This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft File: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json) Hash identifier: wVLn1Q4G0o6ZgHRkw6YMzWxxS6Zl7DYV+8Lq7s4qgMQ= Subject key identifier: 02:FB:90:3E:A2:A7:12:C5:4A:E0:B5:2D:AA:52:1A:46:C8:39:84:7C Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA Certificate issuer: /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft Manifest number: 016B Signing time: Fri 19 Dec 2025 03:08:30 +0000 Manifest this update: Fri 19 Dec 2025 03:08:29 +0000 Manifest next update: Fri 26 Dec 2025 03:08:29 +0000 Files and hashes: 1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: xn7R4O5ZTpWnjX901uDrjqite7XdDqp86I/sINQsMgA=) 2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: yzICNTcM283Dqn+31XlCHYK+SaKesuIOk3Z/S3+BpWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Validity Not Before: Dec 19 03:08:29 2025 GMT Not After : Dec 26 03:08:29 2025 GMT Subject: CN=6944c1ae-ae73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:40:b8:c8:89:b6:de:ea:0a:af:50:10:e4:f3: ff:62:af:40:59:28:56:e7:b3:b3:2d:4a:eb:9f:4b: 8b:dc:22:05:a1:e1:61:e7:1a:55:1a:f4:1f:68:2f: 3f:1f:d6:59:1c:d6:f9:68:27:a1:7e:96:76:0c:03: 37:42:68:6d:71:c9:77:37:13:23:09:91:7a:88:81: 53:3c:c5:a6:6d:e9:e9:f5:2b:6f:9d:27:5a:a7:61: eb:83:83:5b:a3:47:c4:7c:82:5e:bd:a5:96:12:33: 90:2c:26:f0:e7:28:01:e2:a3:c9:0c:fc:57:cf:5a: fc:c4:8c:9d:ce:96:dc:94:7b:25:c9:70:e4:14:e7: 66:10:e6:b4:a9:b0:88:e8:b6:4a:9d:f0:22:0f:30: 4f:36:ea:30:76:c5:3a:52:4f:53:42:4d:bd:a9:e5: d7:97:92:b5:f1:3b:7f:90:b1:13:7b:bc:76:e6:6a: 0a:79:a1:12:50:3e:f9:e9:6a:9b:41:32:e0:2c:fb: 69:94:37:dc:b8:90:88:c8:78:2a:a4:0c:dc:37:b7: ca:96:74:68:01:bc:b5:1c:90:3b:e0:d8:b8:b5:ce: ff:78:f9:3a:89:34:7b:6f:44:28:ff:ce:ab:7d:f5: f5:0c:e3:b4:a4:c4:54:47:1b:96:f3:81:82:0f:8d: 8e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FB:90:3E:A2:A7:12:C5:4A:E0:B5:2D:AA:52:1A:46:C8:39:84:7C X509v3 Authority Key Identifier: keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6c:e1:f9:37:42:06:a8:b8:bf:4f:b9:a1:59:67:9c:eb:00: 61:3f:db:a7:54:9f:31:c8:81:a0:d5:6a:25:8f:c2:4b:d0:5a: 60:e4:49:99:84:2d:38:65:81:13:a0:1f:8d:fc:73:35:fb:0e: 1b:35:3b:b2:4c:ae:0b:ad:11:1f:10:47:1e:4b:57:2b:be:49: ee:96:38:05:dc:de:60:2a:53:6c:5d:42:67:72:7a:cb:e6:b8: e3:0b:f7:de:a8:82:19:d8:c2:72:3c:6b:13:61:cf:65:04:ba: 60:3c:31:16:50:3b:9b:8a:47:95:d9:ab:4d:46:21:1a:3f:50: b7:59:08:45:2d:a2:54:06:0c:09:5b:91:43:e8:bb:43:53:d1: 36:5d:f5:b3:73:05:0c:f4:ca:76:e5:b5:82:6b:d9:0e:d6:ea: d8:d5:63:44:82:b1:ae:1a:f0:a8:79:b9:47:d7:e8:6b:72:c9: 8b:18:8f:64:a7:a7:10:89:de:4d:58:b8:c7:cf:94:87:1b:4b: a1:6e:4e:c2:e8:63:0d:d8:15:13:a8:c3:2f:4b:8e:54:ee:e1: ec:b5:0c:8d:17:e7:8f:1f:10:74:89:d9:33:24:38:fd:5b:ab: a4:5b:3e:a1:b8:3f:13:10:a0:d2:38:82:43:e5:df:21:23:81: 4b:5b:9b:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzQUYxMTAvBgNVBAUTKEVGMzBBMjQxNDZERjY2QjFGQTZGQkE1RDY3Njc2OUVC NjRCMzg3QUEwHhcNMjUxMjE5MDMwODI5WhcNMjUxMjI2MDMwODI5WjAYMRYwFAYD VQQDDA02OTQ0YzFhZS1hZTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEC4yIm23uoKr1AQ5PP/Yq9AWShW57OzLUrrn0uL3CIFoeFh5xpVGvQfaC8/ H9ZZHNb5aCehfpZ2DAM3Qmhtccl3NxMjCZF6iIFTPMWmbenp9StvnSdap2Hrg4Nb o0fEfIJevaWWEjOQLCbw5ygB4qPJDPxXz1r8xIydzpbclHslyXDkFOdmEOa0qbCI 6LZKnfAiDzBPNuowdsU6Uk9TQk29qeXXl5K18Tt/kLETe7x25moKeaESUD756Wqb QTLgLPtplDfcuJCIyHgqpAzcN7fKlnRoAby1HJA74Ni4tc7/ePk6iTR7b0Qo/86r ffX1DOO0pMRURxuW84GCD42O1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAL7kD6i pxLFSuC1LapSGkbIOYR8MB8GA1UdIwQYMBaAFO8wokFG32ax+m+6XWdnaetks4eq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNBRi9FMTREMUFCNEI2 QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpySDZiN3BkWjJkcDYyU3po Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd6Q2lRVWJmWnJINmI3cGRaMmRwNjJTemg2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNBRi9FMTREMUFCNEI2QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpy SDZiN3BkWjJkcDYyU3poNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvbOH5N0IGqLi/T7mhWWec6wBhP9unVJ8xyIGg1Wolj8JL0Fpg5EmZ hC04ZYEToB+N/HM1+w4bNTuyTK4LrREfEEceS1crvknuljgF3N5gKlNsXUJncnrL 5rjjC/feqIIZ2MJyPGsTYc9lBLpgPDEWUDubikeV2atNRiEaP1C3WQhFLaJUBgwJ W5FD6LtDU9E2XfWzcwUM9Mp25bWCa9kO1urY1WNEgrGuGvCoeblH1+hrcsmLGI9k p6cQid5NWLjHz5SHG0uhbk7C6GMN2BUTqMMvS45U7uHstQyNF+ePHxB0idkzJDj9 W6ukWz6huD8TEKDSOIJD5d8hI4FLW5t0 -----END CERTIFICATE-----Generated at Fri Dec 19 23:53:26 2025 by rpki-client