This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: vO2BOk6iJRK1Rq5wsyU0iUUBoZGPlbTEBwbh9sUxgpg= Subject key identifier: 65:A6:7B:33:6C:6C:28:53:19:46:E8:35:9B:BD:D2:6E:D3:0A:B9:B7 Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 0433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 042B Signing time: Thu 18 Dec 2025 23:39:22 +0000 Manifest this update: Thu 18 Dec 2025 23:39:21 +0000 Manifest next update: Thu 25 Dec 2025 23:39:21 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: BzJngY4qoypdILQMuuXFyjRSlZ632VnUZLnYomBaBq8=) 2: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: EDOt0WGEdnT9+FI7T0IrxIQR/uJ+FjweoW8YpKMKOQA=) 3: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cu8wLYBxbGfRWUV9Ye7bg1eRpOLSnTYKjsEY2WUidXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1075 (0x433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: Dec 18 23:39:21 2025 GMT Not After : Dec 25 23:39:21 2025 GMT Subject: CN=694490aa-1fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:da:e6:bd:43:5d:4f:17:2f:6c:fe:80:fd:d7: 19:34:b4:2d:f6:8c:75:4e:79:66:e2:47:23:76:c6: b8:15:e4:f7:b7:f8:36:76:60:e8:2d:5e:89:a4:e5: ce:c1:63:e4:61:7e:d0:cc:84:4c:ae:89:52:0c:2d: f9:b9:61:6b:99:3e:80:6a:9b:e3:b4:fa:ca:95:87: fc:34:ff:38:32:59:bc:b0:85:fb:3f:e0:3a:31:18: 70:6c:68:e1:4d:ea:ca:5f:e6:87:3e:89:64:12:6b: 60:47:aa:11:7b:62:f1:e2:58:c6:7e:6b:5b:f7:17: 4f:56:e7:04:bd:66:1e:01:47:22:64:01:9f:37:ff: 2c:96:60:23:c7:57:91:35:6b:e5:d1:2a:c2:2f:74: 4c:58:36:a7:61:da:d6:fe:3e:aa:94:a5:14:99:cc: 3f:ff:92:d4:12:ce:b5:0e:20:f1:22:6d:77:e0:2f: ec:27:30:63:4c:f0:6d:cd:23:0b:20:3b:27:1d:7e: 1a:73:20:94:70:e1:77:77:05:fc:c6:62:00:5e:01: 38:ad:52:68:21:4b:4d:e3:56:4c:b3:98:5a:7c:9f: fb:29:fc:dd:9d:2e:7b:db:ad:36:e0:dc:c6:d3:72: 8b:63:74:d0:ae:47:71:9c:95:c1:41:00:de:0b:ba: 0d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A6:7B:33:6C:6C:28:53:19:46:E8:35:9B:BD:D2:6E:D3:0A:B9:B7 X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:66:3c:ca:1c:59:e9:62:60:60:e2:80:53:24:a0:c8:6a:c4: 69:86:dc:48:5a:12:3c:aa:62:cb:fb:55:d8:72:60:69:5a:a6: 77:6a:c5:c3:c1:80:06:c9:5a:70:0e:4e:e5:36:38:99:7b:43: db:7d:eb:8b:0a:6a:18:6b:91:16:62:82:31:96:ec:29:b5:fb: 34:4a:ee:09:0a:a3:6e:18:72:86:a3:a3:c6:94:a4:e4:9e:65: 31:6d:78:fc:19:23:b6:9c:99:fd:e7:ca:fc:dd:ea:6d:9e:33: 92:75:6b:37:ad:1e:99:55:2f:8f:ef:b0:04:33:97:e3:2a:d8: ad:83:e4:43:56:1a:67:7b:67:f6:40:d5:06:1e:4b:80:cb:02: 89:01:f7:9d:64:53:78:81:5d:e4:96:4e:82:2a:d9:09:60:09: cb:e1:55:01:d1:5f:5f:98:d6:55:88:52:81:db:73:66:68:64: 99:ec:66:35:ae:d4:4e:4c:a5:dd:39:d4:1f:82:91:f0:55:49: 22:41:95:87:32:52:56:d4:c5:82:3a:06:78:76:5f:36:75:64: 60:9c:69:2e:0d:08:f0:d3:15:7e:51:83:d1:db:a3:45:1e:99: 38:30:1c:eb:bf:a6:24:a8:b2:3f:36:85:9c:cb:e4:7b:cd:9b: 62:fa:9d:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjUxMjE4MjMzOTIxWhcNMjUxMjI1MjMzOTIxWjAYMRYwFAYD VQQDDA02OTQ0OTBhYS0xZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9rmvUNdTxcvbP6A/dcZNLQt9ox1Tnlm4kcjdsa4FeT3t/g2dmDoLV6JpOXO wWPkYX7QzIRMrolSDC35uWFrmT6AapvjtPrKlYf8NP84Mlm8sIX7P+A6MRhwbGjh TerKX+aHPolkEmtgR6oRe2Lx4ljGfmtb9xdPVucEvWYeAUciZAGfN/8slmAjx1eR NWvl0SrCL3RMWDanYdrW/j6qlKUUmcw//5LUEs61DiDxIm134C/sJzBjTPBtzSML IDsnHX4acyCUcOF3dwX8xmIAXgE4rVJoIUtN41ZMs5hafJ/7KfzdnS5726024NzG 03KLY3TQrkdxnJXBQQDeC7oNtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWmezNs bChTGUboNZu90m7TCrm3MB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUZjzKHFnpYmBg4oBTJKDIasRphtxIWhI8qmLL+1XYcmBpWqZ3asXD wYAGyVpwDk7lNjiZe0PbfeuLCmoYa5EWYoIxluwptfs0Su4JCqNuGHKGo6PGlKTk nmUxbXj8GSO2nJn958r83eptnjOSdWs3rR6ZVS+P77AEM5fjKtitg+RDVhpne2f2 QNUGHkuAywKJAfedZFN4gV3klk6CKtkJYAnL4VUB0V9fmNZViFKB23NmaGSZ7GY1 rtROTKXdOdQfgpHwVUkiQZWHMlJW1MWCOgZ4dl82dWRgnGkuDQjw0xV+UYPR26NF Hpk4MBzrv6YkqLI/NoWcy+R7zZti+p1u -----END CERTIFICATE-----Generated at Sat Dec 20 03:27:10 2025 by rpki-client