This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft File: 7vvGU2P1cW1yTBF81UIh5BLZI8w.mft (raw, json) Hash identifier: MPvEg0hVDZMBoS7WIm1fR2o1ajbSBAUrTXoiv0jUqY8= Subject key identifier: FD:2B:A6:6A:C8:5A:B2:98:C0:B9:51:C4:33:B4:98:40:24:80:04:A8 Authority key identifier: EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC Certificate issuer: /CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC Certificate serial: 034C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft Manifest number: 033C Signing time: Sun 21 Dec 2025 00:14:19 +0000 Manifest this update: Sun 21 Dec 2025 00:14:19 +0000 Manifest next update: Sun 28 Dec 2025 00:14:19 +0000 Files and hashes: 1: 7vvGU2P1cW1yTBF81UIh5BLZI8w.crl (hash: SC7vkrgOmUkkuwAFcF6+vO2j+jSNEPt/yCew1iYekqY=) 2: ABF61020E93C11ECA5406975C4F9AE02.roa (hash: CEfGbgV4LaKbj4u3R7aNKzhHvon4f//WI/Vfu2HLT9Y=) 3: ADBF1F6EE93C11ECA5406975C4F9AE02.roa (hash: gTSqgh2aSgY5yQnuvBFWDUG9VxT+cR0rsZFBwosrBcs=) 4: 01C04C52FB8D11ECABCA1D0AC4F9AE02.roa (hash: DRDlC7cP5kScc1hDU1cGcX/a0wHpMiRUfD8YYtGPsXQ=) 5: AD08F946E93C11ECA5406975C4F9AE02.roa (hash: dFDu1xtbxZcal/OLNEGR66lP0h2QWRAtS7qy0zXmKy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 844 (0x34c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2A41, serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC Validity Not Before: Dec 21 00:14:19 2025 GMT Not After : Dec 28 00:14:19 2025 GMT Subject: CN=69473bdb-0497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dd:fc:87:09:13:6f:5d:ef:78:cd:b5:b1:45: 5b:bb:4e:5c:2d:d1:74:7e:de:b9:0a:92:89:c8:38: 50:8d:c6:c4:3e:42:4b:e0:ae:c6:fb:38:f7:95:4c: 27:76:81:d9:c7:74:4c:33:52:8c:75:cf:6e:f7:42: e0:84:3f:18:c4:c9:40:75:c1:ad:82:b2:df:53:5c: 6e:36:ad:ae:d6:8f:90:ca:a6:db:02:15:67:14:6b: b2:ef:20:ea:17:e7:73:17:cc:46:db:cb:c3:e0:95: e2:b0:8f:4d:c0:1f:e4:d2:dc:32:f9:fb:88:07:3f: e0:bb:3b:fc:82:dd:66:34:b9:f7:8e:79:5e:a0:b4: 6a:b7:eb:f2:00:a7:a7:16:4f:ff:7e:58:a8:32:ea: 90:8b:0f:13:7a:aa:39:e6:6f:e0:aa:56:23:fc:1c: fa:0c:ed:f4:be:bd:89:72:63:6b:e1:58:ee:2c:58: e7:0f:76:51:43:62:38:49:eb:7d:a1:8d:56:8c:f7: 79:53:e4:b2:bc:0b:21:27:30:77:63:c7:de:a5:af: ad:2d:47:87:40:cf:22:0c:b1:f1:0f:1e:18:9e:e2: 05:0d:0f:ce:51:58:f6:f0:7a:22:b6:11:75:d8:5c: 54:d1:49:24:50:bf:b7:49:d2:83:8d:91:a9:f0:42: 77:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2B:A6:6A:C8:5A:B2:98:C0:B9:51:C4:33:B4:98:40:24:80:04:A8 X509v3 Authority Key Identifier: