This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft File: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft (raw, json) Hash identifier: fUl6oU7AhEviGp4C+in+zbjqVuAX/txQwtuspj+C9Ms= Subject key identifier: CF:06:A4:F0:A2:E8:BA:03:23:75:F8:62:0B:24:E2:32:24:63:CD:03 Authority key identifier: EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2 Certificate issuer: /CN=A91D41AC/serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft Manifest number: 11 Signing time: Fri 19 Dec 2025 05:23:16 +0000 Manifest this update: Fri 19 Dec 2025 05:23:15 +0000 Manifest next update: Fri 26 Dec 2025 05:23:15 +0000 Files and hashes: 1: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl (hash: LJxhcfbbF5GDK5fb1HHo00LMVjIaNPJVfkzlmqFtEp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D41AC, serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2 Validity Not Before: Dec 19 05:23:15 2025 GMT Not After : Dec 26 05:23:15 2025 GMT Subject: CN=6944e143-f02f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:d7:22:3a:ba:d4:2b:46:b0:48:6f:75:e8: a9:8d:73:f7:f2:2a:ae:e0:55:b2:44:9d:43:83:a7: 55:5d:f2:e8:78:bf:38:98:ca:54:a8:4f:ad:c9:85: 07:fa:69:0c:6d:ce:50:1e:72:53:04:6c:09:27:3d: 0f:15:da:93:79:b6:79:e3:e6:d9:5e:e3:37:40:bf: 7d:ba:2e:d9:45:cd:ec:d6:5a:a5:c8:be:88:75:9d: dd:5f:e1:49:cd:90:05:7f:22:91:79:ab:b8:1e:d0: 27:8a:13:fa:3b:fb:6b:8a:22:c1:64:e7:63:7b:b9: 01:3d:3b:6a:32:be:a1:b1:fd:41:24:7c:5a:55:dd: 45:44:c5:04:64:25:c4:0b:16:02:98:11:04:ec:ed: ba:fa:70:36:73:45:da:c2:b8:e7:ec:b6:31:da:b3: 8f:ab:c7:cb:3f:78:91:5f:a2:b7:34:54:31:b6:01: 10:97:9d:8c:56:53:4a:ce:b8:e6:bc:97:ba:5c:1c: 33:f5:0a:33:42:41:12:d6:79:75:a9:c4:4f:81:d6: 5c:b1:c5:0a:48:3d:0d:dc:ec:9e:70:dd:e7:26:95: 01:48:88:7e:87:94:66:50:e9:19:6e:0a:24:11:ea: c3:6c:7c:46:7f:20:bf:81:bc:43:90:14:84:2b:cc: bb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:06:A4:F0:A2:E8:BA:03:23:75:F8:62:0B:24:E2:32:24:63:CD:03 X509v3 Authority Key Identifier: keyid:EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:04:41:0c:dd:f2:db:5c:1f:2b:88:e0:b0:21:9d:40:e1:6a: 7d:a5:12:38:8a:5e:a1:89:d8:ec:f8:64:5c:9c:4c:34:5d:d3: 22:5c:95:89:d7:27:50:fc:ff:ad:3b:5d:6e:4e:f5:ff:3c:28: eb:a3:83:86:85:ff:cf:90:60:6a:4a:50:30:a8:b3:e8:d5:25: 2a:8a:9d:ee:c9:ae:cd:8f:dd:ef:8c:9d:06:5f:6c:96:34:94: 54:cd:f0:94:37:b5:cf:b4:b0:e9:e8:6e:f8:0b:1e:d3:f0:f7: d6:c4:75:0e:35:f2:63:85:01:bd:0c:e3:91:cb:a0:f7:ae:6c: e9:39:8a:ad:86:1c:3a:57:25:2f:6d:c5:34:06:cf:85:fd:7b: 33:e1:bd:3d:fa:67:05:c4:78:f2:c7:d8:bc:ff:68:20:c8:32: de:fb:ae:69:f6:3a:0e:e4:ef:3a:21:37:de:0a:fb:8c:7d:cc: 26:33:fb:bd:4b:0e:1e:77:7a:49:0f:1b:c1:60:64:3b:ff:f4: 3a:ea:28:34:70:48:b3:b8:67:02:f2:3c:64:ff:38:13:49:49: 0b:e0:52:2a:27:8b:e2:6f:37:20:88:eb:9a:9f:58:58:db:26: bb:cd:0e:b6:32:b7:a5:eb:ec:0c:fb:5f:cf:3a:27:2e:02:78: c4:d9:2f:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDFBQzExMC8GA1UEBRMoRUVBOTAxQjdGQjMzRkI1MENGMDRDNTk4MUY4QkVGNkM0 REVDMzVFMjAeFw0yNTEyMTkwNTIzMTVaFw0yNTEyMjYwNTIzMTVaMBgxFjAUBgNV BAMMDTY5NDRlMTQzLWYwMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwb9ciOrrUK0awSG916KmNc/fyKq7gVbJEnUODp1Vd8uh4vziYylSoT63JhQf6 aQxtzlAeclMEbAknPQ8V2pN5tnnj5tle4zdAv326LtlFzezWWqXIvoh1nd1f4UnN kAV/IpF5q7ge0CeKE/o7+2uKIsFk52N7uQE9O2oyvqGx/UEkfFpV3UVExQRkJcQL FgKYEQTs7br6cDZzRdrCuOfstjHas4+rx8s/eJFforc0VDG2ARCXnYxWU0rOuOa8 l7pcHDP1CjNCQRLWeXWpxE+B1lyxxQpIPQ3c7J5w3ecmlQFIiH6HlGZQ6RluCiQR 6sNsfEZ/IL+BvEOQFIQrzLvdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzwak8KLo ugMjdfhiCyTiMiRjzQMwHwYDVR0jBBgwFoAU7qkBt/sz+1DPBMWYH4vvbE3sNeIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0MUFDL0EzMDJBQjQ2QzY4 QzExRjBBRDIxNDYzN0M0RjlBRTAyLzdxa0J0X3N6LTFEUEJNV1lINHZ2YkUzc05l SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN3FrQnRfc3otMURQQk1XWUg0dnZiRTNzTmVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 MUFDL0EzMDJBQjQ2QzY4QzExRjBBRDIxNDYzN0M0RjlBRTAyLzdxa0J0X3N6LTFE UEJNV1lINHZ2YkUzc05lSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGcEQQzd8ttcHyuI4LAhnUDhan2lEjiKXqGJ2Oz4ZFycTDRd0yJclYnX J1D8/607XW5O9f88KOujg4aF/8+QYGpKUDCos+jVJSqKne7Jrs2P3e+MnQZfbJY0 lFTN8JQ3tc+0sOnobvgLHtPw99bEdQ418mOFAb0M45HLoPeubOk5iq2GHDpXJS9t xTQGz4X9ezPhvT36ZwXEePLH2Lz/aCDIMt77rmn2Og7k7zohN94K+4x9zCYz+71L Dh53ekkPG8FgZDv/9DrqKDRwSLO4ZwLyPGT/OBNJSQvgUioni+JvNyCI65qfWFjb JrvNDrYyt6Xr7Az7X886Jy4CeMTZLwI= -----END CERTIFICATE-----Generated at Sat Dec 20 00:50:25 2025 by rpki-client