This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft File: 7unhDCkeVsgtdwcgELDlgAg_5yk.mft (raw, json) Hash identifier: +nF8ularUyWhK2AZu6+MdzX/IUbRe4Z7lbrzkROo3kU= Subject key identifier: FA:2D:6C:9F:FF:58:6D:75:01:DE:A3:EA:A1:E5:F3:B8:29:F5:7B:C1 Authority key identifier: EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29 Certificate issuer: /CN=A91E82F0/serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729 Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft Manifest number: 018C Signing time: Wed 31 Dec 2025 02:39:07 +0000 Manifest this update: Wed 31 Dec 2025 02:39:07 +0000 Manifest next update: Wed 07 Jan 2026 02:39:07 +0000 Files and hashes: 1: 7unhDCkeVsgtdwcgELDlgAg_5yk.crl (hash: O1u5YjvB+tMzy/J7MRixlxlk1reowu+XV3x+PYmvE94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 02:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E82F0, serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729 Validity Not Before: Dec 31 02:39:07 2025 GMT Not After : Jan 7 02:39:07 2026 GMT Subject: CN=69548ccb-ff31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6a:22:9f:f6:17:2a:12:57:03:59:e4:73:31: eb:46:52:17:3e:dc:26:c6:9f:56:e1:49:61:6f:49: 36:05:6d:50:e9:28:ce:8a:6b:ff:ee:ed:29:9c:db: ef:1c:88:35:7b:7b:18:8a:fc:b3:ae:04:80:5c:bd: e1:da:d6:3c:0b:4a:e1:95:cf:c2:4b:f8:1d:fa:20: 41:b7:6d:34:de:fd:4e:97:00:a8:60:b5:a3:7a:b7: 98:b1:de:a0:de:45:a0:58:32:04:08:1a:ea:16:55: 94:02:ba:5d:87:28:99:20:db:53:29:bb:82:32:a5: fd:b4:cd:4a:ad:a9:a9:cd:5c:9a:da:24:ce:f7:ce: d5:4e:1e:7b:20:12:a8:9d:4d:ba:16:f3:9e:ad:7c: 62:e0:d0:66:00:96:1d:57:c7:2d:6e:c7:8c:68:07: d3:e9:63:ee:8a:ce:08:e7:d9:a5:cf:fc:c1:19:4d: d5:a2:91:51:49:4e:0f:b3:92:c5:09:67:3d:77:a5: eb:c8:3f:10:cb:d0:7f:28:3c:08:f9:2f:98:66:e6: 85:58:1f:40:7a:96:ca:da:ae:ac:1b:5e:b5:51:46: aa:03:94:c4:db:de:7e:c0:ba:cb:0f:cb:ed:9f:3c: 5d:97:e6:1e:95:c2:a2:2c:1a:d4:7c:b7:ac:fc:6a: 3f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2D:6C:9F:FF:58:6D:75:01:DE:A3:EA:A1:E5:F3:B8:29:F5:7B:C1 X509v3 Authority Key Identifier: keyid:EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:bb:b9:56:10:eb:e7:98:57:da:9e:08:df:bf:a5:c5:64:25: e1:cb:91:2e:d9:3b:95:21:81:70:d8:b6:1e:80:fd:1d:7e:66: 77:c3:13:16:45:66:3c:52:91:fc:8a:5c:9f:83:9f:aa:ca:4c: cf:a8:55:a8:0b:2b:0d:f1:2c:50:a9:c6:62:ae:ce:61:1e:f2: da:89:24:e8:86:3d:f4:a7:c5:24:84:01:2f:9b:73:52:c0:82: 13:22:d0:cf:37:26:7b:04:71:1c:3d:c2:db:27:99:15:59:c6: 58:f6:8d:70:38:f9:f4:2a:58:bf:6f:f3:37:4a:f0:2c:a7:91: 66:78:1c:e1:df:c4:5a:a1:fa:71:5f:a0:80:38:5b:88:02:99: 9e:08:71:dd:de:cf:58:28:e1:c1:26:86:b0:ff:81:0e:e8:32: 33:7f:c7:f8:32:ca:b6:9f:ff:95:c8:b0:9f:35:3a:c6:e8:94: 64:a8:a0:b7:16:de:ca:00:ae:d6:27:67:06:3c:6a:ff:1e:a1: 3e:b2:2b:cd:0a:ad:53:5c:fb:56:6d:3c:60:01:1f:fa:3a:ec: 7b:cb:59:9b:ec:a4:95:cf:cd:12:39:89:6c:a2:6e:48:a6:b5: 41:ca:a3:ee:af:6b:f5:ef:fc:36:fc:d8:4b:db:01:a0:67:48: 8b:d0:12:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgyRjAxMTAvBgNVBAUTKEVFRTlFMTBDMjkxRTU2QzgyRDc3MDcyMDEwQjBFNTgw MDgzRkU3MjkwHhcNMjUxMjMxMDIzOTA3WhcNMjYwMTA3MDIzOTA3WjAYMRYwFAYD VQQDDA02OTU0OGNjYi1mZjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWoin/YXKhJXA1nkczHrRlIXPtwmxp9W4Ulhb0k2BW1Q6SjOimv/7u0pnNvv HIg1e3sYivyzrgSAXL3h2tY8C0rhlc/CS/gd+iBBt2003v1OlwCoYLWjereYsd6g 3kWgWDIECBrqFlWUArpdhyiZINtTKbuCMqX9tM1KrampzVya2iTO987VTh57IBKo nU26FvOerXxi4NBmAJYdV8ctbseMaAfT6WPuis4I59mlz/zBGU3VopFRSU4Ps5LF CWc9d6XryD8Qy9B/KDwI+S+YZuaFWB9AepbK2q6sG161UUaqA5TE295+wLrLD8vt nzxdl+YelcKiLBrUfLes/Go/jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPotbJ// WG11Ad6j6qHl87gp9XvBMB8GA1UdIwQYMBaAFO7p4QwpHlbILXcHIBCw5YAIP+cp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJGMC81QzU3RTVDMDgy ODMxMUVFOTBDODgxNkFDNEY5QUUwMi83dW5oRENrZVZzZ3Rkd2NnRUxEbGdBZ181 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1bmhEQ2tlVnNndGR3Y2dFTERsZ0FnXzV5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODJGMC81QzU3RTVDMDgyODMxMUVFOTBDODgxNkFDNEY5QUUwMi83dW5oRENrZVZz Z3Rkd2NnRUxEbGdBZ181eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABu7lWEOvnmFfangjfv6XFZCXhy5Eu2TuVIYFw2LYegP0dfmZ3wxMW RWY8UpH8ilyfg5+qykzPqFWoCysN8SxQqcZirs5hHvLaiSTohj30p8UkhAEvm3NS wIITItDPNyZ7BHEcPcLbJ5kVWcZY9o1wOPn0Kli/b/M3SvAsp5FmeBzh38Raofpx X6CAOFuIApmeCHHd3s9YKOHBJoaw/4EO6DIzf8f4Msq2n/+VyLCfNTrG6JRkqKC3 Ft7KAK7WJ2cGPGr/HqE+sivNCq1TXPtWbTxgAR/6Oux7y1mb7KSVz80SOYlsom5I prVByqPur2v17/w2/NhL2wGgZ0iL0BJ/ -----END CERTIFICATE-----Generated at Wed Dec 31 10:27:18 2025 by rpki-client