keyid:EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:65:3e:44:0f:5a:6d:c8:fe:26:da:5e:b3:96:33:de:37:8a: 37:0e:c5:73:30:cb:c3:53:f2:9d:22:9b:48:38:17:48:68:20: 1b:be:fa:e2:26:66:d2:33:bc:17:b1:d4:dd:57:29:15:b0:a7: d1:86:39:79:8d:8f:d9:6a:18:34:8e:57:05:94:b9:08:c8:6d: a8:04:14:b2:89:cd:f6:d0:8d:fa:d0:b2:84:de:7f:d3:74:ea: 9f:b9:2b:f8:de:69:23:0e:bb:6d:4e:72:a7:3d:c5:b0:c5:69: 54:97:be:51:4c:c1:11:10:aa:2b:36:39:4e:1f:c5:0f:a8:e2: 27:b6:b6:78:b3:e6:0e:a8:ce:d5:c6:c3:3d:9e:6f:eb:5b:ad: 7a:8d:e5:7a:9b:79:26:03:2b:4c:eb:ae:1f:d6:99:53:dd:08: 2a:e9:8a:f2:57:67:89:63:81:12:15:92:ca:d4:3e:dd:d5:cb: ac:a0:36:24:61:50:bf:2c:ce:94:fc:04:46:4b:07:57:6e:f8: 3b:06:c4:c3:83:48:97:c2:3f:37:18:aa:d4:fe:c3:db:15:38: df:ef:21:fa:d5:f6:68:cc:8c:92:55:71:da:49:ef:91:05:c0: b1:e2:49:58:45:d7:a6:a8:14:f0:6a:ee:e8:1a:3f:dc:56:6a: 79:7d:27:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJBNDExMTAvBgNVBAUTKEVFRkJDNjUzNjNGNTcxNkQ3MjRDMTE3Q0Q1NDIyMUU0 MTJEOTIzQ0MwHhcNMjUxMjIxMDAxNDE5WhcNMjUxMjI4MDAxNDE5WjAYMRYwFAYD VQQDDA02OTQ3M2JkYi0wNDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzt38hwkTb13veM21sUVbu05cLdF0ft65CpKJyDhQjcbEPkJL4K7G+zj3lUwn doHZx3RMM1KMdc9u90LghD8YxMlAdcGtgrLfU1xuNq2u1o+QyqbbAhVnFGuy7yDq F+dzF8xG28vD4JXisI9NwB/k0twy+fuIBz/guzv8gt1mNLn3jnleoLRqt+vyAKen Fk//flioMuqQiw8Teqo55m/gqlYj/Bz6DO30vr2JcmNr4VjuLFjnD3ZRQ2I4Set9 oY1WjPd5U+SyvAshJzB3Y8fepa+tLUeHQM8iDLHxDx4YnuIFDQ/OUVj28HoithF1 2FxU0UkkUL+3SdKDjZGp8EJ3YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0rpmrI WrKYwLlRxDO0mEAkgASoMB8GA1UdIwQYMBaAFO77xlNj9XFtckwRfNVCIeQS2SPM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkE0MS9CRDQxNDZEQUU5 MzUxMUVDQUM2NjU0NTJDNEY5QUUwMi83dnZHVTJQMWNXMXlUQkY4MVVJaDVCTFpJ OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd2dkdVMlAxY1cxeVRCRjgxVUloNUJMWkk4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkE0MS9CRDQxNDZEQUU5MzUxMUVDQUM2NjU0NTJDNEY5QUUwMi83dnZHVTJQMWNX MXlUQkY4MVVJaDVCTFpJOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuZT5ED1ptyP4m2l6zljPeN4o3DsVzMMvDU/KdIptIOBdIaCAbvvri JmbSM7wXsdTdVykVsKfRhjl5jY/Zahg0jlcFlLkIyG2oBBSyic320I360LKE3n/T dOqfuSv43mkjDrttTnKnPcWwxWlUl75RTMEREKorNjlOH8UPqOIntrZ4s+YOqM7V xsM9nm/rW616jeV6m3kmAytM664f1plT3Qgq6YryV2eJY4ESFZLK1D7d1cusoDYk YVC/LM6U/ARGSwdXbvg7BsTDg0iXwj83GKrU/sPbFTjf7yH61fZozIySVXHaSe+R BcCx4klYRdemqBTwau7oGj/cVmp5fSdP -----END CERTIFICATE-----Generated at Sun Dec 21 07:24:36 2025 by rpki-client