This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft File: X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json) Hash identifier: dVo7vTXRY6nkZGec+IdqBiDkpWCstAtgHjhq0+ER/bQ= Subject key identifier: 66:90:0C:34:73:15:F7:65:DA:64:C4:8F:FB:B4:A8:FE:8D:85:F6:FD Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Certificate serial: 1E97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft Manifest number: 1E0D Signing time: Sat 20 Dec 2025 15:56:03 +0000 Manifest this update: Sat 20 Dec 2025 15:56:02 +0000 Manifest next update: Sat 27 Dec 2025 15:56:02 +0000 Files and hashes: 1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: MiW1wm+ADnlIwE7jeM6Nij+qh4VsN40AX9PGcwlo1Jo=) 2: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (hash: j/ajHdeg0X7dlj/Rcn6ptql8neD8yJ/Pvjoo4MQmzOc=) 3: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: 7VUDQQ8W+yMq4k3JhlRD5lkUdapcGclMwPc7X53c30w=) 4: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: o8L/PqYXiS4orlOuZR2u1QhWMHWvebV1Ky25VXoxZZo=) 5: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: M0IwLj/xH026H0t6T0vGOFmJMiOXNEIts7DE9pu76dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7831 (0x1e97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Validity Not Before: Dec 20 15:56:02 2025 GMT Not After : Dec 27 15:56:02 2025 GMT Subject: CN=6946c712-266b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:23:60:e8:10:eb:db:71:b1:06:5b:fc:46:00: a7:bf:71:3c:c0:8e:f8:e6:5c:19:09:cc:3c:b6:8d: 63:0e:33:10:c7:ad:c4:73:2b:99:19:b8:8d:42:a1: 77:82:47:c4:94:5a:bd:9d:59:4d:d6:6d:22:93:1c: 99:49:78:66:a5:2d:66:7f:b8:cb:e9:0a:64:5a:f5: e6:83:32:78:ab:25:ed:f3:fd:74:5f:f8:64:a0:68: 95:18:db:c9:da:63:61:dd:c2:fe:14:c3:45:5c:b0: 34:5c:20:6d:68:8e:9b:b6:93:f2:0a:30:a6:ea:fb: eb:e1:51:92:7d:3e:f5:05:d5:4d:5e:99:2e:db:70: e2:6f:ad:72:ac:9c:db:09:a6:fe:56:d6:56:b6:9d: 40:cb:b9:fe:30:5f:7a:8b:f6:2d:73:85:75:72:15: 8a:f7:18:de:df:f5:88:26:03:3f:2a:9b:3d:e4:ba: 64:1a:c6:d0:4b:84:81:2f:5c:94:ba:15:b0:d5:e3: 79:20:79:cf:11:fc:af:a6:9a:0c:c5:6b:00:f3:6f: b7:e8:a3:58:0d:b9:7e:7f:3d:cf:6f:27:2a:73:de: 1a:9d:7f:81:da:a5:c8:30:80:3e:1d:a4:d7:4e:90: 6b:9c:ca:86:a8:18:23:dd:7a:c3:14:86:3e:fc:1e: bf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:90:0C:34:73:15:F7:65:DA:64:C4:8F:FB:B4:A8:FE:8D:85:F6:FD X509v3 Authority Key Identifier: keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:0f:be:62:75:24:82:c4:21:47:5f:0e:71:2e:e1:f7:08:45: 9c:ff:02:96:b8:23:53:d9:50:4d:c9:54:7a:4e:49:e7:14:6a: c0:bc:fc:60:41:3e:ce:11:8c:f1:f9:1c:f7:b1:f3:7a:79:4c: ef:72:dd:90:97:af:d6:09:7c:2f:05:23:60:eb:3e:87:16:83: 97:d6:7f:6e:94:d2:09:26:d6:89:49:1a:5b:b4:7d:45:59:1d: 95:34:e2:83:bf:a4:f5:94:fe:cf:15:3c:36:cf:4a:35:dc:27: f7:fa:de:ab:ce:ba:93:de:d6:19:9f:eb:9f:d9:53:32:56:dd: 16:74:71:dd:2b:32:e2:c3:c7:e6:8a:c2:d3:bb:0c:7c:1b:0f: 01:31:d3:8e:e0:5c:fb:51:71:71:98:a3:c4:3f:3f:a3:b2:c5: d2:65:88:2c:3e:f1:0b:0f:8f:93:50:8e:4f:fa:d8:ea:5d:40: 68:fd:fa:2c:0b:eb:77:42:51:db:cf:5c:98:ac:78:0b:14:1f: 8e:99:34:e7:2b:9d:5c:88:9f:ba:bb:24:c2:c3:68:28:68:a4: 73:f2:74:46:6a:50:2e:ee:fa:f5:21:1d:f0:ff:13:8d:64:e0: ff:ad:e7:e4:48:63:e3:0b:b8:c4:94:22:e4:df:97:7b:ab:6c: 6c:4d:e1:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDVGRUVERTlEMzgyNTQzRjA1MTUyN0ZBNTMzRDQ3QTkx NzA3N0U2MzIwHhcNMjUxMjIwMTU1NjAyWhcNMjUxMjI3MTU1NjAyWjAYMRYwFAYD VQQDDA02OTQ2YzcxMi0yNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCNg6BDr23GxBlv8RgCnv3E8wI745lwZCcw8to1jDjMQx63EcyuZGbiNQqF3 gkfElFq9nVlN1m0ikxyZSXhmpS1mf7jL6QpkWvXmgzJ4qyXt8/10X/hkoGiVGNvJ 2mNh3cL+FMNFXLA0XCBtaI6btpPyCjCm6vvr4VGSfT71BdVNXpku23Dib61yrJzb Cab+VtZWtp1Ay7n+MF96i/Ytc4V1chWK9xje3/WIJgM/Kps95LpkGsbQS4SBL1yU uhWw1eN5IHnPEfyvppoMxWsA82+36KNYDbl+fz3Pbycqc94anX+B2qXIMIA+HaTX TpBrnMqGqBgj3XrDFIY+/B6/9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaQDDRz Ffdl2mTEj/u0qP6Nhfb9MB8GA1UdIwQYMBaAFF/u3p04JUPwUVJ/pTPUepFwd+Yy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC9BRDYyOTIyMkI1 MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFfQlJVbi1sTTlSNmtYQjM1 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1gtN2VuVGdsUV9CUlVuLWxNOVI2a1hCMzVqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC9BRDYyOTIyMkI1MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFf QlJVbi1sTTlSNmtYQjM1akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYD75idSSCxCFHXw5xLuH3CEWc/wKWuCNT2VBNyVR6TknnFGrAvPxg QT7OEYzx+Rz3sfN6eUzvct2Ql6/WCXwvBSNg6z6HFoOX1n9ulNIJJtaJSRpbtH1F WR2VNOKDv6T1lP7PFTw2z0o13Cf3+t6rzrqT3tYZn+uf2VMyVt0WdHHdKzLiw8fm isLTuwx8Gw8BMdOO4Fz7UXFxmKPEPz+jssXSZYgsPvELD4+TUI5P+tjqXUBo/fos C+t3QlHbz1yYrHgLFB+OmTTnK51ciJ+6uyTCw2goaKRz8nRGalAu7vr1IR3w/xON ZOD/refkSGPjC7jElCLk35d7q2xsTeHh -----END CERTIFICATE-----Generated at Sat Dec 20 23:16:14 2025 by rpki-client