07:e7:f0:af:e9:dd:47:f7:a5:ae:f9:8e:4b:56: bd:5b:54:87:7b:b7:a4:1f:67:f2:f3:a5:fb:10:e3: 0a:72:79:08:35:0d:3c:12:ad:2d:86:62:01:f7:ec: 05:3f:ea:6c:99:63:39:ce:66:88:41:d2:91:5b:81: 85:39:f0:6b:dc:7c:4c:b6:04:c6:f3:74:72:64:ab: 2a:83:a3:97:a9:66:38:c3:40:84:04:30:74:e3:88: 50:22:6c:00:a7:de:ae:e2:6f:c4:dd:ac:f3:8f:7b: e4:64:73:1f:d0:97:dd:0c:dd:f6:4f:7d:ea:07:c0: c4:88:bb:2e:9f:3a:36:f0:27:fa:ce:28:fc:f8:e9: ec:65:fe:70:fe:f8:44:0a:29:7a:ee:1f:9a:0c:5a: 2a:b6:b9:e0:e5:33:a5:d2:ed:be:96:85:8d:09:41: 07:13:f2:5b:e0:64:5c:c0:a9:4f:1d:88:b3:3a:13: 61:2d:4f:83:12:c9:f6:a8:b0:ad:6e:72:63:92:35: 40:85:a2:4a:52:fb:65:91:4f:3a:66:7a:8f:20:7e: 46:6b:36:b0:4e:72:3d:2c:21:dc:02:a5:7e:d9:22: 7b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:04:7E:CE:72:25:93:B2:55:AC:22:4F:7C:9F:8C:13:65:E3:03:11 X509v3 Authority Key Identifier: keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:22:75:45:33:84:a7:bf:4f:56:f9:52:58:1a:d8:60:02:20: fa:f7:c3:92:3f:50:c4:0c:4f:be:87:76:df:24:1e:bb:0f:80: b0:81:7c:5e:d8:3d:d1:b3:25:a2:8a:87:45:ba:31:98:4f:39: f1:4b:20:f8:a6:97:2b:e9:d2:b5:1b:f4:98:89:c9:80:15:df: 09:84:da:77:f7:c4:ea:75:ec:d9:c4:f2:3b:68:db:bd:0f:42: c0:a9:d8:6e:ad:e9:c4:7e:a4:5b:02:d8:1c:51:e0:48:10:14: 4c:4f:06:b3:88:fc:15:fa:5c:6d:28:cb:45:96:97:5a:08:9d: b4:8e:24:5d:35:b7:0f:be:47:b5:ab:ba:4b:f6:40:56:9c:10: a3:6c:1a:a5:d0:77:9d:c2:44:9b:3a:d1:ab:67:50:5b:09:90: 0f:bf:11:f0:b8:8f:4d:47:80:96:34:54:c3:db:1f:5e:dd:04: aa:36:79:0c:ef:56:de:4c:ca:b6:60:71:7b:cf:d6:ed:7e:e8: 71:b3:e0:df:b2:81:a5:0e:da:ad:c4:b6:5a:0b:f1:40:f0:eb: e8:d0:ce:63:e9:9a:0d:5d:8d:21:5f:6c:bf:06:76:4b:51:76: a8:73:f4:3b:22:a3:a8:5d:a0:aa:b7:16:32:5a:aa:13:d7:d9: eb:b2:64:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMzYxMTAvBgNVBAUTKEVEODVFRjc3MzQzQzU1NDEyQjA2QTUzQzJBNEUyMDc2 N0FEMTJGMjUwHhcNMjUxMjE4MTg1NzE3WhcNMjUxMjI1MTg1NzE3WjAYMRYwFAYD VQQDDA02OTQ0NGU4ZC1hZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoScGgEsfJ5b36z7J8uZcitrva8DzIny4ngzba3HrB+fwr+ndR/elrvmOS1a9 W1SHe7ekH2fy86X7EOMKcnkINQ08Eq0thmIB9+wFP+psmWM5zmaIQdKRW4GFOfBr 3HxMtgTG83RyZKsqg6OXqWY4w0CEBDB044hQImwAp96u4m/E3azzj3vkZHMf0Jfd DN32T33qB8DEiLsunzo28Cf6zij8+OnsZf5w/vhECil67h+aDFoqtrng5TOl0u2+ loWNCUEHE/Jb4GRcwKlPHYizOhNhLU+DEsn2qLCtbnJjkjVAhaJKUvtlkU86ZnqP IH5GazawTnI9LCHcAqV+2SJ7cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIEfs5y JZOyVawiT3yfjBNl4wMRMB8GA1UdIwQYMBaAFO2F73c0PFVBKwalPCpOIHZ60S8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIzNi9ENDI4Nzk2RTUz MjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZVRXJCcVU4S2s0Z2RuclJM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZWHZkelE4VlVFckJxVThLazRnZG5yUkx5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIzNi9ENDI4Nzk2RTUzMjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZV RXJCcVU4S2s0Z2RuclJMeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoInVFM4Snv09W+VJYGthgAiD698OSP1DEDE++h3bfJB67D4CwgXxe 2D3RsyWiiodFujGYTznxSyD4ppcr6dK1G/SYicmAFd8JhNp398TqdezZxPI7aNu9 D0LAqdhurenEfqRbAtgcUeBIEBRMTwaziPwV+lxtKMtFlpdaCJ20jiRdNbcPvke1 q7pL9kBWnBCjbBql0HedwkSbOtGrZ1BbCZAPvxHwuI9NR4CWNFTD2x9e3QSqNnkM 71beTMq2YHF7z9btfuhxs+DfsoGlDtqtxLZaC/FA8Ovo0M5j6ZoNXY0hX2y/BnZL UXaoc/Q7IqOoXaCqtxYyWqoT19nrsmQY -----END CERTIFICATE-----Generated at Fri Dec 19 17:47:21 2025 by rpki-client